BAKERSCOT String::Util vulnerabilities

Latest BAKERSCOT String::Util CVEs

Newest publication first

1. CVE-2026-14895 String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service

   Published 2026-07-07

   High·CVSS 7.5

   String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. The trim and rtrim functions stripped trailing whitespace with s/\s*$//u. Because \s* matches greedily and the $ anchor fails whenever a non-whitespace character follows the whit...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.