PT-2026-147404

Name of the Vulnerable Software and Affected Versions JSON::XS versions 4.0 00 through 4.04 Description An issue exists where the incremental buffer length is corrupted by chopping past its end in the incr skip function after a top-level number. The incremental parser treats sequences of digits,...

PT-2026-147400

Name of the Vulnerable Software and Affected Versions JSON::XS versions prior to 4.05 Description An issue exists where memory exhaustion can occur due to the buffering of incremental input beyond the max size limit. This happens when a NUL byte is present in the incr parse function. The parser...