🔒 Fixing security issues. 升级依赖避免CVE

pigx-common/pigx-common-bom/pom.xml

@@ -23,7 +23,7 @@
         <dynamic-ds.version>4.3.0</dynamic-ds.version>
         <druid.version>1.2.20</druid.version>
         <hutool.version>5.8.23</hutool.version>
-        <mysql.connector.version>8.0.33</mysql.connector.version>
+        <mysql.connector.version>8.3.0</mysql.connector.version>
         <oracle.version>21.3.0.0</oracle.version>
         <sqlserver.version>8.4.1.jre8</sqlserver.version>
         <dm.version>8.1.2.192</dm.version>
@@ -31,12 +31,12 @@
         <knife4j.version>3.0.3</knife4j.version>
         <springdoc.version>2.1.0</springdoc.version>
         <swagger.core.version>2.2.14</swagger.core.version>
-        <mp.weixin.version>4.4.0</mp.weixin.version>
-        <ijpay.version>2.9.6-17</ijpay.version>
+        <mp.weixin.version>4.6.0</mp.weixin.version>
+        <ijpay.version>2.9.10-17</ijpay.version>
         <groovy.version>3.0.3</groovy.version>
         <javax.version>4.0.1</javax.version>
-        <jsoup.version>1.13.1</jsoup.version>
-        <aviator.version>5.3.3</aviator.version>
+        <jsoup.version>1.15.3</jsoup.version>
+        <aviator.version>5.4.1</aviator.version>
         <flowable.version>7.0.0</flowable.version>
         <security.oauth.version>2.5.2.RELEASE</security.oauth.version>
         <fastjson.version>1.2.83</fastjson.version>

pigx-common/pigx-common-xss/src/main/java/com/pig4cloud/pigx/common/xss/utils/XssUtil.java

@@ -61,7 +61,7 @@ public class XssUtil {
 	 *
 	 * @author michael
 	 */
-	public static class HtmlWhitelist extends org.jsoup.safety.Whitelist {
+	public static class HtmlWhitelist extends org.jsoup.safety.Safelist {
 
 		public HtmlWhitelist() {
 			addTags("a", "b", "blockquote", "br", "caption", "cite", "code", "col", "colgroup", "dd", "div", "span",

pigx-register/pom.xml

@@ -29,6 +29,7 @@
     <properties>
         <nacos.version>2.2.4-OEM</nacos.version>
         <rocksdb.version>7.10.2</rocksdb.version>
+        <snakeyaml.version>2.2</snakeyaml.version>
         <spring-boot-dependencies.version>2.7.18</spring-boot-dependencies.version>
         <spring-cloud.version>2021.0.8</spring-cloud.version>
         <spring-boot-admin.version>2.7.11</spring-boot-admin.version>
@@ -116,6 +117,13 @@
                 <groupId>org.rocksdb</groupId>
                 <version>${rocksdb.version}</version>
             </dependency>
+
+            <!--   避免漏扫缺陷 -->
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>${snakeyaml.version}</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 

pom.xml

@@ -57,7 +57,7 @@
         <ttl.version>2.12.6</ttl.version>
         <jaxb.version>2.3.5</jaxb.version>
         <jimu.version>1.6.6-beta2</jimu.version>
-        <aws.version>1.11.543</aws.version>
+        <aws.version>1.12.261</aws.version>
         <xxl.job.version>2.4.0</xxl.job.version>
         <activiti.version>5.22.0</activiti.version>
         <docker.registry>172.17.0.111</docker.registry>