[java-sig-commits] [Bug 1785376] New: CVE-2017-18640 snakeyaml: the alias feature entity expansion during a load operation