alibaba / alibaba/Sentinel

sentinel 1.8.8的snakeyaml 版本为1.28，存在CVE-2022-1471漏洞

Open
#3,446 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
23.1k
Forks
8.1k
No merged PRs in 30d

Description

sentinel 1.8.8的snakeyaml 版本为1.28，存在CVE-2022-1471漏洞，是否在后续版本中将snakeyaml升级到snakeyaml 2.0以上版本

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.