{
  "cveId": "CVE-2026-60081",
  "url": "https://patchblox.com/security/cve/CVE-2026-60081",
  "summary": "CVE-2026-60081 is fixed in 5 products on 1 platform, first by DEBIAN-CVE-2026-60081, released July 18, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "DBI::ProfileData versions before 1.651 for Perl do not limit the path index",
  "description": "DBI::ProfileData versions before 1.651 for Perl do not limit the path index.  The path index column of profile dump files is used to allocate an array of data for the parser. An unbounded value allows an attacker to specify a large index and consume available memory.",
  "published": "2026-07-14T16:17:03Z",
  "severity": "Important",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "cwe": "Allocation of Resources Without Limits or Throttling",
  "epss": 0.0063,
  "epssPercentile": 0.5046,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60081",
  "fixes": [
    {
      "platform": "linux",
      "product": "libdbi-perl",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1.643-4\u002Bdeb12u2",
      "fix": "DEBIAN-CVE-2026-60081",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-60081",
      "released": "2026-07-18T12:42:52Z"
    },
    {
      "platform": "linux",
      "product": "libdbi-perl",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.652-2~deb13u1",
      "fix": "DEBIAN-CVE-2026-60081",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-60081",
      "released": "2026-07-18T12:42:52Z"
    },
    {
      "platform": "linux",
      "product": "libdbi-perl",
      "release": "Debian 14",
      "fixedVersion": "1.651-1",
      "fix": "DEBIAN-CVE-2026-60081",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-60081",
      "released": "2026-07-18T12:42:52Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "amzn 2023",
      "fixedVersion": "1.651-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-2006",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2006",
      "released": "2026-08-03T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "1.647.0-160000.5.1",
      "fix": "OPENSUSE-SU-2026:21412-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21412-1",
      "released": "2026-07-22T08:23:18Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "sles 15.6",
      "fixedVersion": "1.647.0-150600.12.18.1",
      "fix": "SUSE-SU-2026:3415-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3415-1",
      "released": "2026-07-30T06:54:43Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "sles 15.7",
      "fixedVersion": "1.647.0-150600.12.18.1",
      "fix": "SUSE-SU-2026:3415-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3415-1",
      "released": "2026-07-30T06:54:43Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "sles 16.0",
      "fixedVersion": "1.647.0-160000.5.1",
      "fix": "SUSE-SU-2026:22845-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22845-1",
      "released": "2026-07-22T08:18:52Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.651-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-2006",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2006",
      "released": "2026-08-03T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1.651-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-2006",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2006",
      "released": "2026-08-03T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI-tests",
      "release": "amzn 2023",
      "fixedVersion": "1.651-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-2006",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2006",
      "released": "2026-08-03T09:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}