ageerle
83fd1ee983
fix: 移除FastJson 1.2.83严重安全漏洞,替换为Jackson
- 移除FastJson 1.2.83依赖(存在严重RCE漏洞CVE-2022-25845等)
- 替换为Spring Boot内置的Jackson 2.18.2
- 修改6个Java文件的JSON处理逻辑
- 所有模块编译验证通过
修改文件:
1. pom.xml - 移除fastjson依赖定义
2. ruoyi-common-chat/pom.xml - 替换为jackson-databind
3. QwenFileUploadUtils.java - 千问文件上传JSON解析
4. ChatRequest.java - 移除FastJson注解
5. MailSendNode.java - 邮件节点JSON处理
6. SwitcherNode.java - 条件分支JSON处理
7. AbstractAuthWeChatEnterpriseRequest.java - 企业微信登录
8. AuthDingTalkV2Request.java - 钉钉登录
安全提升:消除FastJson反序列化RCE漏洞攻击面
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-07-29 14:59:20 +08:00
..
2026-07-23 14:30:38 +08:00
2026-07-29 14:59:20 +08:00
2026-07-14 21:49:03 +08:00
2026-02-06 03:00:23 +08:00
2026-02-06 03:00:23 +08:00
2026-03-07 15:53:06 +08:00
2026-02-06 03:00:23 +08:00
2026-02-06 03:00:23 +08:00
2026-02-06 03:00:23 +08:00
2026-02-06 03:00:23 +08:00
2026-02-06 03:00:23 +08:00
2026-02-06 03:00:23 +08:00
2026-07-14 21:49:03 +08:00
2026-02-06 03:00:23 +08:00
2026-02-06 03:00:23 +08:00
2026-02-06 03:00:23 +08:00
2026-04-13 18:02:27 +08:00
2026-02-06 03:00:23 +08:00
2026-02-06 03:00:23 +08:00
2026-07-29 14:59:20 +08:00
2026-07-23 15:35:10 +08:00
2026-02-06 03:00:23 +08:00
2026-07-23 15:35:10 +08:00
2026-02-06 03:00:23 +08:00
2026-04-13 18:02:27 +08:00
2026-02-06 03:00:23 +08:00
2026-06-16 10:14:35 +08:00