Son Loi
Results
2
comments of
Son Loi
@mashhurs The [release notes for 8.9.0](https://www.elastic.co/guide/en/logstash/8.9/logstash-8-9-0.html) says snakeyaml has been updated to 2.0. However when I scan with Trivy it doesn't seem to be the case?
@mashhurs I've updated to 8.11.1 and I can see that snakeyaml 1.33 is still present in **logstash/logstash-core/lib/jars/snakeyaml-1.33.jar**