{"action":"Upgrade perl to 5.10.1-20 or later.","affected":[{"fixed":"5.10.1-20","introduced":"0"}],"component":"perl","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["5.10.1-20"],"id":"tcs_01M5N9R5D3Z7K7SC6955ANYM0D","modified_at":"2026-10-23T17:47:46.679403183Z","published_at":"2011-04-11T18:55:03.773Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2011-1487","https://security-tracker.debian.org/tracker/CVE-2011-1487"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2011-1487#Debian:13/perl","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2011-1487"}],"summary":"The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon proc"}