vesoft-inc / nebula

A distributed, fast open-source graph database featuring horizontal scalability and high availability
https://nebula-graph.io
Apache License 2.0
10.88k stars 1.21k forks source link

Fixed vulnerability issues #5936

Closed dutor closed 2 months ago

dutor commented 3 months ago
dutor commented 2 months ago

Two related CVE records had been created: CVE-2024-47218 and CVE-2024-47219

Many thanks to the discoverer @S1mi4

Sarrac3873 commented 2 months ago
  • Fixed a security bug involving shell injection
  • Fixed a security bug involving authentication bypass