Skip to content
OpenAdvisories

Package · Debian

libcpanel-json-xs-perl

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-110686

    Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv

    Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv. A decode copies the parser's filter_json_object and filter_json_single_key_object callbacks without taking references to them.…

    libcpanel-json-xs-perl libcpanel-json-xs-perl perl-Cpanel-JSON-XS Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2026-110674

    Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv

    Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv. With allow_barekey, which relaxed enables, a bare key containing a non-ASCII byte is stored as UTF-8 b…

    libcpanel-json-xs-perl libcpanel-json-xs-perl perl-Cpanel-JSON-XS Debian Ubuntu Azure Linux
  • Medium 5.6
    CVE-2025-40929

    Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

    Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

    RURBAN Cpanel::JSON::XS libcpanel-json-xs-perl libcpanel-json-xs-perl Debian Ubuntu Azure Linux Alpine