Skip to content
This repository has been archived by the owner on Dec 5, 2024. It is now read-only.

Use SafeContructor isntead of empty construtor for Snakeyaml #2153

Closed
apupier opened this issue Jan 12, 2022 · 0 comments
Closed

Use SafeContructor isntead of empty construtor for Snakeyaml #2153

apupier opened this issue Jan 12, 2022 · 0 comments
Labels
enhancement
Milestone
4.1.0

Comments

@apupier
Copy link
Contributor

apupier commented Jan 12, 2022

see https://j0vsec.com/post/cve-2021-25738/

used in:
https://github.com/eclipse/reddeer/blob/c57b05ef8a34aea8b532bb292f24875b83696710/plugins/org.eclipse.reddeer.junit/src/org/eclipse/reddeer/junit/internal/configuration/reader/JSONConfigurationReader.java#L88
@odockal odockal added this to the 4.1.0 milestone Feb 2, 2022
odockal added a commit to odockal/reddeer that referenced this issue Feb 11, 2022
@odockal
Prevent empty snake yaml constructor, fixes eclipse-archived#2153
b9bfb31 
Signed-off-by: Ondrej Dockal <odockal@redhat.com>
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
enhancement
Projects
None yet
Milestone
4.1.0
Development

No branches or pull requests
2 participants
@apupier @odockal