CVE-2022-44542: Lesspipe Project Lesspipe

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via a key/value pair in a hash.

Affected products

• Lesspipe Project Lesspipe: before 2.06 (fixed in 2.06)

Published 2022-11-01. Last modified 2026-06-17.