xmall icon indicating copy to clipboard operation
xmall copied to clipboard

基于SOA架构的分布式电商购物商城 前后端分离 前台商城:Vue全家桶 后台管理系统:Dubbo/SSM/Elasticsearch/Redis/MySQL/ActiveMQ/Shiro/Zookeeper等

Results 41 xmall issues
Sort by recently updated
recently updated
newest added

Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.9.1 to 2.12.6.1. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.fasterxml.jackson.core:jackson-databind&package-manager=maven&previous-version=2.9.1&new-version=2.12.6.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependencies

Bumps [mysql-connector-java](https://github.com/mysql/mysql-connector-j) from 5.1.32 to 8.0.28. Changelog Sourced from mysql-connector-java's changelog. Changelog https://dev.mysql.com/doc/relnotes/connector-j/8.0/en/ Version 8.0.29 Fix for Bug#21978230, COMMENT PARSING NOT PROPER IN PREPSTMT.EXECUTEBATCH(). Fix for Bug#81468 (23312764), MySQL server...

dependencies

Bumps [mysql-connector-java](https://github.com/mysql/mysql-connector-j) from 5.1.44 to 8.0.28. Changelog Sourced from mysql-connector-java's changelog. Changelog https://dev.mysql.com/doc/relnotes/connector-j/8.0/en/ Version 8.0.29 Fix for Bug#21978230, COMMENT PARSING NOT PROPER IN PREPSTMT.EXECUTEBATCH(). Fix for Bug#81468 (23312764), MySQL server...

dependencies

Bumps [dubbo](https://github.com/apache/incubator-dubbo) from 2.6.1 to 2.6.12. Release notes Sourced from dubbo's releases. dubbo-2.6.12 What's Changed [2.6] update hessian lite version: 3.2.11 -> 3.2.12 (#9455) dubbo-2.6.11 Change Lists Add serialize id...

dependencies

Bumps [spring-webmvc](https://github.com/spring-projects/spring-framework) from 4.3.12.RELEASE to 5.3.18. Release notes Sourced from spring-webmvc's releases. v5.3.18 :star: New Features Restrict access to property paths on Class references #28261 Introduce cancel(boolean mayInterruptIfRunning) in ScheduledTask...

dependencies

Bumps [spring-beans](https://github.com/spring-projects/spring-framework) from 4.3.12.RELEASE to 5.3.18. Release notes Sourced from spring-beans's releases. v5.3.18 :star: New Features Restrict access to property paths on Class references #28261 Introduce cancel(boolean mayInterruptIfRunning) in ScheduledTask...

dependencies

Hi I found a security vulnerability in the XMALL application. Where should I disclose it? Thanks, Ori.

Bumps log4j-core from 2.9.1 to 2.16.0. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.logging.log4j:log4j-core&package-manager=maven&previous-version=2.9.1&new-version=2.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependencies

Bumps httpclient from 4.5.3 to 4.5.13. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.httpcomponents:httpclient&package-manager=maven&previous-version=4.5.3&new-version=4.5.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependencies

很多用户相关的操作都没有进行权限验证。项目中token基本没有用到