regru CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review regru CVE published 2026-10-05

CVE-2026-19954

A Net::Whois::Raw pwhois command-line tool issue causes incorrect WHOIS queries for unicode domain names. This affects versions before 2.99044 for Perl. The library modules are not impacted. The problem arises from incorrect encoding of non-ASCII labels using Net::IDN::Punycode, skipping IDNA mapping and normalization steps. This results in incorrect A-labels for certain domain names. Defenders should ass [truncated]