CVE-2026-16634 TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99

TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99. The tomlc99 library is no longer maintained, and has an uncontrolled recursion vulnerability publicly reported in the issue tracker. Any caller that passes untrusted TOML to fromtoml risks a stack...

CVE-2026-16634

The TOML::XS Perl module, in versions prior to 0.06 , bundles an unsupported and vulnerable version of the tomlc99 library. The underlying issue is an uncontrolled recursion flaw where processing untrusted TOML data with deeply-nested documents can trigger a stack overflow . To remediate this vul...

CVE-2026-16634: Use of Unmaintained Third Party Components

TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99. The tomlc99 library is no longer maintained, and has an uncontrolled recursion vulnerability publicly reported in the issue tracker. Any caller that passes untrusted TOML to fromtoml risks a stack...