DBI
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-111879 | < 1.656 | DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-108518 | < 1.656 | DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with … | LOW 2.9 | 0.3 % | ||
| CVE-2026-88816 | < 1.654 | DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName | HIGH 7.5 | 0.4 % | ||
| CVE-2026-88815 | < 1.654 | DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv | MEDIUM 6.2 | 0.2 % | ||
| CVE-2026-78030 | < 1.653 | DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM | CRITICAL 9.8 | 0.4 % | ||
| CVE-2026-73194 | < 1.652 | DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter i… | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-73193 | < 1.652 | DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size co… | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-14380 | < 1.650 | DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile | HIGH 8.8 | 0.5 % |