• CPAN.org does not forward email anymore
  
• parse (): report trailing lone CR, do not store EOF as 0xFF (CVE-2026-110759)
  
• Under allow_whitespace, do not strip beyond field start (CVE-2026-110758)
  
• combine (): decide quoting from the bytes, not the NV flags (CVE-2026-110757)
  
• Flush saved bytes in Combine () (CVE-2026-110756)
  
• Re-use AHEAD with \r instead of copying (CVE-2026-110755)
  
• getline (): free the result array when the parse fails (CVE-2026-110754)
  
• Do not free the bound column scalar in skip_empty_rows (CVE-2026-110753)
  
• fragment (): do not size memory by the selector integers (CVE-2026-110752)