CVE-2026-8594

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-8594
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-8594.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-8594
Downstream
Published
2026-05-30T15:32:30.449Z
Modified
2026-06-03T03:55:02.394912864Z
Severity
  • 6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters
Details

Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters.

Text::LineFold splits the input string by specific line break characters (such as VT, FF and others) into segments, but applies the break function to the entire string, not just the segment.

A side effect of this is that the full input can be duplicated for each segment. Besides being incorrect, this can lead to unexpected resource consumption and possible denial of service.

Note that Text::LineFold is part of the Unicode-LineBreak distribution, which may have a higher version number than the module.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8594.json",
    "cwe_ids": [
        "CWE-405",
        "CWE-407"
    ],
    "cna_assigner": "CPANSec"
}
References

Affected packages

Git / github.com/hatukanezumi/unicode-linebreak

Affected ranges

Type
GIT
Repo
https://github.com/hatukanezumi/unicode-linebreak
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
43dab876e68438965de871ddbecf756030d61877

Affected versions

Unicode-LineBreak-2013.*
Unicode-LineBreak-2013.11
Unicode-LineBreak-2014.*
Unicode-LineBreak-2014.004_26
Unicode-LineBreak-2014.06
Unicode-LineBreak-2015.*
Unicode-LineBreak-2015.011_03
Unicode-LineBreak-2015.011_09
Unicode-LineBreak-2015.06
Unicode-LineBreak-2015.11
Unicode-LineBreak-2015.12
Unicode-LineBreak-2016.*
Unicode-LineBreak-2016.002_27
Unicode-LineBreak-2016.003
Unicode-LineBreak-2016.007_02
Unicode-LineBreak-2017.*
Unicode-LineBreak-2017.004
Unicode-LineBreak-2018.*
Unicode-LineBreak-2018.003
Unicode-LineBreak-2018.012

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-8594.json"