CVE-2026-86287 Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths

[
  {
    "collectionURL": "https://cpan.org/modules",
    "defaultStatus": "unaffected",
    "modules": [
      "Net::IP::LPM"
    ],
    "packageName": "Net-IP-LPM",
    "packageURL": "pkg:cpan/Net-IP-LPM",
    "programFiles": [
      "lib/Net/IP/LPM.pm",
      "LPM.xs",
      "lpm_lib.c",
      "lpm_lib.h"
    ],
    "programRoutines": [
      {
        "name": "Net::IP::LPM::add"
      },
      {
        "name": "lpm_add_raw"
      }
    ],
    "repo": "https://github.com/robrwo/perl-Net-IP-LPM",
    "versions": [
      {
        "lessThan": "1.12",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]