libyaml-syck-perl: YAML::Syck versions before 1.36 for Perl has missing null-terminators whichcauses out-of-bounds read and potential in...

YAML::Syck versions before 1.36 for Perl has missing null-terminators whichcauses out-of-bounds read and potential information disclosureMissing null terminators in token.c leads to but-of-bounds read whichallows adjacent variable to be readThe issue is seen with complex YAML files with a hash of all keys and emptyvalues.  There is no indication that the issue leads to accessing memoryoutside that allocated to the module.

Where it's fixed