Skip to content

Commit 2db9555

Browse files
committed
Uses current version of snakeyaml
We only use snakeyaml transitively, but we want to use the current version due to existing CVEs.
1 parent d07dceb commit 2db9555

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

build.gradle

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,10 @@ dependencies {
3131
'org.springframework.boot:spring-boot-starter-actuator',
3232
'org.springframework.boot:spring-boot-starter-validation',
3333

34+
// We only use snakeyaml transitively, but we want to force the
35+
// current version due to existing CVEs.
36+
'org.yaml:snakeyaml:2.0',
37+
3438
'org.apache.commons:commons-text:1.10.0',
3539
'org.influxdb:influxdb-java'
3640
)

0 commit comments

Comments
 (0)