RuoYi
2021-12-30 b6f21f451d4ed02c644dd1bfb7c457ed2e0cfe80
升级log4j2到2.17.1,防止漏洞风险
1 files modified
14 ■■■■■ changed files
pom.xml 14 ●●●●● patch | view | raw | blame | history
pom.xml
@@ -40,6 +40,7 @@
        <common-pool.version>2.10.0</common-pool.version>
        <commons-collections.version>3.2.2</commons-collections.version>
        <transmittable-thread-local.version>2.12.2</transmittable-thread-local.version>
        <log4j2.version>2.17.1</log4j2.version>
    </properties>
    <!-- 依赖声明 -->
@@ -190,6 +191,19 @@
                <version>${common-pool.version}</version>
            </dependency>
            <!-- log4j日志组件 -->
            <dependency>
                <groupId>org.apache.logging.log4j</groupId>
                <artifactId>log4j-api</artifactId>
                <version>${log4j2.version}</version>
            </dependency>
            <dependency>
                <groupId>org.apache.logging.log4j</groupId>
                <artifactId>log4j-to-slf4j</artifactId>
                <version>${log4j2.version}</version>
            </dependency>
            <!-- 核心模块 -->
            <dependency>
                <groupId>com.ruoyi</groupId>