CVE-2019-1010183
25.07.2019, 13:15
serde serde_yaml 0.6.0 to 0.8.3 is affected by: Uncontrolled Recursion. The impact is: Denial of service by aborting. The component is: from_* functions (all deserialization functions). The attack vector is: Parsing a malicious YAML file. The fixed version is: 0.8.4 and later.Enginsight
Vendor | Product | Version |
---|---|---|
serde-yaml_project | serde-yaml | 0.6.0 ≤ 𝑥 ≤ 0.8.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration