This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-89162 →

ALPINE-CVE-2026-89162

In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adv...

Original description

The description as published by the source.

In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Alpine:v3.23 pcre2

[{"type":"ECOSYSTEM","events":[{"introduced":"10.45"},{"fixed":"10.48-r0"}]}]

Alpine:v3.24 pcre2

[{"type":"ECOSYSTEM","events":[{"introduced":"10.45"},{"fixed":"10.48-r0"}]}]

References

advisory security.alpinelinux.org