RRWO Net::CIDR::Set

• CVE-2026-19566 High 7.5 Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths 0.6%
• CVE-2026-49942 High 7.3 Net::CIDR::Set versions through 0.20 for Perl did not validate network masks 0.3%
• CVE-2026-49941 High 7.5 Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses 0.3%
• CVE-2026-49940 Medium 6.5 Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks 0.2%
• CVE-2025-40911 Medium 6.5 Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses 0.4%