Cyber ·
CVE-2026-87768: DateTime::Lite before 0.8.1 allows CPU exhaustion when adding seconds
CPAN Security Group advisory on DateTime::Lite for Perl: versions before 0.8.1 can exhaust CPU due to a daily loop when adding seconds. The advisory was published on October 30 on the oss-sec list.
Advisory CVE-2026-87768 describes a flaw in the DateTime-Lite distribution from the Perl ecosystem. According to the text, versions before 0.8.1 can exhaust CPU because of a daily loop triggered when adding seconds to date and time values. The advisory was published by the CPAN Security Group and relayed on the oss-sec list by Robert Rothenberg on October 30. The source lists the CVE identifier, the affected distribution, the range of vulnerable versions, and official package pages on MetaCPAN and a code repository, which should be consulted directly at the original source. The relevance lies in date and time libraries being common in integration, reporting and batch processing, where abnormal CPU use can degrade services. To check exposure in your environment, confirm whether any application depends on DateTime::Lite and which version is installed. This content is a security advisory, not a platform tutorial.