CVE-2026-58102 Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts

[
  {
    "collectionURL": "https://cpan.org/modules",
    "defaultStatus": "unaffected",
    "packageName": "Crypt-OpenSSL-X509",
    "product": "Crypt::OpenSSL::X509",
    "programFiles": [
      "X509.xs"
    ],
    "programRoutines": [
      {
        "name": "hv_exts"
      },
      {
        "name": "Crypt::OpenSSL::X509::extensions"
      },
      {
        "name": "Crypt::OpenSSL::X509::extensions_by_long_name"
      },
      {
        "name": "Crypt::OpenSSL::X509::extensions_by_oid"
      }
    ],
    "repo": "https://github.com/dsully/perl-crypt-openssl-x509",
    "vendor": "JONASBN",
    "versions": [
      {
        "lessThan": "2.1.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]