Advisories · Technology

YVES Sereal::Decoder.

Every CVE that names YVES Sereal::Decoder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-8796 CVE record

CVSS 8.1 High

Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input
- YVES Sereal::Decoder
- Memory corruption
Not analysed yet 31 May 2026
CVE-2024-14030 CVE record

CVSS 8.1 High

Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library
- YVES Sereal::Decoder
- CWE-1395
Not analysed yet 31 Mar 2026