liubao68 commented on issue #1935: URL: https://github.com/apache/servicecomb-java-chassis/issues/1935#issuecomment-688845857
java-chassis使用sankeyaml的场景非常简单，用于处理内部的配置变更，不涉及该漏洞， 这个漏洞描述的版本是 SnakeYAML 1.18 。 java-chassis会定期提供三方件升级。 如果有其他三方件升级要求， 也可以给java-chassis提交 issue。 ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
