CVE-2026-87768: DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds

As cited

Copy frozen at 2026-10-30 13:52 UTC (site build).

vulnerabilities

CVE-2026-87768: DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds

CVE-2026-87768 affects DateTime::Lite for Perl before version 0.8.1, which contains a vulnerability allowing CPU exhaustion through a per-day loop when adding seconds. The flaw enables denial of service attacks against applications using vulnerable versions of the library.

Why it matters: Perl developers and application owners using DateTime::Lite should update to 0.8.1 or later to prevent denial of service impacts from untrusted input that triggers the CPU exhaustion condition.

Source published

2026-10-30 12:50 UTC

First seen by Cybersecurity Tracker

2026-10-30 13:02 UTC