String::Util vulnerabilities

1 known vulnerability in String::Util from BAKERSCOT. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  String::Util: Inefficient Regular Expression Complexity

  CVE-2026-14895Jul 7, 2026BAKERSCOT

  String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. The trim and rtrim functions stripped trailing whitespace with s/\s*$//u. Because \s* matches greedily and the $ anchor fails whenever a non-whitespace charac