...
Full-disclosure: Christey, Steven M. Format String Vulnerabilities in Perl Programs Fri Dec 02 2005 - 02:56:14 CST
[Seacord 2005]] Chapter 6, Formatted Output
US-CERT Vulnerability Note VU#948385
[Wall 2011] perlfunc Chapter 6, Formatted Output
...
01. Input Validation and Data Sanitization EXP30-PL. Do not use deprecated or obsolete functions