GHSA-39vw-qp34-rmwf: Uncontrolled recursion leads to abort in deserialization
(updated )
Affected versions of this crate did not properly check for recursion while deserializing aliases. This allows an attacker to make a YAML file with an alias referring to itself causing an abort. The flaw was corrected by checking the recursion depth.
References
Detect and mitigate GHSA-39vw-qp34-rmwf with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →