https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:36:51 +0000 https://vulnerability.circl.lu/vuln/bell-cve-2026-57077 <p><strong>Affected:</strong> Alpaquita:23: perl-yaml-syck, Alpaquita:25: perl-yaml-syck, Alpaquita:stream: perl-yaml-syck</p> <p><strong>Affected:</strong> Alpaquita:23: perl-yaml-syck, Alpaquita:25: perl-yaml-syck, Alpaquita:stream: perl-yaml-syck</p> https://vulnerability.circl.lu/vuln/bell-cve-2026-57077 https://vulnerability.circl.lu/vuln/fkie_cve-2026-57077 <p>YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len.</p> <p>In the bundled libsyck newline_len and is_newline dereference the scan pointer, and the following byte for a &#34;\r\n&#34; pair, with no NUL-terminator or bounds check. During block-scalar lexing at a document boundary the scan runs one byte past the heap lexer buffer. This is an incomplete fix of CVE-2025-11683, on a lexer path the earlier fix did not cover.</p> <p>Any caller that runs Load or LoadFile on an untrusted document with a block scalar at a document boundary reaches the over-read.</p> <p>YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len.</p> <p>In the bundled libsyck newline_len and is_newline dereference the scan pointer, and the following byte for a &#34;\r\n&#34; pair, with no NUL-terminator or bounds check. During block-scalar lexing at a document boundary the scan runs one byte past the heap lexer buffer. This is an incomplete fix of CVE-2025-11683, on a lexer path the earlier fix did not cover.</p> <p>Any caller that runs Load or LoadFile on an untrusted document with a block scalar at a document boundary reaches the over-read.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-57077 https://vulnerability.circl.lu/vuln/ghsa-5wqv-8x52-77q2 <p>YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len.</p> <p>In the bundled libsyck newline_len and is_newline dereference the scan pointer, and the following byte for a &#34;\r\n&#34; pair, with no NUL-terminator or bounds check. During block-scalar lexing at a document boundary the scan runs one byte past the heap lexer buffer. This is an incomplete fix of CVE-2025-11683, on a lexer path the earlier fix did not cover.</p> <p>Any caller that runs Load or LoadFile on an untrusted document with a block scalar at a document boundary reaches the over-read.</p> <p>YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len.</p> <p>In the bundled libsyck newline_len and is_newline dereference the scan pointer, and the following byte for a &#34;\r\n&#34; pair, with no NUL-terminator or bounds check. During block-scalar lexing at a document boundary the scan runs one byte past the heap lexer buffer. This is an incomplete fix of CVE-2025-11683, on a lexer path the earlier fix did not cover.</p> <p>Any caller that runs Load or LoadFile on an untrusted document with a block scalar at a document boundary reaches the over-read.</p> https://vulnerability.circl.lu/vuln/ghsa-5wqv-8x52-77q2 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11299-1 <p>perl-YAML-Syck-1.470.0-1.1 on GA media</p> <p>perl-YAML-Syck-1.470.0-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11299-1 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-57077 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libyaml-syck-perl, Ubuntu:Pro:18.04:LTS: libyaml-syck-perl, Ubuntu:Pro:20.04:LTS: libyaml-syck-perl, Ubuntu:Pro:22.04:LTS: libyaml-syck-perl, Ubuntu:Pro:24.04:LTS: libyaml-syck-perl, Ubuntu:26.04:LTS: libyaml-syck-perl</p> <p>YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. In the bundled libsyck newline_len and is_newline dereference the scan pointer, and the following byte for a &#34;\r\n&#34; pair, with no NUL-terminator or bounds check. During block-scalar lexing at a document boundary the scan runs one byte past the heap lexer buffer. This is an incomplete fix of CVE-2025-11683, on a lexer path the earlier fix did not cover. Any caller that runs Load or LoadFile on an untrusted document with a block scalar at a document boundary reaches the over-read.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libyaml-syck-perl, Ubuntu:Pro:18.04:LTS: libyaml-syck-perl, Ubuntu:Pro:20.04:LTS: libyaml-syck-perl, Ubuntu:Pro:22.04:LTS: libyaml-syck-perl, Ubuntu:Pro:24.04:LTS: libyaml-syck-perl, Ubuntu:26.04:LTS: libyaml-syck-perl</p> <p>YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. In the bundled libsyck newline_len and is_newline dereference the scan pointer, and the following byte for a &#34;\r\n&#34; pair, with no NUL-terminator or bounds check. During block-scalar lexing at a document boundary the scan runs one byte past the heap lexer buffer. This is an incomplete fix of CVE-2025-11683, on a lexer path the earlier fix did not cover. Any caller that runs Load or LoadFile on an untrusted document with a block scalar at a document boundary reaches the over-read.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-57077 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2508 <p>Ein Angreifer kann mehrere Schwachstellen in cPanel cPanel/WHM ausnutzen, um möglicherweise beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand herbeizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in cPanel cPanel/WHM ausnutzen, um möglicherweise beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand herbeizuführen.</p> https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2508