Get real-time updates on Telegram
CVE-2026-78497: Affected product not specified by the source
Affected technology
Product not specified by the source · 0 to before 2.51
Vendor not specified by the source
Description’s affected range: versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval
Component: JQ::Lite
Function: JQ::Lite::Util::_build_regex
File: lib/JQ/Lite/Util/Transform.pm
What an attacker can do
The source does not specify what an attacker can achieve.
- CWE
- CWE-95
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-18 12:45:15.514882+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-78497.html