云虫漏洞情报

CVE-2026-77781 - Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys. The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions. Each method falls back to a regex match when the key is not already stored in the hash, compiling the caller's key with a bare qr// and no eval guard. A key that is not a valid regular expression pattern, such as a single unmatched bracket, dies. An application that looks up externall - 漏洞详情

漏洞编号:CVE-2026-77781

风险等级:高危

漏洞来源:CVE

CVE 编号:CVE-2026-77781

CNNVD 编号:-

厂商/产品:- / -

影响范围:-

CWE:CWE-248

发布/更新时间:2026-08-22 / 2026-08-27

漏洞描述

Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys.

The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions.

Each method falls back to a regex match when the key is not already stored in the hash, compiling the caller's key with a bare qr// and no eval guard. A key that is not a valid regular expression pattern, such as a single unmatched bracket, dies.

An application that looks up externally supplied strings in a tied hash will die on an invalid key.

相关链接

相关漏洞

« 返回首页