CVE-2026-59143

The Data::RoaringBitmap::Shared Perl module (versions before 0.02 ) is vulnerable to an out-of-bounds read in the rb_contains_locked function. The root cause is that the rb_validate_header validator fails to check bucket contents, even though it validates header scalars against file size. Specifi...