Pārlūkot izejas kodu

chore: 补充缓解漏洞风险的postgresql、protobuf-java、undertow-core、icu4j、json-path、xnio-api版本

Uncarbon 2 gadi atpakaļ
vecāks
revīzija
46cf8dee34
1 mainītis faili ar 38 papildinājumiem un 1 dzēšanām
  1. 38 1
      pom.xml

+ 38 - 1
pom.xml

@@ -57,6 +57,7 @@
 
         <!-- 3rd-party versions -->
         <lombok.version>1.18.30</lombok.version>
+        <slf4j.version>1.7.36</slf4j.version>
         <hutool.version>5.8.24</hutool.version>
         <sa-token.version>1.37.0</sa-token.version>
         <transmittable-thread-local.version>2.14.2</transmittable-thread-local.version>
@@ -72,7 +73,7 @@
 
         <!-- DB Driver versions -->
         <mysql.version>8.0.28</mysql.version>
-        <postgresql.version>42.3.4</postgresql.version>
+        <postgresql.version>42.7.1</postgresql.version>
 
 
         <!-- Maven properties -->
@@ -90,6 +91,11 @@
         <!-- for mitigating vulnerabilities -->
         <guava.version>33.0.0-jre</guava.version>
         <snakeyaml.version>1.33</snakeyaml.version>
+        <protobuf-java.version>3.25.1</protobuf-java.version>
+        <undertow-core.version>2.3.10.Final</undertow-core.version>
+        <icu4j.version>74.2</icu4j.version>
+        <json-path.version>2.8.0</json-path.version>
+        <xnio-api.version>3.8.12.Final</xnio-api.version>
     </properties>
 
     <!-- 全局使用 -->
@@ -103,6 +109,7 @@
         <dependency>
             <groupId>org.slf4j</groupId>
             <artifactId>slf4j-api</artifactId>
+            <version>${slf4j.version}</version>
         </dependency>
     </dependencies>
 
@@ -122,6 +129,36 @@
                 <version>${snakeyaml.version}</version>
             </dependency>
 
+            <dependency>
+                <groupId>com.google.protobuf</groupId>
+                <artifactId>protobuf-java</artifactId>
+                <version>${protobuf-java.version}</version>
+            </dependency>
+
+            <dependency>
+                <groupId>io.undertow</groupId>
+                <artifactId>undertow-core</artifactId>
+                <version>${undertow-core.version}</version>
+            </dependency>
+
+            <dependency>
+                <groupId>com.ibm.icu</groupId>
+                <artifactId>icu4j</artifactId>
+                <version>${icu4j.version}</version>
+            </dependency>
+
+            <dependency>
+                <groupId>com.jayway.jsonpath</groupId>
+                <artifactId>json-path</artifactId>
+                <version>${json-path.version}</version>
+            </dependency>
+
+            <dependency>
+                <groupId>org.jboss.xnio</groupId>
+                <artifactId>xnio-api</artifactId>
+                <version>${xnio-api.version}</version>
+            </dependency>
+
 
             <!-- sub starters -->
             <dependency>