Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Sereal-Decoder

cpan

Fast, compact, powerful binary deserialization

View on metacpan.org

Security Advisories for Sereal-Decoder in cpan

17 days ago

Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srl_decoder.c, srl_read_object() and srl_read_hash() process a COPY tag, a back-reference whose target byte the decoder re-decodes as a fre... CPANSA--2026-8796

cpan Sereal-Decoder
3 months ago

Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Decoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in th... CPANSA-Sereal-Decoder-2024-14030

cpan Sereal-Decoder
Moderate
over 5 years ago

In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions (matching the input) would only be set at completion time. Output files could therefore be readable or writable to unint... CPANSA-Sereal-Decoder-2021-24031-zstd

cpan Sereal-Decoder
Moderate
over 5 years ago

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore... CPANSA-Sereal-Decoder-2021-24032-zstd

cpan Sereal-Decoder
High
almost 8 years ago

In Miniz 2.0.7, tinfl_decompress in miniz_tinfl.c has an infinite loop because sym2 and counter can both remain equal to zero. CPANSA-Sereal-Decoder-2018-12913-miniz

cpan Sereal-Decoder

Filter by Severity

Moderate 2 High 1