CVE-2018-20993 - An issue was discovered in the yaml-rust crate before 0.4.1 for Rust

HIGH

An issue was discovered in the yaml-rust crate before 0.4.1 for Rust

Published Aug 26, 2019

7.5

HIGH

CVSS 3.0

EPSS 1.41%

An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization.

No remediation recorded yet.

Weaknesses (1)

CWE-674

Link	Providers	Tags
https://github.com/advisories/GHSA-hv87-47h9-jcvq		Advisory
https://github.com/chyh1990/yaml-rust/commit/d61b49cb90391fc4f7f72a1abe597476c8651a07
https://github.com/chyh1990/yaml-rust/pull/109
https://nvd.nist.gov/vuln/detail/CVE-2018-20993
https://rustsec.org/advisories/RUSTSEC-2018-0006.html		x_refsource_MISCPatchThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Aug 26, 2019

Updated Aug 5, 2024

Reserved Aug 25, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a