From 2a66698ef3e45814dcacf346b64f968436638e9b Mon Sep 17 00:00:00 2001 From: Looly Date: Thu, 11 Jan 2024 12:08:39 +0800 Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8DNumberUtil.toBigDecimal?= =?UTF-8?q?=E6=96=B9=E6=B3=95=E6=8A=A5StackOverflowError(CVE-2023-51080)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- hutool-core/src/main/java/cn/hutool/core/util/NumberUtil.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hutool-core/src/main/java/cn/hutool/core/util/NumberUtil.java b/hutool-core/src/main/java/cn/hutool/core/util/NumberUtil.java index f99f658f7..af765dcfb 100755 --- a/hutool-core/src/main/java/cn/hutool/core/util/NumberUtil.java +++ b/hutool-core/src/main/java/cn/hutool/core/util/NumberUtil.java @@ -2226,7 +2226,7 @@ public class NumberUtil { } // Float、Double等有精度问题,转换为字符串后再转换 - return toBigDecimal(number.toString()); + return new BigDecimal(number.toString()); } /**