This is an automated email from the ASF dual-hosted git repository. linkinstar pushed a commit to branch docs/security in repository https://gitbox.apache.org/repos/asf/incubator-answer-website.git
commit f0474ad97dae3efb7042f320848e0dfdab605dd1 Author: LinkinStars <linkins...@foxmail.com> AuthorDate: Mon Nov 25 11:12:49 2024 +0800 docs(security): update security docs --- community/security.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/community/security.md b/community/security.md index 1dabba004..98f45c7e0 100644 --- a/community/security.md +++ b/community/security.md @@ -8,6 +8,14 @@ The Apache Software Foundation takes a rigorous stance on eliminating security i # Security fixes +## v1.4.0 + +### CVE-2024-45719 + +The ids generated using the UUID v1 version are to some extent not secure enough. It can cause the generated token to be predictable. + +https://www.cve.org/CVERecord?id=CVE-2024-45719 + ## v1.3.5 ### CVE-2024-41888