- CVE-2026-89161: leak and later invalid free of a copied subject when pcre2_jit_match() reuses a match data block previously used with PCRE2_COPY_MATCHED_SUBJECT (upstream fb466796) - CVE-2026-89156: out-of-bounds read in pcre2_match() on invalid UTF subjects when JIT fallback to the interpreter skipped the UTF validation (upstream dfa2ad86) - CVE-2026-89157: out-of-bounds heap write in pcre2_pattern_convert() from an overflowed output allocation size with large patterns on 32-bit size_t (upstream 41e7f679) - CVE-2026-89158: out-of-bounds heap write in pcre2_compile_32() from integer overflows in the compiled pattern length computation on 32-bit platforms (upstream 3d7dcbfc)