Karaf folks,

We have a Project with Karaf 4.2.16 and java 8, in the project is used the CXF 
features and looks like this is including the snakeyaml 1.33, we want to remove 
or upgrade it to avoid getting the CVE-2022-1471 vulnerability

In Karaf exist a way to solve this?


Just FYI , this is the library
<!-- https://mvnrepository.com/artifact/org.yaml/snakeyaml -->
<dependency>
    <groupId>org.yaml</groupId>
    <artifactId>snakeyaml</artifactId>
    <version>2.0</version>
</dependency>

Reply via email to