You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@drill.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2022/09/07 12:25:00 UTC

[jira] [Commented] (DRILL-8300) Upgrade to snakeyaml 1.31 due to cve

    [ https://issues.apache.org/jira/browse/DRILL-8300?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17601286#comment-17601286 ] 

ASF GitHub Bot commented on DRILL-8300:
---------------------------------------

pjfanning opened a new pull request, #2643:
URL: https://github.com/apache/drill/pull/2643

   ## Description
   
   Snakeyaml has a CVE




> Upgrade to snakeyaml 1.31 due to cve
> ------------------------------------
>
>                 Key: DRILL-8300
>                 URL: https://issues.apache.org/jira/browse/DRILL-8300
>             Project: Apache Drill
>          Issue Type: Bug
>            Reporter: PJ Fanning
>            Priority: Major
>
> https://github.com/advisories/GHSA-3mc7-4q67-w48m



--
This message was sent by Atlassian Jira
(v8.20.10#820010)