[TOMEE-4041] 4 CVE Vulnerabilities in snakeyaml-1.30.jar

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 9.0.0-M8, 8.0.12
• Fix Version/s: 9.0.0.RC1, 8.0.13
• Labels: CVE
• Assignee: Richard Zowalla
• Reporter: Yugandher reddy vonteddu
• Created: 12/Sep/22 07:08
• Updated: 13/Sep/22 06:40
• Resolved: 13/Sep/22 06:39

Description

There are 4 new CVE variabilities in snakeyaml-1.30.jar vulnerable to Denial of Service attacks (DOS)

CVE-2022-25857

CVE-2022-38749

CVE-2022-38750

CVE-2022-38751

 

Issue Links

• is related to: TOMEE-4042 Jackson 2.13.4
• is related to: TOMEE-4044 Snakeyaml 1.32