Merge pull request #9931 from dataease/pr@dev-v2@fix_commons-compress

fix: 老版本commons-compress中CVE-2024-26308以及CVE-2024-25710
This commit is contained in:
fit2cloud-chenyw 2024-05-29 09:52:18 +08:00 committed by GitHub
commit 4bb2c845c8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -50,6 +50,7 @@
<itextpdf.version>8.0.4</itextpdf.version>
<flexmark.version>0.62.2</flexmark.version>
<mybatis-spring.version>3.0.3</mybatis-spring.version>
<commons-compress.version>1.26.2</commons-compress.version>
</properties>
<dependencyManagement>
@ -121,6 +122,11 @@
<artifactId>ehcache</artifactId>
<version>${ehcache.version}</version>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-compress</artifactId>
<version>${commons-compress.version}</version>
</dependency>
<dependency>
<groupId>com.alibaba</groupId>
<artifactId>easyexcel</artifactId>