Report: CVE-2026-4177 - YAML::Syck versions through 1.36 for Perl has several potential security vulnerab...

Report: CVE-2026-4177 - YAML::Syck versions through 1.36 for Perl has several potential security vulnerab...

CVE ID :CVE-2026-4177 Published : March 16, 2026, 11:16 p.m. | 56 minutes ago Description :YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on trailing newlines. strtok mutated n->type_id in place, corrupting shared node data. A memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
March 16, 2026