mybatis-plus version is too old.

[YiuTerran]

Mybatis-plus v3.2.0 using mybatis 3.5.2.

There are high level security problems for this version. See CVE-2020-26945

[YiuTerran]

Does anyone care about this? Our company had decided not to use dolphin-scheduler for this reason.

[lenboo]

Thanks very much for reminding!
We will fix it in the new version.

[YiuTerran]

There is no fix even now...