cbl-mariner cloud-hypervisor vulnerabilities

Latest cbl-mariner cloud-hypervisor CVEs

Newest publication first

1. CVE-2026-4176 Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib

   Published 2026-03-29

   Critical·CVSS 9.8 EPSS 0.74%

   Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib. Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-2026-3381 due to a ve...

2. CVE-2026-4746 Heap Buffer Over-Write Vulenrabilty in timeplus-io/proton

   Published 2026-03-24

   Critical·CVSS 10.0 EPSS 0.27%

   Out-of-bounds Write vulnerability in timeplus-io proton (base/poco/Foundation/src‎ modules). This vulnerability is associated with program files inflate.C. This issue affects proton: before 1.6.16.

3. CVE-2026-3381 Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

   Published 2026-03-05

   Critical·CVSS 9.8 EPSS 0.62%

   Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes...

4. CVE-2025-1744 Out-of-bounds Write in radare2

   Published 2025-02-28

   Critical·CVSS 10.0 EPSS 0.51%

   Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.