Jv Harfbuzz::shaper vulnerabilities

• jv harfbuzz::shaper, harfbuzz\ +1 more HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability CVE-2026-0943 7.5 HighJanuary 19, 2026