CVE-2026-110680

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-110680
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110680.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-110680
Downstream
Published
2026-10-19T18:12:01Z
Modified
2026-10-20T02:44:16Z
Summary
Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv
Details

Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv.

With canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed 64-entry stack array or, for larger counts, a heap array sized from the first pass. If the second pass exceeds that capacity, entries are written out of bounds before the counts are compared.

This corrupts stack or heap memory and can crash the process.

Database specific 
{
    "cna_assigner":  "CPANSec",
    "cwe_ids":  [
        "CWE-787"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110680.json"
}
References

Affected packages

Git / github.com/rurban/cpanel-json-xs

Affected ranges

Type
GIT
Repo
https://github.com/rurban/cpanel-json-xs
Events
Introduced
cd9642c690ff5403c1767d35e8cfaf865eae5db1
Fixed
5552a527abb648d9eb4134e91412800013ddecb9
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "4.20"
        },
        {
            "fixed":  "4.80"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

4.*
4.20
4.21
4.22
4.23
4.24
4.25
4.26
4.27
4.28
4.29
4.30
4.31
4.32
4.33
4.34
4.35
4.36
4.37
4.38
4.39
4.40
4.41
4.42
4.43
4.44
4.50
4.51
4.52
4.53

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110680.json"