THREAT OPS › Threat News › CVE-2026-13221: Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk
CVE-2026-13221: Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk
<p>Posted by Stig Palmquist on Jul 13</p>========================================================================<br /> CVE-2026-13221 CPAN Security Group<br /> ========================================================================<br /> <br /> CVE ID: CVE-2026-13221<br /> Distribution: perl<br /> Versions: through 5.43.9<br /> <br />
Indicators of compromise
- CVE-2026-13221cve
- https://metacpan.org/dist/perlurl
Original source: https://seclists.org/oss-sec/2026/q3/126