ZeroHour

Vulnerabilities

2 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2018-20993
An issue was discovered in the yaml-rust crate before 0.4.1 for Rust.

An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization.

NVD description · AI analysis pending
7.51%
  • yaml-rust project yaml-rust
CVE-2019-1010182
yaml-rust 0.4.0 and earlier is affected by:

yaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion. The impact is: Denial of service by impossible to catch abort. The component is: YamlLoader::load_from_str function. The attack vector is: Parsing of a malicious YAML document. The fixed version is: 0.4.1 and later.

NVD description · AI analysis pending
6.51%
  • yaml-rust project yaml-rust