CVE-2026-110754: Affected product not specified by the source

Affected technology

Product not specified by the source · 0 to before 1.65
Vendor not specified by the source

Description’s affected range: versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline collects the fields of a record into a new array and returns a reference to it only when the parse succeeds

Component: Text::CSV_XS
Function: Text::CSV_XS::getline
File: CSV_XS.xs

What an attacker can do

The source does not specify what an attacker can achieve.