Unverified Commit d555c02b by Rahul Nandi Committed by GitHub

ATLAS-3940 : Upgrade snakeyaml to a version without CVE-2017-18640 (#110)

parent 01e9ccef
...@@ -1665,6 +1665,13 @@ ...@@ -1665,6 +1665,13 @@
<artifactId>zkclient</artifactId> <artifactId>zkclient</artifactId>
<version>${zkclient.version}</version> <version>${zkclient.version}</version>
</dependency> </dependency>
<!-- Fix for cassandra-all tranitive dependency CVE-2017-18640 : https://nvd.nist.gov/vuln/detail/CVE-2017-18640 -->
<dependency>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
<version>1.26</version>
</dependency>
</dependencies> </dependencies>
</dependencyManagement> </dependencyManagement>
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment