CVE-2026-2474 Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom()

[
  {
    "collectionURL": "https://cpan.org/modules",
    "defaultStatus": "unaffected",
    "packageName": "Crypt-URandom",
    "product": "Crypt::URandom",
    "programFiles": [
      "URandom.xs"
    ],
    "programRoutines": [
      {
        "name": "crypt_urandom_getrandom()"
      }
    ],
    "repo": "https://github.com/david-dick/crypt-urandom",
    "vendor": "DDICK",
    "versions": [
      {
        "lessThan": "0.55",
        "status": "affected",
        "version": "0.41",
        "versionType": "custom"
      }
    ]
  }
]