CVE-2026-59140

Data::SortedSet::Shared for Perl versions before 0.03 is vulnerable to an out-of-bounds read in rank and min/max queries. The attach-time validator bounds only the header root index against node_capacity; however, order-statistics and min/max lookups read neighbors from an mmap’d segment (childre...