From 2d4d3e67cb90acf99146c3674a759fcd40305869 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 30 Jul 2024 10:01:28 +0000 Subject: [PATCH] chore(deps): bump org.yaml:snakeyaml from 2.0 to 2.2 Bumps [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) from 2.0 to 2.2. - [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.2..snakeyaml-2.0) --- updated-dependencies: - dependency-name: org.yaml:snakeyaml dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- miw/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/miw/build.gradle b/miw/build.gradle index 9312d372..30059aa6 100644 --- a/miw/build.gradle +++ b/miw/build.gradle @@ -99,7 +99,7 @@ dependencies { implementation 'org.eclipse.tractusx.ssi:cx-ssi-lib:0.0.19' //Added explicitly to mitigate CVE 2022-1471 - implementation group: 'org.yaml', name: 'snakeyaml', version: '2.0' + implementation group: 'org.yaml', name: 'snakeyaml', version: '2.2' //Added explicitly to mitigate CVE 2023-24998 implementation group: 'commons-fileupload', name: 'commons-fileupload', version: '1.5'