https://bugzilla.redhat.com/show_bug.cgi?id=2126789
--- Comment #21 from Sandipan Roy <saroy(a)redhat.com> ---
For RHEL-8 it's downgraded to moderate because "snakeyaml" itself in RHEL 8
or
RHEL-9 isn't shipped and "prometheus-jmx-exporter" is needed as build
dependency. And it's not directly exploitable, hence severity marked as
moderate.
https://access.redhat.com/security/updates/classification/#moderate
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2126789