同类问题 https://www.zerodayinitiative.com/blog/2022/2/22/clang-checkers-and-codeql-queries-for-detecting-untrusted-pointer-derefs-and-tainted-loop-conditions 同类问题 关键词:“ghsa cve” https://github.com/advisories?query=type%3Areviewed+ecosystem%3Amaven https://github.com/advisories/GHSA-673j-qm5f-xpv8