CVE-2026-129115

JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result's serialisation grows the Perl stack under allowtags in encoderv. With allowtags, an object's FREEZE method is called in list context and each returned value is encoded through a saved Perl stack pointer...

CVE-2026-124540

JSON::XS versions before 4.05 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not counted...

CVE-2026-129115 JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result's serialisation grows the Perl stack under allow_tags in encode_rv

JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result's serialisation grows the Perl stack under allowtags in encoderv. With allowtags, an object's FREEZE method is called in list context and each returned value is encoded through a saved Perl stack pointer...

CVE-2026-129115

The JSON::XS module for Perl (versions 3.0 through 4.04) contains a Use After Free (CWE-416) vulnerability. When the allow_tags option is enabled, the encode_rv function calls an object's FREEZE method in a list context, using a saved Perl stack pointer to encode each returned value. If a callbac...

EUVD-2026-125914

JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result's serialisation grows the Perl stack under allowtags in encoderv. With allowtags, an object's FREEZE method is called in list context and each returned value is encoded through a saved Perl stack pointer...

EUVD-2026-125918

JSON::XS versions before 4.05 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not counted...

CVE-2026-110673

A flaw was found in perl-Cpanel-JSON-XS. When the allowtags configuration is enabled, the "" character starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not counted against maxdepth. A maliciously...

CVE-2024-52595 HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through

lxmlhtmlclean is a project for HTML cleaning functionalities copied from lxml.html.clean. Prior to version 0.4.0, the HTML Parser in lxml does not properly handle context-switching for special HTML tags such as , and . This behavior deviates from how web browsers parse and interpret such tags...

CVE-2024-52595

The CVE-2024-52595 issue affects lxml_html_clean (a cleaning module related to lxml.html.clean). Before version 0.4.0, the HTML Parser mishandles context-switching for tags such as , , and , causing CSS-comment content to be treated inconsistently and potentially enabling XSS in untrusted HTML sa...