You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@rocketmq.apache.org by "rachelsu1 (via GitHub)" <gi...@apache.org> on 2025/05/06 02:50:40 UTC
[I] Security - 0.0.2 version has high vulnerabilities of CVE-2022-25845, CVE-2023-34981, and GHSA-xpw8-rcwv-8f8p [rocketmq-exporter]
rachelsu1 opened a new issue, #181:
URL: https://github.com/apache/rocketmq-exporter/issues/181
**Describe the bug**
Security - 0.0.2 version has high vulnerabilities of CVE-2022-25845, CVE-2023-34981, and GHSA-xpw8-rcwv-8f8p.
**To Reproduce**
1. CVE-2022-25845: com.alibaba:fastjson, see https://github.com/advisories/GHSA-pv7h-hx5h-mgfj.
2. CVE-2023-34981: org.apache.tomcat.embed:tomcat-embed-core, see https://github.com/advisories/GHSA-mppv-79ch-vw6q.
3. GHSA-xpw8-rcwv-8f8p: io.netty:netty-codec-http2, see https://github.com/advisories/GHSA-xpw8-rcwv-8f8p.
**Expected behavior**
They should be fixed.
**Screenshots**
n/a
**Desktop (please complete the following information):**
n/a
**Smartphone (please complete the following information):**
n/a
**Additional context**
n/a
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Security - 0.0.2 version has high vulnerabilities of CVE-2022-25845, CVE-2023-34981, and GHSA-xpw8-rcwv-8f8p [rocketmq-exporter]
Posted by "zhihui921016 (via GitHub)" <gi...@apache.org>.
zhihui921016 commented on issue #181:
URL: https://github.com/apache/rocketmq-exporter/issues/181#issuecomment-2853130070
您好，您的邮件我已经收到。
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Security - 0.0.2 version has high vulnerabilities of CVE-2022-25845, CVE-2023-34981, and GHSA-xpw8-rcwv-8f8p [rocketmq-exporter]
Posted by "RockteMQ-AI (via GitHub)" <gi...@apache.org>.
RockteMQ-AI commented on issue #181:
URL: https://github.com/apache/rocketmq-exporter/issues/181#issuecomment-5744630215
**Issue Evaluation**
Category: `bug` | Status: **Under Review**
Thank you for reporting this issue. It has been flagged for code-level verification against the current codebase.
A code engine analysis will be performed to verify the root cause. If confirmed, an automated fix proposal may be generated.
---
*Automated evaluation by RockteMQ-AI*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org