Snakeyaml 2.0 has a fix for the CVE-2022-1471 Arbitrary Code Execution vulnerability:
https://nvd.nist.gov/vuln/detail/CVE-2022-1471
https://bitbucket.org/snakeyaml/snakeyaml/wiki/Changes

Karate is not affected by this vulnerability, but other code might be so that Karate should be compatible with Snakeyaml 2.0 and by default should ship with Snakeyaml 2.0.