search

apache / incubator-seata-samples

Apache Seata(incubating) Samples for Java
https://seata.apache.org/
Apache License 2.0
2.27k stars 1.91k forks source link

logback serialization vulnerability #664

Closed slievrly closed 5 months ago

slievrly commented 5 months ago

Ⅰ. Issue Description

image https://github.com/apache/incubator-seata-samples/security/dependabot?q=is%3Aopen+logback

Ⅱ. Describe what happened

If there is an exception, please attach the exception trace:

Just paste your stack trace here!

Ⅲ. Describe what you expected to happen

Ⅳ. How to reproduce it (as minimally and precisely as possible)

  1. xxx
  2. xxx
  3. xxx

Minimal yet complete reproducer code (or URL to code):

Ⅴ. Anything else we need to know?

Ⅵ. Environment: