CVE-2024-14031

Sereal::Encoder versions 4.000 through 4.009_002 for Perl are affected by a buffer overwrite flaw. The software embeds a vulnerable version of the Zstandard (zstd) library, which is susceptible to a race condition in its one-pass compression functions (specifically prior to version 1.3.8). This f...