CVE-2025-40908

Description

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

Affected Platforms

Weakness Type

CWE-552

References

• https://github.com/ingydotnet/yaml-libyaml-pm/issues/120
• https://github.com/ingydotnet/yaml-libyaml-pm/pull/121
• https://github.com/ingydotnet/yaml-libyaml-pm/pull/122