YAML::Syck 安全漏洞

YAML::Syck is a Perl library open-sourced by CPAN Authors. A security vulnerability exists in YAML::Syck versions prior to 1.36, which stems from a missing null terminator in token.c, and could lead to out-of-bounds reads and information disclosure...