Net vulnerabilities

1 known vulnerability in Net from Stigtsp. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Net::CIDR::Lite: Improper Validation of Syntactic Correctness of Input

  CVE-2026-40198Apr 10, 2026Stigtsp

  Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass. _pack_ipv6() does not check that uncompressed IPv6 addresses (without ::) have exactly 8 hex groups. Inputs like "abcd", "1:2:3", or "1:2:3:4:5:6:7