Skip to content
OpenAdvisories

Package · Alpine

perl-yaml-syck

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2026-57077

    YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len

    YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. In the bundled libsyck newline_len and is_newline dereference the scan pointer, and the following byte for a "\r\n" pair, with no NUL-terminator…

    TODDR YAML::Syck libyaml-syck-perl libyaml-syck-perl Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2026-57076

    YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor

    YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor. In the bundled libsyck an anchor name allocated by syck_strndup is stored both as node->anchor, freed when the node…

    TODDR YAML::Syck libyaml-syck-perl perl-YAML-Syck Debian Ubuntu Azure Linux Alpine