Changes for version 1.65 - 2026-10-15

  • CPAN.org does not forward email anymore
  • parse (): report trailing lone CR, do not store EOF as 0xFF (CVE-2026-110759)
  • Under allow_whitespace, do not strip beyond field start (CVE-2026-110758)
  • combine (): decide quoting from the bytes, not the NV flags (CVE-2026-110757)
  • Flush saved bytes in Combine () (CVE-2026-110756)
  • Re-use AHEAD with \r instead of copying (CVE-2026-110755)
  • getline (): free the result array when the parse fails (CVE-2026-110754)
  • Do not free the bound column scalar in skip_empty_rows (CVE-2026-110753)
  • fragment (): do not size memory by the selector integers (CVE-2026-110752)

Modules

comma-separated values manipulation routines