Get real-time updates on Telegram
CVE-2026-110684: Affected product not specified by the source
Affected technology
Product not specified by the source · 3.0202 to before 4.80
Vendor not specified by the source
Description’s affected range: versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringify. encode_stringify writes a value in its string form under allow_stringify
Component: Cpanel::JSON::XS
Function: encode_stringify
File: XS.xs
What an attacker can do
The source does not specify what an attacker can achieve.
- CWE
- CWE-401
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 19:46:42.191502+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-110684.html