CVE-2026-8721

creationtimestamp| type| source ---|---|--- 2026-05-17 20:22:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm36uqfydx2b 2026-05-17 22:32:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm3g4qzayl2p 2026-05-30 11:00:53+00:00| seen|...

CVE-2026-8721 Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char , which routes through Perl's default typemap to SvPVnolen. The Perl length is discarded. The C code or OpenSSL internally calls strlen on the buffer...