Moderate Security Vulnerability in Perl Package: Incorrect Regular Expression Processing
Summary
ALSA-2026:67155: Moderate: perl security update. Affects perl versions < 4:5.32.1-484.el9_8. Fixed in 4:5.32.1-484.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Perl is a high-level programming language widely utilized for system administration tasks and web development. It is known for its flexibility and powerful text processing capabilities. However, the Perl package has been found to have a vulnerability related to incorrect processing of large regular expressions, which can lead to potential security risks.
Vulnerability Detail
The vulnerability identified as CVE-2026-13221 pertains to the incorrect handling of large regular expressions within the Perl programming language. This flaw can be exploited by attackers to cause denial of service (DoS) conditions by consuming excessive resources, potentially leading to application crashes or unresponsiveness. The issue arises from the way Perl processes regular expressions, making it susceptible to specially crafted input that can trigger excessive resource consumption.
How To Fix
Minimum fixed version
4:5.32.1-484.el9_8
This is the first release that contains the fix.
sudo dnf update perlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit the size of regular expressions processed by their applications or avoid using overly complex regular expressions until the update is applied. This can help mitigate the risk of exploitation while waiting for the patch.
Conclusion
The identified vulnerability in the Perl package, CVE-2026-13221, poses a moderate risk due to incorrect regular expression processing. It is crucial for users to update their Perl installations to the patched version to mitigate potential security threats. Additionally, utilizing Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for perl →
FAQ
CVE-2026-13221 is a vulnerability in the Perl programming language that involves incorrect processing of large regular expressions, which can lead to denial of service.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability can lead to denial of service, causing applications to crash or become unresponsive due to excessive resource consumption.
You can update the Perl package by running 'sudo dnf update perl' in your terminal for AlmaLinux 9.
Yes, you can limit the size of regular expressions in your applications or avoid using complex regular expressions as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for perl.
