CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-20993
https://notcve.org/view.php?id=CVE-2018-20993
An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization. Se descubrió un problema en el paquete (crate) yaml-rust versiones anteriores a 0.4.1 para Rust. Se presenta una recursión no controlada durante la deserialización. • https://rustsec.org/advisories/RUSTSEC-2018-0006.html • CWE-674: Uncontrolled Recursion •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-1010182
https://notcve.org/view.php?id=CVE-2019-1010182
yaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion. The impact is: Denial of service by impossible to catch abort. The component is: YamlLoader::load_from_str function. The attack vector is: Parsing of a malicious YAML document. The fixed version is: 0.4.1 and later. yaml-rust versión 0.4.0 y versiones anteriores esta afectado por: Recursión no controlada. • https://github.com/chyh1990/yaml-rust/pull/109 • CWE-674: Uncontrolled Recursion •