Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib. Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-2026-3381 due to a vendored version of zlib which has several vulnerabilities, including CVE-2026-27171. The bundled Compress::Raw::Zlib was updated to version 2.221 in Perl blead commit c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94.
5.26.0-8ubuntu15.26.1-2ubuntu15.26.1-35.26.1-45.26.1-4build15.26.1-55.26.1-65.26.1-6ubuntu0.15.26.1-6ubuntu0.25.26.1-6ubuntu0.3+3 more5.28.1-6build15.30.0-75.30.0-95.30.0-9build15.30.0-9ubuntu0.25.30.0-9ubuntu0.35.30.0-9ubuntu0.45.30.0-9ubuntu0.55.14.2-21build15.18.1-45.18.1-4build15.18.1-55.18.2-25.18.2-2ubuntu15.18.2-2ubuntu1.15.18.2-2ubuntu1.35.18.2-2ubuntu1.45.18.2-2ubuntu1.6+4 more5.20.2-65.22.1-35.22.1-45.22.1-55.22.1-75.22.1-85.22.1-95.22.1-9ubuntu0.25.22.1-9ubuntu0.35.22.1-9ubuntu0.5+4 moreExploitability
AV:NAC:LPR:NUI:NScope
S:UImpact
C:HI:HA:HCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H