CVE-2026-77781
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/08/2026
Last modified:
22/08/2026
Description
Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys.<br />
<br />
The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions.<br />
<br />
Each method falls back to a regex match when the key is not already stored in the hash, compiling the caller&#39;s key with a bare qr// and no eval guard. A key that is not a valid regular expression pattern, such as a single unmatched bracket, dies.<br />
<br />
An application that looks up externally supplied strings in a tied hash will die on an invalid key.


