search

huaweicloud / spring-cloud-huawei

Spring Cloud Huawei is a framework that makes it easier and productive to develop microservices with Spring Cloud.
https://github.com/huaweicloud/spring-cloud-huawei/wiki
Apache License 2.0
518 stars 222 forks source link

使用的开源组件有安全漏洞 #1388

Open BR-Chen opened 1 month ago

BR-Chen commented 1 month ago

使用master分支，用basic里面的provider打包后，用SecBinaryCheck能扫出此问题: image

以下依赖有问题 groupId: io.netty artifactId: netty-tcnative-boringssl-static version:2.0.65.Final // 2.0.66.Final 也有问题，仍然使用 2.0.65的windows dll image

groupId: io.github.openfeign.form artifactId: feign-form version: 3.8.0 image

chengyouling commented 1 month ago

等待开源修复安全问题https://github.com/netty/netty/issues/14346