TODDR vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 20268

Newest CVEs

• CVE-2026-57077

  YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len

  TODDR · YAML::Syck

  High7.7
• CVE-2026-57076

  YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor

  TODDR · YAML::Syck

  High7.8
• CVE-2026-57075

  YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64dec

  TODDR · YAML::Syck

  Critical9.1
• CVE-2026-13713

  YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack

  TODDR · YAML::Syck

  Medium6.2
• CVE-2026-5089

  YAML::Syck versions before 1.38 for Perl has an out-of-bounds read

  TODDR · YAML::Syck

  High7.3
• CVE-2006-10003

  XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack

  TODDR · XML::Parser

  Critical9.8
• CVE-2006-10002

  XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes

  TODDR · XML::Parser

  Critical9.8
• CVE-2026-4177

  YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter

  TODDR · YAML::Syck

  Critical9.1
• CVE-2025-11683

  YAML::Syck versions before 1.36 for Perl has missing Null-Terminators which causes Out-of-Bounds Read and potential Information Disclosure

  TODDR · YAML::Syck

  Medium6.5