# CPAN Text::CSV XS vulnerabilities Source: https://junglewise.ai/threats/technologies/cpan-text-csv-xs Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/cpan-text-csv-xs.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 7 vulnerabilities in CPAN Text::CSV XS: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-110759, was published on 16 October 2026. 7 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 7 - Last 90 days: 7 - All time: 7 (0 critical, 0 exploited in the wild) ## About CPAN Text::CSV XS Perl library for parsing and generating comma-separated values (CSV) data. ## Latest CPAN Text::CSV XS vulnerabilities - [CVE-2026-110759: Text::CSV_XS incorrect byte returned for empty field with trailing CR](https://junglewise.ai/threats/cve-2026-110759-text-csv-xs-versions-before-1-65-for-perl-return-a-0xff-byte) (info, published 16 Oct 2026) - [CVE-2026-110758: Text::CSV_XS buffer over-read in strip_trail_whitespace](https://junglewise.ai/threats/cve-2026-110758-text-csv-xs-versions-before-1-65-for-perl-read-before-the-start) (info, published 16 Oct 2026) - [CVE-2026-110757: Text::CSV_XS record splitting via unquoted numeric strings](https://junglewise.ai/threats/cve-2026-110757-text-csv-xs-versions-before-1-65-for-perl-allow-record-splitting) (info, published 16 Oct 2026) - [CVE-2026-110756: Text::CSV_XS data corruption in print with UTF-8 and invalid bytes](https://junglewise.ai/threats/cve-2026-110756-text-csv-xs-versions-before-1-65-for-perl-drop-the-end-of-a) (info, published 16 Oct 2026) - [CVE-2026-110755: Text::CSV_XS quadratic CPU use with CR-only input](https://junglewise.ai/threats/cve-2026-110755-text-csv-xs-versions-before-1-65-for-perl-allow-quadratic-cpu) (info, published 16 Oct 2026) - [CVE-2026-110753: Text::CSV_XS use-after-free in bind_columns with skip_empty_rows](https://junglewise.ai/threats/cve-2026-110753-text-csv-xs-versions-from-1-46-before-1-65-for-perl-have-a-use) (info, published 16 Oct 2026) - [CVE-2026-110752: Text::CSV_XS memory exhaustion in RFC 7111 fragment parsing](https://junglewise.ai/threats/cve-2026-110752-text-csv-xs-versions-before-1-65-for-perl-allow-memory) (info, published 16 Oct 2026) ## Most severe CPAN Text::CSV XS vulnerabilities - [CVE-2026-110759: Text::CSV_XS incorrect byte returned for empty field with trailing CR](https://junglewise.ai/threats/cve-2026-110759-text-csv-xs-versions-before-1-65-for-perl-return-a-0xff-byte) (info, published 16 Oct 2026) - [CVE-2026-110758: Text::CSV_XS buffer over-read in strip_trail_whitespace](https://junglewise.ai/threats/cve-2026-110758-text-csv-xs-versions-before-1-65-for-perl-read-before-the-start) (info, published 16 Oct 2026) - [CVE-2026-110757: Text::CSV_XS record splitting via unquoted numeric strings](https://junglewise.ai/threats/cve-2026-110757-text-csv-xs-versions-before-1-65-for-perl-allow-record-splitting) (info, published 16 Oct 2026) - [CVE-2026-110756: Text::CSV_XS data corruption in print with UTF-8 and invalid bytes](https://junglewise.ai/threats/cve-2026-110756-text-csv-xs-versions-before-1-65-for-perl-drop-the-end-of-a) (info, published 16 Oct 2026) - [CVE-2026-110755: Text::CSV_XS quadratic CPU use with CR-only input](https://junglewise.ai/threats/cve-2026-110755-text-csv-xs-versions-before-1-65-for-perl-allow-quadratic-cpu) (info, published 16 Oct 2026) - [CVE-2026-110753: Text::CSV_XS use-after-free in bind_columns with skip_empty_rows](https://junglewise.ai/threats/cve-2026-110753-text-csv-xs-versions-from-1-46-before-1-65-for-perl-have-a-use) (info, published 16 Oct 2026) - [CVE-2026-110752: Text::CSV_XS memory exhaustion in RFC 7111 fragment parsing](https://junglewise.ai/threats/cve-2026-110752-text-csv-xs-versions-before-1-65-for-perl-allow-memory) (info, published 16 Oct 2026) ## Vulnerabilities per week 7 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 7 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other CPAN technologies - [Cpanel::JSON::XS](https://junglewise.ai/threats/technologies/cpanel-json-xs): 7 vulnerabilities - [CPAN Net::IDN::Punycode](https://junglewise.ai/threats/technologies/net-idn-punycode): 5 vulnerabilities - [CPAN Net::CIDR::Lite](https://junglewise.ai/threats/technologies/net-cidr-lite): 3 vulnerabilities - [CPAN YAML-Syck](https://junglewise.ai/threats/technologies/yaml-syck): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "CPAN Text::CSV XS vulnerabilities", https://junglewise.ai/threats/technologies/cpan-text-csv-xs, 9 November 2026.