CVE-2022-4976

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-4976
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4976.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-4976
Published
2025-06-12T00:33:13.976Z
Modified
2026-07-15T01:49:22.302387273Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities
Details

Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities.

The bundled library is affected by CVE-2014-8139, CVE-2014-8140 and CVE-2014-8141.

Database specific 
{
    "cwe_ids": [
        "CWE-1395"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4976.json",
    "cna_assigner": "CPANSec"
}
References

Affected packages

Git / github.com/mohawk2/archive-unzip-burst

Affected ranges

Type
GIT
Repo
https://github.com/mohawk2/archive-unzip-burst
Events
Introduced
0bf275fbf2b1d5eeb9a1d0994619b4775b9e06b0
Last affected
1d6e7e083d3859e8316f09971da1a988784b2639
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0.01"
        },
        {
            "last_affected": "0.09"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*
0.03
0.04
0.05
0.06
0.07
0.08
0.09
Other
SMUELLER
alpha
stable
cpan_path/SMUELLER/Archive-Unzip-Burst-0.*
cpan_path/SMUELLER/Archive-Unzip-Burst-0.01.tar.gz
cpan_path/SMUELLER/Archive-Unzip-Burst-0.02.tar.gz
cpan_path/SMUELLER/Archive-Unzip-Burst-0.02_01.tar.gz
cpan_path/SMUELLER/Archive-Unzip-Burst-0.02_02.tar.gz
cpan_version/0.*
cpan_version/0.01
cpan_version/0.02
cpan_version/0.02_01
cpan_version/0.02_02
gitpan_version/0.*
gitpan_version/0.01
gitpan_version/0.02
gitpan_version/0.02_01
gitpan_version/0.02_02

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4976.json"