From 9502203bbee72439c8f54aa692958f443a2ceeeb Mon Sep 17 00:00:00 2001
From: 若依 <yzz_ivy@163.com>
Date: 星期日, 14 三月 2021 16:32:07 +0800
Subject: [PATCH] !187 【漏洞修复】升级commons-collections版本，解决3.2.1版本的反序列化漏洞问题 Merge pull request !187 from Delusive/master
---
ruoyi-generator/pom.xml | 6 +++++-
pom.xml | 12 +++++++++++-
2 files changed, 16 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index c9377ce..ecc6df1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -136,8 +136,18 @@
<groupId>org.apache.velocity</groupId>
<artifactId>velocity</artifactId>
<version>${velocity.version}</version>
+ <exclusions>
+ <exclusion>
+ <groupId>commons-collections</groupId>
+ <artifactId>commons-collections</artifactId>
+ </exclusion>
+ </exclusions>
</dependency>
-
+ <dependency>
+ <groupId>commons-collections</groupId>
+ <artifactId>commons-collections</artifactId>
+ <version>3.2.2</version>
+ </dependency>
<!-- 闃块噷JSON瑙ｆ瀽鍣� -->
<dependency>
<groupId>com.alibaba</groupId>
diff --git a/ruoyi-generator/pom.xml b/ruoyi-generator/pom.xml
index 594d0b3..795d650 100644
--- a/ruoyi-generator/pom.xml
+++ b/ruoyi-generator/pom.xml
@@ -22,7 +22,11 @@
<groupId>org.apache.velocity</groupId>
<artifactId>velocity</artifactId>
</dependency>
-
+ <!--commons-collections-->
+ <dependency>
+ <groupId>commons-collections</groupId>
+ <artifactId>commons-collections</artifactId>
+ </dependency>
<!-- 閫氱敤宸ュ叿-->
<dependency>
<groupId>com.ruoyi</groupId>
--
Gitblit v1.9.3