CVE-2026-3257

CVE-2026-3257: UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library

Vendor Tokuhirom

Product UnQLite

Weakness CWE-1395

Published March 5, 2026

Last update March 5, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library. UnQLite for Perl embeds the UnQLite library. Version 0.06 and earlier of the Perl module uses a version of the library from 2014 that may be vulnerable to a heap-based overflow.

Key dates

02Disclosure timeline

March 5, 2026 CVE published

March 5, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-3257 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1395.html

Related vulnerabilities

04Related CVE

CVE-2026-34652 Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) CVE-2024-26293 Unauthenticated Path Traversal affecting Avid NEXIS CVE-2025-40906 BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities CVE-2025-34203 Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party Components CVE-2025-13823 Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities