Hello, we get a lot of security warnings because o...
# detektp
PJ Walstrom
08/30/2022, 6:44 AMHello, we get a lot of security warnings because of a DoS vulnerability detected in snakeyaml 1.30 (see https://security.snyk.io/vuln/SNYK-JAVA-ORGYAML-2806360), in use by detekt 1.21.0. I can see that this is fixed in https://github.com/detekt/detekt/pull/5250. How is the procedure to release a new version of detekt? Could that be done soon?
t
Tim Oltjenbruns
08/31/2022, 7:08 PMIf you clone Detekt and attach it as a gradle composite build, you can use the version in the PR immediately, if necessary.
Tim Oltjenbruns
08/31/2022, 7:09 PMI can't answer for how soon it may release, but hopefully this helps if this is urgent for you.
5 Views