WS-2018-0546

The package serde-yaml in versions 0.6.0 through 0.8.x before 0.8.4 not properly check for recursion while deserializing aliases. This allows an attacker to make a YAML file with an alias referring to itself causing an abort...

PT-2019-11500

Name of the Vulnerable Software and Affected Versions: serde yaml versions 0.6.0 through 0.8.3 Description: The issue is related to Uncontrolled Recursion, which can cause a denial of service by aborting. This occurs when the from functions, specifically all deserialization functions, parse a...