Merge pull request #681 from Tencent/github_bugfix/spring_cloud_gateway_

CVE-2022-22947 bug: Spring Cloud Gateway 高危漏洞 CVE-2022-22947 #679
TencentBlueKing · Mar 3, 2022 · 37c395f · 37c395f
2 parents 9ba9a75 + 5baa1f9
commit 37c395f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/backend/job-gateway/build.gradle b/src/backend/job-gateway/build.gradle
@@ -42,10 +42,11 @@ dependencies {
     implementation 'org.springframework:spring-webflux'
     implementation 'org.springframework.cloud:spring-cloud-starter-bootstrap'
     implementation 'org.springframework.cloud:spring-cloud-starter-gateway'
+    // CVE-2022-22947
+    implementation 'org.springframework.cloud:spring-cloud-gateway-server:3.0.7'
     implementation 'redis.clients:jedis'
     implementation 'commons-io:commons-io'
     implementation 'org.springframework.boot:spring-boot-starter-validation'
-//    implementation 'org.springframework.boot:spring-boot-starter-security'
     implementation 'joda-time:joda-time'
     implementation 'org.apache.httpcomponents:httpclient'
     compileOnly 'org.projectlombok:lombok'