Upgrading org.yaml:snakeyaml 1 to 2
Unknown1.33 → 2.7Security1
SecurityHighSnakeYaml Constructor Deserialization Remote Code ExecutionGHSA-mjmj-j48q-9wg2 · CVE-2022-1471 ↗
UnknownUpgrade verdict
DepDelta hasn't looked for this range's notes yet, so breaking changes can't be ruled out.
In plain terms
- DepDelta hasn't finished looking for the notes in this range, so it can't rule out breaking changes yet.
Must act 1 item needs code or config changes
What you must change
Security1
SnakeYaml Constructor Deserialization Remote Code Execution
HighAPI changes
Generated by DepDelta from published JVM bytecode. Not mixed with prose notes.
- removed:
method DumperOptions.FlowStyle.getStyleBoolean(): Boolean - removed:
method TypeDescription.getListPropertyType(String): Class - removed:
method TypeDescription.getMapKeyType(String): Class - removed:
method TypeDescription.getMapValueType(String): Class - removed:
static method DumperOptions.FlowStyle.fromBoolean(Boolean): DumperOptions.FlowStyle - added:
ctor Yaml(LoaderOptions, DumperOptions) - added:
method DumperOptions.isDereferenceAliases(): boolean - added:
method DumperOptions.setDereferenceAliases(boolean): void - added:
method LoaderOptions.getTagInspector(): TagInspector - added:
method LoaderOptions.isMergeOnCompose(): boolean - added:
method LoaderOptions.isWarnOnDuplicateKeys(): boolean - added:
method LoaderOptions.setMergeOnCompose(boolean): void - added:
method LoaderOptions.setTagInspector(TagInspector): void - added:
method LoaderOptions.setWarnOnDuplicateKeys(boolean): void - added:
static field DumperOptions.ScalarStyle.JSON_SCALAR_STYLE: DumperOptions.ScalarStyle
- removed:
ctor Composer(Parser, Resolver) - added:
ctor ComposerException(String, Mark) - added:
method Composer.asMappingNode(Node): MappingNode
- removed:
ctor BaseConstructor() - removed:
ctor Constructor() - removed:
ctor Constructor(Class) - removed:
ctor Constructor(String) - removed:
ctor Constructor(TypeDescription) - removed:
ctor SafeConstructor() - changed:
ctor CustomClassLoaderConstructor(Class, ClassLoader) → ctor CustomClassLoaderConstructor(Class, ClassLoader, LoaderOptions) - changed:
ctor CustomClassLoaderConstructor(ClassLoader) → ctor CustomClassLoaderConstructor(ClassLoader, LoaderOptions) - added:
method BaseConstructor.getLoadingConfig(): LoaderOptions - added:
method BaseConstructor.isWarnOnDuplicateKeys(): boolean - added:
method BaseConstructor.setWarnOnDuplicateKeys(boolean): void
- removed:
ctor Mark(String, int, int, int, String, int)
- removed:
ctor CollectionStartEvent(String, String, boolean, Mark, Mark, Boolean) - removed:
ctor MappingStartEvent(String, String, boolean, Mark, Mark, Boolean) - removed:
ctor ScalarEvent(String, String, ImplicitTuple, String, Mark, Mark, Character) - removed:
ctor SequenceStartEvent(String, String, boolean, Mark, Mark, Boolean) - removed:
method ScalarEvent.getStyle(): Character - added:
method ScalarEvent.isDQuoted(): boolean - added:
method ScalarEvent.isFolded(): boolean - added:
method ScalarEvent.isJson(): boolean - added:
method ScalarEvent.isLiteral(): boolean - added:
method ScalarEvent.isSQuoted(): boolean
- removed:
class CompactConstructor extends Constructor - removed:
class CompactConstructor.ConstructCompactObject extends Constructor.ConstructMapping - removed:
class CompactData - removed:
class PackageCompactConstructor extends CompactConstructor - removed:
ctor CompactConstructor() - removed:
ctor CompactConstructor(LoaderOptions) - removed:
ctor CompactConstructor.ConstructCompactObject(CompactConstructor) - removed:
ctor CompactData(String) - removed:
ctor PackageCompactConstructor(String) - removed:
method CompactConstructor.ConstructCompactObject.construct(Node): Object - removed:
method CompactConstructor.ConstructCompactObject.construct2ndStep(Node, Object): void - removed:
method CompactConstructor.applySequence(Object, List): void - removed:
method CompactConstructor.constructCompactFormat(ScalarNode, CompactData): Object - removed:
method CompactConstructor.createCompactConstruct(): Construct - removed:
method CompactConstructor.createInstance(ScalarNode, CompactData): Object - removed:
method CompactConstructor.getCompactData(String): CompactData - removed:
method CompactConstructor.getConstructor(Node): Construct - removed:
method CompactConstructor.getSequencePropertyName(Class): String - removed:
method CompactConstructor.setProperties(Object, Map): void - removed:
method CompactData.getArguments(): List - removed:
method CompactData.getPrefix(): String - removed:
method CompactData.getProperties(): Map - removed:
method CompactData.toString(): String - removed:
method PackageCompactConstructor.getClassForName(String): Class
- removed:
class Base64Coder - removed:
static method Base64Coder.decode(String): byte[] - removed:
static method Base64Coder.decode(char[]): byte[] - removed:
static method Base64Coder.decode(char[], int, int): byte[] - removed:
static method Base64Coder.decodeLines(String): byte[] - removed:
static method Base64Coder.decodeString(String): String - removed:
static method Base64Coder.encode(byte[]): char[] - removed:
static method Base64Coder.encode(byte[], int): char[] - removed:
static method Base64Coder.encode(byte[], int, int): char[] - removed:
static method Base64Coder.encodeLines(byte[]): String - removed:
static method Base64Coder.encodeLines(byte[], int, int, int, String): String - removed:
static method Base64Coder.encodeString(String): String
- added:
ctor UnTrustedTagInspector() - added:
final class UnTrustedTagInspector implements TagInspector - added:
interface TagInspector - added:
method TagInspector.isGlobalTagAllowed(Tag): boolean - added:
method UnTrustedTagInspector.isGlobalTagAllowed(Tag): boolean
- added:
class Logger - added:
enum Logger.Level - added:
method Logger.debug(String): void - added:
method Logger.isLoggable(Logger.Level): boolean - added:
method Logger.warn(String): void - added:
static field Logger.Level.DEBUG: Logger.Level - added:
static field Logger.Level.WARNING: Logger.Level - added:
static method Logger.Level.valueOf(String): Logger.Level - added:
static method Logger.Level.values(): Logger.Level[] - added:
static method Logger.getLogger(String): Logger
- removed:
ctor CollectionNode(Tag, Mark, Mark, Boolean) - removed:
ctor MappingNode(Tag, List, Boolean) - removed:
ctor MappingNode(Tag, boolean, List, Mark, Mark, Boolean) - removed:
ctor ScalarNode(Tag, String, Mark, Mark, Character) - removed:
ctor ScalarNode(Tag, boolean, String, Mark, Mark, Character) - removed:
ctor SequenceNode(Tag, List, Boolean) - removed:
ctor SequenceNode(Tag, boolean, List, Mark, Mark, Boolean) - removed:
method CollectionNode.setFlowStyle(Boolean): void - removed:
method Node.isResolved(): boolean - removed:
method ScalarNode.getStyle(): Character - added:
method Tag.isCustomGlobal(): boolean - added:
static field Tag.standardTags: Set
- removed:
ctor ParserImpl(StreamReader) - removed:
ctor ParserImpl(StreamReader, boolean)
- added:
method StreamReader.getDocumentIndex(): int - added:
method StreamReader.resetDocumentIndex(): void
- removed:
ctor Representer() - added:
class JsonRepresenter extends Representer - added:
class JsonRepresenter.RepresentByteArray implements Represent - added:
class JsonRepresenter.RepresentDate extends SafeRepresenter.RepresentDate - added:
ctor JsonRepresenter(DumperOptions) - added:
ctor JsonRepresenter.RepresentByteArray(JsonRepresenter) - added:
ctor JsonRepresenter.RepresentDate(JsonRepresenter) - added:
method JsonRepresenter.RepresentByteArray.representData(Object): Node - added:
method JsonRepresenter.RepresentDate.getDefaultTag(): Tag
- removed:
ctor ScannerImpl(StreamReader) - removed:
method ScannerImpl.isParseComments(): boolean - removed:
method ScannerImpl.setParseComments(boolean): ScannerImpl - added:
method Scanner.checkToken(Token.ID): boolean - added:
method Scanner.resetDocumentIndex(): void - added:
method ScannerImpl.checkToken(Token.ID): boolean - added:
method ScannerImpl.resetDocumentIndex(): void
- added:
abstract class MergeUtils - added:
ctor MergeUtils() - added:
ctor Tuple(Object, Object) - added:
final class Tuple - added:
method MergeUtils.asMappingNode(Node): MappingNode - added:
method MergeUtils.flatten(MappingNode): List - added:
method PlatformFeatureDetector.isIntrospectionAvailable(): boolean - added:
method Tuple._1(): Object - added:
method Tuple._2(): Object