Skip to content
OpenAdvisories

Package · Alpine

perl-yaml-syck

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.2

    YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack

    YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack. In the bundled libsyck, when an anchor name is redefined or removed, syck_hdlr_add_anchor and syck_hdlr_remove_anch…