Skip to content
OpenAdvisories

Vendor

TODDR

9 known vulnerabilities.

Products

YAML::Syck 7 XML::Parser 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.7
    CVE-2026-57077

    YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len

    YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. In the bundled libsyck newline_len and is_newline dereference the scan pointer, and the following byte for a "\r\n" pair, with no NUL-terminator…

    TODDR YAML::Syck perl-YAML libyaml-syck-perl Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2026-57076

    YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor

    YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor. In the bundled libsyck an anchor name allocated by syck_strndup is stored both as node->anchor, freed when the node…

    TODDR YAML::Syck libyaml-syck-perl libyaml-syck-perl Debian Ubuntu Azure Linux Alpine
  • High 7.3
    CVE-2026-5089

    YAML::Syck versions before 1.38 for Perl has an out-of-bounds read

    YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in both int#base60 and float#base60 handlers. When processing the leftmost segment of a colon-separated value (…

    TODDR YAML::Syck perl-YAML-Syck perl-YAML Debian Ubuntu Azure Linux