Jv: >> Harfbuzz Security Vulnerabilities
HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability.
Versions before 0.032 contain HarfBuzz 8.4.0 or earlier bundled as hb_src.tar.gz in the source tarball, which is affected by CVE-2026-22693.
CVSS Score
7.5
EPSS Score
0.001
Published
2026-01-19