依赖漏洞管理

This commit is contained in:
wangw 2025-02-08 10:09:26 +08:00
parent f9e8cc1f0d
commit 957c2a88fd
3 changed files with 46 additions and 11 deletions

View File

@ -29,9 +29,18 @@
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
<exclusions>
<exclusion>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-core</artifactId>
</exclusion>
</exclusions>
</dependency>
<!-- Spring Boot与Nacos整合的核心依赖 -->
<dependency>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-core</artifactId>
</dependency>
<!-- Spring Boot与nacos整合的核心依赖 -->
<dependency>
<groupId>com.alibaba.cloud</groupId>
<artifactId>spring-cloud-starter-alibaba-nacos-discovery</artifactId>
@ -51,11 +60,23 @@
<version>4.1.4</version>
</dependency>
<!--openfeign依赖-->
<!--start-->
<dependency>
<groupId>org.springframework.cloud</groupId>
<artifactId>spring-cloud-starter-openfeign</artifactId>
<version>4.2.0</version>
<exclusions>
<exclusion>
<groupId>commons-io</groupId>
<artifactId>commons-io</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>commons-io</groupId>
<artifactId>commons-io</artifactId>
</dependency>
<!--end-->
</dependencies>
</project>

View File

@ -16,22 +16,15 @@
<groupId>com.czg</groupId>
<artifactId>cash-common-tools</artifactId>
</dependency>
<!-- sa-token 的漏洞的依赖处理 -->
<!-- Sa-Token 权限认证在线文档https://sa-token.cc -->
<!-- start -->
<dependency>
<groupId>cn.dev33</groupId>
<artifactId>sa-token-spring-boot3-starter</artifactId>
<exclusions>
<exclusion>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-core</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-core</artifactId>
<version>11.0.2</version>
</dependency>
<!-- end -->
</dependencies>

View File

@ -20,6 +20,8 @@
<quartz.version>2.3.2</quartz.version>
<fastjson2.version>2.0.54</fastjson2.version>
<sa-token.version>1.40.0</sa-token.version>
<commons-io.version>2.14.0</commons-io.version>
<tomcat-embed-core.version>11.0.2</tomcat-embed-core.version>
</properties>
<dependencyManagement>
@ -30,10 +32,29 @@
<version>1.0.0</version>
</dependency>
<!-- Sa-Token 权限认证在线文档https://sa-token.cc -->
<!-- sa-token 的漏洞的依赖处理 -->
<!-- sa-token start -->
<dependency>
<groupId>cn.dev33</groupId>
<artifactId>sa-token-spring-boot3-starter</artifactId>
<version>${sa-token.version}</version>
<exclusions>
<exclusion>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-core</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-core</artifactId>
<version>${tomcat-embed-core.version}</version>
</dependency>
<!-- sa-token end -->
<dependency>
<groupId>commons-io</groupId>
<artifactId>commons-io</artifactId>
<version>${commons-io.version}</version>
</dependency>
<dependency>
<groupId>com.github.whvcse</groupId>