CVE-2026-4176
- Source
- https://cve.org/CVERecord?id=CVE-2026-4176
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-4176.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-4176
- Downstream
- Related
- Published
- 2026-03-29T20:50:51.058Z
- Modified
- 2026-08-12T16:24:16.542374Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
- Details
-
Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib.
Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-2026-3381 due to a vendored version of zlib which has several vulnerabilities, including CVE-2026-27171. The bundled Compress::Raw::Zlib was updated to version 2.221 in Perl blead commit c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4176.json", "cna_assigner": "CPANSec", "cwe_ids": [ "CWE-1395" ] }- References
-
- http://www.openwall.com/lists/oss-security/2026/03/30/2
- https://cpan.org/modules
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4176.json
- https://lists.security.metacpan.org/cve-announce/msg/37638919/
- https://metacpan.org/release/PMQS/Compress-Raw-Zlib-2.221/source/Changes
- https://metacpan.org/release/SHAY/perl-5.40.4/changes
- https://metacpan.org/release/SHAY/perl-5.42.2/changes
- https://nvd.nist.gov/vuln/detail/CVE-2026-4176
- https://www.cve.org/CVERecord?id=CVE-2026-3381
- https://github.com/Perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94
- https://github.com/Perl/perl5
Affected packages
Git / github.com/perl/perl5
Affected ranges
- Type
- GIT
- Repo
- https://github.com/perl/perl5
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedFixed
- Database specific
-
Show details
{ "source": [ "CPE_RANGE", "REFERENCES" ], "cpe": "cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "5.9.4" }, { "fixed": "5.40.4" }, { "introduced": "5.41.0" }, { "fixed": "5.42.2" }, { "introduced": "5.43.0" }, { "fixed": "5.43.9" } ] }
Affected versions
Other
GitLive-blead
if-0.*
if-0.0603
if-0.0604
if-0.0605
perl-5.*
perl-5.9.4
perl-5.9.5
v5.*
v5.10.0
v5.11.0
v5.11.1
v5.11.3
v5.11.4
v5.11.5
v5.12.0
v5.12.0-RC0
v5.12.0-RC1
v5.12.0-RC2
v5.12.0-RC3
v5.12.0-RC4
v5.12.0-RC5
v5.13.0
v5.13.1
v5.13.10
v5.13.11
v5.13.2
v5.13.3
v5.13.4
v5.13.5
v5.13.6
v5.13.7
v5.13.8
v5.13.9
v5.14.0
v5.14.0-RC1
v5.14.0-RC2
v5.14.0-RC3
v5.15.0
v5.15.1
v5.15.2
v5.15.3
v5.15.4
v5.15.5
v5.15.9
v5.16.0
v5.16.0-RC1
v5.16.0-RC2
v5.17.0
v5.17.2
v5.17.4
v5.17.6
v5.17.7
v5.17.7.0
v5.17.8
v5.17.9
v5.18.0
v5.18.0-RC1
v5.18.0-RC2
v5.18.0-RC3
v5.18.0-RC4
v5.19.0
v5.19.1
v5.19.11
v5.19.2
v5.19.3
v5.19.5
v5.19.7
v5.20.0
v5.20.0-RC1
v5.21.0
v5.21.1
v5.21.10
v5.21.11
v5.21.4
v5.21.5
v5.21.6
v5.21.8
v5.21.9
v5.22.0
v5.22.0-RC1
v5.22.0-RC2
v5.23.0
v5.23.1
v5.23.2
v5.23.3
v5.23.4
v5.23.6
v5.23.7
v5.24.0
v5.24.0-RC1
v5.24.0-RC2
v5.24.0-RC3
v5.24.0-RC4
v5.24.0-RC5
v5.25.0
v5.25.11
v5.25.2
v5.25.3
v5.25.4
v5.25.5
v5.25.7
v5.25.9
v5.26.0
v5.26.0-RC2
v5.27.0
v5.27.10
v5.27.11
v5.27.3
v5.27.5
v5.27.6
v5.27.7
v5.27.8
v5.28.0
v5.28.0-RC1
v5.28.0-RC2
v5.28.0-RC3
v5.28.0-RC4
v5.29.0
v5.29.1
v5.29.10
v5.29.5
v5.29.6
v5.29.7
v5.29.8
v5.29.9
v5.30.0
v5.30.0-RC1
v5.30.0-RC2
v5.31.0
v5.31.1
v5.31.11
v5.31.2
v5.31.3
v5.31.4
v5.31.5
v5.31.7
v5.32.0
v5.32.0-RC1
v5.33.0
v5.33.1
v5.33.2
v5.33.3
v5.33.4
v5.33.7
v5.33.8
v5.33.9
v5.34.0
v5.34.0-RC1
v5.34.0-RC2
v5.35.0
v5.35.10
v5.35.11
v5.35.3
v5.35.5
v5.35.6
v5.35.8
v5.35.9
v5.36.0
v5.36.0-RC3
v5.37.0
v5.37.1
v5.37.10
v5.37.11
v5.37.2
v5.37.3
v5.37.4
v5.37.5
v5.37.6
v5.37.7
v5.37.9
v5.38.0
v5.38.0-RC1
v5.38.0-RC2
v5.39.0
v5.39.1
v5.39.3
v5.39.4
v5.39.5
v5.39.7
v5.39.8
v5.40.0
v5.40.0-RC1
v5.40.0-RC2
v5.40.1
v5.40.1-RC1
v5.40.2
v5.40.2-RC1
v5.40.3
v5.40.3-RC1
v5.40.4-RC1
v5.41.0
v5.41.1
v5.41.10
v5.41.11
v5.41.12
v5.41.13
v5.41.2
v5.41.3
v5.41.4
v5.41.5
v5.41.7
v5.41.8
v5.41.9
v5.42.0
v5.42.0-RC1
v5.42.0-RC2
v5.42.0-RC3
v5.42.1
v5.42.1-RC1
v5.42.2-RC1
v5.43.0
v5.43.1
v5.43.2
v5.43.6
v5.43.8
Database specific
vanir_signatures_modified
"2026-08-12T16:24:16Z"
vanir_signatures
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"140076753576110389438539051614219707868",
"269137124372136237183109664889163670355",
"285484292283085348387463665234383112952",
"187559213333877030667677587223924865725",
"136271747945613249141451218435845723920"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-012974d9",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.h"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"170612760818485712964077647214376874550",
"17941961148168960244695968284382036832",
"99064718348506313055175776038917958393",
"271543508755254389110657975564778586110",
"245129052376975900653031031904934087305",
"9652221924159371798487867489481127453",
"92784619479326004191493687144648522620",
"88257704022319447128266725691406033882",
"128726322162508335927270413130543898676",
"208871123357345788932897848150195873356",
"175379280692759481407722493309017259555",
"274453899463134665376311300007988753447",
"176085356546633248200676207960419565104",
"82508980444264291427646964078923369217",
"58650382301282188374190441418183196455",
"74470179601504361880387057719250559610",
"20961918041083431597420511780259150112",
"280446394389383835757331192464395512876",
"36181053721456637536201498135282717853",
"106737421194279577699497083197329570433",
"339332745525546907531651426939354642296",
"311697302863618304137642325598384675936",
"130647703401074593823159175061434912476",
"17965479348030500930551269734925185271",
"233370375197134931092662725964586535520",
"297105815630449015035255907257492063776",
"94602257961425612323097043629896669925",
"26065167707343731464001294592260509060",
"174343852811419226056136436847950208177",
"36585547158536326867407535131626768112",
"180814215444289224621101934341270343744",
"200085831670049678207587114765137517429",
"162933638677372771395188258968567521865",
"281628845415463523078825511343593900299",
"144585550765842609110462002108391044105",
"266429979023308164505716713221612166729",
"128003758512933500750158003817020354495",
"60265311441786749545427956173950386405",
"220131857660815158423149930481079036650",
"279774111871593809873290603469878310145",
"95473620145740068113416096633334437043",
"265620996700831866884644676258092811337",
"170704125883207482051530195869962134589",
"9500123352894238422045837766292287319",
"131883041559442969688467541977647287676",
"226911353509632215282347365370572557660",
"7231758789599680284957110729804665766",
"156418831465914996172836236219826409616",
"151412401826360787551824798171001545035",
"101969956567808397414335528691140947296",
"247303565504393986681194863029322313538",
"138746310829750199646109442335331965798",
"269078711857043247705534221172438254238",
"168171687129183310933585219024140302882",
"128062329420351969638023502346743794533",
"44749305278152795916462025231754472763",
"238356516222624204475160165377079979935",
"223778510278496612669099844370428882871",
"8305294324831953132367082771992094618",
"255514495259678102935986383101805900258",
"211542892891054453635479535201403320589",
"167045158608299014379206321983452633415",
"10117746216390860388088095912979492395",
"4577950454657996561832429450797805194",
"283101605286215998790101021646734767532",
"209016580857963921161781067135618514935",
"189673606950884180588597261842118726461",
"296237535671450715082393207731866652810",
"283101605286215998790101021646734767532",
"204596645233195194983986504371636778293",
"139268408564348353090980583481995664629",
"233475011666209193566488119929932890333",
"206514262625866305373827111016350891999",
"97596242084737266948228178887806123096",
"144257729822161202486338785645104827765",
"98697394301574890197704566884933174387",
"164501586750117050279332356474271816519",
"62623139354832119848509562043880117314",
"99765580820595926412571890022653321164",
"137694507137217992450142482112152607164",
"115603897778106639077207274451264153927",
"328856416754422177454620934427204265287",
"327347646198124152269148480275251021391",
"143761201391636211503071870355397102342",
"96669507917699195174894999645398815198",
"241356243368434089856226237562196898837",
"202655747950797781256975825225731042873",
"162968060053933819020956656359021377605",
"144280262956458821722062109981699087789",
"311951479454501846850879335648547154727",
"182558171631284517217318123760215447085",
"144384972816185485545503229734449047533",
"60472312192982333033842935836847056645"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-0577f44e",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/infback.c"
}
},
{
"digest": {
"function_hash": "81619696683681681576163930332440542785",
"length": 942.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-13d0b665",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/trees.c",
"function": "send_all_trees"
}
},
{
"digest": {
"function_hash": "294607048335362055969496245363491704373",
"length": 4213.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-1737d07f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "deflate_stored"
}
},
{
"digest": {
"function_hash": "120092056087683248331444624181695769566",
"length": 163.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-17e2cdea",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/crc32.c",
"function": "crc32_combine_gen64"
}
},
{
"digest": {
"function_hash": "223998326223289758667456434247993079643",
"length": 8341.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-19bbb1c4",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/infback.c",
"function": "inflateBack"
}
},
{
"digest": {
"function_hash": "195215112765103483380365551722634834648",
"length": 2564.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-1c4efa45",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "fill_window"
}
},
{
"digest": {
"function_hash": "103981008212906256741034535498169456042",
"length": 127.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-204bb8fa",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/zutil.c",
"function": "zmemzero"
}
},
{
"digest": {
"function_hash": "201281200642858188333849785139487467148",
"length": 1273.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-222822d2",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/inflate.c",
"function": "makefixed"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"339185983268431722095599021589186986765",
"210326305046525275160363415998681251570",
"307916145972125913231640147586366616437",
"239384189372734090267628692697758150438",
"34755561624302814611437821558987561896",
"58261350985228564290348751953175292202",
"157531001097002200270079056953789089876",
"306925406053997835819201671711998779585",
"333894592831938651730182706304432937805",
"209724737411213609628920624483052120632",
"305318670437460930522668055265032973206",
"228364762780666861853005656047485084213",
"313312574052462669727001378304986794988",
"197027604390077352926016444959066066424",
"56552361997722334487658545213671034777",
"74894002584379291760851010467164375731",
"119486236668829527521256213171577654891",
"66262503697097342181685557625526874434",
"72739230543112136428141169052794350865",
"26446133741681622914455945598401181816",
"29048989308228035400780252672312273172",
"279457334486923318200478171817470010209",
"35609241008022058679572530671581246892",
"236619956435238620234035032660960388959",
"283215743439145653645524355180528584354",
"79873731072149640103768690283910186692",
"281625653278362972595275069485921014464",
"176631942235583883872321907853502957871",
"224698703046813345465421950879152992919",
"113506036114177928968978818908231964685",
"281255684268977982761146669105178565413",
"98737321162812758109334130971052650988",
"88843008529982665085488876755095612951",
"39653721802168665616842620698352814948",
"3167792802012091225827925500230775216",
"69069679264919397648711394538981364000",
"283786897655904097418343777680614138854",
"33623417425102790236700908812359647061",
"13428542236349816262300047623576631952",
"245704647346440906192063921271028180480",
"328704752503428398536703341333714202097",
"270569934990187381679913433241267357472",
"198019214169737890981005464022627663342",
"262891625255292914993009867090593744973",
"295927018047835604127987992980846514872",
"68498498652534142820796125222414445721",
"243473896403669899896128559661392720096",
"21302596892802771029397863534326851662"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-302ee38b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/zutil.c"
}
},
{
"digest": {
"function_hash": "77611589791130500919428237567516098899",
"length": 861.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-3373c904",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/trees.c",
"function": "scan_tree"
}
},
{
"digest": {
"function_hash": "164462649614846813851314851299486500163",
"length": 870.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-33b9f1c6",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/infback.c",
"function": "fixedtables"
}
},
{
"digest": {
"function_hash": "22684906566431994396163117357756111676",
"length": 1167.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-3f47f117",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "longest_match"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"213700425310401725212208164716349295113",
"246565215060652522069442274015519539977",
"189657284925752118401213104564359172437",
"91008157435206800148908213409688158579",
"307606327909539557113207673067656571671",
"79092715138956062103595025780626843691",
"160413510501843227176140526292898050548",
"192787760081926088615771365143261383793",
"260927285884225095424717660026509870172",
"235644009924164598048381033715693199572",
"117758701490653104011906151190986024876",
"53372551951980246790058443126868050735",
"206030207200649354825893367027199698552",
"85932527434409794527816408947105071007",
"217297392206973885087910389332663885808",
"80192088799336869766090422299072603849",
"119498468780554241965107991570048328181",
"47758133455321868358882701405975773014",
"193410620059956348919070254739511729493",
"230612923348395071365026485525064727002",
"295378974609983581304343450587863375323",
"16060508847289611675604430421641882216",
"138298006242958669235058092461022655905",
"171676768929676402738044911890666644741",
"237396364433312972021088330758760421635",
"338884194342370804327067053502714427231"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-4183a4b4",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/inftrees.c"
}
},
{
"digest": {
"function_hash": "197179523508697361502478868579512635595",
"length": 1296.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-474bc2c8",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/trees.c",
"function": "compress_block"
}
},
{
"digest": {
"function_hash": "190463537155517376745815175396701810013",
"length": 2551.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-4b569229",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "deflate_slow"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"302208933834632037415803634314530264617",
"24328249801979818926803709036847132676",
"61810481154374426945068974065669437011",
"182182851389781197477395161987834351029",
"274744982178168868944927832661247868953",
"118019246084337723780352133086198212056",
"95718631143186157166643601310775684276",
"329243418891221575555582443418214502824",
"333068852974077846926251013850648049550",
"216528708402583239778872738159621894360",
"75211083824619593572271658715752513164",
"243408967460663993286089916737094142940",
"34344458698354964371488280553382214842",
"76749242398376047952786516134401287973",
"266052748560597346309379118145603826212",
"331217895378990667920208910539405134997",
"297623191847623943882933872492340786095",
"261343723409258318833941408001437253256",
"297419959069587080524626599109339706010",
"263796933514740101396831621488275568180",
"127736693131709253485465310938797349339",
"304566159897688485739735489888478156235",
"247279908812656155197434244633065395561",
"324371048576356845244827666066518128198",
"3721769359106081557168867846822887619",
"85801745012414401913588424756110073939",
"237452739239026983940683845104251258778",
"206434651203247653849134475478436889674",
"273481865931295457945921269259091426226",
"174922357914589365847754869813760397737"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-4b650006",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/zutil.h"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"169072606656351450279649863850454019753",
"336754849088353694211771836271677151690",
"287944283187955799886938531976651373315",
"76987150884344439339836097235742252489",
"220998600924339875901830100275040268642",
"180259893642959473445350467908624190515",
"230465802159577572205814206244145818905",
"312141928242303176448451736284128473750",
"126817268756321699077457382641162556689",
"85832883267139024339239086810371534947",
"311354153635300319821729743495684886820",
"77033369255248706248022314378522071608",
"206903358175723628945313912279258982088",
"135304652417826221343972896800652845541",
"25601660922720544133999884169643257779",
"47813310573883925087457421889565897866",
"325125928614279373998796617441445345874",
"324041435239060316636058995969336726968",
"219884486449340725318138994724281578873",
"325526660452179014098999550012147986532",
"4438439512965649262541137461328283963",
"104856019411094286832935364704866764251",
"284020518420826744616614072127820925578",
"36707896748933556772341379244667889851",
"245074880298573509267983907072761153491",
"73941910792796036137076235526170190504",
"217664040981566897777631461354232697015",
"60272283684185561628825070768210806192",
"304543915317285094049543043797762851743",
"95570437799492742099440869957929126019",
"22108938506232545158045478545492501182",
"82410374543567851266118885688713645552",
"10701992810172838407602510180564572606",
"312819501274257654117421077058602204533",
"299168708707896794816275813482847855904",
"78561821743566618147030819131524319744",
"171599845875069457033731495963391730698",
"338234087092102680270927517996723987291",
"132111282718359833266970340554729406756",
"170029702343302214824530942424672439888",
"56984298537762266788894410852923581252",
"255572179248097415569272609992894016327",
"79239768032852177394524686837620929060",
"194825696047498469368993765997177472494",
"139218108829135067305957891693222753396",
"167113669322611639227408936662908703263",
"154624331531971762573986835870658077208",
"258971663323397780982104059007434168439",
"25088687047108200106306799466046415514",
"15402429456801494390359874649807356450",
"338244294973488049701891934967089546271",
"139818897603345598254111909527824431666",
"229964386010899041583289070089192769241",
"277711456069278254592098392979364725712",
"239836757778363561889738014187977972596",
"317061741705281250711084065320286738753",
"56500472901977947320360147050498898886",
"276985565698788638594719287701339757283",
"322234128356743526053824875367361407274",
"326291387943487014010212820798317275106",
"332779902008620978350358511698592611162",
"92243533860037951624289872301564476731",
"298507818547531809495047314324841947494",
"302680242489730482749020704055934897084",
"34857410078209092258596860068351687990",
"300472756574509786184851453242788525186",
"265022956146814313699255732149049506798",
"67260175676992309843169583610993993505",
"316638742947654473255659549663774259559",
"323830026478676574145918841521930599366",
"306108823287798862221948370341259797249",
"123268668082757150272818731557164304817",
"77789328018051138154603017984595606851"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-4b713273",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/zlib.h"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"170612760818485712964077647214376874550",
"218525572308176527295650222661652869722",
"114067259025790557392945647720849608536",
"63193483744886638503184268504120201664",
"60472312192982333033842935836847056645",
"160052884407483334196634322238209788747",
"213531884629863108555677756244119392255",
"161556396061932598740830172235783771272",
"57852214727734951465907728810150722069",
"62898704614969226993968089488699594428",
"335274373170301305770679882177779718200",
"206256777587404458410184792941246494037",
"129267655779534964132672943969066184850",
"144280262956458821722062109981699087789",
"216777956480103316859709917871391069292",
"246838291369121004113799066939139089637",
"174440101854936264124975796162220961403",
"96669507917699195174894999645398815198"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-4bc3e0ef",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/inffast.c"
}
},
{
"digest": {
"function_hash": "315399154365181022435305187293461351345",
"length": 566.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-4eabf342",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/trees.c",
"function": "build_bl_tree"
}
},
{
"digest": {
"function_hash": "141533379054586156162101950824774310420",
"length": 108.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-50ef04da",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/compress.c",
"function": "compressBound"
}
},
{
"digest": {
"function_hash": "180875335522170298378057023901412192138",
"length": 2095.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-52e30135",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/trees.c",
"function": "_tr_flush_block"
}
},
{
"digest": {
"function_hash": "95079042340945104881803399813719489209",
"length": 678.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-54a25139",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "check_match"
}
},
{
"digest": {
"function_hash": "48493989440190120351061097936298798371",
"length": 1919.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-557d04fb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "deflateCopy"
}
},
{
"digest": {
"function_hash": "124223347250548421251867728938998743957",
"length": 1730.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-592fbdb2",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "deflate_rle"
}
},
{
"digest": {
"function_hash": "170544227078043471918733311543981292480",
"length": 2062.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-593f20cf",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/crc32.c",
"function": "crc32_z"
}
},
{
"digest": {
"function_hash": "188403684128820467630440504319496884586",
"length": 965.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-5c58ed1b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/inflate.c",
"function": "inflateInit2_"
}
},
{
"digest": {
"function_hash": "319158220349953772473278655604184420082",
"length": 1145.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-64235d61",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/inflate.c",
"function": "inflateCopy"
}
},
{
"digest": {
"function_hash": "336016618344589145693216215905370466734",
"length": 1845.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-776e0192",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "deflate_fast"
}
},
{
"digest": {
"function_hash": "281580122477783467471956811639644837983",
"length": 142.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-78793b9f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/uncompr.c",
"function": "uncompress"
}
},
{
"digest": {
"function_hash": "223603179588207090639643031306331859445",
"length": 158.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-7a0c84d0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/zutil.c",
"function": "zmemcpy"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"69150160276529476097657605956339676675",
"234574062833317020068104883616121712833",
"147275930838451573796306092399706183782",
"84137863577806754193477394135142759324",
"263905463812341880034555468861808042891",
"83229608775351998650787240446732491361",
"124143600820190047142358793806702777686",
"168886752225237675106872824426391467497",
"315149360358926704834569839439046063645",
"257601960315537838881012717401190325337",
"232883358418206486588808955155058338622",
"234596038438074782092921826757390925800",
"158246257859022197429554539485095651919",
"14565425141015041219924668612086638292",
"193614369132822546980958615424351639120",
"61011744603094887422867268239028731037",
"163180070122298521383869587997266478065",
"242665202324672286354583132093454999409",
"268156838968557233690922773930879103152",
"303576984462809651883500311557369994628",
"20660970831756075537796351426885353968",
"323950547091484607374946494985741159646",
"74642415211479497565857014265542481840",
"157456583408050154848701084020037688202",
"93734010291920462809475604820294435702",
"133358611605281963339197139597920079652",
"180201445095074288383492534603444337593"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-7d88336c",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/compress.c"
}
},
{
"digest": {
"function_hash": "159272239480770210654349119535643329100",
"length": 260.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-800b8719",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "deflatePending"
}
},
{
"digest": {
"function_hash": "161607644005672115512480936233943228853",
"length": 16374.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-80cfe511",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/inflate.c",
"function": "inflate"
}
},
{
"digest": {
"function_hash": "323149471949196617447417172705243765411",
"length": 3307.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-81a0a9cb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/crc32.c",
"function": "make_crc_table"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"36116989187281874142127332931997733514",
"39343015523382814804223365980507721938",
"113353538045319521448779986510158840459",
"296302085309950735075549993661432001578",
"164958166354216321709772143133508396524",
"91785189546606917481068075737315287882",
"306746027344103764152429578347328678485",
"86738389018842354035951039332461021226",
"40431747827654580647239372128427775140",
"176374807543816481886889147325778731192",
"36473653027166173239641585919476831189",
"81270622107271729969749840082986844124",
"28316233306516893481227409197388616623",
"280057627678991017573945250621121809167",
"153974481884609056136720298422757079204",
"149594037155432927740309913013941282889",
"76021078637972884561817683417259339464",
"196058876129348628996328367184704576601",
"161661477491810971546382223476089206220",
"272144563395071205314097728688358761508",
"172708406439767792657801087845217965099",
"46938237572924408679356702065553851963",
"166473963411932276658523954256420748632",
"323021696992376526662181462303072470466",
"155619270903664179726977404762496316131",
"240803048472533513834878134051519549090",
"74506163283779555222774694007361550710",
"255766213640233307108682432595690141940",
"233761752961593249318786080302410361326",
"258846745742784179139768108063280980792",
"246885838578185751183847437532291449485",
"13931938922438122560956261133006952776",
"7681194739107132574330508502455300380",
"235057378932052535490772024923028906693",
"104970275152061917235752677046117274833",
"73724616289752040290622209217425958543",
"267005099698750481329081712041021462299",
"253077140919525024292325422557290405165",
"90768737946311540666678197412352339268",
"99579970430238540271258649030283415945",
"37649507566557876658425807714723014036",
"99511965309556072276941557752277809834",
"322758527346183231409158886286756386375",
"245307708937192300079505572746820370064",
"90279174772609006224983253058472222276",
"256217579391129336017335013520698386974",
"243641056669479405635660142008173996639",
"218091003723073200506977452790158322746",
"226062927401670685619621385545792442928",
"305482670982880232256442395077604234083",
"4296343838670800038539466066386603064",
"29158822771507735127908351077121750910",
"198388557300282731963946983496253394252",
"34043970582141125770330392728394946609",
"64868064577723638675754906117496361332",
"158755815446731074466854945176956998032",
"311620903009473263385495253842011470837",
"182987784903442860323891298643378463955",
"205393397970729257118528379583505743833",
"83590977457947955688974550829748233345",
"267715175311215319983684575399969702502",
"294531802294941967111739057090365250579",
"99442780061175949419531153032113464285",
"237740315545199920315785068242455788971",
"305407463024304548130196606906410878762",
"121122584076672244623645686932924090961",
"116755307847686558857146137832832883666",
"3526990766508774880150434105054101014",
"308856358757013706482377792467262890923",
"322720559819467719110327198225059065657",
"36753736116906788344531796893083214025",
"169709646816124300351122505858713382499",
"203069812239216544828826900547800814513",
"57256846768992450822963257392021465194",
"304362890812656674046806779092966801896",
"152203090040619190527345483161114050733",
"74075351542401041106443808650016447166",
"140648786024917813728401315840557291688",
"270029245941874426815544678970510363749",
"133888737989323431912255305844895882963",
"307414495844499317705778933386430586239",
"146726282667648565622072360862439078391",
"142972216564275012619977639271865404022",
"169952780244497614186023141373191048845",
"300557601520562941591661934040314867532",
"86666844920558427403530961894627690716",
"309224003464106895613721038782386090152",
"183747591339918032176012021410559287391",
"193248961851098168769413647224146946905",
"229915270463996505160968177745500610801",
"46147274821283317564843511789917614814",
"94329458436922446552623433141248669137",
"112006990347273863451969828880706030680",
"247861360592894831276634207477390164761",
"246879176539483505833505686260255778130",
"324118509517754775615788442343108232079",
"298939245241615775586986497749513120663",
"123025352656338420145048604361225488628",
"188966096282918718453275307598913016188",
"319070203775578274413103145687731007127",
"88356083131035504008333307584579565485",
"50529971440594321366144300829919295216",
"194752757602485849459924574691091358636",
"180598779395017234925062381875913695213",
"112006990347273863451969828880706030680",
"247861360592894831276634207477390164761",
"64187799718850297347739885278314293192",
"185453018272747350666008382718110719626",
"199695210579481290965891123408498965755",
"228070436118836064549347437568907926410",
"208331752131871256457964147908415347025",
"49008712594390695499268474908067834031",
"50446094443549435870317367113854183988",
"143580329181101200675463479162219167688",
"130366630459189612756396150443758886291",
"298273563279412574288963403558884745678",
"81781160511614717975894692895003664484",
"154795846936464023261071725484781064910",
"258729609363176859305215250342349127627",
"17645234415621246986160540511545024817",
"67093576938890039908984569827506704195",
"199330548512395620732404501138617190885",
"309021157878095210594301644224162773891",
"77115958754762894625023976462658819391",
"145383247736002767702749785199643269550",
"337399111047967762717815786004521485101",
"76152046488188567107372268822345635512",
"73933562986405760950043544613207736145",
"23513879913249661587577885571100544212",
"273656306919926997231882189558333839114",
"173335644347034141725734089473843919624",
"178107203693962672882596850914975158885"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-83df9a2c",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/crc32.c"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"170612760818485712964077647214376874550",
"633426093378634094836722047138106147",
"163169974919765710130360989339687601749",
"13695980216545800348458733450777439089",
"293708767052926866154003122577339075346",
"128771051239830398173164216793524092524",
"272117397262725453643422854166032526313",
"61741883828097334209637344268692952540",
"41498838420814400627940059642274085555",
"237334975729443826735052505212745477525",
"92644338775065824273689605880161656712",
"184957345427872786167784477167033461472",
"224278791206476550275634296849687552625",
"331348104438448206498039969260036856274",
"288618164040975714618919853718617354006",
"280157020919096461333600572156725720184",
"286364559199660794837337966467926502518",
"27155925207762393783528660087058864167",
"302958876647444747535061777254536718801",
"154873946332106318265469352123745455711",
"235628460625506798641574258502147854676",
"189768547912621160651965188280081858215",
"92784619479326004191493687144648522620",
"88257704022319447128266725691406033882",
"128726322162508335927270413130543898676",
"208871123357345788932897848150195873356",
"175379280692759481407722493309017259555",
"274453899463134665376311300007988753447",
"176085356546633248200676207960419565104",
"82508980444264291427646964078923369217",
"58650382301282188374190441418183196455",
"74470179601504361880387057719250559610",
"20961918041083431597420511780259150112",
"280446394389383835757331192464395512876",
"36181053721456637536201498135282717853",
"106737421194279577699497083197329570433",
"339332745525546907531651426939354642296",
"311697302863618304137642325598384675936",
"130647703401074593823159175061434912476",
"17965479348030500930551269734925185271",
"233370375197134931092662725964586535520",
"297105815630449015035255907257492063776",
"94602257961425612323097043629896669925",
"26065167707343731464001294592260509060",
"174343852811419226056136436847950208177",
"36585547158536326867407535131626768112",
"180814215444289224621101934341270343744",
"200085831670049678207587114765137517429",
"162933638677372771395188258968567521865",
"281628845415463523078825511343593900299",
"144585550765842609110462002108391044105",
"266429979023308164505716713221612166729",
"128003758512933500750158003817020354495",
"241202078627519415269949918943011716755",
"43954855328718522530631607379092351181",
"63992288707673051304801122675848520582",
"307457311186421011923465063659592715806",
"50360149307019844361569712203095912379",
"211237497112447003994641690928897843019",
"296513043155084919367957647010466271146",
"265337580810781363337333666742123004697",
"160581336068340250470156362729379190805",
"101853816883619439606034056977586527143",
"71111160822060488888093849907092476862",
"124559779652074422276450303148875060188",
"4774510225616627369824578158285098476",
"12850618912301492095870445224641013015",
"19257743186676710954968598900026841911",
"204745255622061811074202942555716134296",
"66390461737893333474633069607228398306",
"151596184942714060826113031047913366978",
"257211053634134050496120608547815540117",
"231055812626729370971782265555906696825",
"255566228115968116041188190658480170863",
"270242246448213952758239467214257599860",
"183266565007148733174680883890252310203",
"7574971309440308346501349082905060797",
"50661686696106072678331333817437860394",
"8493840539157678087422951020265610989",
"5227903898850392801751358331032566496",
"194993414524685733413712844804172758465",
"155952991314062059633252666326877894642",
"92899896694891303294522252666912934743",
"4439964814421982300131287972940997478",
"247456610061472260189656110449331260011",
"163918286803296011007217203923963932836",
"215996358059636271653618961141694247466",
"73271264520012891451291038271115917072",
"276853778971722350202249316581886391691",
"310011247562437343906268874461844019630",
"5227903898850392801751358331032566496",
"248041152084374040770150972487994142800",
"704034875107604356037736710096150870",
"318105806897896309554566105075509271606",
"84485212889704424740494111436065015360",
"16809285848762163503861816865398510953",
"23648317657186612040966330957543850774",
"318803768397090754360420694296452879841",
"321069480456857645028700448263792139341",
"141211736310554683710939944550367786333",
"18344563294502331677390515161830553947",
"296563702342379712826842461649554194764",
"212407815975447500533756888302226828533",
"183313976972378171319881392220451415144",
"287741310977465494757282684051158862530",
"47164006826572059381457893828732265348",
"118353443470780007848268834940017664799",
"289869803574011618359340355798984609093",
"230028972103850426171586034546816768097",
"311929400733779421345914078768577975193",
"213184226244752287268341071518921505717",
"129200252906536872812850756380629963740",
"287741310977465494757282684051158862530",
"189148337510845699458784612481579091129",
"23746024063633426192432360515233619649",
"249376802886142609287868132752780596554",
"57706974719886430266549881215956985293",
"310709583011022550621310796252262425048",
"113525238411921671206232809945815769641",
"226263817806388304156635157940984318092",
"108351773404838563800028893614826855845",
"215746851124651015280465871955595849454",
"95473620145740068113416096633334437043",
"265620996700831866884644676258092811337",
"170704125883207482051530195869962134589",
"92655460844975470796651540837514140623",
"131883041559442969688467541977647287676",
"226911353509632215282347365370572557660",
"7231758789599680284957110729804665766",
"156418831465914996172836236219826409616",
"151412401826360787551824798171001545035",
"101969956567808397414335528691140947296",
"247303565504393986681194863029322313538",
"138746310829750199646109442335331965798",
"269078711857043247705534221172438254238",
"168171687129183310933585219024140302882",
"128062329420351969638023502346743794533",
"44749305278152795916462025231754472763",
"238356516222624204475160165377079979935",
"41810173304869156634487308166849958984",
"152399454804484760743921504561273606079",
"173192982288407010678142629430374764150",
"160904911392341157172694119810888762538",
"230827656306122477150824908692729139427",
"223778510278496612669099844370428882871",
"8305294324831953132367082771992094618",
"255514495259678102935986383101805900258",
"211542892891054453635479535201403320589",
"167045158608299014379206321983452633415",
"10117746216390860388088095912979492395",
"4577950454657996561832429450797805194",
"283101605286215998790101021646734767532",
"209016580857963921161781067135618514935",
"189673606950884180588597261842118726461",
"296237535671450715082393207731866652810",
"283101605286215998790101021646734767532",
"204596645233195194983986504371636778293",
"139268408564348353090980583481995664629",
"233475011666209193566488119929932890333",
"206514262625866305373827111016350891999",
"97596242084737266948228178887806123096",
"144257729822161202486338785645104827765",
"98697394301574890197704566884933174387",
"164501586750117050279332356474271816519",
"62623139354832119848509562043880117314",
"99765580820595926412571890022653321164",
"137694507137217992450142482112152607164",
"115603897778106639077207274451264153927",
"328856416754422177454620934427204265287",
"327347646198124152269148480275251021391",
"143761201391636211503071870355397102342",
"96669507917699195174894999645398815198",
"143044873200363157877263495995774045889",
"31813616120264674207960606390331286602",
"162968060053933819020956656359021377605",
"144280262956458821722062109981699087789",
"81305815893023273613882115117086925979",
"53114130023611027615364684946539693012",
"22835130949719689316152380831314404371",
"60472312192982333033842935836847056645",
"129724871845124758428461268271551077640",
"116731511039524659116869577335138863627",
"185754638960791225437586975915122581854",
"60472312192982333033842935836847056645",
"296619491275718417613078922940787071415",
"334843199958689061276652256475621344503",
"261802558693417953309373135677091940853",
"250963561131033713431477263771094045554",
"51283744831029566561852706163242522072",
"30530751884171893119378609263051328318",
"25662355361132590789197934399860280181",
"178979398459796328550611980339372163406",
"300583919867821886286356930106064196628",
"178966112670979305675425767862785158175",
"198259521751381676014300552944515743010",
"163110972960345754752825119707812587846",
"255021313459583137065658339798580232592",
"21661061468304899064068703154375659734",
"339691479213622348312985870216965376416",
"100894792436535502219815054496090549295",
"29073118821948874097313177197237576232",
"275337081656040504973648837849282391198",
"214628371618208194312717139722733221961",
"257083246833529132080746117386532167981",
"280504810896268445364761221497587921052",
"164060334688702395575821600180263838665",
"52176796735232140868869737347983401897",
"302717190690820069701785463322140394645",
"185702423168760376902632524761073245209",
"293282987827576700864096048729232539253",
"159023384845509965872063093202714242976",
"281965342729461277049221804439161058970"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-88a809db",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/inflate.c"
}
},
{
"digest": {
"function_hash": "191480235146679488554179089166587246400",
"length": 497.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-986e4d5e",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/trees.c",
"function": "_tr_init"
}
},
{
"digest": {
"function_hash": "67326828305691415098225392604635253081",
"length": 195.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-9dd3ab20",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/trees.c",
"function": "bi_reverse"
}
},
{
"digest": {
"function_hash": "60356379988273435649225457059706473458",
"length": 233.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-a5daa8e2",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/zutil.c",
"function": "zmemcmp"
}
},
{
"digest": {
"function_hash": "236191885411619805398907143039507935227",
"length": 427.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-acafd91d",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "slide_hash"
}
},
{
"digest": {
"function_hash": "305658463845680785849291442824047227486",
"length": 141.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-b6cc5ce8",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/crc32.c",
"function": "crc32"
}
},
{
"digest": {
"function_hash": "48976627638038787078715901790406477901",
"length": 480.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-bb153fd6",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "flush_pending"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"241837469301472542763915258406471568721",
"134817735816291641851137678807785474051",
"25026409505447119303581140769410921389",
"83372031040202194055914394149395240258",
"303828412859870743042029530314206898414",
"252799983807883410499985077880453020179",
"186757368847862368573841821549914451028",
"286316328969072824694201932555225658850",
"222466439563355312241539390395580465184",
"82257072538428880528925132988775451825",
"111065941266577336423251425023711134910",
"87849555992651359749136987843611373006",
"124906336679116762099864099608048892790",
"277648379474635381956497176822437490646",
"34639114596196649650319074244694596002",
"316419732065158638917109647413463006069",
"130877229314159752390472034562634458159",
"114957388276152450502100535765377756559",
"315149360358926704834569839439046063645",
"257601960315537838881012717401190325337",
"232883358418206486588808955155058338622",
"314999661407691280385797034466564236696",
"120555963232940076160873153725921220777",
"6130765265778703118663270462294458061",
"150271996029062207335289754099697269602",
"54125973473898168420671164345087477194",
"126403439721981770355986227599538488786",
"113942161021615773604497255855470251514",
"274495655297514767384147904241022914295",
"119166716290409129560948208808808778461",
"188600425266561693225037863448365775645",
"337674049164494477685012270255063143671",
"304263354082098051084507882948426631151",
"80623977321553061249173188572625858240",
"142509471160123869718531781699064875670",
"278371209251067013702104795873489247296",
"298156088777481595065764014121461967048",
"161311147671742539597528080945447162400",
"37480116656702179704991372058024520254",
"60818760313095375498017936285189252817",
"229152479445149611961400091738602988928"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-bc1a8867",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/uncompr.c"
}
},
{
"digest": {
"function_hash": "265738459044018912180179569959007404210",
"length": 5393.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-c55683bc",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/crc32.c",
"function": "crc32_z"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"203152410604188852694180906745730742377",
"277151108111658338843853542818203936815",
"70376948530822439438351543673508962463",
"303952124892175918778509883049744286463",
"325747628178858538656522962382361189468",
"103372097864308103332377742002500295541",
"84373097498537147875060817372010620036",
"268796463873452614264351137285420597608",
"62122034712481833773867694497089405446",
"132285679373930146799538052341396706052",
"181998336486793470187888012883054097463",
"275664582252166839998432503006047674814",
"275570053473130682435741891393618592413",
"172215054380905016344818756754062115333",
"225337605740106584294121658917926703116",
"223774264628192142178905537017729423551",
"258944239439282810933742398188082492548",
"25142834801928577562843504157824152623",
"50809291553427036327622396656185193237",
"273578402494212150221647492136025501716",
"332665164570261679080401677337719093957",
"246564627642535681624585320368060047371",
"136957538336311925719954808887448267168",
"152360368935668097151343477563388423090",
"26059014506389164022040941474427848669",
"269371208820199830254338884568725418594",
"117724105368321820530862981943456531811",
"207180390964845430726222857446715371235",
"81333969320777503425704666937603064925",
"36141565190550329930701586468118899389",
"58256837991058719723925847523867646410",
"243795195417202410529835402712332774246",
"29925367542511958322036414017919694992",
"126822579366502609829498175190729266441",
"39638056178915114384049038623521449450",
"136132033818080650722576738298888718293",
"126120812795437273050060640698408805252",
"303061946889259918999642399262338224006",
"255780155475999757517907180515139216086",
"193527887845863632506318029894278162151",
"51519671484614333465934837077662330519",
"194992854574184947597600043522723682901",
"245081016473207132106315659997174923767",
"153258848535293510631333988747319169367",
"194957613739316944143254101253961769145",
"120461154385427770930681948835779207700",
"188267074091720956991715094821768068019",
"320539412497412448922273628627914256831",
"132082928130584748736671676702635358611",
"226754692808606469710129423017388797234",
"96873110459992430013143579068420988023",
"158363740100101847009103208391586462848",
"308217503129637102757432863151656375912",
"335289802367258829830932283984782145357",
"249932553153662574336275137029235792730",
"129311005996084933833219438502425713675",
"243373253682856687000771272931296967202",
"95395227158468648722312498068073614672",
"308610145664702301122372153047443106501",
"126009291751927417253404389197030777104",
"30355693325149727496235042471530880985",
"282398359122798127604764427806432635936",
"215829997588630732235541046071746131810",
"7493861736710417398807057432682300062",
"132620575306973666316008123968114394324",
"101470378951586159486903806597566392281",
"78296554643589890257290729446236091597",
"100684949877231140664289942204963306754",
"93646453402321344597729199662164487833",
"180884183124293602866621136292405721356",
"162416878990040868912303080861809517354",
"17830885608178036905546134980058666079",
"48348846367810908712031803948990772040"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-c751b6c2",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/zconf.h"
}
},
{
"digest": {
"function_hash": "63212895975344634741158900155097043916",
"length": 2861.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-ceaed00b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "deflateInit2_"
}
},
{
"digest": {
"function_hash": "36233639346710586832010920892825074848",
"length": 1062.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-d117a02e",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "deflateBound"
}
},
{
"digest": {
"function_hash": "153728774451835221804016151976485066293",
"length": 1139.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-d518e679",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/uncompr.c",
"function": "uncompress2"
}
},
{
"digest": {
"function_hash": "185936681063670693334917282281293036207",
"length": 123.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-e04265c0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/crc32.c",
"function": "crc32_combine_op"
}
},
{
"digest": {
"function_hash": "177037841656749270405308767548107164490",
"length": 881.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-e05f37a6",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/compress.c",
"function": "compress2"
}
},
{
"digest": {
"function_hash": "164462649614846813851314851299486500163",
"length": 870.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-e06c1c52",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/inflate.c",
"function": "fixedtables"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"263096654003373730846645234364649373027",
"324723265959457407058459411557616470778",
"105810472024537241285286647960194531007",
"329783402089225310327937702708305783839",
"84317395198839581689711485491227967418",
"19145853291250464342288009718617840993",
"159106422517486826805995751644950892551",
"325359513071713263170281048308397763037",
"126052436768884985507424461223262689551",
"128974283067997595213739321870560252862",
"280134474965635777911216186323440849742",
"251272357648374470780021666309675326675",
"13248917269842302460388264573515848822",
"239323286729584605348499358254181475487",
"235659609511181915075732880785682612049",
"105216500158541193462995442935644048104",
"75323908848034406075755513660426520500",
"231766357316078506302042870552596429414",
"57634542124908065499415937456808645337",
"236471655578907714461829656599019209583",
"149606702332194347658019416927286590077",
"86474682489903962378024363889086981580",
"154806646850457574634635340921410600656",
"279453611251830617262416342605982491891",
"258357146995531443385113779132264946675",
"19499346749404045961835813207875538075",
"24220966381604147536821152396272090257",
"187335008768006486391797114844864013836",
"88030629096901251276124937001316857975",
"52464782007398231898985147925952024895",
"287931555207168196916742354530823797697",
"35614374310188812371639547783250885879",
"102177443480635680514081525512727992685",
"306226578639818592222916060736638544234",
"114987289787186496387439651287258994231",
"92465549932220362813854723072438397283",
"197493448417612843451265525563041831529",
"287295461135732989679289420182515156647",
"271569527951189918288408228437192800154",
"320930652127266439651836633260497757064",
"268318547550602588580118890138155209947",
"284564502871975515736030949627275462906",
"62089364856351288844984298551515137633",
"87593208047544189429286848163727990171",
"83702159026517923375218312786646251580",
"261097415609184623404400550619472612498",
"327588952125506722163523147198436471942",
"257319636525057800675075519479249940887",
"56040907279102170991647712693960280856",
"56820415211212881754718779206385796041",
"327435740845051088425177272890970505978",
"326241163720433429549172905625028790399"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-e1da4122",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/trees.c"
}
},
{
"digest": {
"function_hash": "208658749416702781698387712890426692587",
"length": 596.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-e3e2bae0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/inflate.c",
"function": "inflateResetKeep"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"328904915554745511686604753100509826225",
"265466262761665550765011619268037004967",
"38448370925842073212698676278597699021",
"98380160223396982742228544605235458530",
"144693302407988354100690728525839992698",
"287296051166701710523758261066054021758",
"271296458579086141026169630167091654851",
"321030352481027475715103909459544286689",
"241697190484312303399096363674425842852",
"201638761384297722304211769733083826142",
"330845223210801027987375932314880424334",
"132129774347660869790438418217634484217",
"119751574794311628026196211236694346541",
"311550885966860536968518283852386999466",
"274831279798874140348576163356471119616",
"201020944314187112285568096512646007066",
"105301447688578815426122084028115202933",
"295651320564138805999433792166260526931",
"232563014609229029782203897755513297711",
"24001163183465981706129772005822067722",
"150537763954857024345725701058592481289",
"247684553492815639821536536016621536918",
"308273716648471194443750384231431604849",
"103186526972609446650153065561141598257",
"39121409524369133908476237926015170209",
"80386493618870233528040353702441359901",
"229508377727251966231392849443379309784",
"78609457126036913032446043644844906788",
"156973530770880001168370950026430573072",
"221564678443923334178196548975314374069",
"157196645209220048613706878337378780167",
"319665966129402304708614612732813510902",
"41278122114948128678149809267783681607",
"57725806851734491146329840857253909289",
"133706435085136202941007584271891427431",
"134396550170390400447873675135600659057",
"60560421250349986967695968904302020225",
"52713335010535573671625473320432989600",
"208345793527277611265612670780805454339",
"257501751319558681308020578506770249727",
"118257906611789903898874225833972836016",
"96282478523038418671640699142895235092",
"21343906261319974593625170341620836251",
"52018313031180896186527672950281014906",
"324946810026739055210983312845720025175",
"208349836951051606988579350423026016599",
"243532825065032752521492055134157101994",
"155080511722795886887663208167577862245",
"180622549805037307302106385107814785243",
"112345269019778187895294987048656622873",
"93756245835077901806534183244652801095",
"21451304085798919819842441579933128654",
"337192273669379625524601443346132030005",
"19950152726251169099032837880461363926",
"54637554626402943794743049019165049450",
"109138833668490362068333113580066264393",
"56229213391256031209870665524380702373",
"307426315997812748554787365930597820255",
"243076962619899777139641870288009935308",
"50655871529296453950285342707439473682",
"253867148884593745282683705165402254216",
"132830896906060363445743815568481315924",
"2530738635599842282258557201413755369",
"286123269208625919673976761457361460814",
"335484056619307427302507212837475602347",
"93304915727460497408647403114103547978",
"308515158257421288844089491024474725682",
"68245233828716743452788638535014536148",
"202705097892451094331542022413631209018",
"181368117211447545612417772158478739835",
"122250783211367054825379853250341162541",
"82517814920109007540488104476810478371",
"172850052421862281755889760299343084072",
"237971914820315195290578998400280739538",
"39183677630920584461079137007559162180",
"297148970386893274314346039760493571317",
"51613732439171384987175112143127612209",
"183211849587485379531521460859158704669",
"166074294302450690729524213711662786482",
"148803545749315762963304842481649756977",
"294955699837534970656274978483184164348",
"187263698377715403091046152330744479514",
"232810402298887762464972728121979721976",
"325689123100231355295641876338436769191",
"192267364615552000512391424624748531332",
"191651133320670261327249376216353860619",
"117553507241654103480351221922342865389",
"295505225670995157877995584852919925865",
"132671650594234192065181754367724497577",
"251799607866453058063415422719800342229",
"114514895463668470292118550237244954958",
"262924102309840207893197966469054301576",
"214022654688885321434048397153846946021",
"226779448602445772981453777752643032514",
"32899253102350640859285790449386008560",
"207454790545795845167692020016367775963",
"171218183959054142778748509515538272601",
"38855594737640468520075842761667249905",
"162285701879084759280913833738113050509",
"288533563951493400835807760491205084412",
"128615062270919441544761348020027709434",
"56311818235249835282372514986170799418",
"216241115374089679550864009694511351195",
"93510321757176414009877211390218715754",
"5031578901504011560319855033183029501",
"96340697951715579051570437528722683281",
"283615859237372495194800807970402367412",
"332052615142012583582850869306562911157",
"336937862689909041748628123259078654254",
"158801604483740659281373631097343243823",
"170822379103005274636316103019530953060",
"58909041854224378033599475375061064869",
"300355141302562448999828826089534329642",
"308167003445256092852843946765524781872",
"229589816805118775510399824119969837696",
"22185861726743106241876536311886877560",
"180910508059996320476721007709092699302",
"294832392107486743835694591415199073081",
"216237554688345225825796118372594044683",
"312362181787926559737808777810750623562",
"275970268240323554432913844927735618641",
"128551338926839737883713103114043665080",
"12113539601083931063696030239481016010",
"146527332018166550663078066306103676760",
"148865132008023067972449510110132223379",
"39302672496035562534521704315696035314",
"24456443665790721193881963371591648673",
"116288115668563163727814322990235623012",
"65689365267228446305922913179228918085",
"184306646068505723130476814347256338826",
"124512321876366025904566716731634255070",
"315533814399507279334809961226325991428",
"279606973801360450778794862382515726063",
"59649795854619135448610153671858224956",
"243338399537462405841924642637354238430",
"114049637055839636616960200682410854039",
"298956492997695671933457848244973449536",
"309072881005225215782554172774273763636",
"257176979546771415326261199483925472565",
"215115725924797607514753330398922907956",
"229075716447905252241235009519613920146",
"291413182283433000700533258001418360308",
"7262230283408424651276977560598551975",
"90909351587969395976675343563754868587",
"98662966897988062078121946521818627726",
"59139126055257505565414984279210390210",
"189759578657810447263343040936983644921",
"167822735424875246012141082132664057816",
"266645783697810454219353120140217219591",
"191878300836887306109488082067992735370",
"100528150173703184977404882278696473306",
"217334550250231984674416245607954450879",
"232029875853982893119723700587856119487",
"23019655203942372206077420685984313207",
"72633741669457040659634291972987054513",
"18505897788916329084973749667649298540",
"216281079838018797686122974986425395714",
"183916520702862750821069322534157375559",
"107546730183270444783810859141141292143",
"185302533897391814586876275815580715723",
"308656725460556380734628821117923588717",
"162528598089896644468637715692580785760",
"122382021334048406069036498463539170816",
"238855958687725137373328410426052249157",
"203524595308397160281865645068224953500",
"15467184732366987317235183296957485153",
"132470890398684867450910228813055224675",
"42281116738984837580578538933776314332",
"62461015279825258681906475995569298839",
"166790795435926360115112739416166306087",
"184459425766178541978313103195846192746",
"226838130727376497817847948322626427160",
"312007237347881874418372801157609748737",
"238802731785697934845732777654920692101",
"148460136026225238355097280284211336691",
"175032105063177886210928484748593043220"
]
},
"signature_type": "Line",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-e584dac4",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c"
}
},
{
"digest": {
"function_hash": "331906794938535107119846288035221063108",
"length": 323.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-e5e858d2",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/trees.c",
"function": "bi_windup"
}
},
{
"digest": {
"function_hash": "87313690762958250245627674116152029120",
"length": 1407.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-f44053e6",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/zutil.c",
"function": "zlibCompileFlags"
}
},
{
"digest": {
"function_hash": "92608245901364299837006761348797467433",
"length": 2920.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-f57e1824",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/deflate.c",
"function": "longest_match"
}
},
{
"digest": {
"function_hash": "292057352862855847888858759677087049017",
"length": 237.0
},
"signature_type": "Function",
"source": "https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94",
"id": "CVE-2026-4176-f5eb1e25",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "cpan/Compress-Raw-Zlib/zlib-src/crc32.c",
"function": "crc32_combine64"
}
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-4176.json"