See how nwclark compares to other vendors in security performance
Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record
Storable versions before 3.05 for Perl has a stack overflow.
The retrievehook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow.