Out-of-bounds read in YAML::Syck for Perl (CVE-2026-57077)

YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. During block-scalar lexing at a document boundary the scan runs one byte past the heap lexer buffer. Any caller that runs Load or LoadFile on an untrusted document with a block scalar at a document boundary reaches the over-read. Affected versions: - before 1.47 We recommend updating to: 1.47. CVSS 7.7 · our assessment: this_week Reference: https://seclists.org/oss-sec/2026/q3/161 Details: https://vuln.today/cve/CVE-2026-57077