Skip to content
OpenAdvisories

Package · crates.io

serde_yaml

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-39vw-qp34-rmwf

    Uncontrolled recursion leads to abort in deserialization

    Affected versions of this crate did not properly check for recursion while deserializing aliases. This allows an attacker to make a YAML file with an alias referring to itself causing an abort. The flaw was corrected by checking the recursion depth.

    serde_yaml crates.io