CVE WATCH / VULNERABILITY DETAIL

CVE-2026-121009

UNKNOWNCVSS 0NVD feed

Published 4 November 2026 · tracked since 5 November 2026

Description

SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check for function names given with -func. injection_guard is documented to apply to every function name, but only the { -name => ... } shorthand goes through it. The explicit { -func => [ $name, ... ] } form p

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools