Log in Start free

PMQS

Products

ProductCVEsExploitedLatest
IO::Compress2–May 27, 2026
IO::Uncompress::Unzip2–May 27, 2026
Compress::Raw::Zlib1–Mar 5, 2026

Exploited and recent CVEs

  • CVE-2026-48962 High 7.3 IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob 0.4%
  • CVE-2026-48961 High 7.3 IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID 0.3%
  • CVE-2026-48959 High 7.5 IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward 0.6%
  • CVE-2025-15649 Medium 5.5 IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date 0.1%
  • CVE-2026-3381 Critical 9.8 Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib 0.6%