CVE-2024-14030

The Sereal::Decoder Perl library (versions 4.000 through 4.009_002 ) is vulnerable because it embeds a version of the Zstandard (zstd) library susceptible to CVE-2019-11922 . The root cause is a race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 , which could...