[FP]: SnakeYAML 1.32 is no longer affected by CVE-2022-38725 #4839
Description
Package URl
pkg:maven/org.yaml/[email protected]
CPE
cpe:2.3:a:snakeyaml_project:snakeyaml:1.32:::::::*
CVE
ODC Integration
{"label"=>"Maven Plugin"}
ODC Version
7.1.0
Description
There is no version range included in https://nvd.nist.gov/vuln/detail/CVE-2022-38752. But although the underlying issue https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stackoverflow-oss-fuzz-47081 was fixed in 1.32 this version is still reported as being affected.