[I] [Question] Vulnerability found in dependency: CVE-2022-42889 9.8 Transitive Improper Control of Generation of Code ("Code Injection") vulnerability with High severity found [incubator-hugegraph]

[via GitHub]

liming1010 opened a new issue, #2555:
URL: https://github.com/apache/incubator-hugegraph/issues/2555

   ### Problem Type (问题类型)
   
   others (please edit later)
   
   ### Before submit
   
   - [X] 我已经确认现有的 [Issues](https://github.com/apache/hugegraph/issues) 与 
[FAQ](https://hugegraph.apache.org/docs/guides/faq/) 中没有相同 / 重复问题 (I have 
confirmed and searched that there are no similar problems in the historical 
issue and documents)
   
   ### Environment (环境信息)
   
   - Server Version: 1.3
   - Backend: pgsql
   - OS: centos8
   
   
   ### Your Question (问题描述)
   
   1.3版本的java客户端，出现 
   Vulnerability found in dependency:
   CVE-2022-42889
   9.8
   Transitive Improper Control of Generation of Code ("Code Injection") 
vulnerability with High severity found
   经查询，这是个洞
   
![QQ截图20240607160825](https://github.com/apache/incubator-hugegraph/assets/16507967/67333970-54a1-42ab-92b6-03e53ab7eea6)
   
   
   
   ### Vertex/Edge example (问题点 / 边数据举例)
   
   _No response_
   
   ### Schema [VertexLabel, EdgeLabel, IndexLabel] (元数据结构)
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@hugegraph.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org