Threats tagged 'ghsa-chcw-qm6q-pg64'

Text::CSV_XS versions before 1.65 for Perl have an inefficient algorithmic complexity vulnerability (CWE-407) that causes quadratic CPU usage when processing CSV input with carriage return (CR)-only line endings. This occurs because the getline function copies the entire unparsed remainder of the input after each record, leading to CPU time growing quadratically with input size. This can cause significant performance degradation when parsing large CSV files with classic Mac line endings.