老师,我的依赖包出了很多问题,但都是依赖项脆弱,易受到攻击。请问有解决方案吗?

来源:3-4 service及mybatis接入(下)

Ari_wuhan

2023-02-27

图片描述
一种是: Provides transitive vulnerable dependency maven:org.springframework:spring-web:5.1.8.RELEASE CVE-2016-1000027 9.8 Deserialization of Untrusted Data vulnerability with high severity found CVE-2020-5421 6.5 Improper Input Validation vulnerability pending CVSS allocation CVE-2020-5397 5.3 Cross-Site Request Forgery (CSRF) vulnerability pending CVSS allocation CVE-2021-22118 7.8 Improper Privilege Management vulnerability pending CVSS allocation CVE-2020-5398 7.5 Download of Code Without Integrity Check vulnerability pending CVSS allocation Results powered by Checkmarx©

一种是: Dependency maven:mysql:mysql-connector-java:5.1.41 is vulnerable CVE-2020-2934 5.0 Uncontrolled Resource Consumption vulnerability pending CVSS allocation CVE-2017-3589 3.3 Improper Access Control vulnerability pending CVSS allocation CVE-2019-2692 6.3 Improper Input Validation vulnerability pending CVSS allocation CVE-2020-2875 4.7 Improper Access Control vulnerability pending CVSS allocation CVE-2018-3258 8.8 Improper Input Validation vulnerability pending CVSS allocation CVE-2020-2933 2.2 Uncontrolled Resource Consumption vulnerability pending CVSS allocation CVE-2017-3586 6.4 Improper Access Control vulnerability pending CVSS allocation Cx6f651376-312a 7.5 Missing Release of Memory after Effective Lifetime vulnerability pending CVSS allocation CVE-2021-2471 5.9 Improper Restriction of XML External Entity Reference vulnerability with medium severity found CVE-2022-21363 6.6 Improper Input Validation vulnerability pending CVSS allocation Results powered by Checkmarx©

我在网上搜了几天,没有找到有效的解决方法,麻烦老师看看。

写回答

1回答

龙虾三少

2023-03-01

检查下和课程里的内容版本需要保持一致

0
13
Ari_wuhan
非常感谢!
2023-03-07
共13条回复

ES7+Spark 构建高匹配度搜索服务+千人千面推荐系统

ElasticSearch实现高相关性搜索,Spark MLlib实现个性化推荐

1384 学习 · 559 问题

查看课程