Uncontrolled Recursion Vulnerability in TOML::XS for Perl
CVE-2026-16634
Currently unrated
What is CVE-2026-16634?
TOML::XS versions prior to 0.06 for Perl are vulnerable due to the inclusion of the tomlc99 library, which is no longer maintained. This library has a known uncontrolled recursion vulnerability that can lead to a stack overflow when processing untrusted TOML data, especially if the data is deeply nested. The vulnerability affects any application using TOML::XS before version 0.06. The newer TOML::XS version 0.06 and later rely on the updated tomlc17 library, which addresses this issue.
Affected Version(s)
TOML::XS 0 < 0.06