Search: CVE-2026-57074

XML::Bare versions up to 0.53 for Perl contain an out-of-bounds read vulnerability due to unbounded character lookahead in the parserc_parse function. This occurs when the parser checks for multicharacter strings or element terminators without verifying buffer boundaries, allowing truncated XML strings to trigger the issue. The vulnerability has a critical severity with a CVSS score of 9.1.