CVE-2026-108518: DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element

As cited

Copy frozen at 2026-10-20 23:56 UTC (site build).

vulnerabilities

CVE-2026-108518: DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element

CVE-2026-108518 affects Perl's DBI module in versions before 1.656 and causes a crash due to type confusion in the dbi_profile function when a database handle is destroyed under a Profile Path containing an {attr} element. Users of affected DBI versions should upgrade to 1.656 or later to resolve the issue.

Why it matters: Perl developers using DBI for database access face potential application crashes and denial of service if they use profiling features with affected versions; upgrading is required to maintain stability.

Source published

2026-10-20 21:47 UTC

First seen by Cybersecurity Tracker

2026-10-20 23:13 UTC