DTStack / DTStack/Taier

漏洞修复说明

Open
#1,210 0 comments 0 reactions 0 assignees View on GitHub
question
Dominant language
Java
Stars
1.3k
Forks
350
PR merge metrics
No merged PRs in 30d

Description

### Search before asking

- [ ] I had searched in the [issues](https://github.com/DTStack/Taier/issues) and found no similar question.

- [ ] I had searched my question on the internet but i didn't get any help.

- [ ] I had read the documentation: [Taier doc](https://dtstack.github.io/Taier) but it didn't help me.

### Description

最近一段时间,Taier 开源软件,基于v1.4.0 tag 被反馈了大量的漏洞
https://github.com/DTStack/Taier/issues/1205
https://github.com/DTStack/Taier/issues/1204
https://github.com/DTStack/Taier/issues/1203
https://github.com/DTStack/Taier/issues/1202
https://github.com/DTStack/Taier/issues/1199
https://github.com/DTStack/Taier/issues/1194

漏洞主要集中在Taier关于资源和文件上传的Zip解压和postgresql 驱动层面。

目前基于上诉漏洞,袋鼠云研发已经第一时间积极进行修复处理,并发布了v1.5.0 的tag, 参考:https://github.com/DTStack/Taier/releases/tag/v1.5.0
欢迎大家使用v1.5.0 的tag 源码进行开发和使用,

### Code of Conduct

- [x] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.