Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: TODDR Component: Yaml Clear all filters
TI-2026-03625 CVE-2026-4177 · GHSA-72r6-p2x3-g9gj

Heap-based buffer overflow in TODDR YAML::Syck

Priority MEDIUM 46

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00455 Published 2026-03-16 Partial fix CWE-122
TI-2025-10713 CVE-2025-11683 · GHSA-gr2g-vmxj-5cv8

Memory corruption in TODDR YAML::Syck

Priority LOW 29

YAML::Syck versions before 1.36 for Perl has missing null-terminators which causes out-of-bounds read and potential information disclosure Missing null terminators in token.c leads to but-of-bounds read which allows adja…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00307 Published 2025-10-16 Partial fix · 1.36 CWE-119