Timothy Legge

CVE-2025-11683: YAML::Syck versions before 1.36 for Perl has missing null-terminators which causes out-of-bounds read and potential information disclosure

https://lists.security.metacpan.org/cve-announce/msg/33568427/

#perl #security #cve @cpansec@fosstodon.org

CVE-2024-58040: Crypt::RandomEncryption for Perl uses insecure rand() function during encryption

via @cpansec@fosstodon.org

#perl #security #cve

https://lists.security.metacpan.org/cve-announce/msg/33149955/