From 7f7a6f6dda924d8bd0c8bd66476a4f89336565af Mon Sep 17 00:00:00 2001 From: denismoc Date: Fri, 3 Mar 2023 12:32:37 +0000 Subject: [PATCH] Upgrading SnakeYaml to verion 2.0 to fix the vulnerability CVE-2022-1471 (#349) Co-authored-by: denis.oconnor --- build.sbt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.sbt b/build.sbt index 0a3cd99a..28793154 100644 --- a/build.sbt +++ b/build.sbt @@ -10,7 +10,7 @@ val mockito = "org.mockito" % "mockito-core" % "4.6.1" val scalaTestMockito = "org.scalatestplus" %% "mockito-4-6" % "3.2.14.0" val akkaStreamTestKit = "com.typesafe.akka" %% "akka-stream-testkit" % akkaVersion -val snakeYaml = "org.yaml" % "snakeyaml" % "1.33" +val snakeYaml = "org.yaml" % "snakeyaml" % "2.0" val commonsIO = "commons-io" % "commons-io" % "2.11.0" val commonsCodec = "commons-codec" % "commons-codec" % "1.15"