CVE-2026-129115

JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result's serialisation grows the Perl stack under allowtags in encoderv. With allowtags, an object's FREEZE method is called in list context and each returned value is encoded through a saved Perl stack pointer...

CVE-2026-129115 JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result's serialisation grows the Perl stack under allow_tags in encode_rv

JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result's serialisation grows the Perl stack under allowtags in encoderv. With allowtags, an object's FREEZE method is called in list context and each returned value is encoded through a saved Perl stack pointer...

CVE-2026-129115

The JSON::XS module for Perl (versions 3.0 through 4.04) contains a Use After Free (CWE-416) vulnerability. When the allow_tags option is enabled, the encode_rv function calls an object's FREEZE method in a list context, using a saved Perl stack pointer to encode each returned value. If a callbac...

EUVD-2026-125914

JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result's serialisation grows the Perl stack under allowtags in encoderv. With allowtags, an object's FREEZE method is called in list context and each returned value is encoded through a saved Perl stack pointer...

CVE-2026-129115: Use After Free

JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result's serialisation grows the Perl stack under allowtags in encoderv. With allowtags, an object's FREEZE method is called in list context and each returned value is encoded through a saved Perl stack pointer...