CVE-2009-2946: Devscripts Devel Team Devscripts

High severity, CVSS 9.3. EPSS: 2.9% chance of exploitation in the next 30 days.

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages.

Affected products

Published 2009-09-04. Last modified 2026-06-16.