commit ce7afe04f5bcad594bede6204a37443bfa9c0a00
author robotljw <790504160@qq.com> Mon Nov 20 10:33:08 2023 +0800
committer GitHub <noreply@github.com> Mon Nov 20 10:33:08 2023 +0800
tree 3af2c8f85a5f7370c8fdeed70dc5d2158ce0bc50
parent 20dc4f80a594aaecdaa9a4eaa05478a212ad9938

Update releaseNotes-2.2.0.md

docs/release/releaseNotes-2.2.0.md

diff --git a/docs/release/releaseNotes-2.2.0.md b/docs/release/releaseNotes-2.2.0.md
index e5cfef1..1f586af 100644
--- a/docs/release/releaseNotes-2.2.0.md
+++ b/docs/release/releaseNotes-2.2.0.md
@@ -4,7 +4,8 @@
 ## Bug
 - [SCB-2816](https://issues.apache.org/jira/browse/SCB-2816) - no log print when panic
 - [SCB-2817](https://issues.apache.org/jira/browse/SCB-2817) - syncer init failed
-- [SCB-2818](https://issues.apache.org/jira/browse/SCB-2818) - frontend SSRF
+- [SCB-2818](https://issues.apache.org/jira/browse/SCB-2818) - frontend SSRF-[**CVE-2023-44313**]
+- [SCB-2839](https://issues.apache.org/jira/browse/SCB-2839) - server information leak in dump API-[**CVE-2023-44312**]
 - [SCB-2820](https://issues.apache.org/jira/browse/SCB-2820) - return 'no permission' when discover provider in specify env
 - [SCB-2826](https://issues.apache.org/jira/browse/SCB-2826) - syncer log print typo
 - [SCB-2827](https://issues.apache.org/jira/browse/SCB-2827) - gov list return wrong kind