fix(sec): upgrade com.alibaba:fastjson to 1.2.83

QNJR-GROUP / EasyTransaction

A distribute transaction solution（分布式事务） unified the usage of TCC , SAGA ,FMT (seata/fescar AutoCompensation)， reliable message, compensate and so on;

Apache License 2.0

2.36k stars 809 forks source link

fix(sec): upgrade com.alibaba:fastjson to 1.2.83 #166

Open chncaption opened 1 year ago

chncaption commented 1 year ago

What happened？

There are 1 security vulnerabilities found in com.alibaba:fastjson 1.2.54

CVE-2022-25845

What did I do？

Upgrade com.alibaba:fastjson from 1.2.54 to 1.2.83 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS