CVE-2026-3031

Summary

Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library.

Image::EPEG includes Epeg 0.9.0 that was last updated in 2004.

Epeg is a fast JPEG thumbnail library that was once part of the Englightenment Project.

Affected Software

VendorProductVersion RangeStatus
TOKUHIROMImage::EPEG0 <= 0.15affected

Weaknesses

  • CWE-1104: CWE-1104 Use of Unmaintained Third Party Components

Workarounds

Image::EPEG has been deprecated since version 0.14 and has been removed from CPAN. Migrate to a different solution.

References