An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-20993.json"