{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "extracted_events": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "5.45.2"
              }
            ],
            "source": "AFFECTED_FIELD"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "6f488b9e12b015c5b1b2827a5621991e8bd30e04"
            }
          ],
          "repo": "https://github.com/perl/perl5",
          "type": "GIT"
        },
        {
          "database_specific": {
            "extracted_events": [
              {
                "introduced": "0"
              },
              {
                "fixed": "6.1.1"
              }
            ],
            "source": [
              "DESCRIPTION",
              "REFERENCES"
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "f57dd8873dbbd1f188f3fcf7b436e4d5745f42eb"
            },
            {
              "fixed": "70510174f69eb54aa6d617bde4e1402cd9b7c61f"
            }
          ],
          "repo": "https://github.com/rra/podlators",
          "type": "GIT"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "CPANSec",
    "cwe_ids": [
      "CWE-835"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82560.json"
  },
  "details": "Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.\n\nEach =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.\n\nFormatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted.",
  "id": "CVE-2026-82560",
  "modified": "2026-09-20T11:30:38.948090484Z",
  "published": "2026-09-19T15:15:52.620Z",
  "references": [
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2026/09/19/6"
    },
    {
      "type": "WEB",
      "url": "https://cpan.org/modules"
    },
    {
      "type": "WEB",
      "url": "https://metacpan.org/release/RRA/podlators-v6.1.0/source/lib/Pod/Text.pm#L245-261"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82560.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://metacpan.org/release/RRA/podlators-v6.1.1/changes"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82560"
    },
    {
      "type": "FIX",
      "url": "https://github.com/rra/podlators/commit/70510174f69eb54aa6d617bde4e1402cd9b7c61f.patch"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/Perl/perl5"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/rra/podlators"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width"
}