Re: [I] seata-all 下的Druid.jar 存在安全漏洞，我应该怎么去解决这个安全漏洞，我们安全机制有点严格 [incubator-seata]

["funky-eyes (via GitHub)" <gi...@apache.org>]

funky-eyes commented on issue #6683:
URL: https://github.com/apache/incubator-seata/issues/6683#issuecomment-2241096386

   因为seata的sqlparser是使用自己的druid，目前我们最新版本已经对使用的druid进行了升级，这个druid的版本是seata自己独立的classloader进行加载的，业务不会使用到这个jar，所以对业务侧自行引入的高版本druid不会有影响。
   
   Because seata's sqlparser uses its own druid, our latest version has been upgraded to use the druid. The version of this druid is loaded by seata's own independent classloader, and the business will not use this jar, so it will not affect the higher version druid introduced by the business side.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org
For additional commands, e-mail: notifications-help@seata.apache.org