diff --git a/pom.xml b/pom.xml
index 9ec5ce8b5..1dced3e2e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -24,7 +24,8 @@
         <druid.version>1.2.18</druid.version>
         <jwt.version>0.9.1</jwt.version>
         <commons.version>2.6</commons.version>
-<!--        <tomcat.version>10.1.15</tomcat.version>-->
+        <tomcat.version>10.1.44</tomcat.version>
+        <netty.version>4.1.124.Final</netty.version>
     </properties>
 
     <repositories>
@@ -446,11 +447,6 @@
             <artifactId>hutool-core</artifactId>
             <version>5.8.36</version>
         </dependency>
-<!--        <dependency>-->
-<!--            <groupId>org.apache.tomcat</groupId>-->
-<!--            <artifactId>tomcat-juli</artifactId>-->
-<!--            <version>${tomcat.version}</version>-->
-<!--        </dependency>-->
         <dependency>
             <groupId>com.github.xiaoymin</groupId>
             <artifactId>knife4j-openapi3-jakarta-spring-boot-starter</artifactId>
diff --git a/src/main/java/com/WisdomSiteApplication.java b/src/main/java/com/WisdomSiteApplication.java
index e06d4321f..84d1cfcce 100644
--- a/src/main/java/com/WisdomSiteApplication.java
+++ b/src/main/java/com/WisdomSiteApplication.java
@@ -2,6 +2,7 @@ package com;
 
 
 import cn.xuyanwu.spring.file.storage.EnableFileStorage;
+import com.alibaba.fastjson.parser.ParserConfig;
 import com.zhgd.redis.lock.redisson.EnableDistributedLock;
 import org.apache.catalina.connector.Connector;
 import org.mybatis.spring.annotation.MapperScan;
@@ -42,9 +43,11 @@ public class WisdomSiteApplication extends SpringBootServletInitializer {
     public static boolean runSucess = false;
 
     public static void main(String[] args) {
+        // 完全禁用 autoType，确保 Fastjson 安全
+        ParserConfig.getGlobalInstance().setSafeMode(true);
+        com.alibaba.fastjson.parser.ParserConfig.getGlobalInstance().setSafeMode(true);
         SpringApplication.run(WisdomSiteApplication.class, args);
         WisdomSiteApplication.runSucess = true;
-        com.alibaba.fastjson.parser.ParserConfig.getGlobalInstance().setSafeMode(true);
     }
 
     @Bean