IO::Compress — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in IO::Compress, with AI-generated Chinese analysis, references, and POCs.

Vendor: PMQS

CVE ID	Title	CVSS	Severity	Published
CVE-2026-48962	IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob CWE-95	-	-	2026-05-27
CVE-2026-48961	IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID CWE-755	-	-	2026-05-27

All 2 known CVE vulnerabilities affecting IO::Compress with full Chinese analysis, references, and POCs where available.