JONASBN Crypt::OpenSSL::PKCS12

• CVE-2026-17510 High 7.5 Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute 0.6%
• CVE-2026-9265 Critical 9.1 Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path 0.6%
• CVE-2026-8721 Critical 9.8 Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs 0.4%
• CVE-2026-8507 Critical 9.8 Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws 0.6%