In order to resolve CVE-2022-1471 it is necessary to update snakeyaml to at least version 2.0.
Doing this causes this line to fail at runtime as there is no longer a no args constructor for SafeConstructor
|
final Yaml yamlMapper = new Yaml(new SafeConstructor()); |
A potential fix is to add an argument to SafeConstructor like
new SafeConstructor(new LoaderOptions())
In order to resolve CVE-2022-1471 it is necessary to update snakeyaml to at least version 2.0.
Doing this causes this line to fail at runtime as there is no longer a no args constructor for SafeConstructor
vertx-config/vertx-config-yaml/src/main/java/io/vertx/config/yaml/YamlProcessor.java
Line 56 in 7a44153
A potential fix is to add an argument to SafeConstructor like