apache / gravitino

World's most powerful open data catalog for building a high-performance, geo-distributed and federated metadata lake.
https://gravitino.apache.org
Apache License 2.0
1.1k stars 348 forks source link

[Bug report] upgrade protoc and protobuf-java from 3.24.4 to 3.25.5 #5554

Open pjfanning opened 2 weeks ago

pjfanning commented 2 weeks ago

Version

main branch

Describe what's wrong

There is a CVE in protobuf-java - CVE-2024-7254

Error message and/or stacktrace

n/a

How to reproduce

build change

Additional context

No response