修复commons-collections引起的反序列化漏洞

hh44h1144

2021-03-12 c0f1569ad98aa44bd4ee2712ff1f3de974a28091

 pom.xml

@@ -24,8 +24,8 @@
      <kaptcha.version>2.3.2</kaptcha.version>

        <pagehelper.boot.version>1.3.0</pagehelper.boot.version>

        <fastjson.version>1.2.75</fastjson.version>

        <oshi.version>5.3.6</oshi.version>

        <jna.version>5.6.0</jna.version>

        <oshi.version>5.6.0</oshi.version>

        <jna.version>5.7.0</jna.version>

        <commons.io.version>2.5</commons.io.version>

        <commons.fileupload.version>1.3.3</commons.fileupload.version>

        <poi.version>4.1.2</poi.version>

@@ -136,8 +136,18 @@
                <groupId>org.apache.velocity</groupId>

                <artifactId>velocity</artifactId>

                <version>${velocity.version}</version>

                <exclusions>

                    <exclusion>

                        <groupId>commons-collections</groupId>

                        <artifactId>commons-collections</artifactId>

                    </exclusion>

                </exclusions>

            </dependency>

	        
            <dependency>

                <groupId>commons-collections</groupId>

                <artifactId>commons-collections</artifactId>

                <version>3.2.2</version>

            </dependency>

            <!-- 阿里JSON解析器 -->

            <dependency>

                <groupId>com.alibaba</groupId>