ALPINE-CVE-2026-57077

YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newlinelen. In the bundled libsyck newlinelen and isnewline dereference the scan pointer, and the following byte for a "\r\n" pair, with no NUL-terminator or bounds check. During block-scalar...

CVE-2026-57077

The YAML::Syck Perl module (versions before 1.47 ) contains an out-of-bounds read vulnerability due to an unbounded newline scan in the newline_len function of the bundled libsyck. The root cause is the dereferencing of a scan pointer for a "\r\n" pair without a NUL-terminator or bounds check dur...

CVE-2026-57077: Out-of-bounds Read

YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newlinelen. In the bundled libsyck newlinelen and isnewline dereference the scan pointer, and the following byte for a "\r\n" pair, with no NUL-terminator or bounds check. During block-scalar...