CVE-2019-1010183

6.5 mediumEPSS 1.1%

Medium (6.5) in serde-yaml project serde-yaml. EPSS 1.1% chance of exploitation in the next 30 days.

serde serde_yaml 0.6.0 to 0.8.3 is affected by: Uncontrolled Recursion. The impact is: Denial of service by aborting. The component is: from_* functions (all deserialization functions). The attack vector is: Parsing a malicious YAML file. The fixed version is: 0.8.4 and later.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-674
Published: 2019-07-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

serde-yaml_project:serde-yaml

References

https://github.com/dtolnay/serde-yaml/pull/105
https://github.com/dtolnay/serde-yaml/pull/105

Check your stack JSON