From be33739a3c3958bbe7eca1bc7dd9dfacf68411a9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=96=AF=E7=8B=82=E7=9A=84=E7=8B=AE=E5=AD=90li?=
 <15040126243@163.com>
Date: Mon, 26 Sep 2022 17:07:09 +0800
Subject: [PATCH] =?UTF-8?q?fix=20=E4=BF=AE=E5=A4=8D=20snakeyaml=20?=
 =?UTF-8?q?=E6=BC=8F=E6=B4=9E=20=E5=BC=BA=E5=88=B6=E5=8D=87=E7=BA=A7?=
 =?UTF-8?q?=E4=BE=9D=E8=B5=96=E7=89=88=E6=9C=AC(=E4=B8=B4=E6=97=B6?=
 =?UTF-8?q?=E5=A4=84=E7=90=86=E7=AD=89boot=E5=8D=87=E7=BA=A7)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pom.xml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/pom.xml b/pom.xml
index 6ad70f4b..5e1bd837 100644
--- a/pom.xml
+++ b/pom.xml
@@ -44,6 +44,8 @@
 
         <!-- 统一 guava 版本 解决隐式漏洞问题 -->
         <guava.version>31.1-jre</guava.version>
+        <!-- 临时修复 snakeyaml 漏洞 -->
+        <snakeyaml.version>1.31</snakeyaml.version>
 
         <!-- OSS 配置 -->
         <aws-java-sdk-s3.version>1.12.300</aws-java-sdk-s3.version>
@@ -304,6 +306,13 @@
                 <version>${guava.version}</version>
             </dependency>
 
+            <!-- 临时修复 snakeyaml 漏洞 -->
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>${snakeyaml.version}</version>
+            </dependency>
+
             <!-- 统一 fastjson 版本 解决alibaba组件序列化漏洞问题 -->
             <dependency>
                 <groupId>com.alibaba</groupId>