AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-30T14:17:02.710Z and has not been modified since then. The vulnerability in Date::Manip versions through 6.99 for Perl allows CPU exhaustion via quadratic backtracking in the unanchored time substitution in _parse_time. This occurs when the function attempts to parse a string with a long run of whit [truncated]
The CVE-2026-60074 vulnerability affects Date::Manip versions through 6.99 for Perl, allowing date corruption via non-ASCII decimal digits. This occurs because the parse regexes use the `//d` shorthand, which matches the whole Unicode decimal digit property `//p{Nd}`, not just `[0-9]`. The vulnerability has a CVSS score of 7.5 and is classified as HIGH severity. Developers and administrators using Date::M [truncated]
