CVE-2014-2277: Perltidy Project Perltidy

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The make_temporary_filename function in perltidy 20120701-1 and earlier allows local users to obtain sensitive information or write to arbitrary files via a symlink attack, related to use of the tmpnam function.

Affected products

• Perltidy Project Perltidy: up to and including 2012-07-01-1

Published 2017-10-17. Last modified 2026-06-17.