apache/submarine

There is a vulnerability in SnakeYAML 1.16,upgrade recommended

QiAnXinCodeSafe opened this issue · 0 comments

QiAnXinCodeSafe commented

submarine/pom.xml

Line 100 in 3041ef2

<snakeyaml.version>1.16</snakeyaml.version>

CVE-2017-18640

Recommended upgrade version：

1.26