/ 
DBI-1.643_02
⭐ Starred 84 / DBI::Gofer::Serializer::DataDumper
Security Advisories (2)
CVE-2026-10879 (2026-06-05)

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders 10-99 require four characters, 100-999 require five characters, et cetera.

CVE-2026-9698 (2026-06-09)

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow.

NAME

DBI::Gofer::Serializer::DataDumper - Gofer serialization using DataDumper

SYNOPSIS

$serializer = DBI::Gofer::Serializer::DataDumper->new();

$string = $serializer->serialize( $data );

DESCRIPTION

Uses DataDumper to serialize. Deserialization is not supported. The output of this class is only meant for human consumption.

See also DBI::Gofer::Serializer::Base.