{"id":"CVE-2026-4176","summary":"Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib","details":"Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib.\n\nCompress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-2026-3381 due to a vendored version of zlib which has several vulnerabilities, including CVE-2026-27171. The bundled Compress::Raw::Zlib was updated to version 2.221 in Perl blead commit c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94.","modified":"2026-08-12T16:24:16.542374Z","published":"2026-03-29T20:50:51.058Z","related":["CGA-ppv9-mjqf-c9x4"],"database_specific":{"cna_assigner":"CPANSec","cwe_ids":["CWE-1395"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4176.json"},"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2026/03/30/2"},{"type":"WEB","url":"https://cpan.org/modules"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4176.json"},{"type":"ADVISORY","url":"https://lists.security.metacpan.org/cve-announce/msg/37638919/"},{"type":"ADVISORY","url":"https://metacpan.org/release/PMQS/Compress-Raw-Zlib-2.221/source/Changes"},{"type":"ADVISORY","url":"https://metacpan.org/release/SHAY/perl-5.40.4/changes"},{"type":"ADVISORY","url":"https://metacpan.org/release/SHAY/perl-5.42.2/changes"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4176"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-3381"},{"type":"FIX","url":"https://github.com/Perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"},{"type":"PACKAGE","url":"https://github.com/Perl/perl5"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/perl/perl5","events":[{"introduced":"27e0a6173cfa04e70f8057a8b3a0ceb668a33dbc"},{"fixed":"d935eee08874ebc66b5e0ffea91fa1440a189bc3"},{"introduced":"e8cce44acbf725a386d6645647073769caab1f34"},{"fixed":"b62845c7186b0b6a8e4e83419e6b5ef64ceef3ed"},{"introduced":"1d7f1a41a11375afc3ef8599bf5b4bd367019ba9"},{"fixed":"c25e30926ee2a7bf475baeda3c1b97cc56803f94"},{"fixed":"c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"}],"database_specific":{"cpe":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.9.4"},{"fixed":"5.40.4"},{"introduced":"5.41.0"},{"fixed":"5.42.2"},{"introduced":"5.43.0"},{"fixed":"5.43.9"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v5.42.2-RC1","v5.40.4-RC1","v5.42.1","v5.42.1-RC1","v5.43.8","v5.42.0","v5.43.6","v5.43.2","v5.40.3","v5.40.3-RC1","v5.43.1","v5.43.0","v5.42.0-RC3","v5.42.0-RC2","v5.42.0-RC1","v5.41.13","v5.41.12","v5.41.11","v5.40.2","v5.40.2-RC1","v5.41.10","v5.41.9","v5.41.8","v5.40.1","v5.40.1-RC1","v5.41.7","v5.41.5","v5.41.4","v5.41.3","v5.40.0","v5.41.2","v5.41.1","v5.41.0","v5.40.0-RC2","v5.40.0-RC1","v5.39.8","v5.39.7","v5.39.5","v5.39.4","v5.38.0","v5.39.3","v5.39.1","v5.39.0","v5.38.0-RC2","v5.38.0-RC1","v5.37.11","v5.37.10","v5.37.9","v5.37.7","v5.37.6","v5.37.5","v5.37.4","v5.37.3","v5.37.2","v5.37.1","v5.36.0","v5.37.0","v5.36.0-RC3","v5.35.11","v5.35.10","v5.34.0","v5.35.9","v5.35.8","v5.35.6","v5.35.5","v5.35.3","v5.35.0","v5.34.0-RC2","v5.34.0-RC1","v5.33.9","v5.33.8","v5.33.7","v5.32.0","v5.33.4","v5.33.3","v5.33.2","v5.33.1","v5.33.0","v5.32.0-RC1","v5.31.11","v5.31.7","v5.31.5","v5.30.0","v5.31.4","v5.31.3","v5.31.2","v5.31.1","v5.31.0","v5.30.0-RC2","v5.30.0-RC1","v5.29.10","v5.29.9","v5.29.8","v5.29.7","v5.29.6","v5.29.5","v5.28.0","v5.29.1","v5.29.0","v5.28.0-RC4","v5.28.0-RC3","v5.28.0-RC2","v5.28.0-RC1","v5.27.11","v5.27.10","v5.27.8","v5.27.7","v5.27.6","v5.27.5","v5.27.3","v5.26.0","v5.27.0","v5.26.0-RC2","v5.25.11","v5.25.9","v5.25.7","v5.25.5","v5.25.4","v5.25.3","v5.24.0","v5.25.2","v5.25.0","v5.24.0-RC5","v5.24.0-RC4","v5.24.0-RC3","v5.24.0-RC2","v5.24.0-RC1","v5.23.7","v5.23.6","v5.23.4","v5.23.3","if-0.0605","v5.23.2","v5.23.1","v5.23.0","v5.22.0","v5.22.0-RC2","v5.22.0-RC1","v5.21.11","if-0.0604","v5.21.10","v5.21.9","v5.21.8","v5.21.6","v5.21.5","v5.21.4","v5.21.1","v5.21.0","v5.20.0","v5.20.0-RC1","v5.19.11","v5.19.7","v5.19.5","v5.19.3","v5.19.2","if-0.0603","v5.19.1","v5.18.0","v5.19.0","v5.18.0-RC4","v5.18.0-RC3","v5.18.0-RC2","v5.18.0-RC1","v5.17.9","v5.17.8","v5.17.7.0","v5.17.7","v5.17.6","v5.17.4","v5.17.2","v5.17.0","v5.16.0","v5.16.0-RC2","v5.16.0-RC1","v5.15.9","v5.15.5","v5.15.4","v5.15.3","v5.15.2","v5.15.1","v5.15.0","v5.14.0","v5.14.0-RC3","v5.14.0-RC2","v5.14.0-RC1","v5.13.11","v5.13.10","v5.13.9","v5.13.8","v5.13.7","v5.13.6","v5.13.5","v5.13.4","v5.13.3","v5.13.2","v5.13.1","v5.12.0","v5.13.0","v5.12.0-RC5","v5.12.0-RC4","v5.12.0-RC3","v5.12.0-RC2","v5.12.0-RC1","v5.12.0-RC0","v5.11.5","v5.11.4","v5.11.3","v5.11.1","v5.11.0","GitLive-blead","v5.10.0","perl-5.9.5","perl-5.9.4"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-4176.json","vanir_signatures_modified":"2026-08-12T16:24:16Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["140076753576110389438539051614219707868","269137124372136237183109664889163670355","285484292283085348387463665234383112952","187559213333877030667677587223924865725","136271747945613249141451218435845723920"],"threshold":0.9},"id":"CVE-2026-4176-012974d9","signature_type":"Line","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.h"}},{"deprecated":false,"digest":{"line_hashes":["170612760818485712964077647214376874550","17941961148168960244695968284382036832","99064718348506313055175776038917958393","271543508755254389110657975564778586110","245129052376975900653031031904934087305","9652221924159371798487867489481127453","92784619479326004191493687144648522620","88257704022319447128266725691406033882","128726322162508335927270413130543898676","208871123357345788932897848150195873356","175379280692759481407722493309017259555","274453899463134665376311300007988753447","176085356546633248200676207960419565104","82508980444264291427646964078923369217","58650382301282188374190441418183196455","74470179601504361880387057719250559610","20961918041083431597420511780259150112","280446394389383835757331192464395512876","36181053721456637536201498135282717853","106737421194279577699497083197329570433","339332745525546907531651426939354642296","311697302863618304137642325598384675936","130647703401074593823159175061434912476","17965479348030500930551269734925185271","233370375197134931092662725964586535520","297105815630449015035255907257492063776","94602257961425612323097043629896669925","26065167707343731464001294592260509060","174343852811419226056136436847950208177","36585547158536326867407535131626768112","180814215444289224621101934341270343744","200085831670049678207587114765137517429","162933638677372771395188258968567521865","281628845415463523078825511343593900299","144585550765842609110462002108391044105","266429979023308164505716713221612166729","128003758512933500750158003817020354495","60265311441786749545427956173950386405","220131857660815158423149930481079036650","279774111871593809873290603469878310145","95473620145740068113416096633334437043","265620996700831866884644676258092811337","170704125883207482051530195869962134589","9500123352894238422045837766292287319","131883041559442969688467541977647287676","226911353509632215282347365370572557660","7231758789599680284957110729804665766","156418831465914996172836236219826409616","151412401826360787551824798171001545035","101969956567808397414335528691140947296","247303565504393986681194863029322313538","138746310829750199646109442335331965798","269078711857043247705534221172438254238","168171687129183310933585219024140302882","128062329420351969638023502346743794533","44749305278152795916462025231754472763","238356516222624204475160165377079979935","223778510278496612669099844370428882871","8305294324831953132367082771992094618","255514495259678102935986383101805900258","211542892891054453635479535201403320589","167045158608299014379206321983452633415","10117746216390860388088095912979492395","4577950454657996561832429450797805194","283101605286215998790101021646734767532","209016580857963921161781067135618514935","189673606950884180588597261842118726461","296237535671450715082393207731866652810","283101605286215998790101021646734767532","204596645233195194983986504371636778293","139268408564348353090980583481995664629","233475011666209193566488119929932890333","206514262625866305373827111016350891999","97596242084737266948228178887806123096","144257729822161202486338785645104827765","98697394301574890197704566884933174387","164501586750117050279332356474271816519","62623139354832119848509562043880117314","99765580820595926412571890022653321164","137694507137217992450142482112152607164","115603897778106639077207274451264153927","328856416754422177454620934427204265287","327347646198124152269148480275251021391","143761201391636211503071870355397102342","96669507917699195174894999645398815198","241356243368434089856226237562196898837","202655747950797781256975825225731042873","162968060053933819020956656359021377605","144280262956458821722062109981699087789","311951479454501846850879335648547154727","182558171631284517217318123760215447085","144384972816185485545503229734449047533","60472312192982333033842935836847056645"],"threshold":0.9},"id":"CVE-2026-4176-0577f44e","signature_type":"Line","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/infback.c"}},{"source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/trees.c","function":"send_all_trees"},"deprecated":false,"digest":{"function_hash":"81619696683681681576163930332440542785","length":942},"id":"CVE-2026-4176-13d0b665","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":4213,"function_hash":"294607048335362055969496245363491704373"},"id":"CVE-2026-4176-1737d07f","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c","function":"deflate_stored"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/crc32.c","function":"crc32_combine_gen64"},"deprecated":false,"digest":{"length":163,"function_hash":"120092056087683248331444624181695769566"},"id":"CVE-2026-4176-17e2cdea"},{"deprecated":false,"digest":{"function_hash":"223998326223289758667456434247993079643","length":8341},"id":"CVE-2026-4176-19bbb1c4","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/infback.c","function":"inflateBack"}},{"source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c","function":"fill_window"},"deprecated":false,"digest":{"length":2564,"function_hash":"195215112765103483380365551722634834648"},"id":"CVE-2026-4176-1c4efa45","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":127,"function_hash":"103981008212906256741034535498169456042"},"id":"CVE-2026-4176-204bb8fa","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"function":"zmemzero","file":"cpan/Compress-Raw-Zlib/zlib-src/zutil.c"}},{"target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/inflate.c","function":"makefixed"},"deprecated":false,"digest":{"function_hash":"201281200642858188333849785139487467148","length":1273},"id":"CVE-2026-4176-222822d2","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"},{"target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/zutil.c"},"deprecated":false,"digest":{"line_hashes":["339185983268431722095599021589186986765","210326305046525275160363415998681251570","307916145972125913231640147586366616437","239384189372734090267628692697758150438","34755561624302814611437821558987561896","58261350985228564290348751953175292202","157531001097002200270079056953789089876","306925406053997835819201671711998779585","333894592831938651730182706304432937805","209724737411213609628920624483052120632","305318670437460930522668055265032973206","228364762780666861853005656047485084213","313312574052462669727001378304986794988","197027604390077352926016444959066066424","56552361997722334487658545213671034777","74894002584379291760851010467164375731","119486236668829527521256213171577654891","66262503697097342181685557625526874434","72739230543112136428141169052794350865","26446133741681622914455945598401181816","29048989308228035400780252672312273172","279457334486923318200478171817470010209","35609241008022058679572530671581246892","236619956435238620234035032660960388959","283215743439145653645524355180528584354","79873731072149640103768690283910186692","281625653278362972595275069485921014464","176631942235583883872321907853502957871","224698703046813345465421950879152992919","113506036114177928968978818908231964685","281255684268977982761146669105178565413","98737321162812758109334130971052650988","88843008529982665085488876755095612951","39653721802168665616842620698352814948","3167792802012091225827925500230775216","69069679264919397648711394538981364000","283786897655904097418343777680614138854","33623417425102790236700908812359647061","13428542236349816262300047623576631952","245704647346440906192063921271028180480","328704752503428398536703341333714202097","270569934990187381679913433241267357472","198019214169737890981005464022627663342","262891625255292914993009867090593744973","295927018047835604127987992980846514872","68498498652534142820796125222414445721","243473896403669899896128559661392720096","21302596892802771029397863534326851662"],"threshold":0.9},"id":"CVE-2026-4176-302ee38b","signature_type":"Line","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"},{"target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/trees.c","function":"scan_tree"},"deprecated":false,"digest":{"function_hash":"77611589791130500919428237567516098899","length":861},"id":"CVE-2026-4176-3373c904","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"},{"id":"CVE-2026-4176-33b9f1c6","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/infback.c","function":"fixedtables"},"deprecated":false,"digest":{"length":870,"function_hash":"164462649614846813851314851299486500163"}},{"id":"CVE-2026-4176-3f47f117","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"function":"longest_match","file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c"},"deprecated":false,"digest":{"function_hash":"22684906566431994396163117357756111676","length":1167}},{"digest":{"line_hashes":["213700425310401725212208164716349295113","246565215060652522069442274015519539977","189657284925752118401213104564359172437","91008157435206800148908213409688158579","307606327909539557113207673067656571671","79092715138956062103595025780626843691","160413510501843227176140526292898050548","192787760081926088615771365143261383793","260927285884225095424717660026509870172","235644009924164598048381033715693199572","117758701490653104011906151190986024876","53372551951980246790058443126868050735","206030207200649354825893367027199698552","85932527434409794527816408947105071007","217297392206973885087910389332663885808","80192088799336869766090422299072603849","119498468780554241965107991570048328181","47758133455321868358882701405975773014","193410620059956348919070254739511729493","230612923348395071365026485525064727002","295378974609983581304343450587863375323","16060508847289611675604430421641882216","138298006242958669235058092461022655905","171676768929676402738044911890666644741","237396364433312972021088330758760421635","338884194342370804327067053502714427231"],"threshold":0.9},"id":"CVE-2026-4176-4183a4b4","signature_type":"Line","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/inftrees.c"},"deprecated":false},{"digest":{"function_hash":"197179523508697361502478868579512635595","length":1296},"id":"CVE-2026-4176-474bc2c8","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/trees.c","function":"compress_block"},"deprecated":false},{"id":"CVE-2026-4176-4b569229","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c","function":"deflate_slow"},"deprecated":false,"digest":{"function_hash":"190463537155517376745815175396701810013","length":2551}},{"signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/zutil.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["302208933834632037415803634314530264617","24328249801979818926803709036847132676","61810481154374426945068974065669437011","182182851389781197477395161987834351029","274744982178168868944927832661247868953","118019246084337723780352133086198212056","95718631143186157166643601310775684276","329243418891221575555582443418214502824","333068852974077846926251013850648049550","216528708402583239778872738159621894360","75211083824619593572271658715752513164","243408967460663993286089916737094142940","34344458698354964371488280553382214842","76749242398376047952786516134401287973","266052748560597346309379118145603826212","331217895378990667920208910539405134997","297623191847623943882933872492340786095","261343723409258318833941408001437253256","297419959069587080524626599109339706010","263796933514740101396831621488275568180","127736693131709253485465310938797349339","304566159897688485739735489888478156235","247279908812656155197434244633065395561","324371048576356845244827666066518128198","3721769359106081557168867846822887619","85801745012414401913588424756110073939","237452739239026983940683845104251258778","206434651203247653849134475478436889674","273481865931295457945921269259091426226","174922357914589365847754869813760397737"]},"id":"CVE-2026-4176-4b650006","signature_type":"Line"},{"source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/zlib.h"},"deprecated":false,"digest":{"line_hashes":["169072606656351450279649863850454019753","336754849088353694211771836271677151690","287944283187955799886938531976651373315","76987150884344439339836097235742252489","220998600924339875901830100275040268642","180259893642959473445350467908624190515","230465802159577572205814206244145818905","312141928242303176448451736284128473750","126817268756321699077457382641162556689","85832883267139024339239086810371534947","311354153635300319821729743495684886820","77033369255248706248022314378522071608","206903358175723628945313912279258982088","135304652417826221343972896800652845541","25601660922720544133999884169643257779","47813310573883925087457421889565897866","325125928614279373998796617441445345874","324041435239060316636058995969336726968","219884486449340725318138994724281578873","325526660452179014098999550012147986532","4438439512965649262541137461328283963","104856019411094286832935364704866764251","284020518420826744616614072127820925578","36707896748933556772341379244667889851","245074880298573509267983907072761153491","73941910792796036137076235526170190504","217664040981566897777631461354232697015","60272283684185561628825070768210806192","304543915317285094049543043797762851743","95570437799492742099440869957929126019","22108938506232545158045478545492501182","82410374543567851266118885688713645552","10701992810172838407602510180564572606","312819501274257654117421077058602204533","299168708707896794816275813482847855904","78561821743566618147030819131524319744","171599845875069457033731495963391730698","338234087092102680270927517996723987291","132111282718359833266970340554729406756","170029702343302214824530942424672439888","56984298537762266788894410852923581252","255572179248097415569272609992894016327","79239768032852177394524686837620929060","194825696047498469368993765997177472494","139218108829135067305957891693222753396","167113669322611639227408936662908703263","154624331531971762573986835870658077208","258971663323397780982104059007434168439","25088687047108200106306799466046415514","15402429456801494390359874649807356450","338244294973488049701891934967089546271","139818897603345598254111909527824431666","229964386010899041583289070089192769241","277711456069278254592098392979364725712","239836757778363561889738014187977972596","317061741705281250711084065320286738753","56500472901977947320360147050498898886","276985565698788638594719287701339757283","322234128356743526053824875367361407274","326291387943487014010212820798317275106","332779902008620978350358511698592611162","92243533860037951624289872301564476731","298507818547531809495047314324841947494","302680242489730482749020704055934897084","34857410078209092258596860068351687990","300472756574509786184851453242788525186","265022956146814313699255732149049506798","67260175676992309843169583610993993505","316638742947654473255659549663774259559","323830026478676574145918841521930599366","306108823287798862221948370341259797249","123268668082757150272818731557164304817","77789328018051138154603017984595606851"],"threshold":0.9},"id":"CVE-2026-4176-4b713273","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["170612760818485712964077647214376874550","218525572308176527295650222661652869722","114067259025790557392945647720849608536","63193483744886638503184268504120201664","60472312192982333033842935836847056645","160052884407483334196634322238209788747","213531884629863108555677756244119392255","161556396061932598740830172235783771272","57852214727734951465907728810150722069","62898704614969226993968089488699594428","335274373170301305770679882177779718200","206256777587404458410184792941246494037","129267655779534964132672943969066184850","144280262956458821722062109981699087789","216777956480103316859709917871391069292","246838291369121004113799066939139089637","174440101854936264124975796162220961403","96669507917699195174894999645398815198"],"threshold":0.9},"id":"CVE-2026-4176-4bc3e0ef","signature_type":"Line","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/inffast.c"}},{"deprecated":false,"digest":{"function_hash":"315399154365181022435305187293461351345","length":566},"id":"CVE-2026-4176-4eabf342","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/trees.c","function":"build_bl_tree"}},{"id":"CVE-2026-4176-50ef04da","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/compress.c","function":"compressBound"},"deprecated":false,"digest":{"function_hash":"141533379054586156162101950824774310420","length":108}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"function":"_tr_flush_block","file":"cpan/Compress-Raw-Zlib/zlib-src/trees.c"},"deprecated":false,"digest":{"function_hash":"180875335522170298378057023901412192138","length":2095},"id":"CVE-2026-4176-52e30135"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c","function":"check_match"},"deprecated":false,"digest":{"function_hash":"95079042340945104881803399813719489209","length":678},"id":"CVE-2026-4176-54a25139"},{"signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"function":"deflateCopy","file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c"},"deprecated":false,"digest":{"function_hash":"48493989440190120351061097936298798371","length":1919},"id":"CVE-2026-4176-557d04fb","signature_type":"Function"},{"id":"CVE-2026-4176-592fbdb2","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c","function":"deflate_rle"},"deprecated":false,"digest":{"function_hash":"124223347250548421251867728938998743957","length":1730}},{"deprecated":false,"digest":{"function_hash":"170544227078043471918733311543981292480","length":2062},"id":"CVE-2026-4176-593f20cf","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/crc32.c","function":"crc32_z"}},{"source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/inflate.c","function":"inflateInit2_"},"deprecated":false,"digest":{"function_hash":"188403684128820467630440504319496884586","length":965},"id":"CVE-2026-4176-5c58ed1b","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"319158220349953772473278655604184420082","length":1145},"id":"CVE-2026-4176-64235d61","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/inflate.c","function":"inflateCopy"},"deprecated":false},{"digest":{"function_hash":"336016618344589145693216215905370466734","length":1845},"id":"CVE-2026-4176-776e0192","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c","function":"deflate_fast"},"deprecated":false},{"digest":{"function_hash":"281580122477783467471956811639644837983","length":142},"id":"CVE-2026-4176-78793b9f","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/uncompr.c","function":"uncompress"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"function":"zmemcpy","file":"cpan/Compress-Raw-Zlib/zlib-src/zutil.c"},"deprecated":false,"digest":{"function_hash":"223603179588207090639643031306331859445","length":158},"id":"CVE-2026-4176-7a0c84d0","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/compress.c"},"deprecated":false,"digest":{"line_hashes":["69150160276529476097657605956339676675","234574062833317020068104883616121712833","147275930838451573796306092399706183782","84137863577806754193477394135142759324","263905463812341880034555468861808042891","83229608775351998650787240446732491361","124143600820190047142358793806702777686","168886752225237675106872824426391467497","315149360358926704834569839439046063645","257601960315537838881012717401190325337","232883358418206486588808955155058338622","234596038438074782092921826757390925800","158246257859022197429554539485095651919","14565425141015041219924668612086638292","193614369132822546980958615424351639120","61011744603094887422867268239028731037","163180070122298521383869587997266478065","242665202324672286354583132093454999409","268156838968557233690922773930879103152","303576984462809651883500311557369994628","20660970831756075537796351426885353968","323950547091484607374946494985741159646","74642415211479497565857014265542481840","157456583408050154848701084020037688202","93734010291920462809475604820294435702","133358611605281963339197139597920079652","180201445095074288383492534603444337593"],"threshold":0.9},"id":"CVE-2026-4176-7d88336c"},{"deprecated":false,"digest":{"function_hash":"159272239480770210654349119535643329100","length":260},"id":"CVE-2026-4176-800b8719","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c","function":"deflatePending"}},{"signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/inflate.c","function":"inflate"},"deprecated":false,"digest":{"function_hash":"161607644005672115512480936233943228853","length":16374},"id":"CVE-2026-4176-80cfe511","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"323149471949196617447417172705243765411","length":3307},"id":"CVE-2026-4176-81a0a9cb","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/crc32.c","function":"make_crc_table"}},{"target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/crc32.c"},"deprecated":false,"digest":{"line_hashes":["36116989187281874142127332931997733514","39343015523382814804223365980507721938","113353538045319521448779986510158840459","296302085309950735075549993661432001578","164958166354216321709772143133508396524","91785189546606917481068075737315287882","306746027344103764152429578347328678485","86738389018842354035951039332461021226","40431747827654580647239372128427775140","176374807543816481886889147325778731192","36473653027166173239641585919476831189","81270622107271729969749840082986844124","28316233306516893481227409197388616623","280057627678991017573945250621121809167","153974481884609056136720298422757079204","149594037155432927740309913013941282889","76021078637972884561817683417259339464","196058876129348628996328367184704576601","161661477491810971546382223476089206220","272144563395071205314097728688358761508","172708406439767792657801087845217965099","46938237572924408679356702065553851963","166473963411932276658523954256420748632","323021696992376526662181462303072470466","155619270903664179726977404762496316131","240803048472533513834878134051519549090","74506163283779555222774694007361550710","255766213640233307108682432595690141940","233761752961593249318786080302410361326","258846745742784179139768108063280980792","246885838578185751183847437532291449485","13931938922438122560956261133006952776","7681194739107132574330508502455300380","235057378932052535490772024923028906693","104970275152061917235752677046117274833","73724616289752040290622209217425958543","267005099698750481329081712041021462299","253077140919525024292325422557290405165","90768737946311540666678197412352339268","99579970430238540271258649030283415945","37649507566557876658425807714723014036","99511965309556072276941557752277809834","322758527346183231409158886286756386375","245307708937192300079505572746820370064","90279174772609006224983253058472222276","256217579391129336017335013520698386974","243641056669479405635660142008173996639","218091003723073200506977452790158322746","226062927401670685619621385545792442928","305482670982880232256442395077604234083","4296343838670800038539466066386603064","29158822771507735127908351077121750910","198388557300282731963946983496253394252","34043970582141125770330392728394946609","64868064577723638675754906117496361332","158755815446731074466854945176956998032","311620903009473263385495253842011470837","182987784903442860323891298643378463955","205393397970729257118528379583505743833","83590977457947955688974550829748233345","267715175311215319983684575399969702502","294531802294941967111739057090365250579","99442780061175949419531153032113464285","237740315545199920315785068242455788971","305407463024304548130196606906410878762","121122584076672244623645686932924090961","116755307847686558857146137832832883666","3526990766508774880150434105054101014","308856358757013706482377792467262890923","322720559819467719110327198225059065657","36753736116906788344531796893083214025","169709646816124300351122505858713382499","203069812239216544828826900547800814513","57256846768992450822963257392021465194","304362890812656674046806779092966801896","152203090040619190527345483161114050733","74075351542401041106443808650016447166","140648786024917813728401315840557291688","270029245941874426815544678970510363749","133888737989323431912255305844895882963","307414495844499317705778933386430586239","146726282667648565622072360862439078391","142972216564275012619977639271865404022","169952780244497614186023141373191048845","300557601520562941591661934040314867532","86666844920558427403530961894627690716","309224003464106895613721038782386090152","183747591339918032176012021410559287391","193248961851098168769413647224146946905","229915270463996505160968177745500610801","46147274821283317564843511789917614814","94329458436922446552623433141248669137","112006990347273863451969828880706030680","247861360592894831276634207477390164761","246879176539483505833505686260255778130","324118509517754775615788442343108232079","298939245241615775586986497749513120663","123025352656338420145048604361225488628","188966096282918718453275307598913016188","319070203775578274413103145687731007127","88356083131035504008333307584579565485","50529971440594321366144300829919295216","194752757602485849459924574691091358636","180598779395017234925062381875913695213","112006990347273863451969828880706030680","247861360592894831276634207477390164761","64187799718850297347739885278314293192","185453018272747350666008382718110719626","199695210579481290965891123408498965755","228070436118836064549347437568907926410","208331752131871256457964147908415347025","49008712594390695499268474908067834031","50446094443549435870317367113854183988","143580329181101200675463479162219167688","130366630459189612756396150443758886291","298273563279412574288963403558884745678","81781160511614717975894692895003664484","154795846936464023261071725484781064910","258729609363176859305215250342349127627","17645234415621246986160540511545024817","67093576938890039908984569827506704195","199330548512395620732404501138617190885","309021157878095210594301644224162773891","77115958754762894625023976462658819391","145383247736002767702749785199643269550","337399111047967762717815786004521485101","76152046488188567107372268822345635512","73933562986405760950043544613207736145","23513879913249661587577885571100544212","273656306919926997231882189558333839114","173335644347034141725734089473843919624","178107203693962672882596850914975158885"],"threshold":0.9},"id":"CVE-2026-4176-83df9a2c","signature_type":"Line","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["170612760818485712964077647214376874550","633426093378634094836722047138106147","163169974919765710130360989339687601749","13695980216545800348458733450777439089","293708767052926866154003122577339075346","128771051239830398173164216793524092524","272117397262725453643422854166032526313","61741883828097334209637344268692952540","41498838420814400627940059642274085555","237334975729443826735052505212745477525","92644338775065824273689605880161656712","184957345427872786167784477167033461472","224278791206476550275634296849687552625","331348104438448206498039969260036856274","288618164040975714618919853718617354006","280157020919096461333600572156725720184","286364559199660794837337966467926502518","27155925207762393783528660087058864167","302958876647444747535061777254536718801","154873946332106318265469352123745455711","235628460625506798641574258502147854676","189768547912621160651965188280081858215","92784619479326004191493687144648522620","88257704022319447128266725691406033882","128726322162508335927270413130543898676","208871123357345788932897848150195873356","175379280692759481407722493309017259555","274453899463134665376311300007988753447","176085356546633248200676207960419565104","82508980444264291427646964078923369217","58650382301282188374190441418183196455","74470179601504361880387057719250559610","20961918041083431597420511780259150112","280446394389383835757331192464395512876","36181053721456637536201498135282717853","106737421194279577699497083197329570433","339332745525546907531651426939354642296","311697302863618304137642325598384675936","130647703401074593823159175061434912476","17965479348030500930551269734925185271","233370375197134931092662725964586535520","297105815630449015035255907257492063776","94602257961425612323097043629896669925","26065167707343731464001294592260509060","174343852811419226056136436847950208177","36585547158536326867407535131626768112","180814215444289224621101934341270343744","200085831670049678207587114765137517429","162933638677372771395188258968567521865","281628845415463523078825511343593900299","144585550765842609110462002108391044105","266429979023308164505716713221612166729","128003758512933500750158003817020354495","241202078627519415269949918943011716755","43954855328718522530631607379092351181","63992288707673051304801122675848520582","307457311186421011923465063659592715806","50360149307019844361569712203095912379","211237497112447003994641690928897843019","296513043155084919367957647010466271146","265337580810781363337333666742123004697","160581336068340250470156362729379190805","101853816883619439606034056977586527143","71111160822060488888093849907092476862","124559779652074422276450303148875060188","4774510225616627369824578158285098476","12850618912301492095870445224641013015","19257743186676710954968598900026841911","204745255622061811074202942555716134296","66390461737893333474633069607228398306","151596184942714060826113031047913366978","257211053634134050496120608547815540117","231055812626729370971782265555906696825","255566228115968116041188190658480170863","270242246448213952758239467214257599860","183266565007148733174680883890252310203","7574971309440308346501349082905060797","50661686696106072678331333817437860394","8493840539157678087422951020265610989","5227903898850392801751358331032566496","194993414524685733413712844804172758465","155952991314062059633252666326877894642","92899896694891303294522252666912934743","4439964814421982300131287972940997478","247456610061472260189656110449331260011","163918286803296011007217203923963932836","215996358059636271653618961141694247466","73271264520012891451291038271115917072","276853778971722350202249316581886391691","310011247562437343906268874461844019630","5227903898850392801751358331032566496","248041152084374040770150972487994142800","704034875107604356037736710096150870","318105806897896309554566105075509271606","84485212889704424740494111436065015360","16809285848762163503861816865398510953","23648317657186612040966330957543850774","318803768397090754360420694296452879841","321069480456857645028700448263792139341","141211736310554683710939944550367786333","18344563294502331677390515161830553947","296563702342379712826842461649554194764","212407815975447500533756888302226828533","183313976972378171319881392220451415144","287741310977465494757282684051158862530","47164006826572059381457893828732265348","118353443470780007848268834940017664799","289869803574011618359340355798984609093","230028972103850426171586034546816768097","311929400733779421345914078768577975193","213184226244752287268341071518921505717","129200252906536872812850756380629963740","287741310977465494757282684051158862530","189148337510845699458784612481579091129","23746024063633426192432360515233619649","249376802886142609287868132752780596554","57706974719886430266549881215956985293","310709583011022550621310796252262425048","113525238411921671206232809945815769641","226263817806388304156635157940984318092","108351773404838563800028893614826855845","215746851124651015280465871955595849454","95473620145740068113416096633334437043","265620996700831866884644676258092811337","170704125883207482051530195869962134589","92655460844975470796651540837514140623","131883041559442969688467541977647287676","226911353509632215282347365370572557660","7231758789599680284957110729804665766","156418831465914996172836236219826409616","151412401826360787551824798171001545035","101969956567808397414335528691140947296","247303565504393986681194863029322313538","138746310829750199646109442335331965798","269078711857043247705534221172438254238","168171687129183310933585219024140302882","128062329420351969638023502346743794533","44749305278152795916462025231754472763","238356516222624204475160165377079979935","41810173304869156634487308166849958984","152399454804484760743921504561273606079","173192982288407010678142629430374764150","160904911392341157172694119810888762538","230827656306122477150824908692729139427","223778510278496612669099844370428882871","8305294324831953132367082771992094618","255514495259678102935986383101805900258","211542892891054453635479535201403320589","167045158608299014379206321983452633415","10117746216390860388088095912979492395","4577950454657996561832429450797805194","283101605286215998790101021646734767532","209016580857963921161781067135618514935","189673606950884180588597261842118726461","296237535671450715082393207731866652810","283101605286215998790101021646734767532","204596645233195194983986504371636778293","139268408564348353090980583481995664629","233475011666209193566488119929932890333","206514262625866305373827111016350891999","97596242084737266948228178887806123096","144257729822161202486338785645104827765","98697394301574890197704566884933174387","164501586750117050279332356474271816519","62623139354832119848509562043880117314","99765580820595926412571890022653321164","137694507137217992450142482112152607164","115603897778106639077207274451264153927","328856416754422177454620934427204265287","327347646198124152269148480275251021391","143761201391636211503071870355397102342","96669507917699195174894999645398815198","143044873200363157877263495995774045889","31813616120264674207960606390331286602","162968060053933819020956656359021377605","144280262956458821722062109981699087789","81305815893023273613882115117086925979","53114130023611027615364684946539693012","22835130949719689316152380831314404371","60472312192982333033842935836847056645","129724871845124758428461268271551077640","116731511039524659116869577335138863627","185754638960791225437586975915122581854","60472312192982333033842935836847056645","296619491275718417613078922940787071415","334843199958689061276652256475621344503","261802558693417953309373135677091940853","250963561131033713431477263771094045554","51283744831029566561852706163242522072","30530751884171893119378609263051328318","25662355361132590789197934399860280181","178979398459796328550611980339372163406","300583919867821886286356930106064196628","178966112670979305675425767862785158175","198259521751381676014300552944515743010","163110972960345754752825119707812587846","255021313459583137065658339798580232592","21661061468304899064068703154375659734","339691479213622348312985870216965376416","100894792436535502219815054496090549295","29073118821948874097313177197237576232","275337081656040504973648837849282391198","214628371618208194312717139722733221961","257083246833529132080746117386532167981","280504810896268445364761221497587921052","164060334688702395575821600180263838665","52176796735232140868869737347983401897","302717190690820069701785463322140394645","185702423168760376902632524761073245209","293282987827576700864096048729232539253","159023384845509965872063093202714242976","281965342729461277049221804439161058970"]},"id":"CVE-2026-4176-88a809db","signature_type":"Line","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/inflate.c"}},{"signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/trees.c","function":"_tr_init"},"deprecated":false,"digest":{"function_hash":"191480235146679488554179089166587246400","length":497},"id":"CVE-2026-4176-986e4d5e","signature_type":"Function"},{"id":"CVE-2026-4176-9dd3ab20","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/trees.c","function":"bi_reverse"},"deprecated":false,"digest":{"function_hash":"67326828305691415098225392604635253081","length":195}},{"source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/zutil.c","function":"zmemcmp"},"deprecated":false,"digest":{"function_hash":"60356379988273435649225457059706473458","length":233},"id":"CVE-2026-4176-a5daa8e2","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-4176-acafd91d","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c","function":"slide_hash"},"deprecated":false,"digest":{"function_hash":"236191885411619805398907143039507935227","length":427}},{"source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/crc32.c","function":"crc32"},"deprecated":false,"digest":{"function_hash":"305658463845680785849291442824047227486","length":141},"id":"CVE-2026-4176-b6cc5ce8","signature_type":"Function","signature_version":"v1"},{"target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c","function":"flush_pending"},"deprecated":false,"digest":{"function_hash":"48976627638038787078715901790406477901","length":480},"id":"CVE-2026-4176-bb153fd6","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"},{"id":"CVE-2026-4176-bc1a8867","signature_type":"Line","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/uncompr.c"},"deprecated":false,"digest":{"line_hashes":["241837469301472542763915258406471568721","134817735816291641851137678807785474051","25026409505447119303581140769410921389","83372031040202194055914394149395240258","303828412859870743042029530314206898414","252799983807883410499985077880453020179","186757368847862368573841821549914451028","286316328969072824694201932555225658850","222466439563355312241539390395580465184","82257072538428880528925132988775451825","111065941266577336423251425023711134910","87849555992651359749136987843611373006","124906336679116762099864099608048892790","277648379474635381956497176822437490646","34639114596196649650319074244694596002","316419732065158638917109647413463006069","130877229314159752390472034562634458159","114957388276152450502100535765377756559","315149360358926704834569839439046063645","257601960315537838881012717401190325337","232883358418206486588808955155058338622","314999661407691280385797034466564236696","120555963232940076160873153725921220777","6130765265778703118663270462294458061","150271996029062207335289754099697269602","54125973473898168420671164345087477194","126403439721981770355986227599538488786","113942161021615773604497255855470251514","274495655297514767384147904241022914295","119166716290409129560948208808808778461","188600425266561693225037863448365775645","337674049164494477685012270255063143671","304263354082098051084507882948426631151","80623977321553061249173188572625858240","142509471160123869718531781699064875670","278371209251067013702104795873489247296","298156088777481595065764014121461967048","161311147671742539597528080945447162400","37480116656702179704991372058024520254","60818760313095375498017936285189252817","229152479445149611961400091738602988928"],"threshold":0.9}},{"target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/crc32.c","function":"crc32_z"},"deprecated":false,"digest":{"function_hash":"265738459044018912180179569959007404210","length":5393},"id":"CVE-2026-4176-c55683bc","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/zconf.h"},"deprecated":false,"digest":{"line_hashes":["203152410604188852694180906745730742377","277151108111658338843853542818203936815","70376948530822439438351543673508962463","303952124892175918778509883049744286463","325747628178858538656522962382361189468","103372097864308103332377742002500295541","84373097498537147875060817372010620036","268796463873452614264351137285420597608","62122034712481833773867694497089405446","132285679373930146799538052341396706052","181998336486793470187888012883054097463","275664582252166839998432503006047674814","275570053473130682435741891393618592413","172215054380905016344818756754062115333","225337605740106584294121658917926703116","223774264628192142178905537017729423551","258944239439282810933742398188082492548","25142834801928577562843504157824152623","50809291553427036327622396656185193237","273578402494212150221647492136025501716","332665164570261679080401677337719093957","246564627642535681624585320368060047371","136957538336311925719954808887448267168","152360368935668097151343477563388423090","26059014506389164022040941474427848669","269371208820199830254338884568725418594","117724105368321820530862981943456531811","207180390964845430726222857446715371235","81333969320777503425704666937603064925","36141565190550329930701586468118899389","58256837991058719723925847523867646410","243795195417202410529835402712332774246","29925367542511958322036414017919694992","126822579366502609829498175190729266441","39638056178915114384049038623521449450","136132033818080650722576738298888718293","126120812795437273050060640698408805252","303061946889259918999642399262338224006","255780155475999757517907180515139216086","193527887845863632506318029894278162151","51519671484614333465934837077662330519","194992854574184947597600043522723682901","245081016473207132106315659997174923767","153258848535293510631333988747319169367","194957613739316944143254101253961769145","120461154385427770930681948835779207700","188267074091720956991715094821768068019","320539412497412448922273628627914256831","132082928130584748736671676702635358611","226754692808606469710129423017388797234","96873110459992430013143579068420988023","158363740100101847009103208391586462848","308217503129637102757432863151656375912","335289802367258829830932283984782145357","249932553153662574336275137029235792730","129311005996084933833219438502425713675","243373253682856687000771272931296967202","95395227158468648722312498068073614672","308610145664702301122372153047443106501","126009291751927417253404389197030777104","30355693325149727496235042471530880985","282398359122798127604764427806432635936","215829997588630732235541046071746131810","7493861736710417398807057432682300062","132620575306973666316008123968114394324","101470378951586159486903806597566392281","78296554643589890257290729446236091597","100684949877231140664289942204963306754","93646453402321344597729199662164487833","180884183124293602866621136292405721356","162416878990040868912303080861809517354","17830885608178036905546134980058666079","48348846367810908712031803948990772040"],"threshold":0.9},"id":"CVE-2026-4176-c751b6c2"},{"deprecated":false,"digest":{"function_hash":"63212895975344634741158900155097043916","length":2861},"id":"CVE-2026-4176-ceaed00b","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c","function":"deflateInit2_"}},{"target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c","function":"deflateBound"},"deprecated":false,"digest":{"function_hash":"36233639346710586832010920892825074848","length":1062},"id":"CVE-2026-4176-d117a02e","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"},{"digest":{"length":1139,"function_hash":"153728774451835221804016151976485066293"},"id":"CVE-2026-4176-d518e679","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/uncompr.c","function":"uncompress2"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/crc32.c","function":"crc32_combine_op"},"deprecated":false,"digest":{"function_hash":"185936681063670693334917282281293036207","length":123},"id":"CVE-2026-4176-e04265c0"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/compress.c","function":"compress2"},"deprecated":false,"digest":{"function_hash":"177037841656749270405308767548107164490","length":881},"id":"CVE-2026-4176-e05f37a6"},{"target":{"function":"fixedtables","file":"cpan/Compress-Raw-Zlib/zlib-src/inflate.c"},"deprecated":false,"digest":{"function_hash":"164462649614846813851314851299486500163","length":870},"id":"CVE-2026-4176-e06c1c52","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"},{"digest":{"line_hashes":["263096654003373730846645234364649373027","324723265959457407058459411557616470778","105810472024537241285286647960194531007","329783402089225310327937702708305783839","84317395198839581689711485491227967418","19145853291250464342288009718617840993","159106422517486826805995751644950892551","325359513071713263170281048308397763037","126052436768884985507424461223262689551","128974283067997595213739321870560252862","280134474965635777911216186323440849742","251272357648374470780021666309675326675","13248917269842302460388264573515848822","239323286729584605348499358254181475487","235659609511181915075732880785682612049","105216500158541193462995442935644048104","75323908848034406075755513660426520500","231766357316078506302042870552596429414","57634542124908065499415937456808645337","236471655578907714461829656599019209583","149606702332194347658019416927286590077","86474682489903962378024363889086981580","154806646850457574634635340921410600656","279453611251830617262416342605982491891","258357146995531443385113779132264946675","19499346749404045961835813207875538075","24220966381604147536821152396272090257","187335008768006486391797114844864013836","88030629096901251276124937001316857975","52464782007398231898985147925952024895","287931555207168196916742354530823797697","35614374310188812371639547783250885879","102177443480635680514081525512727992685","306226578639818592222916060736638544234","114987289787186496387439651287258994231","92465549932220362813854723072438397283","197493448417612843451265525563041831529","287295461135732989679289420182515156647","271569527951189918288408228437192800154","320930652127266439651836633260497757064","268318547550602588580118890138155209947","284564502871975515736030949627275462906","62089364856351288844984298551515137633","87593208047544189429286848163727990171","83702159026517923375218312786646251580","261097415609184623404400550619472612498","327588952125506722163523147198436471942","257319636525057800675075519479249940887","56040907279102170991647712693960280856","56820415211212881754718779206385796041","327435740845051088425177272890970505978","326241163720433429549172905625028790399"],"threshold":0.9},"id":"CVE-2026-4176-e1da4122","signature_type":"Line","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/trees.c"},"deprecated":false},{"target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/inflate.c","function":"inflateResetKeep"},"deprecated":false,"digest":{"function_hash":"208658749416702781698387712890426692587","length":596},"id":"CVE-2026-4176-e3e2bae0","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"},{"deprecated":false,"digest":{"line_hashes":["328904915554745511686604753100509826225","265466262761665550765011619268037004967","38448370925842073212698676278597699021","98380160223396982742228544605235458530","144693302407988354100690728525839992698","287296051166701710523758261066054021758","271296458579086141026169630167091654851","321030352481027475715103909459544286689","241697190484312303399096363674425842852","201638761384297722304211769733083826142","330845223210801027987375932314880424334","132129774347660869790438418217634484217","119751574794311628026196211236694346541","311550885966860536968518283852386999466","274831279798874140348576163356471119616","201020944314187112285568096512646007066","105301447688578815426122084028115202933","295651320564138805999433792166260526931","232563014609229029782203897755513297711","24001163183465981706129772005822067722","150537763954857024345725701058592481289","247684553492815639821536536016621536918","308273716648471194443750384231431604849","103186526972609446650153065561141598257","39121409524369133908476237926015170209","80386493618870233528040353702441359901","229508377727251966231392849443379309784","78609457126036913032446043644844906788","156973530770880001168370950026430573072","221564678443923334178196548975314374069","157196645209220048613706878337378780167","319665966129402304708614612732813510902","41278122114948128678149809267783681607","57725806851734491146329840857253909289","133706435085136202941007584271891427431","134396550170390400447873675135600659057","60560421250349986967695968904302020225","52713335010535573671625473320432989600","208345793527277611265612670780805454339","257501751319558681308020578506770249727","118257906611789903898874225833972836016","96282478523038418671640699142895235092","21343906261319974593625170341620836251","52018313031180896186527672950281014906","324946810026739055210983312845720025175","208349836951051606988579350423026016599","243532825065032752521492055134157101994","155080511722795886887663208167577862245","180622549805037307302106385107814785243","112345269019778187895294987048656622873","93756245835077901806534183244652801095","21451304085798919819842441579933128654","337192273669379625524601443346132030005","19950152726251169099032837880461363926","54637554626402943794743049019165049450","109138833668490362068333113580066264393","56229213391256031209870665524380702373","307426315997812748554787365930597820255","243076962619899777139641870288009935308","50655871529296453950285342707439473682","253867148884593745282683705165402254216","132830896906060363445743815568481315924","2530738635599842282258557201413755369","286123269208625919673976761457361460814","335484056619307427302507212837475602347","93304915727460497408647403114103547978","308515158257421288844089491024474725682","68245233828716743452788638535014536148","202705097892451094331542022413631209018","181368117211447545612417772158478739835","122250783211367054825379853250341162541","82517814920109007540488104476810478371","172850052421862281755889760299343084072","237971914820315195290578998400280739538","39183677630920584461079137007559162180","297148970386893274314346039760493571317","51613732439171384987175112143127612209","183211849587485379531521460859158704669","166074294302450690729524213711662786482","148803545749315762963304842481649756977","294955699837534970656274978483184164348","187263698377715403091046152330744479514","232810402298887762464972728121979721976","325689123100231355295641876338436769191","192267364615552000512391424624748531332","191651133320670261327249376216353860619","117553507241654103480351221922342865389","295505225670995157877995584852919925865","132671650594234192065181754367724497577","251799607866453058063415422719800342229","114514895463668470292118550237244954958","262924102309840207893197966469054301576","214022654688885321434048397153846946021","226779448602445772981453777752643032514","32899253102350640859285790449386008560","207454790545795845167692020016367775963","171218183959054142778748509515538272601","38855594737640468520075842761667249905","162285701879084759280913833738113050509","288533563951493400835807760491205084412","128615062270919441544761348020027709434","56311818235249835282372514986170799418","216241115374089679550864009694511351195","93510321757176414009877211390218715754","5031578901504011560319855033183029501","96340697951715579051570437528722683281","283615859237372495194800807970402367412","332052615142012583582850869306562911157","336937862689909041748628123259078654254","158801604483740659281373631097343243823","170822379103005274636316103019530953060","58909041854224378033599475375061064869","300355141302562448999828826089534329642","308167003445256092852843946765524781872","229589816805118775510399824119969837696","22185861726743106241876536311886877560","180910508059996320476721007709092699302","294832392107486743835694591415199073081","216237554688345225825796118372594044683","312362181787926559737808777810750623562","275970268240323554432913844927735618641","128551338926839737883713103114043665080","12113539601083931063696030239481016010","146527332018166550663078066306103676760","148865132008023067972449510110132223379","39302672496035562534521704315696035314","24456443665790721193881963371591648673","116288115668563163727814322990235623012","65689365267228446305922913179228918085","184306646068505723130476814347256338826","124512321876366025904566716731634255070","315533814399507279334809961226325991428","279606973801360450778794862382515726063","59649795854619135448610153671858224956","243338399537462405841924642637354238430","114049637055839636616960200682410854039","298956492997695671933457848244973449536","309072881005225215782554172774273763636","257176979546771415326261199483925472565","215115725924797607514753330398922907956","229075716447905252241235009519613920146","291413182283433000700533258001418360308","7262230283408424651276977560598551975","90909351587969395976675343563754868587","98662966897988062078121946521818627726","59139126055257505565414984279210390210","189759578657810447263343040936983644921","167822735424875246012141082132664057816","266645783697810454219353120140217219591","191878300836887306109488082067992735370","100528150173703184977404882278696473306","217334550250231984674416245607954450879","232029875853982893119723700587856119487","23019655203942372206077420685984313207","72633741669457040659634291972987054513","18505897788916329084973749667649298540","216281079838018797686122974986425395714","183916520702862750821069322534157375559","107546730183270444783810859141141292143","185302533897391814586876275815580715723","308656725460556380734628821117923588717","162528598089896644468637715692580785760","122382021334048406069036498463539170816","238855958687725137373328410426052249157","203524595308397160281865645068224953500","15467184732366987317235183296957485153","132470890398684867450910228813055224675","42281116738984837580578538933776314332","62461015279825258681906475995569298839","166790795435926360115112739416166306087","184459425766178541978313103195846192746","226838130727376497817847948322626427160","312007237347881874418372801157609748737","238802731785697934845732777654920692101","148460136026225238355097280284211336691","175032105063177886210928484748593043220"],"threshold":0.9},"id":"CVE-2026-4176-e584dac4","signature_type":"Line","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c"}},{"deprecated":false,"digest":{"function_hash":"331906794938535107119846288035221063108","length":323},"id":"CVE-2026-4176-e5e858d2","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/trees.c","function":"bi_windup"}},{"target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/zutil.c","function":"zlibCompileFlags"},"deprecated":false,"digest":{"function_hash":"87313690762958250245627674116152029120","length":1407},"id":"CVE-2026-4176-f44053e6","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"},{"id":"CVE-2026-4176-f57e1824","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/deflate.c","function":"longest_match"},"deprecated":false,"digest":{"function_hash":"92608245901364299837006761348797467433","length":2920}},{"id":"CVE-2026-4176-f5eb1e25","signature_type":"Function","signature_version":"v1","source":"https://github.com/perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","target":{"file":"cpan/Compress-Raw-Zlib/zlib-src/crc32.c","function":"crc32_combine64"},"deprecated":false,"digest":{"function_hash":"292057352862855847888858759677087049017","length":237}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}