Vulnerability · Published Aug 31, 2026 · Assigned by CPANSec
CVE-2026-19953URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep
Medium 6.5
In plain English
A medium-severity security flaw in URI. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.2%top 86.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded (RFC 5891), so a label that is not already in NFC is encoded to a different A-label than its normalized form. A label built from the precomposed Devanagari sequence U+0958 U+093E encodes to xn--72b5c without normalization but to xn--11b2fg after NFC normalization, and xn--72b5c does not round-trip back to the original label. Any caller that reads host() from a URI built from untrusted input and uses it for a security decision (an allow or deny list, an SSRF filter, deduplication, a cache key) sees the non-standard label, while a client that fetches the same URL resolves the NFC form, so the check and the fetch can disagree about the host.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | perl | 4:5.32.1-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Algorithm-Diff | 1.1903-10.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Archive-Tar | 2.38-5.module_el8.10.0+4240+a58b978c | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Archive-Zip | 1.68-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Attribute-Handlers | 1.01-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-AutoLoader | 5.74-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-AutoSplit | 5.74-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-B | 1.80-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Benchmark | 1.23-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-CPAN | 2.28-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-CPAN-DistnameInfo | 0.12-13.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-CPAN-Meta | 2.150010-397.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-CPAN-Meta-Requirements | 2.140-397.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-CPAN-Meta-YAML | 0.018-1001.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Carp | 1.50-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Class-Struct | 0.66-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Compress-Bzip2 | 2.28-2.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Compress-Bzip2 | 2.28-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Compress-Raw-Bzip2 | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Compress-Raw-Bzip2 | 2.096-1.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Compress-Raw-Lzma | 2.096-1.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Compress-Raw-Lzma | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Compress-Raw-Zlib | 2.096-2.module_el8.10.0+3779+d5938d28 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Config-Extensions | 0.03-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Config-Perl-V | 0.32-441.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-DBM_Filter | 0.06-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-DB_File | 1.855-1.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-DB_File | 1.855-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Data-Dumper | 2.174-440.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Data-Dumper | 2.174-440.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Data-OptList | 0.110-7.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Data-Section | 0.200007-8.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Devel-PPPort | 3.62-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Devel-PPPort | 3.62-1.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Devel-Peek | 1.28-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Devel-SelfStubber | 1.06-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Devel-Size | 0.83-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Devel-Size | 0.83-3.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Digest | 1.20-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Digest-MD5 | 2.58-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Digest-MD5 | 2.58-1.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Digest-SHA | 1:6.02-2.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Digest-SHA | 1:6.02-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-DirHandle | 1.05-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Dumpvalue | 2.27-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-DynaLoader | 1.47-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Encode | 4:3.08-461.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Encode | 4:3.08-461.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Encode-Locale | 1.05-10.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Encode-devel | 4:3.08-461.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Encode-devel | 4:3.08-461.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-English | 1.11-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Env | 1.04-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Errno | 1.30-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Exporter | 5.74-458.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-ExtUtils-CBuilder | 1:0.280236-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-ExtUtils-Command | 2:7.46-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-ExtUtils-Constant | 0.25-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-ExtUtils-Embed | 1.35-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-ExtUtils-Install | 2.20-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-ExtUtils-MM-Utils | 2:7.46-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-ExtUtils-MakeMaker | 2:7.46-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-ExtUtils-Manifest | 1:1.73-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-ExtUtils-Miniperl | 1.09-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-ExtUtils-ParseXS | 1:3.40-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Fcntl | 1.13-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Fedora-VSP | 0.001-10.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-File-Basename | 2.85-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-File-Compare | 1.100.600-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-File-Copy | 2.34-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-File-DosGlob | 1.12-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-File-Fetch | 1.00-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-File-Find | 1.37-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-File-HomeDir | 1.004-6.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-File-Path | 2.16-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-File-Temp | 1:0.231.100-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-File-Which | 1.23-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-File-stat | 1.09-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-FileCache | 1.10-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-FileHandle | 2.03-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Filter | 2:1.60-1.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Filter | 2:1.60-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Filter-Simple | 0.96-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-FindBin | 1.51-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-GDBM_File | 1.18-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Getopt-Long | 1:2.52-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Getopt-Std | 1.12-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-HTTP-Tiny | 0.078-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Hash-Util | 0.23-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Hash-Util-FieldHash | 1.20-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-I18N-Collate | 1.02-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-I18N-LangTags | 0.44-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-I18N-Langinfo | 0.19-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-IO | 1.43-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-IO-Compress | 2.096-2.module_el8.10.0+4205+6175afda | ALSA-2026:85917 |
| AlmaLinux:8 | perl-IO-Compress-Lzma | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-IO-Socket-IP | 0.41-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-IO-Zlib | 1:1.10-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-IPC-Cmd | 2:1.04-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-IPC-Open3 | 1.21-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-IPC-SysV | 2.09-1.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-IPC-SysV | 2.09-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-IPC-System-Simple | 1.30-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Importer | 0.025-6.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-JSON-PP | 1:4.04-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Locale-Maketext | 1.29-440.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Locale-Maketext-Simple | 1:0.21-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-MIME-Base64 | 3.15-1001.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-MIME-Base64 | 3.15-1001.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-MRO-Compat | 0.13-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Math-BigInt | 1:1.9998.18-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Math-BigInt-FastCalc | 0.500.900-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Math-BigInt-FastCalc | 0.500.900-1.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Math-BigRat | 0.2614-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Math-Complex | 1.59-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Memoize | 1.03-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Module-Build | 2:0.42.31-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Module-CoreList | 1:5.20211020-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Module-CoreList-tools | 1:5.20211020-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Module-Load | 1:0.36-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Module-Load-Conditional | 0.74-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Module-Loaded | 1:0.08-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Module-Metadata | 1.000037-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-NDBM_File | 1.15-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-NEXT | 0.67-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Net | 1.02-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Net-Ping | 2.72-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-ODBM_File | 1.16-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Object-HashBase | 0.009-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Object-HashBase-tools | 0.009-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Opcode | 1.48-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-POSIX | 1.94-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Package-Generator | 1.106-12.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Params-Check | 1:0.38-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Params-Util | 1.102-2.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Params-Util | 1.102-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-PathTools | 3.78-439.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-PathTools | 3.78-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Perl-OSType | 1.010-397.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-PerlIO-via-QuotedPrint | 0.09-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Pod-Checker | 4:1.74-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Pod-Escapes | 1:1.07-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Pod-Functions | 1.13-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Pod-Html | 1.25-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Pod-Parser | 1.63-1001.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Pod-Perldoc | 3.28.01-443.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Pod-Simple | 1:3.42-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Pod-Usage | 4:2.01-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Safe | 2.41-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Scalar-List-Utils | 4:1.55-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Scalar-List-Utils | 4:1.55-457.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Search-Dict | 1.07-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-SelectSaver | 1.02-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-SelfLoader | 1.26-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Socket | 4:2.031-1.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Socket | 4:2.031-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Software-License | 0.103014-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Storable | 1:3.21-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Storable | 1:3.21-457.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Sub-Exporter | 0.987-17.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Sub-Install | 0.928-15.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Symbol | 1.08-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Sys-Hostname | 1.23-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Sys-Syslog | 0.36-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Sys-Syslog | 0.36-1.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Term-ANSIColor | 5.01-458.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Term-Cap | 1.17-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Term-Complete | 1.403-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Term-ReadLine | 1.17-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Term-Table | 0.015-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Test | 1.31-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Test-Harness | 1:3.42-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Test-Simple | 3:1.302181-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Text-Abbrev | 1.02-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Text-Balanced | 2.04-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Text-Diff | 1.45-7.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Text-Glob | 0.11-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Text-ParseWords | 3.30-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Text-Tabs+Wrap | 2013.0523-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Text-Template | 1.58-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Thread | 3.05-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Thread-Queue | 3.14-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Thread-Semaphore | 2.13-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Tie | 4.6-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Tie-File | 1.06-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Tie-Memoize | 1.1-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Tie-RefHash | 1.39-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Time | 1.03-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Time-HiRes | 4:1.9764-459.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Time-HiRes | 4:1.9764-459.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Time-Local | 2:1.300-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Time-Piece | 1.3401-475.module_el8.10.0+4278+b5f6cf5f | ALSA-2026:85917 |
| AlmaLinux:10 | perl-URI | 5.27-3.el10_2.1 | ALSA-2026:84587 |
| AlmaLinux:8 | perl-URI | 1.76-6.module_el8.10.0+4314+1190dba9 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-URI | 1.73-4.el8_10 | ALSA-2026:84590 |
| AlmaLinux:9 | perl-URI | 5.09-3.el9_8.1 | ALSA-2026:84588 |
| AlmaLinux:8 | perl-Unicode-Collate | 1.29-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Unicode-Collate | 1.29-1.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Unicode-Normalize | 1.27-458.module_el8.6.0+3181+91434291 | ALSA-2026:85917 |
| AlmaLinux:8 | perl-Unicode-Normalize | 1.27-458.module_el8.6.0+2766+8bf0b7ce | ALSA-2026:85917 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| URI | 0 – before 5.36 |
Weakness: CWE-1289 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
References
- https://github.com/libwww-perl/URI/commit/956619a9e94f86d8d2c529b4e06a3674c54a73e7.patch patch
- https://github.com/libwww-perl/URI/pull/191 issue-tracking
- https://metacpan.org/release/OALDERS/URI-5.36/changes release-notes
- https://www.rfc-editor.org/rfc/rfc5891#section-5.2 technical-description
- http://www.openwall.com/lists/oss-security/2026/08/31/14