checkstyle / sonar-checkstyle

Support on Checkstyle in SonarQube. Officially transfered from https://github.com/SonarQubeCommunity/sonar-checkstyle
GNU Lesser General Public License v3.0
171 stars 70 forks source link

dependency: upgrade jackson.dataformat to 2.14.0 #450

Closed rnveach closed 1 year ago

rnveach commented 1 year ago

Upgrades jackson.dataformat to avoid some vulnerabilites in org.yaml:snakeyaml . This upgrades snakeyaml to 1.33 (from 1.27). 1.31 and 1.32 is the reported vulnerable versions.

This dependency is used in CheckstyleMetadata .

https://app.snyk.io/org/checkstyle/project/c790296d-5e05-4755-b64c-85724020c357?utm_campaign=vuln_alert&utm_medium=email&utm_source=Project&fromGitHubAuth=true