CVE-2026-82404 TOON: Prototype pollution when decoding untrusted TOON input

TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a proto, constructor, or prototype key wrote through the object prototype chain instead of creating an own property, polluting Object.prototype for the runtime. In...

CVE-2026-54890

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

CVE-2026-58586

CVE-2026-58586 concerns Image::WebP (Perl) versions through 0.2 that bundle libwebp 0.3.0. The module links the vulnerable library inside itself instead of using the system libwebp, so upgrading system libraries does not remediate. The bundled libwebp 0.3.0 contains multiple known issues, includi...