Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to…
apache·CWE-116·Published 2022-10-24