Cloudanix VulnDB

CVE-2026-3257

Critical · 9.8

CVSS

9.8

EPSS

0.7%

Published

Mar 5, 2026

CISA due date

—

The record

UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library. UnQLite for Perl embeds the UnQLite library. Version 0.06 and earlier of the Perl module uses a version of the library from 2014 that may be vulnerable to a heap-based overflow.

Affected packages

Ecosystem Package Introduced Fixed