CVE-2017-3159: Deserialization of Untrusted Data
(updated )
Apache Camel’s camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. Deserializing untrusted data can lead to security flaws.
References
Detect and mitigate CVE-2017-3159 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →