Threats affecting pkg:github/Crypt-Argon2

CVE-2026-8463 is a medium severity vulnerability in LEONT's Crypt::Argon2 Perl module versions from 0.017 before 0.031. It involves a heap out-of-bounds read in the argon2_verify function when processing an empty encoded input string. This occurs because the function passes encoded_len - 1 to memchr without verifying that encoded_len is non-zero, causing an underflow and resulting in memory beyond the heap being read. This can lead to process crashes or unintended information disclosure related to adjacent memory content. No official patch or remediation guidance is currently available from the vendor.