TI-2026-09955 CVE-2026-11526 · GHSA-hx22-9fx3-xg77
OS command injection in RURBAN GD
Priority MEDIUM 52
GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle.
Vulnerabilities
5 records
TI-2026-08360 CVE-2026-9516 · GHSA-32gp-2g42-v9vc
Improper handling of exceptional conditions in RURBAN Cpanel::JSON::XS
Priority LOW 39
Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws.
TI-2026-08187 CVE-2026-9334 · GHSA-qfqj-xxqv-cxfw
Type confusion in RURBAN Cpanel::JSON::XS
Priority LOW 38
Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled.
TI-2025-27320 CVE-2025-40929 · GHSA-q7gx-445j-xwq8
Heap-based buffer overflow in RURBAN Cpanel::JSON::XS
Priority LOW 26
Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
TI-2022-24155 CVE-2022-48623 · GHSA-44qr-8pf6-6q33
The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a…
Priority MEDIUM 47
The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service.