发现的安全漏洞大概什么时候审核
#3058
Replies: 2 comments 3 replies
-
|
普遍存在的隐患，env环境变量文件里面的信息也是敏感信息，比如数据库账号密码等，部署时自定义覆盖即可，如果内部存在其他配置管理平台也可以做对接改造，项目内不做处理 |
Beta Was this translation helpful? Give feedback.
2 replies
-
|
那为什么现在处理掉了 |
Beta Was this translation helpful? Give feedback.
-
|
@Gal0nYu 您好，请问这对您有实际影响吗？关于 GitHub 的安全建议，仓库维护者可以选择不采纳，标记后会显示为已解决。若您有更好的方案，欢迎提出建议或直接提交 PR，感谢支持。 |
Beta Was this translation helpful? Give feedback.
-
|
可以帮我走正常的披露流程吗？还是我自己去提交cve
…------------------ 原始邮件 ------------------
发件人: "hhyo/Archery" ***@***.***>;
发送时间: 2025年10月9日(星期四) 晚上6:25
***@***.***>;
***@***.******@***.***>;
主题: Re: [hhyo/Archery] 发现的安全漏洞大概什么时候审核 (Discussion #3058)
@Gal0nYu 您好，请问这对您有实际影响吗？关于 GitHub 的安全建议，仓库维护者可以选择不采纳，标记后会显示为已解决。若您有更好的方案，欢迎提出建议或直接提交 PR，感谢支持。
—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you were mentioned.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
1 reply
-
|
这个到此为止吧，感谢反馈 |
Beta Was this translation helpful? Give feedback.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
https://github.com/hhyo/Archery/security/advisories/GHSA-3298-vw8h-rq89
Beta Was this translation helpful? Give feedback.
All reactions