Re: Request to remediate vulnerabilities

[Andrey Somov]

Dear Mani,

(please do not send personal e-mails)

This is a false positive

https://bitbucket.org/snakeyaml/snakeyaml/issues/548/nist-nvd-entry-cve-2022-38752

https://github.com/jeremylong/DependencyCheck/issues/4839

Cheers,

Andrey

On Wed, Sep 14, 2022 at 5:55 PM Mani Sankar Karanam <mkar...@salesforce.com> wrote:

Hello Team !!!
Thank you for providing the open source YMAL parser SnakeYAML. We are currently using SnakeYAML jar version 1.31. It has below Common Vulnerabilities and Exposures(CVEs) associated with it.

CVE-2022-38752

Can you please provide us the timeline by when these vulnerabilities can be remediated. Thank you !!

Regards,
Mani Sankar