Threats tagged 'ghsa-fvcq-fpcj-xxcc'

Text::CSV_XS versions before 1.65 for Perl have a vulnerability where the end of a record and its line ending are dropped when a UTF-8 flagged field precedes invalid UTF-8 bytes during print operations. This causes the final bytes, closing quote, and line ending to be lost, resulting in subsequent records being concatenated onto the same line or misinterpreted as part of the previous field.