Skip to content

Commit 0738fd1

Browse files
authored
Update snakeyaml dependency to 2.0 to address vulnerability with 1.26 (#2947)
1 parent b8ceb73 commit 0738fd1

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

athena-elasticsearch/pom.xml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,6 +80,18 @@
8080
<groupId>org.elasticsearch.client</groupId>
8181
<artifactId>elasticsearch-rest-high-level-client</artifactId>
8282
<version>7.10.2</version>
83+
<exclusions>
84+
<exclusion>
85+
<groupId>org.yaml</groupId>
86+
<artifactId>snakeyaml</artifactId>
87+
</exclusion>
88+
</exclusions>
89+
</dependency>
90+
<dependency>
91+
<groupId>org.yaml</groupId>
92+
<artifactId>snakeyaml</artifactId>
93+
<version>2.0</version>
94+
<!-- Override to address CVE vulnerabilities in snakeyaml 1.26 from elasticsearch dependency -->
8395
</dependency>
8496
<!-- https://mvnrepository.com/artifact/software.amazon.awssdk/elasticsearch -->
8597
<dependency>

0 commit comments

Comments
 (0)