2025-09-08 15:57 UTC
Vulnerabilities in the #Perl JSON::XS, Cpanel::JSON::XS and JSON::SIMD modules via @cpansec
If you have applications that handle JSON from untrusted sources (e.g. a web API), then you need to upgrade.
CVE-2025-40928: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
CVE-2025-40929: Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
CVE-2025-40930: JSON::SIMD before version 1.07 and earlier for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
#CVE #infosec #vulnerability #CPAN
Replies (1)
-
@nigelsezyarr@mstdn.ca 2025-09-08 18:30
@rrwo@infosec.exchange @cpansec@fosstodon.org Well, I guess I know what I'm doing this morning.