Bump snakeyaml to 2.0. Fix [CVE-2022-1471](https://www.cve.org/CVERec…

…ord?id=CVE-2022-1471) (#2479) Signed-off-by: VEDELAGO MIORA <miora.ralambotiana@rte-france.com>
powsybl · Mar 2, 2023 · 4e7eb72 · 4e7eb72
1 parent f36ed54
commit 4e7eb72
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/commons/src/main/java/com/powsybl/commons/config/BaseVoltagesConfig.java b/commons/src/main/java/com/powsybl/commons/config/BaseVoltagesConfig.java
@@ -9,6 +9,7 @@
 import com.powsybl.commons.PowsyblException;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
+import org.yaml.snakeyaml.LoaderOptions;
 import org.yaml.snakeyaml.Yaml;
 import org.yaml.snakeyaml.constructor.Constructor;
 import org.yaml.snakeyaml.error.YAMLException;
@@ -136,7 +137,7 @@ private static class BaseVoltagesConfigConstructor extends Constructor {
         private static final List<String> BASE_VOLTAGE_CONFIG_REQUIRED_FIELDS = Arrays.asList("name", "minValue", "maxValue", "profile");
 
         BaseVoltagesConfigConstructor() {
-            super(BaseVoltagesConfig.class);
+            super(BaseVoltagesConfig.class, new LoaderOptions());
         }
 
         @Override

diff --git a/pom.xml b/pom.xml
@@ -125,7 +125,7 @@
         <rdf4j.version>4.2.2</rdf4j.version>
         <sirocco.version>1.0</sirocco.version>
         <slf4j.version>1.7.22</slf4j.version>
-        <snakeyaml.version>1.33</snakeyaml.version>
+        <snakeyaml.version>2.0</snakeyaml.version>
         <staxutils.version>20070216</staxutils.version>
         <stringtemplate.version>4.3.4</stringtemplate.version>
         <testcontainers.version>1.17.6</testcontainers.version>