Skip to content

Commit 599f89d

Browse files
headiushsbt
authored andcommitted
Update SnakeYAML-Engine to 3.0.1
There are two CVEs in Guava, which is a test-scoped dependency of this library. Guava is not shipped with the library so these CVEs do not affect users, but the dependency may trigger security tools. We update to avoid this false positive. https://www.cve.org/CVERecord?id=CVE-2023-2976 https://www.cve.org/CVERecord?id=CVE-2020-8908 Fixes #780
1 parent 9daae73 commit 599f89d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

lib/psych/versions.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,6 @@ module Psych
55
VERSION = '5.3.1'
66

77
if RUBY_ENGINE == 'jruby'
8-
DEFAULT_SNAKEYAML_VERSION = '2.10'.freeze
8+
DEFAULT_SNAKEYAML_VERSION = '3.0.1'.freeze
99
end
1010
end

0 commit comments

Comments
 (0)