Zhenxu Ke

**Name of the Vulnerable Software and Affected Versions** Apache DolphinScheduler versions 3.0.0 through 3.0.1 **Description** The issue concerns the exposure of sensitive information to unauthorized actors, potentially including database credentials. This exposure can occur in Apache DolphinScheduler, affecting the confidentiality of sensitive data. **Recommendations** To resolve the issue, users are recommended to upgrade to version 3.0.2, which fixes the problem. For users who cannot upgrade to the fixed version, a temporary workaround is to set the environment variable `MANAGEMENT ENDPOINTS WEB EXPOSURE INCLUDE=health,metrics,prometheus`. Alternatively, users can add the following section to the `application.yaml` file: ``` management: endpoints: web: exposure: include: health,metrics,prometheus ```

**Nome do software vulnerável e versões afetadas** Versões do Apache SkyWalking NodeJS Agent anteriores à 0.5.1 **Descrição** O problema faz com que os serviços NodeJS com o Apache SkyWalking NodeJS Agent instalado fiquem indisponíveis quando o OAP não está em bom estado e o agente NodeJS não consegue estabelecer uma conexão. **Recomendações** Para versões anteriores à 0.5.1, atualize para a versão 0.5.1 ou posterior para resolver o problema.