Skip to content
OpenAdvisories

Vendor

TODDR

9 known vulnerabilities.

Products

YAML::Syck 7 XML::Parser 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.2
    CVE-2026-13713

    YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack

    YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack. In the bundled libsyck, when an anchor name is redefined or removed, syck_hdlr_add_anchor and syck_hdlr_remove_anch…

    TODDR YAML::Syck libyaml-syck-perl libyaml-syck-perl Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2025-11683

    YAML::Syck versions before 1.36 for Perl has missing Null-Terminators which causes Out-of-Bounds Read and potential Information Disclosure

    YAML::Syck versions before 1.36 for Perl has missing null-terminators which causes out-of-bounds read and potential information disclosure Missing null terminators in token.c leads to but-of-bounds read which allows adjacent variable to be read The issue is s…

    TODDR YAML::Syck libyaml-syck-perl libyaml-syck-perl Debian Ubuntu