CVE-2022-4976: Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities Stig Palmquist 12 Jun 2025 00:35 UTC

========================================================================
CVE-2022-4976                                        CPAN Security Group
========================================================================

        CVE ID:  CVE-2022-4976
  Distribution:  Archive-Unzip-Burst
      Versions:  from 0.01 through 0.09

      MetaCPAN:  https://metacpan.org/dist/Archive-Unzip-Burst
      VCS Repo:  https://github.com/mohawk2/Archive-Unzip-Burst

Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a
bundled InfoZip library that is affected by several vulnerabilities

Description
-----------
Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a
bundled InfoZip library that is affected by several vulnerabilities.

The bundled library is affected by CVE-2014-8139, CVE-2014-8140 and
CVE-2014-8141.

Problem types
-------------
- CWE-1395 Dependency on Vulnerable Third-Party Component

References
----------
https://rt.cpan.org/Public/Bug/Display.html?id=143547