You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@dolphinscheduler.apache.org by "unigof (via GitHub)" <gi...@apache.org> on 2026/05/08 09:17:35 UTC
[I] [Improvement] Security Vulnerability in GitPython Dependency (CVE-2026-44244) [dolphinscheduler]
unigof opened a new issue, #18235:
URL: https://github.com/apache/dolphinscheduler/issues/18235
### Search before asking
- [x] I had searched in the [issues](https://github.com/apache/dolphinscheduler/issues?q=is%3Aissue) and found no similar feature requirement.
### Description
upgrade GitPython to 3.1.49 to fix Security Vulnerability
### Are you willing to submit a PR?
- [x] Yes I am willing to submit a PR!
### Code of Conduct
- [x] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Improvement] Security Vulnerability in GitPython Dependency (CVE-2026-44244) [dolphinscheduler]
Posted by "unigof (via GitHub)" <gi...@apache.org>.
unigof commented on issue #18235:
URL: https://github.com/apache/dolphinscheduler/issues/18235#issuecomment-4411353781
I know, but this script in our production environment still poses a security risk, and the same would apply to anyone else.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Improvement] Security Vulnerability in GitPython Dependency (CVE-2026-44244) [dolphinscheduler]
Posted by "SbloodyS (via GitHub)" <gi...@apache.org>.
SbloodyS commented on issue #18235:
URL: https://github.com/apache/dolphinscheduler/issues/18235#issuecomment-4411289021
This script will only be used by member when DS is released, and it will not have any impact on the project. So we don't need to update this dependency.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Improvement] Security Vulnerability in GitPython Dependency (CVE-2026-44244) [dolphinscheduler]
Posted by "SbloodyS (via GitHub)" <gi...@apache.org>.
SbloodyS closed issue #18235: [Improvement] Security Vulnerability in GitPython Dependency (CVE-2026-44244)
URL: https://github.com/apache/dolphinscheduler/issues/18235
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org