========================================================================
CVE-2026-3031                                        CPAN Security Group
========================================================================

         CVE ID:  CVE-2026-3031
   Distribution:  Image-EPEG
       Versions:  through 0.15

       MetaCPAN:  https://metacpan.org/dist/Image-EPEG

Image::EPEG versions through 0.15 for Perl embeds an unsupported
version of the Epeg library

Description
-----------
Image::EPEG versions through 0.15 for Perl embeds an unsupported
version of the Epeg library.

Image::EPEG includes Epeg 0.9.0 that was last updated in 2004.

Epeg is a fast JPEG thumbnail library that was once part of the
Englightenment Project.

Problem types
-------------
- CWE-1104 Use of Unmaintained Third Party Components

Workarounds
-----------
Image::EPEG has been deprecated since version 0.14 and has been removed
from CPAN.  Migrate to a different solution.

References
----------
https://backpan.metacpan.org/authors/id/T/TO/TOKUHIROM/Image-Epeg-0.15.readme
https://backpan.metacpan.org/authors/id/T/TO/TOKUHIROM/Image-Epeg-0.15.tar.gz
https://sourceforge.net/projects/enlightenment/files/OldFiles/epeg-0.9.0.tar.gz/download