SpringCloud/spring-cloud-openfeign
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Upgrade xstream to 1.4.9

Browse Source 
Fixes XXE vulnerability in Eureka Server (external entity processing
on by default in older versions of the library).
This commit is contained in:
Dave Syer
2016-09-22 16:22:16 +01:00
parent 6c9fa68d5a
commit 5f96c415e3
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
spring-cloud-netflix-dependencies/pom.xml
View File

@@ -25,6 +25,7 @@
<java.version>1.7</java.version>
<turbine.version>1.0.0</turbine.version>
<eureka-jersey.version>1.19.1</eureka-jersey.version>
<xstream.version>1.4.9</xstream.version>
</properties>
<dependencyManagement>
<dependencies>
@@ -275,7 +276,7 @@
<dependency>
<groupId>com.thoughtworks.xstream</groupId>
<artifactId>xstream</artifactId>
<version>1.4.2</version>
<version>${xstream.version}</version>
</dependency>
<dependency>
<groupId>io.github.openfeign</groupId>