Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass. Formatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted.

amazon_alas ALAS2023-2026-3399: Amazon Linux 2023 Security Advisory:ALAS2023-2026-3399

amazon_alas ALAS2-2026-4080: Amazon Linux 2 (EOS) Security Advisory:ALAS2-2026-4080

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose
    =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which
    wrap() subtracts from the output width to get the space available for text. When that space reaches zero,
    the line-splitting substitution matches the empty string, and the loop consumes no input while appending
    the margin padding on every pass. Formatting an attacker-supplied POD document never returns, and the
    output grows until memory is exhausted. (CVE-2026-82560)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose     =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which     wrap() subtracts from the output width to get the space available for text. When that space reaches zero,     the line-splitting substitution matches the empty string, and the loop consumes no input while appending     the margin padding on every pass. Formatting an attacker-supplied POD document never returns, and the     output grows until memory is exhausted. (CVE-2026-82560)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
476775	Chainguard: miniperl, multiple perl packages: security update to 5.44.0-r2	Tenable Cloud Security	Chainguard Local Security Checks	Local	high
476775	Chainguard: miniperl, multiple perl packages: security update to 5.44.0-r2	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	high
457378	Echo: perl: security update to 5.40.1-6+e19	Tenable Cloud Security	Echo Local Security Checks	Local	high
457378	Echo: perl: security update to 5.40.1-6+e19	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
349318	Linux Distros Unpatched Vulnerability : CVE-2026-82560	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-82560

high

Tenable Plugins

Coming Soon

high

high

high

high

high