You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@servicecomb.apache.org by "colin-si (via GitHub)" <gi...@apache.org> on 2025/09/06 02:31:05 UTC

[I] [QUESTION] - Apache commons configuration爆出漏洞CVE-2025-46392，请问2.X什么时候可以升级依赖版本来解决 [servicecomb-java-chassis]

colin-si opened a new issue, #4930:
URL: https://github.com/apache/servicecomb-java-chassis/issues/4930

   ### Steps to reproduce (if applicable)
   
   Apache commons configuration爆出漏洞CVE-2025-46392，请问2.X什么时候可以升级依赖版本来解决
   https://nvd.nist.gov/vuln/detail/CVE-2025-46392
   
   ### What have you tried so far?
   
   尝试根据漏洞提示，主动控制Apache commons configuration版本，但是报出了大量的不兼容。需要社区正向适配切换configuration新版本来解决该漏洞。
   
   ### Additional context
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@servicecomb.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] [QUESTION] - Apache commons configuration爆出漏洞CVE-2025-46392，请问2.X什么时候可以升级依赖版本来解决 [servicecomb-java-chassis]

Posted by "liubao68 (via GitHub)" <gi...@apache.org>.

liubao68 commented on issue #4930:
URL: https://github.com/apache/servicecomb-java-chassis/issues/4930#issuecomment-3264275564

   see https://github.com/apache/servicecomb-java-chassis/issues/4843


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@servicecomb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org