漏洞修复说明
- Dominant language
- Java
- Stars
- 1.3k
- Forks
- 350
- PR merge metrics
- No merged PRs in 30d
Description
### Search before asking
- [ ] I had searched in the [issues](https://github.com/DTStack/Taier/issues) and found no similar question.
- [ ] I had searched my question on the internet but i didn't get any help.
- [ ] I had read the documentation: [Taier doc](https://dtstack.github.io/Taier) but it didn't help me.
### Description
最近一段时间,Taier 开源软件,基于v1.4.0 tag 被反馈了大量的漏洞
https://github.com/DTStack/Taier/issues/1205
https://github.com/DTStack/Taier/issues/1204
https://github.com/DTStack/Taier/issues/1203
https://github.com/DTStack/Taier/issues/1202
https://github.com/DTStack/Taier/issues/1199
https://github.com/DTStack/Taier/issues/1194
漏洞主要集中在Taier关于资源和文件上传的Zip解压和postgresql 驱动层面。
目前基于上诉漏洞,袋鼠云研发已经第一时间积极进行修复处理,并发布了v1.5.0 的tag, 参考:https://github.com/DTStack/Taier/releases/tag/v1.5.0
欢迎大家使用v1.5.0 的tag 源码进行开发和使用,
### Code of Conduct
- [x] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.