EUVD-2026-34060

Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeysasarrayref is enabled. decodehv collapses duplicate object keys into an array reference under dupkeysasarrayref. The branch reached for a duplicate key tests SvTYPE oldvalue != SVtRV && SvTYP...

PT-2026-45891

Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys as arrayref is enabled. decode hv collapses duplicate object keys into an array reference under dupkeys as arrayref. The branch reached for a duplicate key tests SvTYPE old value != SVt RV &...