libcpanel-json-xs-perl vulnerabilities (Debian)
19 vulnerabilities.
-
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incr_parse 7.5 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp 7.5 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv 6.5 Medium -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag 9.1 Critical -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringify 8.1 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse 7.5 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread 8.1 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv 7.5 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse 7.5 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv 7.5 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum 7.5 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv 8.1 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv 6.5 Medium -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag 7.5 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode_hv 7.5 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws 7.5 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled 7.3 High -
libcpanel-json-xs-perlDebian Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact 5.6 Medium -
libcpanel-json-xs-perlDebian The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that... 9.1 Critical