Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92202.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-92202
Upstream
Published
2026-07-07T23:16:54Z
Modified
2026-08-28T17:48:06.704172252Z
Summary
CVE-2026-14739 affecting package perl-DBI for versions less than 1.650-1
Details

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders.

The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders.

DBI version 1.650 sets a hard limit of 99,999 placeholders.

References

Affected packages

Azure Linux:3 / perl-DBI

Package

Name
perl-DBI
Purl
pkg:rpm/azure-linux/perl-DBI

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.650-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92202.json"