<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Apache SIS on 办公AI智能小助手</title>
    <link>https://blog.qife122.com/tags/apache-sis/</link>
    <description>Recent content in Apache SIS on 办公AI智能小助手</description>
    <generator>Hugo</generator>
    <language>zh-cn</language>
    <copyright>qife</copyright>
    <lastBuildDate>Sun, 11 Jan 2026 16:12:25 +0800</lastBuildDate>
    <atom:link href="https://blog.qife122.com/tags/apache-sis/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>解析Apache SIS安全漏洞：XML外部实体注入的技术内幕与修复方案</title>
      <link>https://blog.qife122.com/p/%E8%A7%A3%E6%9E%90apache-sis%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9Exml%E5%A4%96%E9%83%A8%E5%AE%9E%E4%BD%93%E6%B3%A8%E5%85%A5%E7%9A%84%E6%8A%80%E6%9C%AF%E5%86%85%E5%B9%95%E4%B8%8E%E4%BF%AE%E5%A4%8D%E6%96%B9%E6%A1%88/</link>
      <pubDate>Sun, 11 Jan 2026 16:12:25 +0800</pubDate>
      <guid>https://blog.qife122.com/p/%E8%A7%A3%E6%9E%90apache-sis%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9Exml%E5%A4%96%E9%83%A8%E5%AE%9E%E4%BD%93%E6%B3%A8%E5%85%A5%E7%9A%84%E6%8A%80%E6%9C%AF%E5%86%85%E5%B9%95%E4%B8%8E%E4%BF%AE%E5%A4%8D%E6%96%B9%E6%A1%88/</guid>
      <description>&lt;h2 id=&#34;漏洞概述&#34;&gt;漏洞概述&lt;/h2&gt;&#xA;&lt;p&gt;Apache SIS（Spatial Information System）是一个用于地理空间数据处理的开源Java库。近期发现该库存在一个&lt;strong&gt;安全漏洞&lt;/strong&gt;，编号为CVE-2025-68280。这是一个&lt;strong&gt;XML外部实体注入漏洞&lt;/strong&gt;，属于中等严重程度。&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
