Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•14 views

MiracleLinux 8 : perl-YAML-Syck-1.30-7.el8_10 (AXSA:2026-1847:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1847:02 advisory. YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document CVE-2026-13713 Tenable has extracted the preceding description block directly from the...

6.2CVSS6AI score0.00134EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/15 6:02 a.m.•11 views

RLSA-2026:67269 Important: perl-YAML-Syck security update

This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around. Security Fixes: YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document CVE-2026-13713...

7.5CVSS5.9AI score0.00134EPSS
SaveExploits0References3
Rockylinux
Rockylinux
•added 2026/09/15 6:02 a.m.•13 views

perl-YAML-Syck security update

An update is available for perl-YAML-Syck. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This module provides a Perl interface to the libsyck data serializatio...

6.2CVSS5.9AI score0.00134EPSS
SaveExploits0
AlmaLinux
AlmaLinux
•added 2026/09/14 12:00 a.m.•14 views

Important: perl-YAML-Syck security update

This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around. Security Fixes: YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document CVE-2026-13713...

6.2CVSS5.9AI score0.00134EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/07/17 3:20 a.m.•18 views

CVE-2026-57075

A flaw was found in YAML::Syck. An out-of-bounds read vulnerability exists in the base64 decoder, specifically in the syckbase64dec function. This occurs because the decoder uses a signed character to index a lookup table, allowing specially crafted !!binary YAML nodes with high-bit bytes to caus...

9.1CVSS5.9AI score0.00632EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/06/18 5:28 a.m.•17 views

js-yaml: js-yaml: Denial of Service via quadratic CPU time parsing with merge keys

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. When merge keys are enabled, a remote attacker could exploit this vulnerability by crafting a YAML document where a chain of mappings uses merge keys, each merging the previous one. This can lead to a significant increase in CPU ti...

7.5CVSS6.4AI score0.00644EPSS
SaveExploits1References7
Rows per page
Query Builder