docker-compose-v3 icon indicating copy to clipboard operation
docker-compose-v3 copied to clipboard

Published 20 hours ago • verified publisher icon docker-client

Migrate to snakeyaml-engine

Open gesellix opened this issue 2 years ago • 0 comments

See https://bitbucket.org/snakeyaml/snakeyaml-engine/src/master/ and https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64565202

We may have to consider support for YAML 1.1 (https://bitbucket.org/snakeyaml/snakeyaml) and YAML 1.2 (https://bitbucket.org/snakeyaml/snakeyaml-engine). Docker Compose supports YAML 1.1, newer releases might already support YAML 1.2?

gesellix avatar Dec 05 '22 20:12 gesellix