Cpanel::JSON::XS (< 4.80) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/cpaneljsonxs--4.80/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 19 Oct 2026 20:10:31 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMultiple Vulnerabilities in Cpanel::JSON::XS Perl Modulehttps://feed.craftedsignal.io/briefs/2026-10-cpanel-json-xs-vulnerabilities/Mon, 19 Oct 2026 20:10:31 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-cpanel-json-xs-vulnerabilities/The Perl module Cpanel::JSON::XS contains multiple security vulnerabilities in versions prior to 4.80, including information disclosure, denial-of-service, and type confusion.The Perl module Cpanel::JSON::XS has been identified as vulnerable to a series of security defects in all versions prior to 4.80. The disclosed vulnerabilities include CVE-2026-110672, which allows for the leakage of decoded keys when an object is rejected due to duplicate keys or missing colons during the parsing process. CVE-2026-110673 introduces a potential denial-of-service condition through stack exhaustion when processing deeply nested tagged values with the allow_tags feature enabled. Additionally, CVE-2026-110674 affects versions from 4.33 through 4.79, where a failure to properly handle duplicate non-ASCII bare keys can lead to type confusion vulnerabilities. These flaws reside within the JSON decoding logic, potentially impacting any application that utilizes this library to parse untrusted JSON input. Organizations using applications or scripts that rely on Cpanel::JSON::XS are advised to update the module to version 4.80 or later to mitigate these risks.

Impact

Successful exploitation of these vulnerabilities can lead to sensitive information disclosure, application crashes due to stack exhaustion, or unpredictable program behavior via type confusion. These risks are inherent to any service processing JSON data using the affected library, potentially affecting a broad range of Perl-based web applications, backend automation tools, and system management scripts.

Recommendation

  • Audit application dependencies to identify the use of Cpanel::JSON::XS versions earlier than 4.80.
  • Update Cpanel::JSON::XS to version 4.80 or later across all environments.
  • Patch CVE-2026-110672, CVE-2026-110673, and CVE-2026-110674 by applying the upstream library update.
]]>mediumadvisorylibrary-vulnerabilityperlcpanjson-parsing