Advisories · Technology
RURBAN Cpanel::JSON::XS.
Every CVE that names RURBAN Cpanel::JSON::XS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws
- RURBAN Cpanel::JSON::XS
- Memory corruption
- CWE-755
- CVSS 7.3 High
Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled
- RURBAN Cpanel::JSON::XS
- Memory corruption
- CVSS 5.6 Medium
Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
- RURBAN Cpanel::JSON::XS
- Memory corruption