Fix vulnerabilities reported by ossindex - Githubissues

exasol / error-code-crawler-maven-plugin

Validator and crawler for exasol-error-codes in Java code

MIT License

1 stars 1 forks source link

Fix vulnerabilities reported by ossindex #78

Closed ckunki closed 1 year ago

ckunki commented 1 year ago

Fix vulnerabilities reported by ossindex

org.yaml:snakeyaml:jar:1.30 in compile
- CVE-2022-25857, severity CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion') (7.5)
- CVE-2022-38749, severity CWE-787: Out-of-bounds Write (6.5)
- CVE-2022-38751, severity CWE-787: Out-of-bounds Write (6.5)
- CVE-2022-38752, severity CWE-787: Out-of-bounds Write (6.5)
- CVE-2022-38750, severity CWE-787: Out-of-bounds Write (5.5)

Available is 1.33

<dependency>
    <groupId>org.yaml</groupId>
    <artifactId>snakeyaml</artifactId>
    <version>1.33</version>
</dependency>