https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 19:04:56 +0000 https://db.gcve.eu/vuln/cve-2026-110753 <p><strong>Affected:</strong> Text-CSV_XS</p> <p>Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline.</p> <p>With bind_columns, the parser writes each field into the caller&#39;s own scalar without taking a reference to it. When skip_empty_rows skips an empty last line, the parser frees the current field scalar without checking whether it is bound, dropping one reference from the application&#39;s variable. The &#34;eof&#34; mode does the same on any empty line.</p> <p>The variable is then freed while the application still references it, so later code uses freed memory and can crash the process.</p> <p><strong>Affected:</strong> Text-CSV_XS</p> <p>Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline.</p> <p>With bind_columns, the parser writes each field into the caller&#39;s own scalar without taking a reference to it. When skip_empty_rows skips an empty last line, the parser frees the current field scalar without checking whether it is bound, dropping one reference from the application&#39;s variable. The &#34;eof&#34; mode does the same on any empty line.</p> <p>The variable is then freed while the application still references it, so later code uses freed memory and can crash the process.</p> https://db.gcve.eu/vuln/cve-2026-110753