CyberRota Analysis
AI-GeneratedTOML::XS versions prior to 0.06 for Perl are vulnerable due to the inclusion of the outdated and unsupported tomlc99 library, which contains an uncontrolled recursion vulnerability that can lead to stack overflow when processing untrusted TOML data. Organizations using these versions should prioritize upgrading to version 0.06 or later to mitigate the risk of exploitation, particularly those handling untrusted input in their applications. This critical vulnerability poses a significant threat to system stability and security.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99. The tomlc99 library is no longer maintained, and has an uncontrolled recursion vulnerability publicly reported in the issue tracker. Any caller that passes untrusted TOML to from_toml risks a stack overflow from a deeply-nested document. TOML::XS version 0.06 or later uses the successor tomlc17 library.