Highlights
Authorization Bypass: 5 prior fixes. Scrutinize any change in this area.
server/odc-service/src/main/java/com/oceanbase/odc/service/connection/database/DatabaseService.java: most-fixed (2 issues). Treat as high-risk during review.
8 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authorization Bypass: 2 historical fix(es) link server/odc-service/src/main/java/com/oceanbase/odc/service/connection/database/DatabaseService.java to Authorization Bypass.
SSRF: 2 historical fix(es) link server/odc-service/src/main/java/com/oceanbase/odc/service/notification/helper/ChannelConfigValidator.java to SSRF.
Arbitrary File Access: 1 historical fix(es) link server/odc-service/src/main/java/com/oceanbase/odc/service/session/factory/ to Arbitrary File Access.
Last analyzed 30 Sep 2026, 02:53 UTC