漏洞提醒:建议升级一下jar包

[qingshanking]

Spring框架反射型文件下载漏洞

https://s.tencent.com/research/bsafe/1131.html

Jackson 远程代码执行漏洞(CVE-2020-35728)

https://s.tencent.com/research/bsafe/1209.html

Jackson 远程代码执行漏洞

https://s.tencent.com/research/bsafe/1205.html

[zhaojun1998]

我了解下情况后，会把历史版本的打包都升级下依赖。谢谢反馈。

…

---原始邮件--- 发件人: ***@***.***> 发送时间: 2021年4月29日(周四) 上午8:33 收件人: ***@***.***>; 抄送: ***@***.***>; 主题: [zhaojun1998/zfile] 漏洞提醒:建议升级一下jar包 (#219) Spring框架反射型文件下载漏洞 https://s.tencent.com/research/bsafe/1131.html Jackson 远程代码执行漏洞(CVE-2020-35728) https://s.tencent.com/research/bsafe/1209.html Jackson 远程代码执行漏洞 https://s.tencent.com/research/bsafe/1205.html — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

[zhaojun1998]

3.2 版本已解决此问题