{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-87768","assignerOrgId":"9b29abf9-4ab0-4765-b253-1875cd9b441e","state":"PUBLISHED","assignerShortName":"CPANSec","dateReserved":"2026-09-09T08:09:07.714Z","datePublished":"2026-10-30T12:25:21.054Z","dateUpdated":"2026-10-30T15:05:30.618Z"},"containers":{"cna":{"affected":[{"collectionURL":"https://cpan.org/modules","defaultStatus":"unaffected","modules":["DateTime::Lite"],"packageName":"DateTime-Lite","packageURL":"pkg:cpan/DateTime-Lite","programFiles":["DateTime-Lite.xs","lib/DateTime/Lite/PP.pm"],"programRoutines":[{"name":"DateTime::Lite::_normalize_leap_seconds"},{"name":"DateTime::Lite::add"}],"repo":"https://gitlab.com/deguest/DateTime-Lite","versions":[{"lessThan":"0.8.1","status":"affected","version":"0","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds.\n\n_normalize_leap_seconds crosses day boundaries one day at a time, so add(seconds => $n) on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS implementation and the pure-Perl fallback both have the loop.\n\nAn attacker who controls the number of seconds added can keep the process busy for as long as they choose."}],"problemTypes":[{"descriptions":[{"cweId":"CWE-407","description":"CWE-407 Inefficient Algorithmic Complexity","lang":"en","type":"CWE"}]}],"providerMetadata":{"orgId":"9b29abf9-4ab0-4765-b253-1875cd9b441e","shortName":"CPANSec","dateUpdated":"2026-10-30T12:25:21.054Z"},"references":[{"tags":["release-notes"],"url":"https://metacpan.org/release/JDEGUEST/DateTime-Lite-v0.8.1/changes"}],"solutions":[{"lang":"en","value":"Upgrade to DateTime-Lite v0.8.1 or later."}],"source":{"discovery":"UNKNOWN"},"title":"DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds","x_generator":{"engine":"cpansec-cna-tool 0.1"}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2026/10/30/10"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2026-10-30T15:05:30.618Z"}}]}}