CVE-2026-77781

Name of the Vulnerable Software and Affected Versions Tie::Hash::Regex versions prior to 2.0.0

Description Certain methods in the Perl module throw an exception when processing malformed regular expressions. Specifically, the FETCH(), EXISTS(), and DELETE() methods attempt a regex match when a key is not already stored in the hash. This process involves compiling the key using a bare qr// without an eval guard. If an application uses externally supplied strings as lookup keys and a key contains an invalid regular expression pattern, such as an unmatched bracket, the application will terminate unexpectedly.

Recommendations Update to version 2.0.0 or later.