Threats tagged 'brew-biber-cve-2026-110757'

Text::CSV_XS versions before 1.65 for Perl contain a vulnerability where numeric strings with leading or trailing whitespace can be written without quotes, causing record splitting. This occurs because the combine and print functions do not verify if a field requires quotes when its value has Perl's numeric flag set. As a result, a numeric value containing a newline can prematurely end a CSV record and cause subsequent fields to be interpreted as a new row.