EUVD-2026-64205
GHSA-fwmp-gxj5-29mj
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Network-reachable application accepts external key input with no auth required; impact is purely availability via process termination, no confidentiality or integrity loss.
Primary rating from Vendor (CPANSec).
CVSS VectorVendor: CPANSec
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
5DescriptionCVE.org
Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys.
The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions.
Each method falls back to a regex match when the key is not already stored in the hash, compiling the caller's key with a bare qr// and no eval guard. A key that is not a valid regular expression pattern, such as a single unmatched bracket, dies.
An application that looks up externally supplied strings in a tied hash will die on an invalid key.
AnalysisAI
Denial-of-service in Tie::Hash::Regex before 2.0.0 for Perl allows unauthenticated remote attackers to crash any application that performs hash lookups with externally supplied strings. The FETCH, EXISTS, and DELETE methods compiled caller-provided keys as bare regex patterns without an eval guard, causing the Perl process to die on any syntactically invalid pattern such as an unmatched bracket. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the target application: (1) uses the Tie::Hash::Regex CPAN module to tie a Perl hash, and (2) passes externally supplied strings - from user input, API parameters, file contents, or any untrusted source - directly as lookup keys to that tied hash without prior regex-validity validation. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) accurately reflects that a network-reachable application using this module and accepting external hash-key input can be crashed by any unauthenticated party. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker submits a malformed regular expression - for example, a single unmatched bracket '[' - as a search or lookup parameter to a Perl web application that uses Tie::Hash::Regex to resolve keys. The application passes the user-supplied string directly to a hash lookup, triggering FETCH to call qr/[/ without an eval guard, causing the Perl interpreter to die and the application process or worker to terminate, resulting in a denial of service. … |
| Remediation | Upgrade Tie::Hash::Regex to version 2.0.0 or later via CPAN (cpan install Tie::Hash::Regex or cpanm Tie::Hash::Regex). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify whether your organization uses Tie::Hash::Regex and assess which applications consume untrusted hash key input. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-248 – Uncaught Exception
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today