What’s Vulnerable › Products

PMQS IO::Compress vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your PMQS IO::Compress version is affected

Latest PMQS IO::Compress vulnerabilities

• CVE-2026-48962 — IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob (CVSS 7.3)
• CVE-2026-48961 — IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID (CVSS 7.3)