[java-sig-commits] [Bug 1785376] CVE-2017-18640 snakeyaml: the alias feature allows entity expansion during a load operation