CVE-2026-2474

In CVE-2026-2474, Crypt::URandom for Perl versions 0.41 through 0.54 is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom(). The flaw: the code does not validate that the length parameter is non-negative. If a negative length is supplied, length + 1u wraps to a small...