velocity剔除commons-collections版本，防止3.2.1版本的反序列化漏洞

2025-09-06 12:28:10 +00:00 · 2021-03-14 21:53:51 +08:00
parent 6ad1df166b
commit 41fa57d778
3 changed files with 7 additions and 5 deletions
--- a/pom.xml
+++ b/pom.xml
@@ -142,6 +142,12 @@
                <groupId>org.apache.velocity</groupId>
                <artifactId>velocity</artifactId>
                <version>${velocity.version}</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>commons-collections</groupId>
+                        <artifactId>commons-collections</artifactId>
+                    </exclusion>
+                </exclusions>
            </dependency>

            <!-- JSON 解析器和生成器 -->