CyberSecBulletin

PETDANCE vulnerabilities

We track 3 vulnerabilities in PETDANCE products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 8, 2026.

3vulnerabilities
0critical
3high
0exploited
7.5average CVSS score

Latest PETDANCE vulnerabilities

  • 7.5 High severity

    App::Ack: Improper Neutralization of Escape, Meta, or Control Sequences

    CVE-2026-49147PETDANCE

    App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes. When ack prints a filename whose basename contains terminal control bytes such as ANSI escape sequences, those bytes reach the termina

  • 7.5 High severity

    App::Ack: Allocation of Resources Without Limits or Throttling

    CVE-2026-49146PETDANCE

    App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc. ack searches up the directory hierarchy from the current directory for a project .ackrc and loads its options. The -B and -C context options ac

  • 7.5 High severity

    App::Ack: External Control of File Name or Path

    CVE-2026-49145PETDANCE

    App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. ack searches up the directory hierarchy from the current directory for a project .ackrc and loads its options. The project-source option blocklist in App::Ack: