Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: YVES Clear all filters
TI-2026-07733 CVE-2026-8796 · GHSA-xhpj-269v-vq2q

Out-of-bounds read in YVES Sereal::Decoder

Priority LOW 35

Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00399 Published 2026-05-31 Fixed in 5.005 CWE-125
TI-2024-13025 CVE-2024-14031 · GHSA-hhqv-q79g-jgfm

Out-of-bounds write in YVES Sereal::Encoder

Priority LOW 37

Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00361 Published 2026-03-31 No fix listed CWE-1395
TI-2024-13024 CVE-2024-14030 · GHSA-93rm-8cxm-wfv4

Out-of-bounds write in YVES Sereal::Decoder

Priority LOW 37

Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00361 Published 2026-03-31 No fix listed CWE-1395