5 matches found
CVE-2026-110676
A flaw was found in Cpanel::JSON::XS. When handling numeric values with large exponents under the allowbignum configuration, numbers are decoded without an upper bound and re-encoded into full decimal representation. A remote attacker could exploit this vulnerability by submitting crafted JSON...
CVE-2026-110676
Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allowbignum. With allowbignum, a JSON number with a fraction or exponent decodes to a Math::BigFloat, which stores the exponent separately and so decodes cheaply...
EUVD-2026-104557
Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allowbignum. With allowbignum, a JSON number with a fraction or exponent decodes to a Math::BigFloat, which stores the exponent separately and so decodes cheaply...
CVE-2026-110676
The Cpanel::JSON::XS module for Perl (versions before 4.80 ) is vulnerable to memory exhaustion and CPU exhaustion when processing untrusted JSON data with the allow_bignum option enabled. The root cause is that while decoding numbers with exponents is efficient (using Math::BigFloat ), encoding ...
CVE-2026-110676 Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum
Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allowbignum. With allowbignum, a JSON number with a fraction or exponent decodes to a Math::BigFloat, which stores the exponent separately and so decodes cheaply...