Net vulnerabilities

2 known vulnerabilities in Net from RRWO. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Net::CIDR::Set: Improper Validation of Unsafe Equivalence in Input

  CVE-2026-49942Jun 4, 2026RRWO

  Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of a network mask could contain Unicode digits such as the Arabic-Indic One (U+0661), or non-digits, which were ignored. This could allow network masks to accept lar

• 7.5 High severity

  Net::CIDR::Set: Uncontrolled Recursion

  CVE-2026-49941Jun 4, 2026RRWO

  Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network ranges, then they were assumed to single IP addresses and passed ba