Skip to content
OpenAdvisories

Package · Debian

libyaml-perl

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes

    YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of …