diff --git a/sgzb-auth/src/main/resources/bootstrap.yml b/sgzb-auth/src/main/resources/bootstrap.yml
index e8b1c5d3..a6d8ea64 100644
--- a/sgzb-auth/src/main/resources/bootstrap.yml
+++ b/sgzb-auth/src/main/resources/bootstrap.yml
@@ -41,4 +41,10 @@ appAppId: u8LLfynf
 getPersonDetailData: /lbcloud-user/api/user/queryById
 registerPhone: /lbcloud-user/api/user/registrationByPhone
 userBindUrl: /lbcloud-authority/api/RoleClient/bindDefaultSystemRole
-verifyPhoneCode: /lbcloud-mbroker/api/broker/simpleVerificationCode
\ No newline at end of file
+verifyPhoneCode: /lbcloud-mbroker/api/broker/simpleVerificationCode
+
+# 禁用Actuator端点的未经身份验证的访问
+management:
+  endpoint:
+    env:
+      enabled: false
\ No newline at end of file
diff --git a/sgzb-common/sgzb-common-core/pom.xml b/sgzb-common/sgzb-common-core/pom.xml
index a9d7f429..c931877c 100644
--- a/sgzb-common/sgzb-common-core/pom.xml
+++ b/sgzb-common/sgzb-common-core/pom.xml
@@ -63,6 +63,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
+            <version>2.13.5</version>
         </dependency>
 
         <!-- Alibaba Fastjson -->
diff --git a/sgzb-modules/sgzb-base/src/main/resources/bootstrap.yml b/sgzb-modules/sgzb-base/src/main/resources/bootstrap.yml
index e778cf56..b27a2601 100644
--- a/sgzb-modules/sgzb-base/src/main/resources/bootstrap.yml
+++ b/sgzb-modules/sgzb-base/src/main/resources/bootstrap.yml
@@ -32,3 +32,9 @@ spring:
         # 共享配置
         shared-configs:
           - application-${spring.profiles.active}.${spring.cloud.nacos.config.file-extension}
+
+# 禁用Actuator端点的未经身份验证的访问
+management:
+  endpoint:
+    env:
+      enabled: false
diff --git a/sgzb-modules/sgzb-system/src/main/resources/bootstrap.yml b/sgzb-modules/sgzb-system/src/main/resources/bootstrap.yml
index c20589a1..045339c4 100644
--- a/sgzb-modules/sgzb-system/src/main/resources/bootstrap.yml
+++ b/sgzb-modules/sgzb-system/src/main/resources/bootstrap.yml
@@ -67,6 +67,12 @@ tencent:
       # API密钥
       secretkey: OXUgeMo0yhBRTGo6sVu3yiFX4rQtAzc3
 
+# 禁用Actuator端点的未经身份验证的访问
+management:
+  endpoint:
+    env:
+      enabled: false
+