CVE-2026-40198

The Net::CIDR::Lite Perl module (versions before 0.23 ) contains an input validation flaw in the _pack_ipv6() function. The function fails to verify that uncompressed IPv6 addresses (those without ::) contain exactly 8 hex groups, allowing inputs like 1:2:3 to produce packed values of incorrect l...

CVE-2026-40199

The Net::CIDR::Lite Perl module (versions before 0.23 ) contains a vulnerability where it mishandles IPv4 mapped IPv6 addresses (e.g., ::ffff:192.168.1.1). The _pack_ipv6() function incorrectly includes a sentinel byte from _pack_ipv4(), resulting in an 18-byte value instead of 17 bytes. This mis...