CVE-2026-115936: IO::Compress::Brotli versions from 0.004001 before 0.023 for Perl bundle a brotli library with an out-of-bounds write in the decoder
// AI summary
A CVE describes an out-of-bounds write in the Brotli decoder bundled in Perl IO::Compress::Brotli versions before 0.023.
// from the source
Posted by Timothy Legge on Oct 23 ======================================================================== CVE-2026-115936 CPAN Security Group ======================================================================== CVE ID: CVE-2026-115936 Distribution: IO-Compress-Brotli Versions: from 0.004001 before 0.023 MetaCPAN: https://metacpan.org/dist/IO-Compress-Brotli VCS Repo:...