PMQS vulnerabilities
5 published CVEs name PMQS among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-48962
IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob
PMQS · IO::Compress
High7.3 - CVE-2026-48961
IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID
PMQS · IO::Compress
High7.3 - CVE-2026-48959
IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward
PMQS · IO::Uncompress::Unzip
High7.5 - CVE-2025-15649
IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date
PMQS · IO::Uncompress::Unzip
Medium5.5 - CVE-2026-3381
Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib
PMQS · Compress::Raw::Zlib
Critical9.8