Threats tagged 'brew-get_iplayer-cve-2026-14803'

Mojo::JSON versions before 9.47 for Perl contain a vulnerability where the pure-Perl JSON decoder uses unbounded recursion, leading to memory exhaustion. This occurs because the decode functions recurse without a depth limit, allowing a deeply nested JSON document to consume excessive memory. The issue affects the pure-Perl decode path used by default when Cpanel::JSON::XS is not installed or disabled. Exploiting this can cause denial of service by exhausting process memory when decoding untrusted JSON input.