mirror of
https://gitcode.com/ageerle/ruoyi-ai.git
synced 2026-09-13 08:25:00 +00:00
83fd1ee983
- 移除FastJson 1.2.83依赖（存在严重RCE漏洞CVE-2022-25845等） - 替换为Spring Boot内置的Jackson 2.18.2 - 修改6个Java文件的JSON处理逻辑 - 所有模块编译验证通过 修改文件： 1. pom.xml - 移除fastjson依赖定义 2. ruoyi-common-chat/pom.xml - 替换为jackson-databind 3. QwenFileUploadUtils.java - 千问文件上传JSON解析 4. ChatRequest.java - 移除FastJson注解 5. MailSendNode.java - 邮件节点JSON处理 6. SwitcherNode.java - 条件分支JSON处理 7. AbstractAuthWeChatEnterpriseRequest.java - 企业微信登录 8. AuthDingTalkV2Request.java - 钉钉登录 安全提升：消除FastJson反序列化RCE漏洞攻击面 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
75 lines
2.2 KiB
XML
75 lines
2.2 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
||
<project xmlns="http://maven.apache.org/POM/4.0.0"
|
||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
|
||
<parent>
|
||
<groupId>org.ruoyi</groupId>
|
||
<artifactId>ruoyi-common</artifactId>
|
||
<version>${revision}</version>
|
||
</parent>
|
||
<modelVersion>4.0.0</modelVersion>
|
||
|
||
<artifactId>ruoyi-common-chat</artifactId>
|
||
|
||
<description>
|
||
ruoyi-common-chat chat服务
|
||
</description>
|
||
|
||
<dependencies>
|
||
<!-- SpringWeb模块 -->
|
||
<dependency>
|
||
<groupId>org.springframework</groupId>
|
||
<artifactId>spring-web</artifactId>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.springframework</groupId>
|
||
<artifactId>spring-webmvc</artifactId>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.ruoyi</groupId>
|
||
<artifactId>ruoyi-common-core</artifactId>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.ruoyi</groupId>
|
||
<artifactId>ruoyi-common-sse</artifactId>
|
||
</dependency>
|
||
|
||
<!-- FastJson已移除，使用Spring Boot自带的Jackson -->
|
||
<dependency>
|
||
<groupId>com.fasterxml.jackson.core</groupId>
|
||
<artifactId>jackson-databind</artifactId>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.ruoyi</groupId>
|
||
<artifactId>ruoyi-common-excel</artifactId>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>dev.langchain4j</groupId>
|
||
<artifactId>langchain4j</artifactId>
|
||
<version>${langchain4j.version}</version>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.ruoyi</groupId>
|
||
<artifactId>ruoyi-common-mybatis</artifactId>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.ruoyi</groupId>
|
||
<artifactId>ruoyi-common-tenant</artifactId>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>io.swagger.core.v3</groupId>
|
||
<artifactId>swagger-annotations</artifactId>
|
||
<version>${swagger-annotations.version}</version>
|
||
</dependency>
|
||
</dependencies>
|
||
|
||
</project>
|