[CASSANDRA-18497] snakeyaml vulnerability: CVE-2023-2251 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Bug
Status: Resolved
Priority: Normal
Resolution: Fixed
Fix Version/s: 3.0.29, 3.11.16, 4.0.10, 4.1.2, 5.0-alpha1, 5.0
Component/s: Local/Config
Labels:
None

Bug Category:
Security
Severity:
Normal
Complexity:
Normal
Discovered By:
User Report
Platform:

All
Impacts:

None
Since Version:

NA
Source Control Link:

https://github.com/apache/cassandra/commit/4a62757624d120a0e493d9d39bcd9bf8282b4f58
Test and Documentation Plan:

Hide

run CI

Show
run CI

Description

This is failing the OWASP scan.

https://nvd.nist.gov/vuln/detail/CVE-2023-2251

Attachments

Activity

People

Assignee:: Brandon Williams

Reporter:: Brandon Williams

Authors:: Brandon Williams

Reviewers:: Stefan Miklosovic

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 04/May/23 14:01

Updated:: 12/Sep/23 13:02

Resolved:: 04/May/23 15:29