YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-YAML-LibYAML | Jul 1, 2025 | Jun 1, 2025 |
| Amazon_linux_2023 | — | Upgrade perl-YAML-LibYAML-debuginfoUpgrade perl-YAML-LibYAMLUpgrade perl-YAML-LibYAML-debugsource | Jun 24, 2025 | Jun 1, 2025 |
| Debian | — | Upgrade libyaml-libyaml-perl | Jun 3, 2025 | Jun 1, 2025 |
| Gentoo Linux | — | Upgrade dev-perl/YAML-LibYAML. | Jun 13, 2025 | Jun 1, 2025 |
| Oracle_linux | — | Upgrade perl-YAML-LibYAML | Jun 30, 2025 | Jun 1, 2025 |
| Redhat_linux | — | Upgrade perl-YAML-LibYAML-debugsourceUpgrade perl-YAML-LibYAMLUpgrade perl-YAML-LibYAML-debuginfo | Jun 26, 2025 | Jun 1, 2025 |
| Rocky_linux | — | Upgrade perl-YAML-LibYAMLUpgrade perl-YAML-LibYAML-debuginfoUpgrade perl-YAML-LibYAML-debugsource | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade perl-YAML-LibYAML | Dec 5, 2025 | Jun 26, 2025 |
| Ubuntu | — | Upgrade libyaml-libyaml-perl | Jul 9, 2025 | Jun 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub