https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T16:01:41.356518+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-20285 CVE-2017-20285 — YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes 2026-10-22T16:01:41.358870+00:00

Affected: YAML

YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes.

A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope.

What DESTROY does depends on the classes the process has loaded. With File::Temp::Dir from core Perl, it can delete a directory tree the document names.

 https://cve.radiocsirt.org/vuln/usn-8925-1 USN-8925-1 — libyaml-perl vulnerabilities 2026-10-22T16:01:41.358932+00:00

Affected: Ubuntu:Pro:16.04:LTS: libyaml-perl, Ubuntu:Pro:18.04:LTS: libyaml-perl, Ubuntu:Pro:20.04:LTS: libyaml-perl, Ubuntu:22.04:LTS: libyaml-perl, Ubuntu:24.04:LTS: libyaml-perl, Ubuntu:Pro:26.04:LTS: libyaml-perl

Dominique Dumont discovered that YAML-LibYAML did not correctly handle certain reflection operations. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to delete files. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2017-20285)

It was discovered that YAML-LibYAML did not correctly handle parsing certain documents. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-25777)

It was discovered that YAML-LibYAML contained a regular expression susceptible to catastrophic backtracking. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. (CVE-2026-63676)