CVE-2019-1010183: Serde-Yaml Project Serde-Yaml

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

serde serde_yaml 0.6.0 to 0.8.3 is affected by: Uncontrolled Recursion. The impact is: Denial of service by aborting. The component is: from_* functions (all deserialization functions). The attack vector is: Parsing a malicious YAML file. The fixed version is: 0.8.4 and later.

Affected products

• Serde-Yaml Project Serde-Yaml: from 0.6.0, up to and including 0.8.3

Published 2019-07-25. Last modified 2026-06-17.