Update dependency PyYAML to v5 - Githubissues

snowflakedb / SnowAlert

Security Analytics Using The Snowflake Data Warehouse

Apache License 2.0

184 stars 57 forks source link

Update dependency PyYAML to v5 #591

Open mend-for-github-com[bot] opened 2 years ago

mend-for-github-com[bot] commented 2 years ago

This PR contains the following updates:

Package	Update	Change
PyYAML (source)	major	`==4.2b1` -> `==5.4`

By merging this PR, the below issues will be automatically resolved and closed:

Severity	CVSS Score	CVE	GitHub Issue
High	9.8	CVE-2020-14343	#503
High	9.8	CVE-2020-1747	#500

[ ] If you want to rebase/retry this PR, click this checkbox. ⚠ Warning: custom changes will be lost.