CVE-2018-20993: Yaml-Rust Project Yaml-Rust

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization.

Affected products

• Yaml-Rust Project Yaml-Rust: before 0.4.1 (fixed in 0.4.1)

Published 2019-08-26. Last modified 2026-06-17.