The GitHub Actions job "CI" on rocketmq-dashboard.git/rocketmq-studio has 
failed.
Run started by GitHub user lizhimins (triggered by lizhimins).

Head commit for run:
a4bcba05b7319ab844ace965899d8e63979dd696 / Yu Xinqiang <[email protected]>
fix(security): block loopback IP in data source SSRF guard (#1423)

The isAllowedDataSourceHost method blocked 'localhost' by string
comparison but did not check isLoopbackAddress(), allowing 127.0.0.1
to bypass the SSRF guard.

Fixes #1422

Report URL: 
https://github.com/apache/rocketmq-dashboard/actions/runs/31408969581

With regards,
GitHub Actions via GitBox

Reply via email to