Yves Sereal::decoder vulnerabilities

• yves sereal::decoder Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input CVE-2026-8796 Fix available 8.1 HighMay 31, 2026
• yves sereal::decoder, sereal\ +1 more Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library CVE-2024-14030 8.1 HighMarch 31, 2026