The GitHub Actions job "CI" on 
rocketmq-dashboard.git/fix/ssrf-bypass-loopback-ip-1422 has failed.
Run started by GitHub user tju-yxq (triggered by tju-yxq).

Head commit for run:
9ac6a8f46c0bb5cd778ed575153c420801f7a2d8 / Yxq <[email protected]>
[ISSUE #1422] Block loopback IP in data source SSRF guard

The isAllowedDataSourceHost method blocked 'localhost' by string
comparison but did not check isLoopbackAddress(), allowing 127.0.0.1
to bypass the SSRF guard.

Fixes #1422

Report URL: 
https://github.com/apache/rocketmq-dashboard/actions/runs/31379635007

With regards,
GitHub Actions via GitBox

Reply via email to