fix 修复隐式依赖传递 序列化漏洞问题 全局声明 fastjson 版本

2.X
疯狂的狮子li 3 years ago
parent eeb60e2eef
commit e3d9b549d1

@ -27,6 +27,7 @@
<druid.version>1.2.9</druid.version> <druid.version>1.2.9</druid.version>
<dynamic-ds.version>3.5.1</dynamic-ds.version> <dynamic-ds.version>3.5.1</dynamic-ds.version>
<velocity.version>2.3</velocity.version> <velocity.version>2.3</velocity.version>
<fastjson.version>1.2.83</fastjson.version>
<poi.version>4.1.2</poi.version> <poi.version>4.1.2</poi.version>
<commons-compress.version>1.21</commons-compress.version> <commons-compress.version>1.21</commons-compress.version>
<easyexcel.version>3.1.0</easyexcel.version> <easyexcel.version>3.1.0</easyexcel.version>
@ -272,6 +273,13 @@
<version>${guava.version}</version> <version>${guava.version}</version>
</dependency> </dependency>
<!-- 统一 fastjson 版本 解决alibaba组件序列化漏洞问题 -->
<dependency>
<groupId>com.alibaba</groupId>
<artifactId>fastjson</artifactId>
<version>${fastjson.version}</version>
</dependency>
</dependencies> </dependencies>
</dependencyManagement> </dependencyManagement>

Loading…
Cancel
Save