Update releaseNotes-2.2.0.md

apache · Nov 20, 2023 · ce7afe0 · ce7afe0
1 parent 20dc4f8
commit ce7afe0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/docs/release/releaseNotes-2.2.0.md b/docs/release/releaseNotes-2.2.0.md
@@ -4,7 +4,8 @@
 ## Bug
 - [SCB-2816](https://issues.apache.org/jira/browse/SCB-2816) - no log print when panic
 - [SCB-2817](https://issues.apache.org/jira/browse/SCB-2817) - syncer init failed
-- [SCB-2818](https://issues.apache.org/jira/browse/SCB-2818) - frontend SSRF
+- [SCB-2818](https://issues.apache.org/jira/browse/SCB-2818) - frontend SSRF-[**CVE-2023-44313**]
+- [SCB-2839](https://issues.apache.org/jira/browse/SCB-2839) - server information leak in dump API-[**CVE-2023-44312**]
 - [SCB-2820](https://issues.apache.org/jira/browse/SCB-2820) - return 'no permission' when discover provider in specify env
 - [SCB-2826](https://issues.apache.org/jira/browse/SCB-2826) - syncer log print typo
 - [SCB-2827](https://issues.apache.org/jira/browse/SCB-2827) - gov list return wrong kind