CVE-2025-40928: Mlehmann Json::xs

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Affected products

• Mlehmann Json::xs: before 4.04 (fixed in 4.04)

Published 2025-09-08. Last modified 2026-06-17.