CVE-2026-8721

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl are vulnerable to password truncation due to an incorrect data type declaration in PKCS12.xs. Password parameters are declared as char *, which triggers Perl's SvPV_nolen typemap and causes the actual length of the password to be discarded. Be...