Advisories · Technology
PMQS IO::Compress.
Every CVE that names PMQS IO::Compress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.3 High
IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob
- PMQS IO::Compress
- Code injection
- CVSS 7.3 High
IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID
- PMQS IO::Compress
- CWE-755