YVES
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Sereal::Decoder | 2 | – | May 31, 2026 |
| Sereal::Encoder | 1 | – | Mar 31, 2026 |
Exploited and recent CVEs
- CVE-2026-8796 Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input 0.4%
- CVE-2024-14031 Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library 0.4%
- CVE-2024-14030 Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library 0.4%