CVE-2026-57076

CVE-2026-57076 affects YAML::Syck for Perl up to 1.46 (bundled libsyck). Root cause: an anchor name stored as node->anchor and as the key in the anchors table can be freed when the node is freed; a subsequent anchor redefinition compares against the freed key, causing reads of freed heap memor...