基础信息
项目名称：cng1985/boot-nbsaas
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1717821489280761856/1717821489658249216
此报告由Murphysec提供
漏洞列表
暂无
缺陷组件
暂无
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| Apache-2.0 | 43 | 低 |
| EPL-2.0 | 4 | 低 |
| 自定义许可证 | 9 | 低 |
| LGPL-2.1-or-later | 2 | 低 |
| MIT | 3 | 低 |
| EPL-1.0 | 2 | 低 |
| BSD-2-Clause | 2 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| org.springframework:spring-aop | 5.3.30 | 间接依赖 | maven |
| org.aspectj:aspectjweaver | 1.9.7 | 间接依赖 | maven |
| com.github.jsqlparser:jsqlparser | 4.6 | 间接依赖 | maven |
| org.springframework:spring-expression | 5.3.30 | 间接依赖 | maven |
| org.apache.logging.log4j:log4j-api | 2.17.2 | 间接依赖 | maven |
| jakarta.persistence:jakarta.persistence-api | 2.2.3 | 间接依赖 | maven |
| org.hibernate.common:hibernate-commons-annotations | 5.1.2.Final | 间接依赖 | maven |
| jakarta.annotation:jakarta.annotation-api | 1.3.5 | 间接依赖 | maven |
| com.nbsaas.boot:rest | 1.1.1-2023 | 直接依赖 | maven |
| org.jboss.logging:jboss-logging | 3.4.3.Final | 间接依赖 | maven |
| com.nbsaas.boot:utils | 1.1.1-2023 | 直接依赖 | maven |
| org.projectlombok:lombok | 1.18.30 | 直接依赖 | maven |
| org.springframework:spring-orm | 5.3.30 | 间接依赖 | maven |
| com.baomidou:mybatis-plus-boot-starter | 3.5.3.2 | 直接依赖 | maven |
| com.nbsaas.boot:chain | 1.1.1-2023 | 直接依赖 | maven |
| org.springframework:spring-aspects | 5.3.30 | 间接依赖 | maven |
| org.slf4j:slf4j-api | 1.7.36 | 间接依赖 | maven |
| org.jboss:jandex | 2.4.2.Final | 间接依赖 | maven |
| com.zaxxer:HikariCP | 4.0.3 | 间接依赖 | maven |
| com.baomidou:mybatis-plus-core | 3.5.3.2 | 间接依赖 | maven |
| org.slf4j:jul-to-slf4j | 1.7.36 | 间接依赖 | maven |
| org.springframework.data:spring-data-jpa | 2.7.16 | 间接依赖 | maven |
| org.yaml:snakeyaml | 2.2 | 直接依赖 | maven |
| ch.qos.logback:logback-classic | 1.2.12 | 间接依赖 | maven |
| com.nbsaas.boot:code-annotation | 1.1.1-2023 | 直接依赖 | maven |
| org.apache.commons:commons-lang3 | 3.12.0 | 直接依赖 | maven |
| antlr:antlr | 2.7.7 | 间接依赖 | maven |
| org.hibernate:hibernate-core | 5.6.15.Final | 间接依赖 | maven |
| org.springframework.boot:spring-boot-starter-aop | 2.7.16 | 间接依赖 | maven |
| org.jodd:jodd-core | 5.3.0 | 直接依赖 | maven |
| com.baomidou:mybatis-plus-extension | 3.5.3.2 | 间接依赖 | maven |
| com.sun.activation:jakarta.activation | 1.2.2 | 间接依赖 | maven |
| org.freemarker:freemarker | 2.3.32 | 直接依赖 | maven |
| org.mybatis:mybatis | 3.5.13 | 间接依赖 | maven |
| org.springframework:spring-tx | 5.3.30 | 间接依赖 | maven |
| org.springframework.boot:spring-boot-autoconfigure | 2.7.16 | 间接依赖 | maven |
| org.springframework.boot:spring-boot-starter-data-jpa | 2.7.16 | 直接依赖 | maven |
| org.springframework:spring-jdbc | 5.3.30 | 间接依赖 | maven |
| jakarta.transaction:jakarta.transaction-api | 1.3.3 | 间接依赖 | maven |
| org.springframework.boot:spring-boot | 2.7.16 | 间接依赖 | maven |
| jakarta.xml.bind:jakarta.xml.bind-api | 2.3.3 | 间接依赖 | maven |
| org.springframework.boot:spring-boot-starter-logging | 2.7.16 | 间接依赖 | maven |
| org.springframework:spring-context | 5.3.30 | 间接依赖 | maven |
| org.springframework.boot:spring-boot-starter | 2.7.16 | 间接依赖 | maven |
| org.springframework:spring-core | 5.3.30 | 间接依赖 | maven |
| com.sun.istack:istack-commons-runtime | 3.0.12 | 间接依赖 | maven |
| org.springframework:spring-beans | 5.3.30 | 间接依赖 | maven |
| com.baomidou:mybatis-plus | 3.5.3.2 | 间接依赖 | maven |
| com.fasterxml:classmate | 1.5.1 | 间接依赖 | maven |
| org.springframework:spring-jcl | 5.3.30 | 间接依赖 | maven |
| com.nbsaas.boot:jpa-dao | 1.1.1-2023 | 直接依赖 | maven |
| ch.qos.logback:logback-core | 1.2.12 | 间接依赖 | maven |
| org.springframework.data:spring-data-commons | 2.7.16 | 间接依赖 | maven |
| org.glassfish.jaxb:jaxb-runtime | 2.3.8 | 间接依赖 | maven |
| org.springframework.boot:spring-boot-starter-jdbc | 2.7.16 | 间接依赖 | maven |
| org.apache.logging.log4j:log4j-to-slf4j | 2.17.2 | 间接依赖 | maven |
| net.bytebuddy:byte-buddy | 1.12.23 | 间接依赖 | maven |
| com.baomidou:mybatis-plus-annotation | 3.5.3.2 | 间接依赖 | maven |
| org.springframework:spring-context-support | 5.3.30 | 直接依赖 | maven |
| org.mybatis:mybatis-spring | 2.1.1 | 间接依赖 | maven |
| org.glassfish.jaxb:txw2 | 2.3.8 | 间接依赖 | maven |
| org.jodd:jodd-util | 6.0.0 | 间接依赖 | maven |