Do you remember the last time Perl had a flaw like this that took every bank down? I don't.

bugzilla still relies on perl's non-existing tainting of hash keys. I fixed that about 10 years ago, but perl5 never did.