A notice published on September 28, 2026 reports that DBI for Perl versions earlier than 1.654 mishandle numeric values in FetchHashKeyName.
A security notice published on September 28, 2026 reports that DBI for Perl versions earlier than 1.654 mishandle numeric values in the FetchHashKeyName option. The record identifies the affected distribution as DBI and cites version 1.654 as a reference for checking the installed version. The supplied material does not describe further consequences or exploitation measures.
To confirm the scope and track fixes, consult the original notice on the oss-sec mailing list and check the CVE and DBI project records; compare their version information with the version used in your systems. If you use AI to analyze the notice or plan an update, provide only necessary excerpts and omit credentials, customer data, and sensitive internal details.