https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 05:11:55 +0000 https://db.gcve.eu/vuln/ghsa-jj44-v2qc-wcv3 <p>JSON::XS versions before 4.05 for Perl allow memory exhaustion by buffering incremental input past max_size after a NUL byte in incr_parse.</p> <p>The parser appends each chunk to its buffer and compares max_size with how far it has progressed, not with the buffer length. It treats a NUL byte as the end of the input, so a NUL within the first max_size bytes keeps it short of the limit. The buffer keeps growing, and incr_skip cannot remove the NUL.</p> <p>A peer streaming data to an incr_parse consumer can exhaust process memory regardless of max_size.</p> <p>JSON::XS versions before 4.05 for Perl allow memory exhaustion by buffering incremental input past max_size after a NUL byte in incr_parse.</p> <p>The parser appends each chunk to its buffer and compares max_size with how far it has progressed, not with the buffer length. It treats a NUL byte as the end of the input, so a NUL within the first max_size bytes keeps it short of the limit. The buffer keeps growing, and incr_skip cannot remove the NUL.</p> <p>A peer streaming data to an incr_parse consumer can exhaust process memory regardless of max_size.</p> https://db.gcve.eu/vuln/ghsa-jj44-v2qc-wcv3