Uncontrolled recursion in TOML::XS for Perl via bundled tomlc99 (CVE-2026-16634)

TOML::XS versions before 0.06 bundle an unmaintained version of the tomlc99 library that contains an uncontrolled recursion vulnerability. Parsing untrusted TOML input via `from_toml` can trigger a stack overflow through a deeply-nested document. Version 0.06 replaces the dependency with the successor tomlc17 library. Affected versions: - before 0.06 We recommend updating to: 0.06. CVSS 9.8 · our assessment: act_now Reference: https://seclists.org/oss-sec/2026/q3/232 Details: https://vuln.today/cve/CVE-2026-16634