New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Migrate deprecated jackson-dataformat-yaml used in Kamelets catalog #1463

Closed

apupier opened this issue May 9, 2023 · 1 comment

Contributor

apupier commented May 9, 2023 •

edited

jackson-dataformat-yaml has been archived in 2019 https://github.com/FasterXML/jackson-dataformat-yaml

it should be replaced by jackson-dataformats-text https://github.com/FasterXML/jackson-dataformats-text

it will allow to get rid of snake-yaml 1.x as dependencies. It will then be interesting to backport to 3.x stream.

Contributor Author

apupier commented May 9, 2023

my bad, it is only that the repo was merged https://github.com/FasterXML/jackson-dataformats-text/tree/2.16/yaml

So to fix the indirect CVE, it is a matter of upgrading to 2.15+ FasterXML/jackson-dataformats-text@3a433d8

apupier closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment