Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

PMQS vulnerabilities

5 published CVEs name PMQS among the affected products.

Newest CVEs

  • CVE-2026-48962

    IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

    PMQS · IO::Compress

    High7.3
  • CVE-2026-48961

    IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID

    PMQS · IO::Compress

    High7.3
  • CVE-2026-48959

    IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward

    PMQS · IO::Uncompress::Unzip

    High7.5
  • CVE-2025-15649

    IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date

    PMQS · IO::Uncompress::Unzip

    Medium5.5
  • CVE-2026-3381

    Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

    PMQS · Compress::Raw::Zlib

    Critical9.8