Lucene search

K
osvGoogleOSV:GHSA-HV87-47H9-JCVQ
HistoryAug 25, 2021 - 8:43 p.m.

Uncontrolled recursion in rust-yaml

2021-08-2520:43:13
Google
osv.dev
5
rust
yaml
recursion
deserialization
security flaw

EPSS

0.001

Percentile

44.0%

Affected versions of this crate did not prevent deep recursion while deserializing data structures. This allows an attacker to make a YAML file with deeply nested structures that causes an abort while deserializing it. The flaw was corrected by checking the recursion depth.

EPSS

0.001

Percentile

44.0%