From f0fd371b79ac166f51d2e671ba767646297d54c8 Mon Sep 17 00:00:00 2001
From: RuoYi <yzz_ivy@163.com>
Date: 星期日, 18 四月 2021 15:38:25 +0800
Subject: [PATCH] 升级mybatis到最新版3.5.6 阻止远程代码执行漏洞
---
pom.xml | 18 ++++++++++++++++--
1 files changed, 16 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index 18c3d59..b30cb98 100644
--- a/pom.xml
+++ b/pom.xml
@@ -24,12 +24,13 @@
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
<java.version>1.8</java.version>
<maven-jar-plugin.version>3.1.1</maven-jar-plugin.version>
- <mybatis.spring.boot.starter.version>2.1.3</mybatis.spring.boot.starter.version>
+ <mybatis.spring.boot.starter.version>2.1.4</mybatis.spring.boot.starter.version>
<pagehelper.spring.boot.starter.version>1.3.0</pagehelper.spring.boot.starter.version>
<fastjson.version>1.2.75</fastjson.version>
<druid.version>1.2.4</druid.version>
<commons.io.version>2.5</commons.io.version>
<commons.fileupload.version>1.3.3</commons.fileupload.version>
+ <commons.collections.version>3.2.2</commons.collections.version>
<bitwalker.version>1.21</bitwalker.version>
<jwt.version>0.9.1</jwt.version>
<kaptcha.version>2.3.2</kaptcha.version>
@@ -218,11 +219,24 @@
<version>${poi.version}</version>
</dependency>
- <!--velocity浠ｇ爜鐢熸垚浣跨敤妯℃澘 -->
+ <!-- velocity浠ｇ爜鐢熸垚浣跨敤妯℃澘 -->
<dependency>
<groupId>org.apache.velocity</groupId>
<artifactId>velocity</artifactId>
<version>${velocity.version}</version>
+ <exclusions>
+ <exclusion>
+ <groupId>commons-collections</groupId>
+ <artifactId>commons-collections</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+
+ <!-- collections宸ュ叿绫� -->
+ <dependency>
+ <groupId>commons-collections</groupId>
+ <artifactId>commons-collections</artifactId>
+ <version>${commons.collections.version}</version>
</dependency>
<!-- 瀹氭椂浠诲姟 -->
--
Gitblit v1.9.3