Per GHSA-mjmj-j48q-9wg2, all org.yaml:snakeyaml versions before 2.0 have a serious vulnerability.
The latest release of okreplay library bundles such a vulnerable org.yaml:snakeyaml version, and it is not possible to override the version of org.yaml:snakeyaml manually without breaking okreplay (to be expected when trying to force-use a different major version of org.yaml:snakeyaml).
Per GHSA-mjmj-j48q-9wg2, all
org.yaml:snakeyamlversions before 2.0 have a serious vulnerability.The latest release of
okreplaylibrary bundles such a vulnerableorg.yaml:snakeyamlversion, and it is not possible to override the version oforg.yaml:snakeyamlmanually without breakingokreplay(to be expected when trying to force-use a different major version oforg.yaml:snakeyaml).