Skip to content
OpenAdvisories

Vendor

RURBAN

4 known vulnerabilities.

Products

Cpanel::JSON::XS 3 GD 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-9516

    Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws

    Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, decode_json() advances the input scalar's string pointer past the mark with SvPV_set(…

    RURBAN Cpanel::JSON::XS libcpanel-json-xs-perl libcpanel-json-xs-perl Debian Ubuntu Azure Linux
  • High 7.3
    CVE-2026-9334

    Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled

    Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled. decode_hv() collapses duplicate object keys into an array reference under dupkeys_as_arrayref. The branch reached for a duplicat…

    RURBAN Cpanel::JSON::XS libcpanel-json-xs-perl libcpanel-json-xs-perl Debian Ubuntu Azure Linux