CVE-2026-115946: XS::ibbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder

Reported by oss-security

Summary by Cyber Security News1 Nov 2026, 02:31 CET

About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/460

Posted by Timothy Legge on Oct 31 CVE-2026-115946 CPAN Security Group CVE ID: CVE-2026-115946 Distribution: XS-libbrotli Versions: before 1.2.1.0 MetaCPAN: https://metacpan.org/dist/XS-libbrotli XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library...

Read the full article at oss-security →

Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

Re: CVE-2026-98432: init_on_free=1 as an additional interim mitigation

Re: OATH Toolkit PSKC Signature Verification bypass in libpskc (CVE-2026-109117)

Chinese hackers use ARTEX AI in automated attacks against 200 orgs

CVE-2026-114364: Apache Syncope: SQL injection via unsanitized opEvent in Audit Events search

CVE-2026-113687: Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass

CVE-2026-113511: Apache Syncope: Delegated administration boundaries can be bypassed for Realm update