H0924cc opened a new pull request, #8708:
URL: https://github.com/apache/inlong/pull/8708
### Prepare a Pull Request
- [INLONG-8685][Sort] Denial of Service due to parser crash
- Fixes #8685
### Motivation
Those using FasterXML/woodstox to seralize XML data may be vulnerable to
Denial of Service attacks (DOS). If the parser is running on user supplied
input, an attacker may supply content that causes the parser to crash by
stackoverflow. This effect may support a denial of service attack.
This vulnerability is only relevant for users making use of the DD parsing
functionality.
### Modifications
Upgrade com.fasterxml.woodstox:woodstox-core to version 5.4.0 to fix 1
Dependabot alert in
inlong-sort/sort-flink/sort-flink-v1.13/sort-connectors/hudi/pom.xml.
### Verifying this change
- [ ] This change is a trivial rework/code cleanup without any test coverage.
### Documentation
- Does this pull request introduce a new feature? no
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
