[Enhancement] Security Fixes (#49304)

Signed-off-by: Astralidea <astralidea@163.com>
This commit is contained in:
Xueyan Li 2024-08-02 11:07:37 +08:00 committed by GitHub
parent 6b01a165c4
commit 88215d6c6e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 12 additions and 1 deletions

View File

@ -255,6 +255,10 @@ under the License.
<artifactId>jackson-mapper-asl</artifactId>
<groupId>org.codehaus.jackson</groupId>
</exclusion>
<exclusion>
<artifactId>hadoop-mapreduce-client-core</artifactId>
<groupId>org.apache.hadoop</groupId>
</exclusion>
</exclusions>
</dependency>
</dependencies>

View File

@ -45,7 +45,7 @@ under the License.
<zookeeper.version>3.9.2</zookeeper.version>
<protobuf.version>3.16.3</protobuf.version>
<thrift.version>0.14.1</thrift.version>
<tomcat.version>8.5.99</tomcat.version>
<tomcat.version>9.0.90</tomcat.version>
<log4j.version>2.17.1</log4j.version>
<jackson.version>2.13.4.2</jackson.version>
</properties>
@ -248,6 +248,13 @@ under the License.
</exclusions>
</dependency>
<!-- https://mvnrepository.com/artifact/org.apache.hadoop/hadoop-mapreduce-client-core -->
<dependency>
<groupId>org.apache.hadoop</groupId>
<artifactId>hadoop-mapreduce-client-core</artifactId>
<version>${hadoop.version}</version>
</dependency>
<!-- https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind -->
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>