lxd/FlowPacs
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

�ݹ�����������Ϣ��ȫ��Ϣͨ�����ļ�ⷢ�֣�����Ͱ͹�˾��ԴJava�������fastjson���ڷ����л�©����fastjson���ڶ�java������Ϊ������ɣ��㷺������javaӦ�õķ���˴����С������߿���������©��ʵʩ�����ļ�д�롢���������α��ȹ�����Ϊ����ɷ�����Ȩ�ޱ���ȡ��������Ϣй©������Ӱ�졣�˴��¼�Ӱ��fastjson 1.2.80��֮ǰ���а汾��Ŀǰ������Ͱ͹�˾�ѷ���fastjson���°汾1.2.83���޸���©�������������ַΪ��https://github.com/alibaba/fastjson/releases/tag/1.2.83�� �����λ�߶����ӣ�Ѹ��ͨ��Ԥ����Ͻ������ϵͳ��λ����ʱ�Ų�������Ӱ���������ȷ����ȫ��ǰ�����޸�©���������������������ϵͳ��ȫ�����������Ϸ����繥���¼���ͬʱ����ǿ��ȫ��⣬����Ӧ������׼��������ͻ�����ҪѸ�ٴ��ò���һʱ�䱨�档

Browse Source 
Signed-off-by: October <githubgit@163.com>
This commit is contained in:
October 2022-05-26 10:04:10 +08:00
parent 82cf4e1775
commit 0e601d9d30
1 changed files with 12 additions and 0 deletions

12
yudao-dependencies/pom.xml
View File

@ -52,6 +52,7 @@
<easyexcel.verion>2.2.7</easyexcel.verion>
<velocity.version>2.2</velocity.version>
<screw.version>1.0.5</screw.version>
<fastjson.version>2.0.4</fastjson.version>
<guava.version>30.1.1-jre</guava.version>
<guice.version>5.1.0</guice.version>
<transmittable-thread-local.version>2.12.2</transmittable-thread-local.version>
@ -475,6 +476,13 @@
<version>${velocity.version}</version>
</dependency>
<!--fastjson漏洞升级此次事件影响fastjson 1.2.80及之前所有版本 -->
<dependency>
<groupId>com.alibaba</groupId>
<artifactId>fastjson</artifactId>
<version>${fastjson.version}</version>
</dependency>
<dependency>
<groupId>cn.smallbun.screw</groupId>
<artifactId>screw-core</artifactId> <!-- 实现数据库文档 -->
@ -483,6 +491,10 @@
<exclusion>
<groupId>org.freemarker</groupId>
<artifactId>freemarker</artifactId> <!-- 移除 Freemarker 依赖，采用 Velocity 作为模板引擎 -->
</exclusion>
<exclusion>
<groupId>com.alibaba</groupId>
<artifactId>fastjson</artifactId> <!-- 最新版screw-core1.0.5依赖fastjson1.2.73存在漏洞，移除。 -->
</exclusion>
</exclusions>
</dependency>