An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure. https://nvd.nist.gov/vuln/detail/CVE-2018-6798
