PatchTheCVEtext\ vulnerabilities and fixes
Recent CVEs affecting text\, with upgrade or downgrade steps. 2 tracked.
text\ has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-04-29. Highest priority: CVE-2026-7040 (score 41/100).
- CVE-2026-7040 HIGH 7.5 UPGRADE Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed
- CVE-2026-7111 HIGH 8.4 UPGRADE Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl arg
FAQ
How do I fix text\ vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is text\ being exploited right now?
None of the tracked text\ CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which text\ CVE should I patch first?
CVE-2026-7040 currently ranks highest (41/100): Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed.