fix安全升级jackson-databind-2.11.3.jar版本到2.14.2

2024-09-12 14:55:58 +08:00
parent 3df1e8cc41
commit 1bd0eb86be
1 changed files with 13 additions and 0 deletions
@@ -15,8 +15,21 @@
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
+            <exclusions>
+                <exclusion>
+                    <artifactId>jackson-databind</artifactId>
+                    <groupId>com.fasterxml.jackson.core</groupId>
+                </exclusion>
+            </exclusions>
            <optional>true</optional>
        </dependency>
+        <!-- https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind -->
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+            <version>2.14.2</version>
+        </dependency>
+
        <!-- Redis -->
        <dependency>
            <groupId>org.springframework.boot</groupId>