Pull Request已成功合入, 合并人@
（感谢 AtomGit-Bot 的贡献）
Hey @zhangjiajia-123, Welcome to openGauss Community.
All of the projects in openGauss Community are maintained by @opengauss-bot.
That means the developers can comment below every pull request or issue to trigger Bot Commands.
Please follow instructions at Here to find the details.
@zhangjiajia-123 , PullRequest must be associated with at least one issue.
Hi @zhangjiajia-123,
if you want to get quick review about your pull request, please contact the owner in first: @zhongjun2 ,
and then any of the maintainers: @zhongjun2
and then any of the committers: @ailoooong , @xiangxinyong , @zhang_xubo , @gzbang
if you have any question, please contact the SIG: Infra.
/check-cla
/check-cla
@zhangjiajia-123, thanks for your pull request. All authors of the commits have signed the CLA. 👋
/lgtm
/approve
/lgtm
/approve
漏洞描述：
Apache Commons IO是美国阿帕奇基金会（Apache）公司的一个应用程序。可以帮助开发IO功能。
Apache Commons IO 2.2版本至2.6版本存在路径遍历漏洞。该漏洞与FileNameUtils.normalize方法有关。攻击者可以利用该漏洞通过发送错误的输入字符串（例如“//../foo”或“\..\foo”）获得对父目录中文件的访问权限。
更新commons-io版本至2.7可避免此漏洞