What is GHSA-83j7-3c78-fq8j?

GHSA-83j7-3c78-fq8j is a security advisory published by GitHub Security Advisories with Critical severity. DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that...

Which CVE IDs does GHSA-83j7-3c78-fq8j cover?

GHSA-83j7-3c78-fq8j covers the following CVE IDs: CVE-2026-9698. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-83j7-3c78-fq8j?

GHSA-83j7-3c78-fq8j has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-83j7-3c78-fq8jCriticalCVSS 9.8

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that...

Vendor

GitHub Security Advisories

Published

June 9, 2026

Last Modified

June 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-9698 →

📋 Description

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.

Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit.

Attackers that can influence the error text in an application can trigger a buffer overflow.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-9698
https://github.com/perl5-dbi/dbi/commit/bfe5d73c162d2d1f761a639a0aa33aad6a9eb54e.patch
https://metacpan.org/release/HMBRAND/DBI-1.648/changes
http://www.openwall.com/lists/oss-security/2026/06/09/9
https://github.com/advisories/GHSA-83j7-3c78-fq8j