UnratedFix available
ALPINE-CVE-2026-60081
DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an array of data for the parser. An unbounded value allows an attacker to specify a large index and consume available memory.
Announced Source revision 1
Original source ↗ALPINE-CVE-2026-60081
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:ALPINE-CVE-2026-60081
perl-dbi
Source reference: /affected/0/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 1.651-r0
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.651-r0"
}
]
}
],
"package": {
"name": "perl-dbi",
"purl": "pkg:apk/alpine/perl-dbi?arch=source",
"ecosystem": "Alpine:v3.24"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-60081.json"
},
"ecosystem_specific": {}
}
]Publisher severity
No explicit severity was provided.
- Event
- #54594 · Revision 1
- Added to Heist Feed
- Publisher date