TI-2026-07468 CVE-2026-8507 · GHSA-3qmj-qw66-fwx8
Out-of-bounds write in JONASBN Crypt::OpenSSL::PKCS12
Priority MEDIUM 50
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws.
JONASBN
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
JONASBN records in CISA KEVNo JONASBN vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2026-07663 CVE-2026-8721 · GHSA-hh8h-hxcj-2pm7
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded…
Priority MEDIUM 49
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs.
TI-2026-08140 CVE-2026-9265 · GHSA-597h-8vxx-6jqw
Out-of-bounds read in JONASBN Crypt::OpenSSL::PKCS12
Priority MEDIUM 46
Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path.
TI-2026-41849 CVE-2026-58102 · GHSA-crh7-2j46-hqrj
Out-of-bounds read in JONASBN Crypt::OpenSSL::X509
Priority MEDIUM 45
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts.
TI-2026-14365 CVE-2026-17510 · GHSA-h64x-hp84-8636
NULL pointer dereference in JONASBN Crypt::OpenSSL::PKCS12
Priority MEDIUM 40
Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute.
TI-2026-41848 CVE-2026-58101 · GHSA-8wqq-45fp-2xmp
NULL pointer dereference in JONASBN Crypt::OpenSSL::X509
Priority LOW 39
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference.