EUVD-2026-46354

Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated node and arena indices in rdxfindlocked. The attach-time validator rdxvalidateheader checks the header scalars and region layout against the file size, but does not validate the node records it then...

CVE-2026-59141

Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated node and arena indices in rdxfindlocked. The attach-time validator rdxvalidateheader checks the header scalars and region layout against the file size, but does not validate the node records it then...

CVE-2026-59140

Data::SortedSet::Shared for Perl versions before 0.03 is vulnerable to an out-of-bounds read in rank and min/max queries. The attach-time validator bounds only the header root index against node_capacity; however, order-statistics and min/max lookups read neighbors from an mmap’d segment (childre...