yangzongzhuan / RuoYi-Vue

:tada: (RuoYi)官方仓库 基于SpringBoot,Spring Security,JWT,Vue & Element 的前后端分离权限管理系统,同时提供了 Vue3 的版本
http://ruoyi.vip
MIT License
2.32k stars 1.28k forks source link

fix(sec): upgrade com.ruoyi:ruoyi-quartz to 4.7.7 #81

Open 645775992 opened 5 months ago

645775992 commented 5 months ago

What happened?

There are 1 security vulnerabilities found in com.ruoyi:ruoyi-quartz 3.8.7

What did I do?

Upgrade com.ruoyi:ruoyi-quartz from 3.8.7 to 4.7.7 for vulnerability fix

What did you expect to happen?

Ideally, no insecure libs should be used.

How can we automate the detection of these types of issues?

By using the GitHub Actions configurations provided by murphysec, we can conduct automatic code security checks in our CI pipeline.

The specification of the pull request

PR Specification from OSCS