Vulnerability Details CVE-2025-40908
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 15.4%
CVSS Severity
CVSS v3 Score 9.1
References
Products affected by CVE-2025-40908
-
cpe:2.3:a:ingydotnet:yaml-libyaml:*