From 402d86200225e833c03d8aac7484545b79bfa31e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=82=93=E5=8D=8E=E9=94=8B?= <denghuafeng@gmail.com>
Date: Mon, 30 Oct 2023 16:41:00 +0800
Subject: [PATCH] =?UTF-8?q?fix:snakeyaml=E6=BC=8F=E6=B4=9E?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ruoyi-dependencies/pom.xml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/ruoyi-dependencies/pom.xml b/ruoyi-dependencies/pom.xml
index b02ef8dc1..b7190475a 100644
--- a/ruoyi-dependencies/pom.xml
+++ b/ruoyi-dependencies/pom.xml
@@ -10,6 +10,7 @@
     <packaging>pom</packaging>
 
     <properties>
+        <snakeyaml.version>2.2</snakeyaml.version>
         <spring-boot.mybatis>3.0.2</spring-boot.mybatis>
         <springdoc.version>2.2.0</springdoc.version>
         <poi.version>5.2.3</poi.version>
@@ -49,8 +50,19 @@
                 <version>${spring-boot.version}</version>
                 <type>pom</type>
                 <scope>import</scope>
+                <exclusions>
+                    <exclusion>
+                        <groupId>org.yaml</groupId>
+                        <artifactId>snakeyaml</artifactId>
+                    </exclusion>
+                </exclusions>
+            </dependency>
+            <!-- 临时修复 snakeyaml 漏洞 -->
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>${snakeyaml.version}</version>
             </dependency>
-
             <!-- hutool 的依赖配置-->
             <dependency>
                 <groupId>cn.hutool</groupId>