This update for perl-Cpanel-JSON-XS fixes the following issues:
- CVE-2025-40929: integer overflow (bsc#1249331).
- CVE-2026-9334: type confusion via duplicate object keys when `dupkeys_as_arrayref` is enabled (bsc#1267546).
- CVE-2026-9516: denial of service via UTF-8 BOM prefixed input when a decode filter callback throws (bsc#1267547).
- CVE-2026-110672: leak of decoded key of an object rejected for a duplicate key or a missing colon in `decode_hv`
(bsc#1286166).
- CVE-2026-110673: stack exhaustion via nested tagged values under `allow_tags` in `decode_tag` (bsc#1286167).
- CVE-2026-110674: duplicate non-ASCII bare keys are missed, allo
This update for perl-Cpanel-JSON-XS fixes the following issues
- CVE-2026-9334: type confusion via duplicate object keys when `dupkeys_as_arrayref` is enabled (bsc#1267546).
- CVE-2026-9516: denial of service via UTF-8 BOM prefixed input when a decode filter callback throws (bsc#1267547).
This update for perl-Cpanel-JSON-XS fixes the following issues:
- CVE-2025-40929: integer buffer overflow causing a segmentation fault when parsing crafted JSON (bsc#1249331).