Yefim Matskin

connection leak on gzip/deflate responses

4

It looks like https://github.com/dakrone/clj-http/blob/3.x/src/clj_http/util.clj#L45 and https://github.com/dakrone/clj-http/blob/3.x/src/clj_http/util.clj#L99 are leaking connections - the input stream argument is not closed

content type not returned properly for xml files

3

The https://github.com/renaudcerrato/appengine-maven-repository/blob/master/src/main/java/repo/resource/RepositoryResource.java#L104 does not work properly for the *.xml files as the GCP does not set the content type for the XML and the *.xml files are returned as 'application/octet-stream'...

injection vulnerabilities

2

https://github.com/afaqurk/linux-dash/blob/master/app/server/index.js#L76 and https://github.com/afaqurk/linux-dash/blob/master/app/server/index.py#L30 are lacking escaping and are vulnerable to command injection

### Prerequisites - [X] **Existing Issue:** Search the existing issues for this repository. If there is an issue that fits your needs do not file a new one. Subscribe, react,...

Please bring back (existed in v1) instance tagging after IP assignment so we can check that the instance was assigned the IP address before running workloads

### Related Template(s) bigquery-to-bigtable ### Template Version latest ### What happened? The readme provides misleading information about the parameters, especially [bigquery-to-bigtable](https://github.com/GoogleCloudPlatform/DataflowTemplates/blob/main/v2/bigquery-to-bigtable/README.md?plain=1#L68) ### Relevant log output _No response_

snakeyaml dependency has multiple vulnerabilities https://mvnrepository.com/artifact/org.yaml/snakeyaml current code is not compatible with snakeyaml 2.0

pig fails to use lzo as compression for temp files

2

The following setup fails using hadoop 2.7.2 and pig 0.15.0 (Google cloud dataproc) The same job completes fine without lzo comression for temp files and fails with lzo compression for...