A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope.
What DESTROY does depends on the classes the process has loaded. With File::Temp::Dir from core Perl, it can delete a directory tree the document names.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
Upgrade to YAML 1.30 or later.
Vendor Workaround
For deployments that cannot upgrade to YAML 1.30, set $YAML::LoadBlessed = 0 before loading untrusted input. The option exists from YAML 1.25.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 05 Oct 2026 07:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope. What DESTROY does depends on the classes the process has loaded. With File::Temp::Dir from core Perl, it can delete a directory tree the document names. | |
| Title | YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes | |
| Weaknesses | CWE-470 CWE-502 |
|
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: CPANSec
Published:
Updated: 2026-10-05T06:49:17.583Z
Reserved: 2026-09-21T21:18:28.499Z
Link: CVE-2017-20285
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-05T07:16:29.017
Modified: 2026-10-05T07:16:29.017
Link: CVE-2017-20285
Redhat
No data.
OpenCVE Enrichment
No data.