Debian/libnet-cidr-set-perl: high 7.5
Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The _encode method accepts any prefix length matching `(0|[1-9][0-9]*)`
Action: Upgrade libnet-cidr-set-perl to 0.23-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.23-1 | - |
Fixed versions
| 0.23-1 |
Sources
- osv: DEBIAN-CVE-2026-19566#Debian:14/libnet-cidr-set-perl
- https://security-tracker.debian.org/tracker/CVE-2026-19566
published · modified · JSON