Cpanel::JSON::XS — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in Cpanel::JSON::XS, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-9516	Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws CWE-763	-	-	2026-06-03
CVE-2026-9334	Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled CWE-843	-	-	2026-06-03
CVE-2025-40929	Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact CWE-122	9.1^AI	Critical ^AI	2025-09-08

All 3 known CVE vulnerabilities affecting Cpanel::JSON::XS with full Chinese analysis, references, and POCs where available.