The GitHub Actions job "Dependency Review" on 
commons-vfs.git/sftp-stream-proxy-host has failed.
Run started by GitHub user rootvector2 (triggered by rootvector2).

Head commit for run:
7cd3eb70708ca617d136d027c7de635c3d095eb3 / Naveed Khan <[email protected]>
restrict SftpStreamProxy target host to host name characters

SftpStreamProxy.connect formats the host of the sftp URI into the command it 
runs on the proxy host, so shell syntax in the host name was executed there. 
Refuse a target host that is not a host name or an IP address literal before 
the proxy session is opened.

Report URL: https://github.com/apache/commons-vfs/actions/runs/37351141391

With regards,
GitHub Actions via GitBox

Reply via email to