CVE-2019-25777 debrief based on the supplied source corpus. The vulnerability is in YAML versions before 1.27_001 for Perl, allowing a loaded perl/glob document to replace any package variable, potentially leading to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts the name, so the target can be @INC or YAML's own load op [truncated]
CVE-2017-20285 is a vulnerability in YAML versions before 1.30 for Perl, which allows a loaded document to trigger the DESTROY method of arbitrary classes. This can lead to deletion of a directory tree when File::Temp::Dir from core Perl is used. The vulnerability exists due to the way YAML documents are processed, allowing an attacker to manipulate the DESTROY method of arbitrary classes. Defenders and d [truncated]
