Vendors / PMQS Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now PMQS records in CISA KEV No PMQS vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00622 · Published 2026-03-05 · No fix listed CWE-1395
Priority MEDIUM 40
IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00553 · Published 2026-05-27 · Partial fix · 2.220 CWE-407
Priority LOW 38
IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.00439 · Published 2026-05-27 · Fixed in 2.220 CWE-95
Priority LOW 38
IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.00262 · Published 2026-05-27 · Partial fix · 2.220 CWE-755
Priority LOW 24
IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00127 · Published 2026-05-27 · Partial fix · 2.215 CWE-248
Open these records in search → All records by CVSS severity
1 3 1 0 0
THREATIST.IORead the docs