pjfanning opened a new issue, #17306:
URL: https://github.com/apache/dolphinscheduler/issues/17306

   ### Search before asking
   
   - [x] I had searched in the 
[issues](https://github.com/apache/dolphinscheduler/issues?q=is%3Aissue) and 
found no similar issues.
   
   
   ### What happened
   
   * CVE-52999
   * 
[StreamReadConstraints](https://javadoc.io/doc/com.fasterxml.jackson.core/jackson-core/latest/com/fasterxml/jackson/core/StreamReadConstraints.Builder.html)
 default limits introduced in recent Jackson versions may cause issues for 
dolphinscheduler if you rely on large messages. The constraints can be adjusted 
in code, if necessary.
   
   
   ### What you expected to happen
   
   use secure libs to protect our users
   
   ### How to reproduce
   
   n/a
   
   ### Anything else
   
   _No response_
   
   ### Version
   
   dev
   
   ### Are you willing to submit PR?
   
   - [x] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [x] I agree to follow this project's [Code of 
Conduct](https://www.apache.org/foundation/policies/conduct)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: 
[email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to