perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML document

A flaw was found in perl-yaml. An attacker can trigger unintended actions, such as arbitrary file deletion, by supplying a specially crafted YAML document. The parser permits untrusted documents to instantiate arbitrary object classes, causing Perl to automatically execute their destructor method...

perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignment

A flaw was found in perl-yaml. This vulnerability can lead to arbitrary code execution because the parser fails to restrict package variable modifications specified in YAML documents. An attacker capable of submitting crafted YAML input can overwrite internal configuration settings to enable code...

Important: Red Hat Security Advisory: perl-YAML:1.24 security update

An update for the perl-YAML:1.24 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: perl-YAML

Issue Overview: YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope. What DESTROY do...

Amazon Linux 2 : perl-YAML (ALAS-2026-4035)

The version of perl-YAML installed on the remote host is prior to 0.84-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4035 advisory. YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A...

Alibaba Cloud Linux 3 : 0304: perl-YAML-Syck (ALINUX3-SA-2026:0304)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0304 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-13713: YAML::Syck versions before 1.47 for...

Astra Linux – vulnerability in libyaml-libyaml-perl

YAML-LibYAML prior to 0.903.0 for Perl uses 2-arg open, allowing existing files to be modified...

Unity Linux 20.1070e Security Update: perl-YAML (UTSA-2026-130395)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130395 advisory. Unity Link Advisory UTSA-2026-130395 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

TencentOS Server 3: perl-YAML-Syck (TSSA-2026:1122)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1122 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2017-20285

A flaw was found in perl-yaml. An attacker can trigger unintended actions, such as arbitrary file deletion, by supplying a specially crafted YAML document. The parser permits untrusted documents to instantiate arbitrary object classes, causing Perl to automatically execute their destructor method...

CVE-2019-25777

A flaw was found in perl-yaml. This vulnerability can lead to arbitrary code execution because the parser fails to restrict package variable modifications specified in YAML documents. An attacker capable of submitting crafted YAML input can overwrite internal configuration settings to enable code...

ROS-20261002-73-0139

The vulnerability in perl-YAML-Syck is related to a violation of the buffer boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0017

The vulnerability in perl-YAML-Syck is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Rocky Linux 8 [CIQ] Security Update: perl-YAML-Syck / perl-YAML-Syck-debuginfo / etc (crlsa-2026_6470)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20266470 advisory. perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML...

ROS-20261001-73-0016

The vulnerability in perl-YAML-Syck is related to reading beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0014

The vulnerability in perl-YAML-Syck is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

ROS-20261001-73-0013

The vulnerability in perl-YAML-Syck is related to reading beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0015

The vulnerability in perl-YAML-Syck is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MiracleLinux 8 : perl-YAML-Syck-1.30-7.el8_10 (AXSA:2026-1847:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1847:02 advisory. YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document CVE-2026-13713 Tenable has extracted the preceding description block directly from the...

perl-YAML-Syck security update

An update is available for perl-YAML-Syck. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This module provides a Perl interface to the libsyck data serializatio...