https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 13:23:50 +0000 https://db.gcve.eu/vuln/cve-2026-110681 <p><strong>Affected:</strong> Cpanel-JSON-XS</p> <p>Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter&#39;s scalars from a parser object cloned into a new ithread.</p> <p>A parser object holds its callbacks and its incremental parse buffer as raw scalar pointers. When a thread is created, these are copied into the new interpreter unchanged, so the child&#39;s parser uses, and later frees, scalars that belong to the parent and may already have been freed there.</p> <p>A parser created before a thread starts and used inside it can call freed callbacks, corrupt reference counts and crash the process.</p> <p><strong>Affected:</strong> Cpanel-JSON-XS</p> <p>Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter&#39;s scalars from a parser object cloned into a new ithread.</p> <p>A parser object holds its callbacks and its incremental parse buffer as raw scalar pointers. When a thread is created, these are copied into the new interpreter unchanged, so the child&#39;s parser uses, and later frees, scalars that belong to the parent and may already have been freed there.</p> <p>A parser created before a thread starts and used inside it can call freed callbacks, corrupt reference counts and crash the process.</p> https://db.gcve.eu/vuln/cve-2026-110681