EUVD-2025-18132

Malicious code in bioql PyPI...

JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON

A flaw was found in the JSON-XS Perl module. A buffer overflow can be triggered due to an integer overflow when a specially crafted JSON input is processed, causing a segmentation fault, crashing the application using the module and resulting in a denial of service...

JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON

A flaw was found in the JSON-XS Perl module. A buffer overflow can be triggered due to an integer overflow when a specially crafted JSON input is processed, causing a segmentation fault, crashing the application using the module and resulting in a denial of service...

perl-JSON-XS security update

1:4.04-1 - Update to 4.04 - Fix CVE-2025-40928...

Moderate: perl-JSON-XS security update

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fixes: JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 For...

JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON

A flaw was found in the JSON-XS Perl module. A buffer overflow can be triggered due to an integer overflow when a specially crafted JSON input is processed, causing a segmentation fault, crashing the application using the module and resulting in a denial of service...

Amazon Linux 2 : perl-JSON-XS, --advisory ALAS2-2025-3005 (ALAS-2025-3005)

The version of perl-JSON-XS installed on the remote host is prior to 3.01-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3005 advisory. JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling...

ALSA-2025:17119 Moderate: perl-JSON-XS security update

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fixes: JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 For...

CVE-2024-58040 Crypt::RandomEncryption for Perl uses insecure rand() function during encryption

Crypt::RandomEncryption for Perl version 0.01 uses insecure rand function during encryption...

CVE-2024-58040

Affected software: Crypt::RandomEncryption (Perl) version 0.01. Root cause: uses insecure rand() during encryption, potentially weakening confidentiality and integrity. Impact (per CVSS metrics): high confidentiality impact, high integrity impact, network attack vector, no user interaction, no pr...

CVE-2024-58040 Crypt::RandomEncryption for Perl uses insecure rand() function during encryption

Crypt::RandomEncryption for Perl version 0.01 uses insecure rand function during encryption...

Medium: perl-Cpanel-JSON-XS

Issue Overview: Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact CVE-2025-40929 Affected Packages: perl-Cpanel-JSON-XS Issue Correction: Run dnf update...

ROS-20250929-03

A vulnerability in a perl module that provides a convenient way to describe rules for searching files and directories File-Find-Rule is related to incorrect input validation when grep is detected. directories File-Find-Rule is related to incorrect input validation when grep detects a specially...

CLSA-2025-1758821123 perl-HTTP-Tiny: Fix of CVE-2023-31486

CVE-2023-31486: fix insecure default TLS configuration...

[SECURITY] Fedora 43 Update: perl-Catalyst-Authentication-Credential-HTTP-1.019-1.fc43

This module lets you use HTTP authentication with Catalyst::Plugin::Authentication. Both basic and digest authentication are currently supported...

[SECURITY] Fedora 41 Update: perl-Cpanel-JSON-XS-4.40-1.fc41

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C...

CVE-2025-40933 Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely

Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely. Session ids are generated using an MD5 hash of the epoch time and a call to the built-in rand function. The epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is...

OESA-2025-2242 perl-Cpanel-JSON-XS security update

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fixes: Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault...

[SECURITY] [DSA 6000-1] libcpanel-json-xs-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6000-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 11, 2025 https://www.debian.org/security/faq -...

AZL-67088 CVE-2025-40929 affecting package perl-Cpanel-JSON-XS 4.39-1

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...