/ 
HarfBuzz-Shaper-0.017.1
⭐ Starred 0 / Makefile.PL
Security Advisories (1)
CVE-2026-0943 (2026-01-19)

HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability.  Versions before 0.032 contain HarfBuzz 8.4.0 or earlier bundled as hb_src.tar.gz in the source tarball, which is affected by CVE-2026-22693.

use lib 'inc'; use Devel::CheckLib;

unless ( check_lib( lib => "harfbuzz", header => "harfbuzz/hb.h", function => <<EOF ) /* Need at least 1.7.7 */ hb_blob_create_from_file(""); return 0; EOF ) { warn("HarfBuzz::Shaper needs the harfbuzz library, version 1.7.7 or later.\n", "Please install it first. See file INSTALL for details.\n"); exit(0); }