CVE-2026-82404 TOON: Prototype pollution when decoding untrusted TOON input

TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a proto, constructor, or prototype key wrote through the object prototype chain instead of creating an own property, polluting Object.prototype for the runtime. In...

CVE-2026-54890

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

CVE-2026-58586

The Image::WebP Perl module (versions prior to 0.3.0 ) is vulnerable because it bundles a legacy copy of libwebp 0.3.0 instead of linking to the system library. This bundled version contains multiple known vulnerabilities, such as CVE-2023-4863 . Attackers can exploit this by providing an untrust...