{
	"document":{
		"aggregate_severity":{
			"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
			"text":"None"
		},
		"category":"csaf_vex",
		"csaf_version":"2.0",
		"distribution":{
			"tlp":{
				"label":"WHITE",
				"url":"https:/www.first.org/tlp/"
			}
		},
		"lang":"en",
		"notes":[
			{
				"text":"perl-YAML security update",
				"category":"general",
				"title":"Synopsis"
			},
			{
				"text":"An update for perl-YAML is now available for openEuler-24.03-LTS-SP3",
				"category":"general",
				"title":"Summary"
			},
			{
				"text":"The YAML.pm module implements a YAML Loader and Dumper based on the YAML 1.0 specification. http://www.yaml.org/spec/ YAML is a generic data serialization language that is optimized for human readability.It can be used to express the data structures of most modern programming languages. (Including Perl!!!) For information on the YAML syntax, please refer to the YAML specification.\n\nSecurity Fix(es):\n\nThe MPG WordPress plugin prior to 4.1.8 does not sanitize and escape parameters before reflecting them back into the response, allowing an unauthenticated attacker to perform reflected cross-site scripting against a victim who is induced to send a crafted request.(CVE-2026-63676)",
				"category":"general",
				"title":"Description"
			},
			{
				"text":"An update for perl-YAML is now available for openEuler-24.03-LTS-SP3.\n\nopenEuler Security has rated this update as having a security impact of none. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.",
				"category":"general",
				"title":"Topic"
			},
			{
				"text":"Low",
				"category":"general",
				"title":"Severity"
			},
			{
				"text":"perl-YAML",
				"category":"general",
				"title":"Affected Component"
			}
		],
		"publisher":{
			"issuing_authority":"openEuler security committee",
			"name":"openEuler",
			"namespace":"https://www.openeuler.org",
			"contact_details":"openeuler-security@openeuler.org",
			"category":"vendor"
		},
		"references":[
			{
				"summary":"openEuler-SA-2026-3239",
				"category":"self",
				"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3239"
			},
			{
				"summary":"CVE-2026-63676",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63676&packageName=perl-YAML"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63676"
			},
			{
				"summary":"openEuler-SA-2026-3239 vex file",
				"category":"self",
				"url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-3239.json"
			}
		],
		"title":"An update for perl-YAML is now available for openEuler-24.03-LTS-SP3",
		"tracking":{
			"initial_release_date":"2026-08-11T10:45:49+08:00",
			"revision_history":[
				{
					"date":"2026-08-11T10:45:49+08:00",
					"summary":"Initial",
					"number":"1.0.0"
				}
			],
			"generator":{
				"date":"2026-08-11T10:45:49+08:00",
				"engine":{
					"name":"openEuler CSAF Tool V1.0"
				}
			},
			"current_release_date":"2026-08-11T10:45:49+08:00",
			"id":"openEuler-SA-2026-3239",
			"version":"1.0.0",
			"status":"final"
		}
	},
	"product_tree":{
		"branches":[
			{
				"name":"openEuler",
				"category":"vendor",
				"branches":[
					{
						"name":"openEuler",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"openEuler-24.03-LTS-SP3",
									"name":"openEuler-24.03-LTS-SP3"
								},
								"name":"openEuler-24.03-LTS-SP3",
								"category":"product_version"
							}
						],
						"category":"product_name"
					},
					{
						"name":"noarch",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"perl-YAML-1.321-1.oe2403sp3.noarch.rpm",
									"name":"perl-YAML-1.321-1.oe2403sp3.noarch.rpm"
								},
								"name":"perl-YAML-1.321-1.oe2403sp3.noarch.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"perl-YAML-help-1.321-1.oe2403sp3.noarch.rpm",
									"name":"perl-YAML-help-1.321-1.oe2403sp3.noarch.rpm"
								},
								"name":"perl-YAML-help-1.321-1.oe2403sp3.noarch.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"src",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3"
									},
									"product_id":"perl-YAML-1.321-1.oe2403sp3.src.rpm",
									"name":"perl-YAML-1.321-1.oe2403sp3.src.rpm"
								},
								"name":"perl-YAML-1.321-1.oe2403sp3.src.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					}
				]
			}
		],
		"relationships":[
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"perl-YAML-1.321-1.oe2403sp3.noarch.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:perl-YAML-1.321-1.oe2403sp3.noarch",
					"name":"perl-YAML-1.321-1.oe2403sp3.noarch as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"perl-YAML-help-1.321-1.oe2403sp3.noarch.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:perl-YAML-help-1.321-1.oe2403sp3.noarch",
					"name":"perl-YAML-help-1.321-1.oe2403sp3.noarch as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP3",
				"product_reference":"perl-YAML-1.321-1.oe2403sp3.src.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP3:perl-YAML-1.321-1.oe2403sp3.src",
					"name":"perl-YAML-1.321-1.oe2403sp3.src as a component of openEuler-24.03-LTS-SP3"
				},
				"category":"default_component_of"
			}
		]
	},
	"vulnerabilities":[
		{
			"cve":"CVE-2026-63676",
			"notes":[
				{
					"text":"The MPG WordPress plugin prior to 4.1.8 does not sanitize and escape parameters before reflecting them back into the response, allowing an unauthenticated attacker to perform reflected cross-site scripting against a victim who is induced to send a crafted request.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP3:perl-YAML-1.321-1.oe2403sp3.noarch",
					"openEuler-24.03-LTS-SP3:perl-YAML-help-1.321-1.oe2403sp3.noarch",
					"openEuler-24.03-LTS-SP3:perl-YAML-1.321-1.oe2403sp3.src"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP3:perl-YAML-1.321-1.oe2403sp3.noarch",
						"openEuler-24.03-LTS-SP3:perl-YAML-help-1.321-1.oe2403sp3.noarch",
						"openEuler-24.03-LTS-SP3:perl-YAML-1.321-1.oe2403sp3.src"
					],
					"details":"perl-YAML security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3239"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"NONE",
						"baseScore":0.0,
						"vectorString":"CVSS:3.1/",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP3:perl-YAML-1.321-1.oe2403sp3.noarch",
						"openEuler-24.03-LTS-SP3:perl-YAML-help-1.321-1.oe2403sp3.noarch",
						"openEuler-24.03-LTS-SP3:perl-YAML-1.321-1.oe2403sp3.src"
					]
				}
			],
			"threats":[
				{
					"details":"None",
					"category":"impact"
				}
			],
			"title":"CVE-2026-63676"
		}
	]
}