基础信息
项目名称：eXist-db/exist
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1717591687383613440/1717591687534608384
此报告由Murphysec提供
漏洞列表
| 漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
|---|---|---|---|---|
| Apache Struts 远程代码执行漏洞 | 输入验证不恰当 | MPS-2014-2167 | CVE-2014-0114 | 高危 |
| Apache Commons Beanutils 存在不可信数据的反序列化漏洞 | 反序列化 | MPS-2019-10233 | CVE-2019-10086 | 高危 |
| Spring Framework | 反序列化 | MPS-2020-0057 | CVE-2016-1000027 | 严重 |
| JDOM 存在 XXE 注入漏洞 | XXE | MPS-2021-8350 | CVE-2021-33813 | 高危 |
| org.scala-lang:scala-library 存在反序列化漏洞（Gadget chain） | 反序列化 | MPS-2022-52625 | CVE-2022-36944 | 严重 |
| Apache XML Graphics Batik | SSRF | MPS-2022-63578 | CVE-2022-44729 | 中危 |
| Apache XML Graphics Batik 代码问题漏洞 | SSRF | MPS-2022-63579 | CVE-2022-44730 | 中危 |
| HtmlUnit 存在拒绝服务漏洞 | 未经控制的内存分配 | MPS-2022-7514 | CVE-2022-28366 | 高危 |
| Lightbeed Akka Akka-http 安全漏洞 | MPS-8hzc-ex6k | CVE-2023-31442 | 高危 | |
| Bouncy Castle 信任管理问题漏洞 | 证书验证不恰当 | MPS-i6w7-d48e | CVE-2023-33201 | 中危 |
| 【存在争议】FasterXML jackson-databind 代码问题漏洞 | 不加限制或调节的资源分配 | MPS-z1bx-p8y2 | CVE-2023-35116 | 中危 |
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| org.apache.xmlgraphics:batik-transcoder | 1.16 | 1.17 | 间接依赖 | 强烈建议修复 |
| commons-beanutils:commons-beanutils | 1.8.2 | 1.9.4 | 间接依赖 | 强烈建议修复 |
| org.apache.xmlgraphics:batik-bridge | 1.16 | 1.17 | 间接依赖 | 强烈建议修复 |
| org.springframework:spring-web | 6.0.0-M6 | 6.0.0 | 间接依赖 | 建议修复 |
| commons-beanutils:commons-beanutils | 1.7.0 | 1.9.4 | 间接依赖 | 建议修复 |
| com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 间接依赖 | 建议修复 | |
| org.scala-lang:scala-library | 2.13.8 | 2.13.9 | 间接依赖 | 建议修复 |
| com.typesafe.akka:akka-actor_2.13 | 2.6.20 | 2.8.1 | 间接依赖 | 可选修复 |
| net.sourceforge.nekohtml:nekohtml | 1.9.22 | 直接依赖 | 可选修复 | |
| org.jdom:jdom | 1.1 | 间接依赖 | 可选修复 | |
| org.bouncycastle:bcprov-jdk15on | 1.70 | 直接依赖 | 可选修复 | |
| org.apache.xmlgraphics:batik-script | 1.16 | 1.17 | 间接依赖 | 可选修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| Apache-2.0 | 173 | 低 |
| EPL-2.0 | 32 | 低 |
| LGPL-2.1 | 35 | 中 |
| 自定义许可证 | 45 | 低 |
| BSD-3-Clause | 17 | 低 |
| MIT | 13 | 低 |
| EPL-1.0 | 3 | 低 |
| LGPL-3.0 | 1 | 中 |
| BSD-2-Clause | 1 | 低 |
| MPL-2.0 | 1 | 低 |
| MPL-1.1 | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| org.apache.tika:tika-parser-mail-commons | 2.9.1 | 间接依赖 | maven |
| org.apache.tika:tika-parser-cad-module | 2.9.1 | 间接依赖 | maven |
| org.eclipse.jetty:jetty-servlet | 11.0.17 | 直接依赖 | maven |
| com.healthmarketscience.jackcess:jackcess-encrypt | 4.0.2 | 间接依赖 | maven |
| org.apache.directory.api:api-asn1-ber | 2.1.4 | 间接依赖 | maven |
| org.apache.xmlgraphics:batik-css | 1.16 | 间接依赖 | maven |
| xml-apis:xml-apis | 1.4.01 | 直接依赖 | maven |
| org.exist-db:exist-index-ngram | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.exist-db:exist-image | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.apache.tika:tika-parser-audiovideo-module | 2.9.1 | 间接依赖 | maven |
| org.eclipse.angus:angus-mail | 2.0.2 | 直接依赖 | maven |
| org.apache.directory.api:api-ldap-model | 2.1.4 | 间接依赖 | maven |
| org.netpreserve:jwarc | 0.28.3 | 间接依赖 | maven |
| org.xmlresolver:xmlresolver | 4.6.4 | 直接依赖 | maven |
| org.eclipse.jetty:jetty-jmx | 11.0.17 | 直接依赖 | maven |
| org.jdom:jdom2 | 2.0.6.1 | 间接依赖 | maven |
| org.apache.pdfbox:xmpbox | 2.0.29 | 间接依赖 | maven |
| org.eclipse.jetty:jetty-http | 11.0.17 | 直接依赖 | maven |
| org.apache.xmlgraphics:batik-script | 1.16 | 间接依赖 | maven |
| com.evolvedbinary.thirdparty.org.apache.xmlrpc:xmlrpc-common | 5.0.0 | 直接依赖 | maven |
| org.springframework:spring-context | 6.0.0-M6 | 间接依赖 | maven |
| org.exist-db.thirdparty.com.fasterxml:aalto-xml | 1.1.0-20180330 | 间接依赖 | maven |
| org.apache.xmlgraphics:batik-svggen | 1.16 | 间接依赖 | maven |
| org.quartz-scheduler:quartz | 2.3.2 | 直接依赖 | maven |
| org.exist-db:exist-ant | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| jakarta.transaction:jakarta.transaction-api | 2.0.0 | 间接依赖 | maven |
| org.apache.xmlgraphics:batik-xml | 1.16 | 间接依赖 | maven |
| org.apache.directory.api:api-i18n | 2.1.4 | 间接依赖 | maven |
| org.apache.xmlgraphics:batik-awt-util | 1.16 | 间接依赖 | maven |
| org.apache.logging.log4j:log4j-api | 2.21.0 | 直接依赖 | maven |
| com.google.errorprone:error_prone_annotations | 2.21.1 | 间接依赖 | maven |
| org.geotools:gt2-epsg-wkt | 2.4.5 | 直接依赖 | maven |
| org.exist-db:exist-file | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.jline:jline | 3.23.0 | 直接依赖 | maven |
| org.exist-db:exist-xslfo | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.apache.xmlgraphics:batik-transcoder | 1.16 | 间接依赖 | maven |
| org.apache.poi:poi-scratchpad | 5.2.3 | 间接依赖 | maven |
| com.evolvedbinary.thirdparty.org.apache.xmlrpc:xmlrpc-server | 5.0.0 | 直接依赖 | maven |
| org.exquery:exquery-common | 0.2.1 | 直接依赖 | maven |
| org.eclipse.jetty.websocket:websocket-jakarta-common | 11.0.17 | 间接依赖 | maven |
| org.parboiled:parboiled_2.13 | 2.4.1 | 间接依赖 | maven |
| org.apache.xmlgraphics:batik-util | 1.16 | 间接依赖 | maven |
| KERNEL32.dll | 间接依赖 | ||
| org.exquery:exquery-annotations-common | 0.2.1 | 间接依赖 | maven |
| com.ibm.icu:icu4j | 59.1 | 直接依赖 | maven |
| com.github.junrar:junrar | 7.5.5 | 间接依赖 | maven |
| org.apache.commons:commons-exec | 1.3 | 间接依赖 | maven |
| org.apache.pdfbox:jempbox | 1.8.17 | 间接依赖 | maven |
| com.pff:java-libpst | 0.9.3 | 间接依赖 | maven |
| org.eclipse.angus:angus-activation | 2.0.1 | 直接依赖 | maven |
| org.apache.poi:poi | 5.2.3 | 间接依赖 | maven |
| org.apache.xmlgraphics:batik-dom | 1.16 | 间接依赖 | maven |
| com.google.code.findbugs:jsr305 | 3.0.2 | 直接依赖 | maven |
| org.eclipse.jetty.websocket:websocket-jakarta-server | 11.0.17 | 直接依赖 | maven |
| org.apache.xmlgraphics:fop | 2.8 | 直接依赖 | maven |
| org.geotools:gt2-metadata | 2.4.5 | 间接依赖 | maven |
| org.eclipse.jetty.toolchain:jetty-jakarta-websocket-api | 2.0.0 | 间接依赖 | maven |
| org.exist-db:exist-cqlparser | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| com.thoughtworks.qdox:qdox | 1.12 | 间接依赖 | maven |
| javax.media:jai_core | 1.1.3 | 直接依赖 | maven |
| org.apache.xmlgraphics:fop-core | 2.8 | 间接依赖 | maven |
| org.exquery:exquery-restxq | 0.2.1 | 直接依赖 | maven |
| org.apache.xmlgraphics:batik-gvt | 1.16 | 间接依赖 | maven |
| edu.princeton.cup:java-cup | 10k | 直接依赖 | maven |
| libdl.so.2 | 间接依赖 | ||
| org.apache.ws.commons.util:ws-commons-util | 1.0.2 | 直接依赖 | maven |
| org.openjdk.jcstress:jcstress-core | 0.16 | 直接依赖 | maven |
| org.apache.pdfbox:fontbox | 2.0.29 | 间接依赖 | maven |
| org.exist-db:exist-index-range | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| com.siemens.ct.exi:exificient | 0.9.3 | 直接依赖 | maven |
| io.lacuna:bifurcan | 0.2.0-alpha6 | 直接依赖 | maven |
| org.typelevel:cats-effect-kernel_2.13 | 3.4.6 | 间接依赖 | maven |
| antlr:antlr | 2.7.7 | 直接依赖 | maven |
| net.java.dev.jna:jna-platform | 5.8.0 | 间接依赖 | maven |
| org.apache.logging.log4j:log4j-jcl | 2.21.0 | 直接依赖 | maven |
| jakarta.annotation:jakarta.annotation-api | 2.1.1 | 间接依赖 | maven |
| org.exist-db:exist-jndi | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.apache.tika:tika-parser-font-module | 2.9.1 | 间接依赖 | maven |
| org.apache.httpcomponents.core5:httpcore5 | 5.1.3 | 间接依赖 | maven |
| org.eclipse.jetty:jetty-jaas | 11.0.17 | 直接依赖 | maven |
| jakarta.mail:jakarta.mail-api | 2.1.2 | 直接依赖 | maven |
| org.hsqldb:hsqldb | 2.7.1 | 直接依赖 | maven |
| libc.so.6 | 间接依赖 | ||
| org.apache.pdfbox:pdfbox-tools | 2.0.29 | 间接依赖 | maven |
| org.eclipse.jetty.websocket:websocket-jetty-server | 11.0.17 | 直接依赖 | maven |
| com.drewnoakes:metadata-extractor | 2.18.0 | 间接依赖 | maven |
| org.codehaus.mojo.appassembler:appassembler-model | 2.1.0 | 间接依赖 | maven |
| org.apache.lucene:lucene-core | 4.10.4 | 直接依赖 | maven |
| junit:junit | 4.13.2 | 直接依赖 | maven |
| org.exist-db:exist-index-sort | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.springframework:spring-expression | 6.0.0-M6 | 间接依赖 | maven |
| org.exist-db:exist-mail | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.eclipse.jetty:jetty-xml | 11.0.17 | 直接依赖 | maven |
| org.apache.james:apache-mime4j-dom | 0.8.9 | 间接依赖 | maven |
| commons-beanutils:commons-beanutils | 1.7.0 | 间接依赖 | maven |
| org.apache.tika:tika-parser-microsoft-module | 2.9.1 | 间接依赖 | maven |
| com.fasterxml.uuid:java-uuid-generator | 4.3.0 | 直接依赖 | maven |
| org.glassfish.jaxb:jaxb-core | 4.0.2 | 间接依赖 | maven |
| xml-resolver:xml-resolver | 1.2 | 直接依赖 | maven |
| org.exist-db:exist-index-lucene | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.apache.xmlgraphics:xmlgraphics-commons | 2.8 | 直接依赖 | maven |
| org.eclipse.jetty.websocket:websocket-core-client | 11.0.17 | 间接依赖 | maven |
| org.apache.tika:tika-parser-zip-commons | 2.9.1 | 间接依赖 | maven |
| org.codehaus.woodstox:stax2-api | 4.1 | 间接依赖 | maven |
| org.apache.httpcomponents:httpcore | 4.4.16 | 直接依赖 | maven |
| org.brotli:dec | 0.1.2 | 间接依赖 | maven |
| org.exist-db:exist-scheduler | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.geotools:gt2-api | 2.4.5 | 直接依赖 | maven |
| jdom:jdom | 1.0 | 间接依赖 | maven |
| org.eclipse.jetty:jetty-server | 11.0.17 | 直接依赖 | maven |
| org.fusesource.jansi:jansi | 2.4.0 | 直接依赖 | maven |
| org.apache.tika:tika-parser-apple-module | 2.9.1 | 间接依赖 | maven |
| jakarta.activation:jakarta.activation-api | 2.1.2 | 直接依赖 | maven |
| com.adobe.xmp:xmpcore | 6.1.11 | 间接依赖 | maven |
| org.apache.httpcomponents.client5:httpclient5 | 5.1.3 | 间接依赖 | maven |
| net.java.dev.jna:jna | 5.8.0 | 间接依赖 | maven |
| org.apache.xmlgraphics:batik-ext | 1.16 | 间接依赖 | maven |
| org.apache.lucene:lucene-analyzers-icu | 4.10.4 | 直接依赖 | maven |
| org.exquery:exquery-xquery | 0.2.1 | 直接依赖 | maven |
| SHLWAPI.dll | 间接依赖 | ||
| USER32.dll | 间接依赖 | ||
| org.apache.xmlgraphics:batik-shared-resources | 1.16 | 间接依赖 | maven |
| net.java.dev.stax-utils:stax-utils | 20060502 | 间接依赖 | maven |
| org.eclipse.jetty.websocket:websocket-jetty-api | 11.0.17 | 间接依赖 | maven |
| org.exist-db.thirdparty.org.eclipse.wst.xml:xpath2 | 1.2.0 | 直接依赖 | maven |
| org.eclipse.jetty:jetty-util | 11.0.17 | 直接依赖 | maven |
| org.apache.tika:tika-parser-html-module | 2.9.1 | 间接依赖 | maven |
| org.expath.packaging:pkg-java | 2.0.1 | 直接依赖 | maven |
| edu.oswego:concurrent | 1.3.4 | 间接依赖 | maven |
| org.exist-db:exist-counter | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.geotools:gt2-referencing | 2.4.5 | 直接依赖 | maven |
| org.apache.tika:tika-parser-image-module | 2.9.1 | 间接依赖 | maven |
| org.tukaani:xz | 1.9 | 间接依赖 | maven |
| org.exist-db.thirdparty.xerces:xercesImpl | 2.12.2 | 直接依赖 | maven |
| org.exist-db:exist-expathrepo | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.apache.commons:commons-csv | 1.10.0 | 间接依赖 | maven |
| org.ow2.asm:asm | 9.6 | 间接依赖 | maven |
| org.jctools:jctools-core | 4.0.1 | 直接依赖 | maven |
| it.unimi.dsi:fastutil | 8.5.12 | 直接依赖 | maven |
| org.springframework:spring-core | 6.0.0-M6 | 间接依赖 | maven |
| org.apache.tika:tika-parser-text-module | 2.9.1 | 间接依赖 | maven |
| net.sf.jopt-simple:jopt-simple | 4.6 | 间接依赖 | maven |
| com.rometools:rome | 2.1.0 | 间接依赖 | maven |
| org.gagravarr:vorbis-java-tika | 0.8 | 间接依赖 | maven |
| org.typelevel:cats-core_2.13 | 2.9.0 | 间接依赖 | maven |
| org.apache.tika:tika-parser-code-module | 2.9.1 | 间接依赖 | maven |
| org.apache.ant:ant-junit | 1.10.13 | 间接依赖 | maven |
| org.antlr:antlr | 3.0 | 间接依赖 | maven |
| org.apache.xmlgraphics:batik-extension | 1.16 | 间接依赖 | maven |
| org.codehaus.mojo.appassembler:appassembler-booter | 2.1.0 | 直接依赖 | maven |
| org.ow2.asm:asm-tree | 9.6 | 间接依赖 | maven |
| org.exquery:exquery-annotations-common-api | 0.2.1 | 直接依赖 | maven |
| io.micrometer:micrometer-observation | 1.10.0-M6 | 间接依赖 | maven |
| org.exist-db.thirdparty.com.ettrema:milton-servlet | 1.8.1.3-jakarta5 | 直接依赖 | maven |
| org.exist-db:exist-cache | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| libpthread.so.0 | 间接依赖 | ||
| org.eclipse.jetty:jetty-security | 11.0.17 | 直接依赖 | maven |
| eu.medsea.mimeutil:mime-util | 2.1.3 | 间接依赖 | maven |
| jakarta.xml.bind:jakarta.xml.bind-api | 4.0.1 | 直接依赖 | maven |
| com.fasterxml.jackson.core:jackson-databind | 2.15.2 | 间接依赖 | maven |
| org.ow2.asm:asm-commons | 9.6 | 间接依赖 | maven |
| org.codehaus.plexus:plexus-utils | 3.2.0 | 间接依赖 | maven |
| org.apache.lucene:lucene-facet | 4.10.4 | 直接依赖 | maven |
| org.apache.xmlgraphics:batik-anim | 1.16 | 间接依赖 | maven |
| com.github.ben-manes.caffeine:caffeine | 3.1.8 | 直接依赖 | maven |
| org.apache.xmlgraphics:batik-i18n | 1.16 | 间接依赖 | maven |
| org.bouncycastle:bcprov-jdk15on | 1.70 | 直接依赖 | maven |
| org.slf4j:slf4j-api | 2.0.9 | 间接依赖 | maven |
| org.apache.mina:mina-core | 2.2.2 | 间接依赖 | maven |
| org.exist-db:exist-webdav | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.apache.commons:commons-math3 | 3.6.1 | 间接依赖 | maven |
| org.apache.commons:commons-compress | 1.24.0 | 直接依赖 | maven |
| org.exist-db:exist-compression | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.exist-db:exist-process | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.exist-db:exist-exiftool | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| commons-io:commons-io | 2.14.0 | 直接依赖 | maven |
| com.zaxxer:HikariCP | 4.0.3 | 直接依赖 | maven |
| org.exist-db:exist-expath | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.exist-db:exist-sql | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.apache.lucene:lucene-queryparser | 4.10.4 | 直接依赖 | maven |
| org.eclipse.jetty:jetty-webapp | 11.0.17 | 直接依赖 | maven |
| org.gagravarr:vorbis-java-core | 0.8 | 间接依赖 | maven |
| org.springframework:spring-beans | 6.0.0-M6 | 间接依赖 | maven |
| org.glassfish.jaxb:txw2 | 4.0.2 | 间接依赖 | maven |
| com.googlecode.plist:dd-plist | 1.27 | 间接依赖 | maven |
| org.exquery:exquery-serialization-annotations-api | 0.2.1 | 直接依赖 | maven |
| org.exist-db:exist-xqts-runner_2.13 | 1.3.0-SNAPSHOT | 直接依赖 | maven |
| org.exist-db:exist-saxon-regex | 9.4.0-9.e1 | 直接依赖 | maven |
| org.eclipse.jetty:jetty-io | 11.0.17 | 间接依赖 | maven |
| commons-codec:commons-codec | 1.16.0 | 直接依赖 | maven |
| org.apache.directory.api:api-asn1-api | 2.1.4 | 间接依赖 | maven |
| org.apache.tika:tika-parser-xmp-commons | 2.9.1 | 间接依赖 | maven |
| org.springframework:spring-aop | 6.0.0-M6 | 间接依赖 | maven |
| org.apache.tika:tika-parser-crypto-module | 2.9.1 | 间接依赖 | maven |
| commons-beanutils:commons-beanutils | 1.8.2 | 间接依赖 | maven |
| org.apache.tika:tika-parser-mail-module | 2.9.1 | 间接依赖 | maven |
| se.softhouse:jargo | 0.4.14 | 直接依赖 | maven |
| com.zaxxer:SparseBitSet | 1.2 | 间接依赖 | maven |
| org.jgrapht:jgrapht-opt | 1.5.2 | 直接依赖 | maven |
| org.checkerframework:checker-qual | 3.37.0 | 间接依赖 | maven |
| org.exist-db:exist-contentextraction | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| stax:stax | 1.1.1-dev | 间接依赖 | maven |
| xml-apis:xml-apis-ext | 1.3.04 | 间接依赖 | maven |
| org.expath.tools:tools-java | 0.7.0 | 直接依赖 | maven |
| net.sourceforge.nekohtml:nekohtml | 1.9.22 | 直接依赖 | maven |
| org.openjdk.jmh:jmh-core | 1.37 | 直接依赖 | maven |
| org.exist-db.thirdparty.com.ettrema:milton-api | 1.8.1.3 | 直接依赖 | maven |
| com.fasterxml.jackson.core:jackson-core | 2.13.4 | 直接依赖 | maven |
| org.eclipse.jetty.websocket:websocket-core-server | 11.0.17 | 间接依赖 | maven |
| com.evolvedbinary.thirdparty.org.apache.xmlrpc:xmlrpc-client | 5.0.0 | 直接依赖 | maven |
| org.ccil.cowan.tagsoup:tagsoup | 1.2.1 | 间接依赖 | maven |
| org.apache.xmlgraphics:batik-bridge | 1.16 | 间接依赖 | maven |
| org.antlr:stringtemplate | 3.0 | 间接依赖 | maven |
| org.apache.poi:poi-ooxml-lite | 5.2.3 | 间接依赖 | maven |
| org.opengis:geoapi-nogenerics | 2.1.1 | 直接依赖 | maven |
| com.github.krukow:clj-ds | 0.0.4 | 直接依赖 | maven |
| org.exist-db:exist-simpleql | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| net.bytebuddy:byte-buddy | 1.14.9 | 直接依赖 | maven |
| org.apache.tika:tika-parser-miscoffice-module | 2.9.1 | 间接依赖 | maven |
| org.exquery:exquery-serialization-annotations | 0.2.1 | 直接依赖 | maven |
| org.tallison:jmatio | 1.5 | 间接依赖 | maven |
| org.apache.tika:tika-parser-pkg-module | 2.9.1 | 间接依赖 | maven |
| org.apache.pdfbox:pdfbox | 2.0.29 | 间接依赖 | maven |
| stax:stax-api | 1.0.1 | 间接依赖 | maven |
| com.github.virtuald:curvesapi | 1.07 | 间接依赖 | maven |
| org.apache.httpcomponents.core5:httpcore5-h2 | 5.1.3 | 间接依赖 | maven |
| org.bouncycastle:bcprov-jdk18on | 1.76 | 间接依赖 | maven |
| com.typesafe.akka:akka-actor_2.13 | 2.6.20 | 间接依赖 | maven |
| org.exist-db:exist-persistentlogin | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.jgrapht:jgrapht-core | 1.5.2 | 直接依赖 | maven |
| org.exist-db:exist-security-ldap | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.apache.lucene:lucene-queries | 4.10.4 | 直接依赖 | maven |
| javax.units:jsr108 | 0.01 | 间接依赖 | maven |
| org.apache.xmlgraphics:batik-constants | 1.16 | 间接依赖 | maven |
| org.apache.tika:tika-parsers-standard-package | 2.9.1 | 直接依赖 | maven |
| org.eclipse.jetty:jetty-jndi | 11.0.17 | 间接依赖 | maven |
| org.exquery:exquery-restxq-api | 0.2.1 | 直接依赖 | maven |
| com.typesafe:config | 1.4.2 | 间接依赖 | maven |
| com.evolvedbinary.multilock:multilock | 1.0.1 | 直接依赖 | maven |
| com.sun.istack:istack-commons-runtime | 4.1.1 | 间接依赖 | maven |
| org.eclipse.jetty.websocket:websocket-jakarta-client | 11.0.17 | 间接依赖 | maven |
| com.fifesoft:rsyntaxtextarea | 3.3.4 | 直接依赖 | maven |
| org.apache.ant:ant-launcher | 1.10.14 | 间接依赖 | maven |
| org.springframework:spring-web | 6.0.0-M6 | 间接依赖 | maven |
| org.apache.tika:tika-parser-xml-module | 2.9.1 | 间接依赖 | maven |
| org.apache.commons:commons-collections4 | 4.4 | 直接依赖 | maven |
| org.apache.xmlbeans:xmlbeans | 5.1.1 | 间接依赖 | maven |
| net.sf.jopt-simple:jopt-simple | 5.0.4 | 间接依赖 | maven |
| org.slf4j:jcl-over-slf4j | 2.0.9 | 间接依赖 | maven |
| org.eclipse.jetty.websocket:websocket-servlet | 11.0.17 | 间接依赖 | maven |
| org.typelevel:cats-effect_2.13 | 3.4.6 | 间接依赖 | maven |
| org.exist-db.thirdparty.javax.xml.xquery:xqjri | 20080114-133351 | 直接依赖 | maven |
| org.apache.xmlgraphics:batik-svg-dom | 1.16 | 间接依赖 | maven |
| org.apache.xmlgraphics:fop-events | 2.8 | 间接依赖 | maven |
| org.relaxng:jing | 20220510 | 直接依赖 | maven |
| org.codelibs:jhighlight | 1.1.0 | 间接依赖 | maven |
| org.glassfish.jaxb:jaxb-runtime | 4.0.2 | 直接依赖 | maven |
| com.github.scopt:scopt_2.13 | 4.0.1 | 间接依赖 | maven |
| org.apache.avalon.framework:avalon-framework-impl | 4.3.1 | 直接依赖 | maven |
| org.bouncycastle:bcmail-jdk18on | 1.76 | 间接依赖 | maven |
| org.exist-db:exist-index-spatial | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.exist-db:exist-restxq | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| com.healthmarketscience.jackcess:jackcess | 4.0.5 | 间接依赖 | maven |
| org.apache.lucene:lucene-analyzers-common | 4.10.4 | 直接依赖 | maven |
| org.apache.logging.log4j:log4j-core | 2.21.0 | 直接依赖 | maven |
| org.apache.xmlgraphics:batik-parser | 1.16 | 间接依赖 | maven |
| org.apache.tika:tika-parser-pdf-module | 2.9.1 | 间接依赖 | maven |
| org.apache.tika:tika-core | 2.9.1 | 直接依赖 | maven |
| org.exist-db:exist-start | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.eclipse.jetty:jetty-client | 11.0.17 | 间接依赖 | maven |
| org.aspectj:aspectjrt | 1.9.20.1 | 直接依赖 | maven |
| org.springframework:spring-jcl | 6.0.0-M6 | 间接依赖 | maven |
| org.z3950.zing:cql-java | 1.13 | 直接依赖 | maven |
| org.bouncycastle:bcutil-jdk18on | 1.76 | 间接依赖 | maven |
| org.apache.tika:tika-parser-webarchive-module | 2.9.1 | 间接依赖 | maven |
| org.jheaps:jheaps | 0.14 | 间接依赖 | maven |
| org.apache.logging.log4j:log4j-slf4j2-impl | 2.21.0 | 直接依赖 | maven |
| net.jcip:jcip-annotations | 1.0 | 直接依赖 | maven |
| org.exist-db:exist-security-activedirectory | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.expath.http.client:http-client-java | 1.4.1 | 直接依赖 | maven |
| org.apache.tika:tika-parser-ocr-module | 2.9.1 | 间接依赖 | maven |
| org.apache.logging.log4j:log4j-jul | 2.21.0 | 直接依赖 | maven |
| org.eclipse.jetty:jetty-plus | 11.0.17 | 间接依赖 | maven |
| org.exist-db:exist-service | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| com.vividsolutions:jts | 1.13 | 直接依赖 | maven |
| org.apache.pdfbox:fontbox | 2.0.24 | 间接依赖 | maven |
| org.apache.tika:tika-parser-news-module | 2.9.1 | 间接依赖 | maven |
| org.xqdoc:xqdoc-conversion | 1.6 | 直接依赖 | maven |
| org.apache.xmlgraphics:fop-util | 2.8 | 间接依赖 | maven |
| org.eclipse.jetty.websocket:websocket-core-common | 11.0.17 | 间接依赖 | maven |
| org.xmlunit:xmlunit-core | 2.9.1 | 直接依赖 | maven |
| isorelax:isorelax | 20030108 | 间接依赖 | maven |
| jakarta.servlet:jakarta.servlet-api | 5.0.0 | 直接依赖 | maven |
| org.eclipse.jetty:jetty-alpn-client | 11.0.17 | 间接依赖 | maven |
| com.fasterxml.jackson.core:jackson-annotations | 2.15.2 | 间接依赖 | maven |
| com.github.jai-imageio:jai-imageio-core | 1.4.0 | 间接依赖 | maven |
| org.exist-db:exist-distribution | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.typelevel:cats-kernel_2.13 | 2.9.0 | 间接依赖 | maven |
| net.sf.xmldb-org:xmldb-api | 2.0.0 | 直接依赖 | maven |
| org.apache.avalon.framework:avalon-framework-api | 4.3.1 | 直接依赖 | maven |
| org.springframework:spring-webmvc | 6.0.0-M6 | 间接依赖 | maven |
| org.hamcrest:hamcrest | 2.2 | 直接依赖 | maven |
| org.lz4:lz4-java | 1.8.0 | 直接依赖 | maven |
| org.apache.ant:ant | 1.10.14 | 直接依赖 | maven |
| org.eclipse.jetty:jetty-annotations | 11.0.17 | 直接依赖 | maven |
| org.apache.lucene:lucene-sandbox | 4.10.4 | 间接依赖 | maven |
| org.apache.tika:tika-parser-digest-commons | 2.9.1 | 间接依赖 | maven |
| org.apache.directory.api:api-util | 2.1.4 | 间接依赖 | maven |
| org.exist-db:exist-xmldiff | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.apache.james:apache-mime4j-core | 0.8.3 | 间接依赖 | maven |
| xalan:serializer | 2.7.3 | 直接依赖 | maven |
| msvcrt.dll | 间接依赖 | ||
| org.geotools:gt2-main | 2.4.5 | 直接依赖 | maven |
| org.apfloat:apfloat | 1.10.1 | 间接依赖 | maven |
| org.bouncycastle:bcpkix-jdk18on | 1.76 | 间接依赖 | maven |
| commons-daemon:commons-daemon | 1.3.3 | 直接依赖 | maven |
| org.exist-db:exist-core | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.typelevel:cats-effect-std_2.13 | 3.4.6 | 间接依赖 | maven |
| net.sf.saxon:Saxon-HE | 9.9.1-8 | 直接依赖 | maven |
| com.github.albfernandez:juniversalchardet | 2.4.0 | 间接依赖 | maven |
| com.epam:parso | 2.0.14 | 间接依赖 | maven |
| org.exist-db:exist-exquery-request-module | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| org.apache.james:apache-mime4j-core | 0.8.9 | 间接依赖 | maven |
| org.jdom:jdom | 1.1 | 间接依赖 | maven |
| SHELL32.dll | 间接依赖 | ||
| io.micrometer:micrometer-commons | 1.10.0-M6 | 间接依赖 | maven |
| java3d:vecmath | 1.3.1 | 直接依赖 | maven |
| org.exquery:exquery-xquery3 | 0.2.1 | 直接依赖 | maven |
| org.apache.pdfbox:jbig2-imageio | 3.0.4 | 间接依赖 | maven |
| org.apache.poi:poi-ooxml | 5.2.3 | 间接依赖 | maven |
| org.apache.httpcomponents:httpclient | 4.5.14 | 间接依赖 | maven |
| org.exist-db:exist-xqdoc | 7.0.0-SNAPSHOT | 直接依赖 | maven |
| com.evolvedbinary.j8fu:j8fu | 1.23.0 | 直接依赖 | maven |
| xalan:xalan | 2.7.3 | 直接依赖 | maven |
| commons-logging:commons-logging | 1.2 | 直接依赖 | maven |
| com.rometools:rome-utils | 2.1.0 | 间接依赖 | maven |
| org.eclipse.jetty.websocket:websocket-jetty-common | 11.0.17 | 间接依赖 | maven |
| org.scala-lang.modules:scala-java8-compat_2.13 | 1.0.0 | 间接依赖 | maven |
| org.scala-lang:scala-library | 2.13.8 | 间接依赖 | maven |
| org.eclipse.jetty:jetty-deploy | 11.0.17 | 直接依赖 | maven |
| ADVAPI32.dll | 间接依赖 | ||
| org.apache.commons:commons-lang3 | 3.13.0 | 直接依赖 | maven |
| org.apache.commons:commons-pool2 | 2.12.0 | 直接依赖 | maven |