Vulnerabilities

TI-2026-36360 CVE-2026-49147 · GHSA-p4vj-7pqg-xhr6

App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences…

LOW 39

App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2026-07-08 No fix listed CWE-150

TI-2026-36359 CVE-2026-49146 · GHSA-hf7w-mcpw-97mf

MEDIUM 40

App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00609 Published 2026-07-08 Fixed in 3.10.0 CWE-770

TI-2026-36358 CVE-2026-49145 · GHSA-c2rv-g977-2fxr

LOW 39

App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2026-07-08 No fix listed CWE-426