!187 【漏洞修复】升级commons-collections版本，解决3.2.1版本的反序列化漏洞问题 Merge pull request !1...

若依

2021-03-14 9502203bbee72439c8f54aa692958f443a2ceeeb

!187 【漏洞修复】升级commons-collections版本，解决3.2.1版本的反序列化漏洞问题
Merge pull request !187 from Delusive/master

 pom.xml

@@ -136,8 +136,18 @@
                <groupId>org.apache.velocity</groupId>

                <artifactId>velocity</artifactId>

                <version>${velocity.version}</version>

                <exclusions>

                    <exclusion>

                        <groupId>commons-collections</groupId>

                        <artifactId>commons-collections</artifactId>

                    </exclusion>

                </exclusions>

            </dependency>

	        
            <dependency>

                <groupId>commons-collections</groupId>

                <artifactId>commons-collections</artifactId>

                <version>3.2.2</version>

            </dependency>

            <!-- 阿里JSON解析器 -->

            <dependency>

                <groupId>com.alibaba</groupId>


 ruoyi-generator/pom.xml

@@ -22,7 +22,11 @@
            <groupId>org.apache.velocity</groupId>

            <artifactId>velocity</artifactId>

        </dependency>



        <!--commons-collections-->

        <dependency>

            <groupId>commons-collections</groupId>

            <artifactId>commons-collections</artifactId>

        </dependency>

        <!-- 通用工具-->

        <dependency>

            <groupId>com.ruoyi</groupId>