[CASSANDRA-18497] snakeyaml vulnerability: CVE-2023-2251

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 3.0.29, 3.11.16, 4.0.10, 4.1.2, 5.0-alpha1, 5.0
• Component/s: Local/Config
• Bug Category: Security
• Severity: Normal
• Complexity: Normal
• Discovered By: User Report
• Platform: All
• Since Version: NA

Source Control Link

https://github.com/apache/cassandra/commit/4a62757624d120a0e493d9d39bcd9bf8282b4f58

Test and Documentation Plan

run CI

• Assignee: Brandon Williams
• Reporter: Brandon Williams

Authors

Brandon Williams

Reviewers

Stefan Miklosovic

• Created: 04/May/23 14:01
• Updated: 12/Sep/23 13:02
• Resolved: 04/May/23 15:29

Description

This is failing the OWASP scan.

https://nvd.nist.gov/vuln/detail/CVE-2023-2251