PJ Fanning created HADOOP-18658: ----------------------------------- Summary: snakeyaml dependency: upgrade to v2.0 Key: HADOOP-18658 URL: https://issues.apache.org/jira/browse/HADOOP-18658 Project: Hadoop Common Issue Type: Task Reporter: PJ Fanning
* [https://github.com/advisories/GHSA-mjmj-j48q-9wg2] * I don't think this needs to go in v3.3.5 - since this CVE affects part of snakeyaml that hadoop doesn't use -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-dev-h...@hadoop.apache.org