From 0e601d9d30709e688e005c56afbe37c7c77511ab Mon Sep 17 00:00:00 2001
From: October <githubgit@163.com>
Date: Thu, 26 May 2022 10:04:10 +0800
Subject: [PATCH] =?UTF-8?q?=E6=8D=AE=E5=9B=BD=E5=AE=B6=E7=BD=91=E7=BB=9C?=
 =?UTF-8?q?=E4=B8=8E=E4=BF=A1=E6=81=AF=E5=AE=89=E5=85=A8=E4=BF=A1=E6=81=AF?=
 =?UTF-8?q?=E9=80=9A=E6=8A=A5=E4=B8=AD=E5=BF=83=E7=9B=91=E6=B5=8B=E5=8F=91?=
 =?UTF-8?q?=E7=8E=B0=EF=BC=8C=E9=98=BF=E9=87=8C=E5=B7=B4=E5=B7=B4=E5=85=AC?=
 =?UTF-8?q?=E5=8F=B8=E5=BC=80=E6=BA=90Java=E5=BC=80=E5=8F=91=E7=BB=84?=
 =?UTF-8?q?=E4=BB=B6fastjson=E5=AD=98=E5=9C=A8=E5=8F=8D=E5=BA=8F=E5=88=97?=
 =?UTF-8?q?=E5=8C=96=E6=BC=8F=E6=B4=9E=E3=80=82fastjson=E8=A2=AB=E4=BC=97?=
 =?UTF-8?q?=E5=A4=9Ajava=E8=BD=AF=E4=BB=B6=E4=BD=9C=E4=B8=BA=E7=BB=84?=
 =?UTF-8?q?=E4=BB=B6=E9=9B=86=E6=88=90=EF=BC=8C=E5=B9=BF=E6=B3=9B=E5=AD=98?=
 =?UTF-8?q?=E5=9C=A8=E4=BA=8Ejava=E5=BA=94=E7=94=A8=E7=9A=84=E6=9C=8D?=
 =?UTF-8?q?=E5=8A=A1=E7=AB=AF=E4=BB=A3=E7=A0=81=E4=B8=AD=E3=80=82=E6=94=BB?=
 =?UTF-8?q?=E5=87=BB=E8=80=85=E5=8F=AF=E5=88=A9=E7=94=A8=E4=B8=8A=E8=BF=B0?=
 =?UTF-8?q?=E6=BC=8F=E6=B4=9E=E5=AE=9E=E6=96=BD=E4=BB=BB=E6=84=8F=E6=96=87?=
 =?UTF-8?q?=E4=BB=B6=E5=86=99=E5=85=A5=E3=80=81=E6=9C=8D=E5=8A=A1=E7=AB=AF?=
 =?UTF-8?q?=E8=AF=B7=E6=B1=82=E4=BC=AA=E9=80=A0=E7=AD=89=E6=94=BB=E5=87=BB?=
 =?UTF-8?q?=E8=A1=8C=E4=B8=BA=EF=BC=8C=E9=80=A0=E6=88=90=E6=9C=8D=E5=8A=A1?=
 =?UTF-8?q?=E5=99=A8=E6=9D=83=E9=99=90=E8=A2=AB=E7=AA=83=E5=8F=96=E3=80=81?=
 =?UTF-8?q?=E6=95=8F=E6=84=9F=E4=BF=A1=E6=81=AF=E6=B3=84=E6=BC=8F=E7=AD=89?=
 =?UTF-8?q?=E4=B8=A5=E9=87=8D=E5=BD=B1=E5=93=8D=E3=80=82=E6=AD=A4=E6=AC=A1?=
 =?UTF-8?q?=E4=BA=8B=E4=BB=B6=E5=BD=B1=E5=93=8Dfastjson=201.2.80=E5=8F=8A?=
 =?UTF-8?q?=E4=B9=8B=E5=89=8D=E6=89=80=E6=9C=89=E7=89=88=E6=9C=AC=E3=80=82?=
 =?UTF-8?q?=E7=9B=AE=E5=89=8D=EF=BC=8C=E9=98=BF=E9=87=8C=E5=B7=B4=E5=B7=B4?=
 =?UTF-8?q?=E5=85=AC=E5=8F=B8=E5=B7=B2=E5=8F=91=E5=B8=83fastjson=E6=9C=80?=
 =?UTF-8?q?=E6=96=B0=E7=89=88=E6=9C=AC1.2.83=E4=BB=A5=E4=BF=AE=E5=A4=8D?=
 =?UTF-8?q?=E8=AF=A5=E6=BC=8F=E6=B4=9E=EF=BC=8C=E7=BB=84=E4=BB=B6=E5=8D=87?=
 =?UTF-8?q?=E7=BA=A7=E5=9C=B0=E5=9D=80=E4=B8=BA=EF=BC=9Ahttps://github.com?=
 =?UTF-8?q?/alibaba/fastjson/releases/tag/1.2.83=E3=80=82=20=E8=AF=B7?=
 =?UTF-8?q?=E5=90=84=E5=8D=95=E4=BD=8D=E9=AB=98=E5=BA=A6=E9=87=8D=E8=A7=86?=
 =?UTF-8?q?=EF=BC=8C=E8=BF=85=E9=80=9F=E9=80=9A=E6=8A=A5=E9=A2=84=E8=AD=A6?=
 =?UTF-8?q?=E6=9C=AC=E8=BE=96=E5=8C=BA=E3=80=81=E6=9C=AC=E7=B3=BB=E7=BB=9F?=
 =?UTF-8?q?=E5=8D=95=E4=BD=8D=EF=BC=8C=E5=8F=8A=E6=97=B6=E6=8E=92=E6=9F=A5?=
 =?UTF-8?q?=E6=A2=B3=E7=90=86=E5=8F=97=E5=BD=B1=E5=93=8D=E6=83=85=E5=86=B5?=
 =?UTF-8?q?=EF=BC=8C=E5=9C=A8=E7=A1=AE=E4=BF=9D=E5=AE=89=E5=85=A8=E7=9A=84?=
 =?UTF-8?q?=E5=89=8D=E6=8F=90=E4=B8=8B=E4=BF=AE=E5=A4=8D=E6=BC=8F=E6=B4=9E?=
 =?UTF-8?q?=E3=80=81=E6=B6=88=E9=99=A4=E9=9A=90=E6=82=A3=EF=BC=8C=E6=8F=90?=
 =?UTF-8?q?=E9=AB=98=E7=BD=91=E7=BB=9C=E7=B3=BB=E7=BB=9F=E5=AE=89=E5=85=A8?=
 =?UTF-8?q?=E9=98=B2=E6=8A=A4=E8=83=BD=E5=8A=9B=EF=BC=8C=E4=B8=A5=E9=98=B2?=
 =?UTF-8?q?=E7=BD=91=E7=BB=9C=E6=94=BB=E5=87=BB=E4=BA=8B=E4=BB=B6=E3=80=82?=
 =?UTF-8?q?=E5=90=8C=E6=97=B6=EF=BC=8C=E5=8A=A0=E5=BC=BA=E5=AE=89=E5=85=A8?=
 =?UTF-8?q?=E7=9B=91=E6=B5=8B=EF=BC=8C=E5=81=9A=E5=A5=BD=E5=BA=94=E6=80=A5?=
 =?UTF-8?q?=E5=A4=84=E7=BD=AE=E5=87=86=E5=A4=87=EF=BC=8C=E5=8F=91=E7=8E=B0?=
 =?UTF-8?q?=E7=AA=81=E5=87=BA=E6=83=85=E5=86=B5=E8=A6=81=E8=BF=85=E9=80=9F?=
 =?UTF-8?q?=E5=A4=84=E7=BD=AE=E5=B9=B6=E7=AC=AC=E4=B8=80=E6=97=B6=E9=97=B4?=
 =?UTF-8?q?=E6=8A=A5=E5=91=8A=E3=80=82?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: October <githubgit@163.com>
---
 yudao-dependencies/pom.xml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/yudao-dependencies/pom.xml b/yudao-dependencies/pom.xml
index 37a2c8a1b..2b70590a1 100644
--- a/yudao-dependencies/pom.xml
+++ b/yudao-dependencies/pom.xml
@@ -52,6 +52,7 @@
         <easyexcel.verion>2.2.7</easyexcel.verion>
         <velocity.version>2.2</velocity.version>
         <screw.version>1.0.5</screw.version>
+		<fastjson.version>2.0.4</fastjson.version>
         <guava.version>30.1.1-jre</guava.version>
         <guice.version>5.1.0</guice.version>
         <transmittable-thread-local.version>2.12.2</transmittable-thread-local.version>
@@ -475,6 +476,13 @@
                 <version>${velocity.version}</version>
             </dependency>
 
+			<!--fastjson漏洞升级此次事件影响fastjson 1.2.80及之前所有版本 -->
+            <dependency>
+                <groupId>com.alibaba</groupId>
+                <artifactId>fastjson</artifactId>
+                <version>${fastjson.version}</version>
+            </dependency>
+			
             <dependency>
                 <groupId>cn.smallbun.screw</groupId>
                 <artifactId>screw-core</artifactId> <!-- 实现数据库文档 -->
@@ -483,6 +491,10 @@
                     <exclusion>
                         <groupId>org.freemarker</groupId>
                         <artifactId>freemarker</artifactId> <!-- 移除 Freemarker 依赖，采用 Velocity 作为模板引擎 -->
+                    </exclusion>
+				    <exclusion>
+                        <groupId>com.alibaba</groupId>
+                        <artifactId>fastjson</artifactId> <!-- 最新版screw-core1.0.5依赖fastjson1.2.73存在漏洞，移除。 -->
                     </exclusion>
                 </exclusions>
             </dependency>