raydp
raydp copied to clipboard
Fix security issue of protobuf < 3.19.5
There is a security issue report, https://github.com/oap-project/raydp/security/dependabot/6.
Package protobuf
Affected versions >= 3.19.0, < 3.19.5
Patched version 3.19.5
protobuf-cpp and protobuf-python have potential Denial of Service issue
To fix it, we limit protobuf > 3.19.5 and <= 3.20.3