Debian/libsereal-decoder-perl: high 8.1
Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srl_decoder.c, srl_read_object() and srl_read_hash() process a COPY tag, a back-referenc
Action: Upgrade libsereal-decoder-perl to 5.006+ds-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.006+ds-1 | - |
Fixed versions
| 5.006+ds-1 |
Sources
- osv: DEBIAN-CVE-2026-8796#Debian:14/libsereal-decoder-perl
- https://security-tracker.debian.org/tracker/CVE-2026-8796
published · modified · JSON