RuoYi
2021-12-14 bb4d75aff0027459e3ab99500a4539a3735a9022
升级log4j2到安全版本,防止漏洞风险
已修改1个文件
14 ■■■■■ 文件已修改
pom.xml 14 ●●●●● 补丁 | 查看 | 原始文档 | blame | 历史
pom.xml
@@ -33,6 +33,7 @@
        <poi.version>4.1.2</poi.version>
        <velocity.version>2.3</velocity.version>
        <jwt.version>0.9.1</jwt.version>
        <log4j2.version>2.15.0</log4j2.version>
    </properties>
    
    <!-- 依赖声明 -->
@@ -150,6 +151,19 @@
                <version>${fastjson.version}</version>
            </dependency>
            <!-- log4j日志组件 -->
            <dependency>
                <groupId>org.apache.logging.log4j</groupId>
                <artifactId>log4j-api</artifactId>
                <version>${log4j2.version}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.logging.log4j</groupId>
                <artifactId>log4j-to-slf4j</artifactId>
                <version>${log4j2.version}</version>
            </dependency>
            <!-- Token生成与解析-->
            <dependency>
                <groupId>io.jsonwebtoken</groupId>