CVE-2026-3031

CriticalCVSS 9.8/10Last modified Oct 24, 2026

Description

Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library.

Image::EPEG includes Epeg 0.9.0 that was last updated in 2004.

Epeg is a fast JPEG thumbnail library that was once part of the Englightenment Project.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1104

Affected software

No affected versions have been published.

Timeline

Published
Jul 16, 2026
Last modified
Oct 24, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-303109.8In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands. The descriCVE-2026-303119.8Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanCVE-2026-303129.8DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechaniCVE-2026-303139.8DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechaniCVE-2026-303149.8Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanCVE-2026-303327.5A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escalaCVE-2026-30346.4The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _ob_spacerat_link, _ob_bbad_linCVE-2026-303457.5A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitrary files outside theCVE-2026-303464.3An open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows attackers to redirect users to malicious sites via CVE-2026-30355.5GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that,CVE-2026-303507.5An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service (DoS) via CVE-2026-303517.5A path traversal vulnerability in the UI/static component of leonvanzyl autocoder commit 79d02a allows attackers to read arbitrary files via
CVE-2026-3031: Critical severity, CVSS 9.8 | Vulnix