{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"perl","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NQNW1KWDH0WZ0GNHVM5BJQ","modified_at":"2026-10-24T10:00:40.270849452Z","published_at":"2026-08-09T18:16:42.800Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-15534","https://security-tracker.debian.org/tracker/CVE-2026-15534"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-15534","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-15534"}],"summary":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch. The regex engine's superlinear cache holds o"}