Skip to content
OpenAdvisories

Vendor

YVES

3 known vulnerabilities.

Products

Sereal::Decoder 2 Sereal::Encoder 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-8796

    Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input

    Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srl_decoder.c, srl_read_object() and srl_read_hash() process a COPY tag, a back-reference whose target byte the decoder re-decodes as a fresh tag. …

    YVES Sereal::Decoder libsereal-decoder-perl libsereal-decoder-perl Debian Ubuntu
  • High 8.1
    CVE-2024-14031

    Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library

    Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Encoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pas…

    YVES Sereal::Encoder
  • High 8.1
    CVE-2024-14030

    Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library

    Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Decoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pas…

    YVES Sereal::Decoder