Skip to content

Conversation

@pjfanning
Copy link
Member

Description

Snakeyaml has a CVE

Copy link
Contributor

@cgivre cgivre left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM +1

@jnturton jnturton changed the title DRILL-8300: snakeyaml 1.31 due to cve DRILL-8300: Upgrade to snakeyaml 1.31 due to cve Sep 8, 2022
@jnturton jnturton merged commit d754076 into apache:master Sep 8, 2022
@jnturton jnturton added the backport-to-stable This bug fix is applicable to the latest stable release and should be considered for inclusion there label Sep 8, 2022
@pjfanning pjfanning deleted the DRILL-8300-snakeyaml branch September 8, 2022 09:57
kingswanwho pushed a commit to kingswanwho/drill that referenced this pull request Nov 8, 2022
ashevchuk123 pushed a commit to mapr/incubator-drill that referenced this pull request Oct 28, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport-to-stable This bug fix is applicable to the latest stable release and should be considered for inclusion there dependencies security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants