https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 09:37:12 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-110681 <p>Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter&#39;s scalars from a parser object cloned into a new ithread.</p> <p>A parser object holds its callbacks and its incremental parse buffer as raw scalar pointers. When a thread is created, these are copied into the new interpreter unchanged, so the child&#39;s parser uses, and later frees, scalars that belong to the parent and may already have been freed there.</p> <p>A parser created before a thread starts and used inside it can call freed callbacks, corrupt reference counts and crash the process.</p> <p>Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter&#39;s scalars from a parser object cloned into a new ithread.</p> <p>A parser object holds its callbacks and its incremental parse buffer as raw scalar pointers. When a thread is created, these are copied into the new interpreter unchanged, so the child&#39;s parser uses, and later frees, scalars that belong to the parent and may already have been freed there.</p> <p>A parser created before a thread starts and used inside it can call freed callbacks, corrupt reference counts and crash the process.</p> https://db.gcve.eu/vuln/fkie_cve-2026-110681 https://db.gcve.eu/vuln/ghsa-rmwh-p89p-h6wq <p>Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter&#39;s scalars from a parser object cloned into a new ithread.</p> <p>A parser object holds its callbacks and its incremental parse buffer as raw scalar pointers. When a thread is created, these are copied into the new interpreter unchanged, so the child&#39;s parser uses, and later frees, scalars that belong to the parent and may already have been freed there.</p> <p>A parser created before a thread starts and used inside it can call freed callbacks, corrupt reference counts and crash the process.</p> <p>Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter&#39;s scalars from a parser object cloned into a new ithread.</p> <p>A parser object holds its callbacks and its incremental parse buffer as raw scalar pointers. When a thread is created, these are copied into the new interpreter unchanged, so the child&#39;s parser uses, and later frees, scalars that belong to the parent and may already have been freed there.</p> <p>A parser created before a thread starts and used inside it can call freed callbacks, corrupt reference counts and crash the process.</p> https://db.gcve.eu/vuln/ghsa-rmwh-p89p-h6wq https://db.gcve.eu/vuln/opensuse-su-2026:12217-1 <p>perl-Cpanel-JSON-XS-4.800.0-1.1 on GA media</p> <p>perl-Cpanel-JSON-XS-4.800.0-1.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:12217-1 https://db.gcve.eu/vuln/ubuntu-cve-2026-110681 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libcpanel-json-xs-perl, Ubuntu:18.04:LTS: libcpanel-json-xs-perl, Ubuntu:20.04:LTS: libcpanel-json-xs-perl, Ubuntu:22.04:LTS: libcpanel-json-xs-perl, Ubuntu:24.04:LTS: libcpanel-json-xs-perl, Ubuntu:26.10: libcpanel-json-xs-perl, Ubuntu:26.04:LTS: libcpanel-json-xs-perl</p> <p>(Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpre ...)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libcpanel-json-xs-perl, Ubuntu:18.04:LTS: libcpanel-json-xs-perl, Ubuntu:20.04:LTS: libcpanel-json-xs-perl, Ubuntu:22.04:LTS: libcpanel-json-xs-perl, Ubuntu:24.04:LTS: libcpanel-json-xs-perl, Ubuntu:26.10: libcpanel-json-xs-perl, Ubuntu:26.04:LTS: libcpanel-json-xs-perl</p> <p>(Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpre ...)</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-110681