An update for perl-YAML is now available for openEuler-20.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3237 Final 1.0 1.0 2026-08-07 Initial 2026-08-07 2026-08-07 openEuler SA Tool V1.0 2026-08-07 perl-YAML security update An update for perl-YAML is now available for openEuler-20.03-LTS-SP4 The YAML.pm module implements a YAML Loader and Dumper based on the YAML 1.0 specification. http://www.yaml.org/spec/ YAML is a generic data serialization language that is optimized for human readability.It can be used to express the data structures of most modern programming languages. (Including Perl!!!) For information on the YAML syntax, please refer to the YAML specification. Security Fix(es): The MPG WordPress plugin prior to 4.1.8 does not sanitize and escape parameters before reflecting them back into the response, allowing an unauthenticated attacker to perform reflected cross-site scripting against a victim who is induced to send a crafted request.(CVE-2026-63676) An update for perl-YAML is now available for openEuler-20.03-LTS-SP4. openEuler Security has rated this update as having a security impact of none. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Low perl-YAML https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3237 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63676 https://nvd.nist.gov/vuln/detail/CVE-2026-63676 openEuler-20.03-LTS-SP4 perl-YAML-1.26-7.oe2003sp4.noarch.rpm perl-YAML-help-1.26-7.oe2003sp4.noarch.rpm perl-YAML-1.26-7.oe2003sp4.src.rpm The MPG WordPress plugin prior to 4.1.8 does not sanitize and escape parameters before reflecting them back into the response, allowing an unauthenticated attacker to perform reflected cross-site scripting against a victim who is induced to send a crafted request. 2026-08-07 CVE-2026-63676 openEuler-20.03-LTS-SP4 None 0.0 perl-YAML security update 2026-08-07 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3237