Sereal vulnerabilities

2 known vulnerabilities in Sereal from YVES. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Sereal::Encoder: Out-of-bounds Write

  CVE-2024-14031Mar 31, 2026YVES

  Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Encoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass

• 8.1 High severity

  Sereal::Decoder: Out-of-bounds Write

  CVE-2024-14030Mar 31, 2026YVES

  Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Decoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass