crates.io/yaml-rust CVE-2018-20993: high 7.5, EPSS 1.41%

Uncontrolled recursion leads to abort in deserialization

Action: Upgrade yaml-rust to 0.4.1 or later.

cargo update -p yaml-rust --precise 0.4.1

Affected

Fixed versions

Sources

• osv: RUSTSEC-2018-0006
• https://crates.io/crates/yaml-rust
• https://rustsec.org/advisories/RUSTSEC-2018-0006.html
• https://github.com/chyh1990/yaml-rust/pull/109

CVE-2018-20993 · published 2018-09-17T12:00:00Z · modified 2023-11-08T04:00:13.493088Z · JSON