Bump snakeyaml to 1.31. Fixes CVE-2022-25857 (#33)

clj-commons · Sep 2, 2022 · 4c8abad · 4c8abad
1 parent 9c2d602
commit 4c8abad
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/project.clj b/project.clj
@@ -16,6 +16,6 @@
   :java-source-paths ["src/java"]
   :javac-options ["-target" "1.7" "-source" "1.7" "-Xlint:-options"]
   :dependencies
-  [[org.yaml/snakeyaml "1.26"]
+  [[org.yaml/snakeyaml "1.31"]
    [org.flatland/ordered "1.5.9"]]
   :profiles {:provided {:dependencies [[org.clojure/clojure "1.10.1"]]}})