[java-sig-commits] [Bug 1785376] CVE-2017-18640 snakeyaml: Billion laughs attack via alias feature