CP
Product
Cpanel::JSON::XS
by RURBAN · last CVE Jun 3, 2026
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch

Add Cpanel::JSON::XS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-9516
7.5
0%
Jun 3
Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws
Affected: before 4.41
CVE-2026-9334
7.3
0%
Jun 3
Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled
Affected: before 4.41
Showing 2