Approved changes feed: RSS · Atom

cpe:2.3:a:felipe:toml::xs:*:*:*:*:*:*:*:*

part: a version: update: xs

VendorFelipe (f4d4fd76-f2cd-5acc-83a6-38fa6b1bf469)
ProductToml (c9e9a204-b375-509b-98cc-63b4d7610c07)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-16634 vulnerable 2026-07-29 00:26:18.783230 TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99
TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99. The tomlc99 library is no longer maintained, and has an uncontrolled recursion vulnerability publicly reported in the issue tracker. Any caller that passes untrusted TOML to from_toml risks a stack overflow from a deeply-nested document. TOML::XS version 0.06 or later uses the successor tomlc17 library.
Published: 2026-07-24T09:14:58.986Z
Updated: 2026-07-27T17:15:54.188Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.