weibocom / motan

A cross-language remote procedure call(RPC) framework for rapid development of high performance distributed services.
Other
5.89k stars 1.78k forks source link

fix(sec): upgrade commons-codec:commons-codec to 1.13 #1008

Closed Super-Sky closed 2 years ago

Super-Sky commented 2 years ago

What happened?

There are 1 security vulnerabilities found in commons-codec:commons-codec 1.4

What did I do?

Upgrade commons-codec:commons-codec from 1.4 to 1.13 for vulnerability fix

What did you expect to happen?

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS

rayzhang0603 commented 2 years ago

Thanks for the feedback, it's dealt with in another PR as some tweaks are needed