New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade snakeyaml dependency with vulnerabilities #279

Closed

a6dulaleem opened this issue Jun 21, 2023 · 0 comments · Fixed by #280

Assignees

Contributor

a6dulaleem commented Jun 21, 2023

Problem description
Upgrade dependencies in Schema registry which could have possible CVEs

Library	CVE Version
snakeyaml	2.0

Problem location
gradle.properties

Suggestions for an improvement
upgrade lib versions to suggested versions to mitigate the CVEs.

a6dulaleem self-assigned this

a6dulaleem mentioned this issue

Issue 279: change snakeyaml version to fix CVE-2022-1471. #280

Merged

crazyzhou closed this as completed in #280

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment