The GitHub Actions job "Flink CDC CI" on flink-cdc.git/sql-inject has failed.
Run started by GitHub user yuanoOo (triggered by lvyanquan).

Head commit for run:
0169179d9756c85c74af769187cbc850d7780370 / yuanoOo 
<[email protected]>
[minor] Fix SQL injection vulnerabilities in OceanBase connector

- Fix executeSingleColumnStatement method in OceanBaseCatalog.java to support 
parameterized queries
- Fix databaseExists and tableExists methods in OceanBaseMySQLCatalog.java to 
use parameterized queries instead of string concatenation
- Update method signature in OceanBaseTestMySQLCatalog.java to match parent 
class
- Add SQL injection prevention test cases to verify parameterized queries 
effectively prevent SQL injection attacks
- Adjust exception logging levels: SQL syntax errors use WARN level, other 
errors use ERROR level

This addresses the SQL injection security issues reported by the Apache team by 
using PreparedStatement parameterized queries to prevent malicious SQL 
injection attacks.

Report URL: https://github.com/apache/flink-cdc/actions/runs/17820069749

With regards,
GitHub Actions via GitBox

Reply via email to