Fluid Attacks Database

Description

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	libyaml-libyaml-perl	=0.86+ds-1 \|\| >=0 <0.86+ds-1+deb12u1	0.86+ds-1+deb12u1
debian 11	libyaml-libyaml-perl	=0.82+repack-1 \|\| =0.83+ds-1 \|\| =0.84+ds-1 \|\| =0.86+ds-1 \|\| =0.89+ds-1 \|\| =0.902.0+ds-1 \|\| =0.902.0+ds-2 \|\| =0.903.0+ds-1 \|\| =0.904.0+ds-1	-
debian 13	libyaml-libyaml-perl	>=0 <0.903.0+ds-1	0.903.0+ds-1
debian 14	libyaml-libyaml-perl	>=0 <0.903.0+ds-1	0.903.0+ds-1
rpm rhel9	perl-YAML-LibYAML	<1:0.82-6.1.el9_6	1:0.82-6.1.el9_6
rpm rhel8	perl-YAML-LibYAML	<1:0.70-2.el8_10	1:0.70-2.el8_10
rpm rhel9.4	perl-YAML-LibYAML	<1:0.82-6.el9_4.1	1:0.82-6.el9_4.1

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.