Skip to content

Conversation

@cmuchinsky
Copy link

@cmuchinsky cmuchinsky commented Mar 21, 2023

Fixes #1899

@AlexandrosMor
Copy link

AlexandrosMor commented Mar 21, 2023

Here I am tagging the swagger-api members to review the pr @char0n @frantuma @gracekarina @HugoMario @ponelat
Good job @cmuchinsky !
We need these code changes so we can update snakeyaml 1.33 to 2.0 because of the known vulnerability

@cmuchinsky
Copy link
Author

Closing as 27a690e appears to take care of it

@cmuchinsky cmuchinsky closed this Mar 26, 2023
@oscarsan
Copy link

oscarsan commented Mar 30, 2023

@cmuchinsky in which way 27a69e is fixing the issue? I still have the error when forcing snake-2.0 on io.swagger.parser.v3:swagger-parser 2.0.5

java.lang.NoSuchMethodError: 'void org.yaml.snakeyaml.parser.ParserImpl.<init>(org.yaml.snakeyaml.reader.StreamReader)

@cmuchinsky
Copy link
Author

@cmuchinsky in which way 27a69e is fixing the issue? I still have the error when forcing snake-2.0 on io.swagger.parser.v3:swagger-parser 2.0.5

java.lang.NoSuchMethodError: 'void org.yaml.snakeyaml.parser.ParserImpl.<init>(org.yaml.snakeyaml.reader.StreamReader)

you must upgrade to swagger-parser 2.1.13

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Yaml parsing fails with snakeyaml 2.0

3 participants