search

ixrjog / opscloud4

云上运维
Apache License 2.0
1.33k stars 509 forks source link

已知漏洞的依赖库（snakeyml）安全漏洞 #68

Closed alanlvle closed 2 years ago

alanlvle commented 2 years ago

https://github.com/ixrjog/opscloud4/blob/73f61a301ac9986330ed800b51041f31df61c854/opscloud-common/src/main/java/com/baiyi/opscloud/common/util/DsUtil.java#L24 建议加下： Yaml yaml = new Yaml(new SafeConstructor()); yaml.load(context);

ixrjog commented 2 years ago

已修复 https://github.com/ixrjog/opscloud4/commit/7f9d2bc640aebda328a537bdcbd9afabdd190aff