/ 
Module-ScanDeps-1.25
⭐ Starred 8
Security Advisories (1)
CVE-2024-10224 (2024-11-19)

Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by open()ing a "pesky pipe" (such as passing "commands|" as a filename) or by passing arbitrary strings to eval().

Changes for version 1.25 - 2018-08-18

  • Merge pull request #2 from shawnlaffan/master, thanx Shawn!
    • continue scanning one-liners when use if, autouse or >5.010 found
  • Fix how data obtained from compiling or executing a file is incorporated (_info2rv).
    • Sanitize all pathnames to use slash (instead of backslash):
    • members of @INC
    • keys and values of %INC
    • members of @dl_shared_objects This should make stripping @INC prefixes finally work.
  • Add %Preload rule for FFI::Platypus
  • Add bugtracker to META.yml

Documentation

scandeps.pl
Scan file prerequisites

Modules

Module::ScanDeps
Recursively scan Perl code for dependencies

Other files