CVE-2013-4184: Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks

Security readout for executives and security teams

CVE-2013-4184 affects the Perl Data::UUID module, specifically CPAN version 1.219 as packaged as libdata-uuid-perl. The public bundle describes a symlink attack risk but does not provide severity, CVSS, exploit status, or fixed-version details. Treat it as a dependency hygiene and local file-safety issue until vendor guidance confirms impact. Exposure is likely limited to systems or applications that install or bundle Data::UUID/libdata-uuid-perl version 1.219. Internet exposure is not established in the supplied sources; symlink issues usually depend on local filesystem conditions, but the source bundle does not confirm prerequisites. Priority should be conditional: address during normal patch cycles unless the affected Perl module is present on sensitive hosts or privileged services. There is no supplied evidence of active exploitation, but incomplete severity data means teams should not ignore confirmed installations. Mitigation focus: Inventory systems for Data::UUID or libdata-uuid-perl version 1.219.; Check OS distribution and CPAN/vendor guidance for fixed package versions.; Prioritize updates where the module runs with elevated privileges or handles shared writable paths..

Prepared

Jun 6, 2026, 03:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.