search

baomidou / dynamic-datasource

dynamic datasource for springboot 多数据源 动态数据源 主从分离 读写分离 分布式事务
https://www.kancloud.cn/tracy5546/dynamic-datasource/2264611
Apache License 2.0
4.76k stars 1.2k forks source link

fix(sec): upgrade org.apache.commons:commons-dbcp2 to 2.9.0 #452

Closed vvsd closed 2 years ago

vvsd commented 2 years ago

What happened？

There are 1 security vulnerabilities found in org.apache.commons:commons-dbcp2 2.8.0

What did I do？

Upgrade org.apache.commons:commons-dbcp2 from 2.8.0 to 2.9.0 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

How was this patch tested?

Run mvn compile succeeded locally. Run mvn clean test succeeded locally. all tests passed.

The specification of the pull request

PR Specification from OSCS