Merge pull request #27 from RickMoynihan/master

Fixes #26 CVE-2017-18640
kiranshila · Jan 10, 2022 · 7fde68a · 7fde68a
2 parents 80931ea + 8391268
commit 7fde68a
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/deps.edn b/deps.edn
@@ -2,6 +2,7 @@
 
  :deps {org.clojure/clojure {:mvn/version "1.10.3"}
         io.forward/yaml {:mvn/version "1.0.11"}
+        org.yaml/snakeyaml {:mvn/version "1.30"} ;; bump transitive dep of io.forward/yaml to avoid CVE-2017-18640
         com.vladsch.flexmark/flexmark {:mvn/version "0.62.2"}
         com.vladsch.flexmark/flexmark-ext-tables {:mvn/version "0.62.2"}
         com.vladsch.flexmark/flexmark-ext-footnotes {:mvn/version "0.62.2"}