CVE-2026-129115

*** Pendiente de traducción *** JSON::XS versions from 3.0 before 4.05 for Perl read freed stack memory when a FREEZE result&amp;#39;s serialisation grows the Perl stack under allow_tags in encode_rv.<br /> <br /> With allow_tags, an object&amp;#39;s FREEZE method is called in list context and each returned value is encoded through a saved Perl stack pointer. When encoding a returned value calls back into Perl, through TO_JSON under convert_blessed or another FREEZE, and that callback grows the stack, the stack is reallocated while the saved pointer still refers to the freed block.<br /> <br /> Encoding such objects reads freed memory, and encode can return undef without an error.