[
https://issues.apache.org/jira/browse/FLINK-31815?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Gyula Fora closed FLINK-31815.
------------------------------
Resolution: Fixed
>From the operator side this is now fixed in
>f23e38d6505e68535906cd6a7d77ca94fa1758e0.
We still pull the old snakeyaml for flink standalone due to the old flink
fabric8 usage.
That has to be fixed as part of:
https://issues.apache.org/jira/browse/FLINK-31997
> Fixing the container vulnerability by upgrade the SnakeYaml Maven dependency
> ----------------------------------------------------------------------------
>
> Key: FLINK-31815
> URL: https://issues.apache.org/jira/browse/FLINK-31815
> Project: Flink
> Issue Type: Improvement
> Components: Kubernetes Operator
> Affects Versions: kubernetes-operator-1.5.0
> Reporter: Jeff Yang
> Priority: Major
> Labels: pull-request-available
> Fix For: kubernetes-operator-1.5.0
>
>
> _Fix the container vulnerability, here is
> [cve|https://github.com/advisories/GHSA-mjmj-j48q-9wg2]._
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
