CVE-2026-3031
Critical
Description
Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library. Image::EPEG includes Epeg 0.9.0 that was last updated in 2004. Epeg is a fast JPEG thumbnail library that was once part of the Englightenment Project.
SeverityCritical
CVSS9.8
Exploit probability—
ProductImage::EPEG
PublishedJul 16, 2026
First seenJul 16, 2026
Weakness typeCWE-1104CWE-1104
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| TOKUHIROM Image::EPEG | v ≤ 0.15 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.