CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-82560: Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7921

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-82560: Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width

CVE-2026-82560 affects Pod::Text versions before 6.1.1 in the podlators distribution for Perl. A malformed POD document with deeply nested =over directives can cause the margin calculation to consume the output width, triggering CPU and memory exhaustion during formatting.

Why it matters: Perl developers and system administrators using podlators to process untrusted POD documentation face denial of service risk; update to version 6.1.1 or later to patch the resource exhaustion vulnerability.

VendorsGitHub
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

CVE-2026-82560: Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width

CVE-2026-82560 affects Pod::Text versions before 6.1.1 in the Perl podlators distribution. The vulnerability allows denial of service through CPU and memory exhaustion when formatting a POD document with deeply nested =over tags that push the margin to the output width.

Why it matters: Perl developers and system administrators using podlators before 6.1.1 should update immediately to prevent attackers from consuming system resources via maliciously crafted POD documentation.

VendorsGitHub
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary