Skip to content

Commit ba86ab8

Browse files
Update pom.xml
The update from SnakeYAML 1.33 to 2.0 includes important security enhancements to address a known vulnerability. In previous versions of SnakeYAML, it was possible for an attacker to exploit a YAML parsing vulnerability to execute arbitrary code on the host system. SnakeYAML 2.0 includes several changes to mitigate this vulnerability. One of the key changes is the introduction of a new default parser, which is now based on the Jackson YAML parser. This new parser is designed to be more secure and resistant to malicious input than the previous parser.
1 parent aa40908 commit ba86ab8

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,7 @@
8383
<sonar.host.url>https://sonarcloud.io</sonar.host.url>
8484
<sonar.moduleKey>${project.artifactId}</sonar.moduleKey>
8585

86-
<swagger-parser.version>2.1.12</swagger-parser.version>
86+
<swagger-parser.version>2.1.13</swagger-parser.version>
8787
<slf4j.version>2.0.7</slf4j.version>
8888
</properties>
8989

0 commit comments

Comments
 (0)