Read the docs
Red Hat Security Advisory

RHSA-2026:9258

perl-XML-Parser security update

Released 2026-04-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 2 records

Priority MEDIUM 50

XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0057 Published 2026-03-19 Partial fix CWE-122
Priority MEDIUM 50

XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00628 Published 2026-03-19 Partial fix CWE-122