CVE-2026-129113

JSON::XS versions from 4.000 before 4.05 for Perl corrupt the incremental buffer length by chopping past its end in incrskip after a top-level number. The incremental parser scans any run of digits, signs, dots and exponent markers as one number, but the decoder stops at the end of a valid number...

CVE-2026-129113

The JSON::XS Perl module (versions 4.0_00 before 4.05) contains a vulnerability where the incremental parser corrupts the incremental buffer length during an incr_skip operation following a top-level number. Specifically, the parser maintains an offset into undecoded bytes; when the buffer is emp...

CVE-2026-129113 JSON::XS versions from 4.0_00 before 4.05 for Perl corrupt the incremental buffer length by chopping past its end in incr_skip after a top-level number

JSON::XS versions from 4.000 before 4.05 for Perl corrupt the incremental buffer length by chopping past its end in incrskip after a top-level number. The incremental parser scans any run of digits, signs, dots and exponent markers as one number, but the decoder stops at the end of a valid number...