CVE-2017-6920: PECL YAML parser unsafe object handling

Severity: Critical

CVSS Score: 9.8

Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects safely during certain operations.