{"metadata": {"vulnerability": "CVE-2026-110757", "count": 12, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CPANSec", "record": "CVE-2026-110757", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-14T17:07:22.647Z", "date_only": false, "value": "2026-10-14T17:07:22.647Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110757", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CPANSec", "record": "CVE-2026-110757", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-16T22:07:56.450Z", "date_only": false, "value": "2026-10-16T22:07:56.450Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110757", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T22:07:56.450Z", "date_only": false, "value": "2026-10-16T22:07:56.450Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110757", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T22:07:56.450Z", "date_only": false, "value": "2026-10-16T22:07:56.450Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CPANSec", "record": "CVE-2026-110757", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T22:24:38.988Z", "date_only": false, "value": "2026-10-16T22:24:38.988263Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117452929660993706", "record": "CVE-2026-110757", "field": "creation_timestamp", "uuid": "096c07f2-0549-4e1e-a0cf-53a589c357a4", "content": "CVE-2026-110757 Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine.\ncombine and print do not check whether a field needs quotes when its value has Perl's integer or numeric flag set. Perl sets these flags on a string used in a numeric operation when it parses as a number, which allows leading and trailing whitespace. With binary set, as csv does by default, \"12\\n\" passes a check such as $qty > 0 and is then written unquoted with its newline.\nA value validated as a number can end the record early and turn the fields after it into a separate row.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110757https://github.com/cpan-authors/Text-CSV_XS/commit/fcfb796cb50de9cef8b94a70535304ac41a50c56.patchhttps://metacpan.org/release/HMBRAND/Text-CSV_XS-1.65/changes#CVE_2026_110757#bot", "url": "https://infosec.exchange/users/cve/statuses/117452929660993706"}, {"timestamp": "2026-10-16T23:17:00Z", "date_only": false, "value": "2026-10-16T23:17:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9GC4-XHW7-655H", "record": "GHSA-9GC4-XHW7-655H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T23:17:00.953Z", "date_only": false, "value": "2026-10-16T23:17:00.953", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110757", "record": "FKIE_CVE-2026-110757", "field": "published"}, {"timestamp": "2026-10-16T23:17:00.953Z", "date_only": false, "value": "2026-10-16T23:17:00.953", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110757", "record": "FKIE_CVE-2026-110757", "field": "lastModified"}, {"timestamp": "2026-10-17T00:31:19Z", "date_only": false, "value": "2026-10-17T00:31:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9GC4-XHW7-655H", "record": "GHSA-9GC4-XHW7-655H", "field": "published"}, {"timestamp": "2026-10-17T00:31:19Z", "date_only": false, "value": "2026-10-17T00:31:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9GC4-XHW7-655H", "record": "GHSA-9GC4-XHW7-655H", "field": "modified"}]}