Fix #187

FasterXML · Apr 2, 2020 · 5c87aed · 5c87aed
1 parent bc634e6
commit 5c87aed
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
@@ -8,6 +8,10 @@ Modules:
 === Releases ===
 ------------------------------------------------------------------------
 
+2.9.10.1 (not released)
+
+#187: Update to SnakeYAML 1.26 to address CVE-2017-18640
+
 2.9.10 (21-Sep-2019)
 
 No changes since 2.9.9

diff --git a/yaml/pom.xml b/yaml/pom.xml
@@ -30,7 +30,7 @@
     <dependency>
       <groupId>org.yaml</groupId>
       <artifactId>snakeyaml</artifactId>
-      <version>1.23</version>
+      <version>1.26</version>
     </dependency>
 
      <!-- and for testing need annotations -->