PT-2026-147405

Name of the Vulnerable Software and Affected Versions JSON::XS versions 3.04 through 4.04 Description An issue exists in the incr parse function where a one-byte heap out-of-bounds write occurs when appending a one-byte chunk. This happens because the incremental buffer grows to one and a half...

PT-2026-147400

Name of the Vulnerable Software and Affected Versions JSON::XS versions prior to 4.05 Description An issue exists where memory exhaustion can occur due to the buffering of incremental input beyond the max size limit. This happens when a NUL byte is present in the incr parse function. The parser...

PT-2026-117584

Name of the Vulnerable Software and Affected Versions Cpanel::JSON::XS versions 4.51 through 4.79 Description An issue exists where the software allows quadratic CPU usage during the processing of non-ASCII JSON data. This occurs because the incr parse function decodes each buffered value using a...