Bump up snakeyaml to 1.32 (#9647)
diff --git a/dist-material/release-docs/LICENSE b/dist-material/release-docs/LICENSE
index 48dd8ae..397f8d2 100755
--- a/dist-material/release-docs/LICENSE
+++ b/dist-material/release-docs/LICENSE
@@ -381,7 +381,7 @@
https://mvnrepository.com/artifact/org.slf4j/log4j-over-slf4j/1.7.30 Apache-2.0
https://mvnrepository.com/artifact/org.slf4j/slf4j-api/1.7.30 Apache-2.0
https://mvnrepository.com/artifact/org.xerial.snappy/snappy-java/1.1.7.3 Apache-2.0
- https://mvnrepository.com/artifact/org.yaml/snakeyaml/1.31 Apache-2.0
+ https://mvnrepository.com/artifact/org.yaml/snakeyaml/1.32 Apache-2.0
https://npmjs.com/package/typescript/v/4.4.4 4.4.4 Apache-2.0
========================================================================
diff --git a/docs/en/changes/changes.md b/docs/en/changes/changes.md
index 18b7f35..6946ff8 100644
--- a/docs/en/changes/changes.md
+++ b/docs/en/changes/changes.md
@@ -6,7 +6,7 @@
* Add component ID(133) for impala JDBC Java agent plugin and component ID(134) for impala server.
* Use prepareStatement in H2SQLExecutor#getByIDs.(No function change).
-* Bump up snakeyaml to 1.31 for fixing CVE-2022-25857.
+* Bump up snakeyaml to 1.32 for fixing CVE.
* Fix `DurationUtils.convertToTimeBucket` missed verify date format.
* Enhance LAL to support converting LogData to DatabaseSlowStatement.
* [**Breaking Change**] Change the LAL script format(Add layer property).
diff --git a/oap-server-bom/pom.xml b/oap-server-bom/pom.xml
index 0c7469b..b5b6f4e 100644
--- a/oap-server-bom/pom.xml
+++ b/oap-server-bom/pom.xml
@@ -40,7 +40,7 @@
<joda-time.version>2.10.5</joda-time.version>
<zookeeper.version>3.5.7</zookeeper.version>
<guava.version>31.1-jre</guava.version>
- <snakeyaml.version>1.31</snakeyaml.version>
+ <snakeyaml.version>1.32</snakeyaml.version>
<protobuf-java.version>3.19.4</protobuf-java.version>
<protobuf-java-util.version>3.19.4</protobuf-java-util.version>
<commons-codec.version>1.11</commons-codec.version>
