Threats tagged 'ghsa-84xw-5r3f-vrrr'

A critical remote code execution vulnerability (CVE-2026-75031) exists in the interchange/interchange project within the “quick question” admin feature. Unauthenticated users can inject and execute arbitrary Perl code server-side in default installations. Normally, the Perl code runs within a Safe container limiting its capabilities, but if the non-default AllowGlobal directive is enabled, the scope of code execution is broader.