search

jsevellec / cassandra-unit

Utility tool to load Data into Cassandra to help you writing good isolated JUnit Test into your application
GNU Lesser General Public License v3.0
425 stars 0 forks source link

Support for snakeyaml 2.0 due to various CVEs #343

Open tarunkalra7 opened 5 months ago

tarunkalra7 commented 5 months ago

Hi, We are using the cassandra-unit-shaded in our project and one of the dependencies i.e. snakeyaml is being flagged as vulnerability (as there are multiple CVEs filed against the 1.11 version). Would like to know if you are going to uplift and support the version of snakeyaml to 2.x in any future release?

Thanks Tarun

tarunkalra7 commented 3 months ago

Hi Team, Is there any update for this?

tarunkalra7 commented 2 months ago

@jsevellec Could you provide any update?

tarunkalra7 commented 2 months ago

Hi Team, Any update on this?