From be7752fbd8b286041d2f67adf2ab9de62ba00d71 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Sep 2024 08:55:33 +0000 Subject: [PATCH] chore(deps): bump org.yaml:snakeyaml from 2.0 to 2.3 Bumps [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) from 2.0 to 2.3. - [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.3..snakeyaml-2.0) --- updated-dependencies: - dependency-name: org.yaml:snakeyaml dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- miw/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/miw/build.gradle b/miw/build.gradle index 3ff75754..8cbf3204 100644 --- a/miw/build.gradle +++ b/miw/build.gradle @@ -83,7 +83,7 @@ dependencies { implementation 'org.eclipse.tractusx.ssi:cx-ssi-lib:0.0.19' //Added explicitly to mitigate CVE 2022-1471 - implementation group: 'org.yaml', name: 'snakeyaml', version: '2.0' + implementation group: 'org.yaml', name: 'snakeyaml', version: '2.3' //Added explicitly to mitigate CVE 2023-24998 implementation group: 'commons-fileupload', name: 'commons-fileupload', version: '1.5'