فهرست منبع

fix 修复 poi 组件漏洞 与 mysql jdbc 漏洞

疯狂的狮子Li 4 سال پیش
والد
کامیت
e576f8c182
2فایلهای تغییر یافته به همراه8 افزوده شده و 4 حذف شده
  1. 8 0
      pom.xml
  2. 0 4
      ruoyi-visual/ruoyi-xxl-job-admin/pom.xml

+ 8 - 0
pom.xml

@@ -29,6 +29,7 @@
         <dynamic-ds.version>3.5.0</dynamic-ds.version>
         <velocity.version>2.3</velocity.version>
         <poi.version>4.1.2</poi.version>
+        <commons-compress.version>1.21</commons-compress.version>
         <easyexcel.version>3.0.5</easyexcel.version>
         <cglib.version>3.3.0</cglib.version>
         <hutool.version>5.7.21</hutool.version>
@@ -188,6 +189,13 @@
                 <version>${poi.version}</version>
             </dependency>
 
+            <!-- 修复poi漏洞 -->
+            <dependency>
+                <groupId>org.apache.commons</groupId>
+                <artifactId>commons-compress</artifactId>
+                <version>${commons-compress.version}</version>
+            </dependency>
+
             <dependency>
                 <groupId>com.alibaba</groupId>
                 <artifactId>easyexcel</artifactId>

+ 0 - 4
ruoyi-visual/ruoyi-xxl-job-admin/pom.xml

@@ -10,8 +10,6 @@
 	<packaging>jar</packaging>
 
 	<properties>
-		<mybatis-spring-boot-starter.version>2.1.4</mybatis-spring-boot-starter.version>
-		<mysql-connector-java.version>8.0.27</mysql-connector-java.version>
 	</properties>
 
 	<dependencyManagement>
@@ -79,13 +77,11 @@
 		<dependency>
 			<groupId>org.mybatis.spring.boot</groupId>
 			<artifactId>mybatis-spring-boot-starter</artifactId>
-			<version>${mybatis-spring-boot-starter.version}</version>
 		</dependency>
 		<!-- mysql -->
 		<dependency>
 			<groupId>mysql</groupId>
 			<artifactId>mysql-connector-java</artifactId>
-			<version>${mysql-connector-java.version}</version>
 		</dependency>
 
 		<!-- xxl-job-core -->