How long was that dude in paradise, anyways?
Hey cool, your CVE check worked! That said, there's a lot of chat (and frustration) over at SnakeYAML with the perspective that many of these recent CVEs are false positives and a huge time suck for everyone involved.