Sereal::Encoder vulnerabilities

1 known vulnerability in Sereal::Encoder from YVES. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Sereal::Encoder: Out-of-bounds Write

  CVE-2024-14031Mar 31, 2026YVES

  Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Encoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass