Bumped snakeyaml version to address CVE-2022-25857 (#537)

Signed-off-by: Aman Khare <[email protected]> Signed-off-by: Aman Khare <[email protected]> Co-authored-by: Aman Khare <[email protected]>
opensearch-project · Sep 2, 2022 · 5ac1023 · 5ac1023
1 parent 81c2002
commit 5ac1023
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/build.gradle b/build.gradle
@@ -121,7 +121,7 @@ configurations.all {
         force 'org.apache.httpcomponents.client5:httpclient5:5.0.3'
         force 'org.apache.httpcomponents.client5:httpclient5-osgi:5.0.3'
         force 'com.fasterxml.jackson.core:jackson-databind:2.12.6'
-        force 'org.yaml:snakeyaml:1.26'
+        force 'org.yaml:snakeyaml:1.31'
         force 'org.codehaus.plexus:plexus-utils:3.0.24'
     }
 }