基础信息
项目名称：HotswapProjects/HotswapAgent
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1718664251677736960/1718664251740651520
此报告由Murphysec提供
漏洞列表
| 漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
|---|---|---|---|---|
| 低危 | ||||
| 多款Cisco产品Apache Commons Collections库任意代码执行漏洞 | 反序列化 | MPS-2015-6277 | CVE-2015-6420 | 高危 |
| 多款Red Hat产品代码问题漏洞 | 反序列化 | MPS-2017-12638 | CVE-2015-7501 | 严重 |
| Apache Commons Beanutils 存在不可信数据的反序列化漏洞 | 反序列化 | MPS-2019-10233 | CVE-2019-10086 | 高危 |
| Eclipse Mojarra 跨站脚本漏洞 | XSS | MPS-2019-12501 | CVE-2019-17091 | 中危 |
| hibernate-core | SQL注入 | MPS-2020-16768 | CVE-2020-25638 | 高危 |
| Apache HttpClient URI解析错误漏洞 | XSS | MPS-2020-17341 | CVE-2020-13956 | 中危 |
| dom4j SaxReader函数存在 XXE 漏洞 | XXE | MPS-2020-6967 | CVE-2020-10683 | 严重 |
| Hibernate 存在 SQL 注入漏洞 | SQL注入 | MPS-2020-9908 | CVE-2019-14900 | 中危 |
| Apache Commons IO 存在路径遍历漏洞 | 路径遍历 | MPS-2021-4531 | CVE-2021-29425 | 中危 |
| Red Hat XNIO 资源错误分配漏洞 | 不加限制或调节的资源分配 | MPS-2022-0191 | CVE-2022-0084 | 高危 |
| commons-codec:commons-codec 存在信息泄露漏洞 | 未授权敏感信息泄露 | MPS-2022-11853 | 低危 | |
| Apache Commons Collections 远程代码执行漏洞 | 反序列化 | MPS-2022-12767 | 高危 | |
| Red Hat Undertow 安全漏洞 | 证书验证不恰当 | MPS-2022-68061 | CVE-2022-4492 | 高危 |
| Red Hat Undertow 资源管理错误漏洞 | 拒绝服务 | MPS-2022-7892 | CVE-2022-1259 | 高危 |
| Red Hat JBoss Enterprise Application Platform 安全漏洞 | 不可达退出条件的循环（无限循环） | MPS-2023-6619 | CVE-2023-1108 | 高危 |
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| org.dom4j:dom4j | 2.1.1 | 间接依赖 | 建议修复 | |
| org.hibernate:hibernate-core | 3.6.10.Final | 5.4.24.Final | 间接依赖 | 建议修复 |
| commons-beanutils:commons-beanutils | 1.9.2 | 1.9.4 | 间接依赖 | 建议修复 |
| dom4j:dom4j | 1.6.1 | 间接依赖 | 建议修复 | |
| org.hibernate:hibernate-core | 5.3.14.Final | 5.4.24.Final | 间接依赖 | 建议修复 |
| io.undertow:undertow-core | 2.3.0.Alpha2 | 2.3.6.final | 直接依赖 | 建议修复 |
| commons-collections:commons-collections | 3.1 | 3.2.2 | 间接依赖 | 建议修复 |
| commons-codec:commons-codec | 1.11 | 1.13 | 间接依赖 | 可选修复 |
| org.dom4j:dom4j | 2.1.3 | 间接依赖 | 可选修复 | |
| com.sun.faces:jsf-impl | 2.2.16 | 2.2.20 | 直接依赖 | 可选修复 |
| org.apache.httpcomponents:httpclient | 4.5.10 | 4.5.13 | 间接依赖 | 可选修复 |
| commons-io:commons-io | 2.5 | 2.7 | 间接依赖 | 可选修复 |
| org.jboss.xnio:xnio-api | 3.8.7.Final | 3.8.8 | 间接依赖 | 可选修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| Apache-2.0 | 104 | 低 |
| 自定义许可证 | 67 | 低 |
| EPL-2.0 | 9 | 低 |
| LGPL-2.1-or-later | 7 | 低 |
| BSD-3-Clause | 1 | 低 |
| EPL-1.0 | 1 | 低 |
| LGPL-2.1 | 2 | 中 |
| MPL-1.1 | 1 | 低 |
| CDDL-1.1 | 2 | 低 |
| MIT | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| commons-logging:commons-logging | 1.2 | 间接依赖 | maven |
| org.apache.geronimo.specs:geronimo-jcdi_2.0_spec | 1.1 | 直接依赖 | maven |
| org.dom4j:dom4j | 2.1.3 | 间接依赖 | maven |
| net.bytebuddy:byte-buddy | 1.12.18 | 间接依赖 | maven |
| org.springframework:spring-expression | 5.3.28 | 间接依赖 | maven |
| org.jboss.logging:jboss-logging | 3.3.2.Final | 间接依赖 | maven |
| org.jboss.spec.javax.interceptor:jboss-interceptors-api_1.2_spec | 2.0.0.Final | 间接依赖 | maven |
| org.apache.geronimo.specs:geronimo-interceptor_1.2_spec | 1.2 | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-plugins | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.jboss.weld:weld-api | 3.1.SP1 | 间接依赖 | maven |
| org.hibernate:hibernate-core-jakarta | 5.6.15.Final | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-deltaspike-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| jakarta.interceptor:jakarta.interceptor-api | 2.1.0 | 间接依赖 | maven |
| org.apache.httpcomponents:httpcore | 4.4.12 | 间接依赖 | maven |
| org.apache.deltaspike.modules:deltaspike-jsf-module-impl | 1.9.6 | 直接依赖 | maven |
| org.apache.deltaspike.modules:deltaspike-security-module-impl | 1.9.6 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-mybatis-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.deltaspike.modules:deltaspike-partial-bean-module-api | 1.9.6 | 直接依赖 | maven |
| jakarta.annotation:jakarta.annotation-api | 2.1.0 | 间接依赖 | maven |
| commons-codec:commons-codec | 1.11 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-velocity-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-myfaces-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-thymeleaf-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.httpcomponents:httpclient | 4.5.10 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-jersey2-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-idea-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.deltaspike.modules:deltaspike-jpa-module-api | 1.9.6 | 间接依赖 | maven |
| jakarta.inject:jakarta.inject-api | 1.0 | 间接依赖 | maven |
| org.jboss.spec.javax.ws.rs:jboss-jaxrs-api_2.1_spec | 2.0.1.Final | 间接依赖 | maven |
| jakarta.transaction:jakarta.transaction-api | 2.0.0 | 间接依赖 | maven |
| org.jboss.logging:jboss-logging | 3.4.3.Final | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-glassfish-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| javax.enterprise:cdi-api | 1.2 | 直接依赖 | maven |
| org.apache.geronimo.specs:geronimo-atinject_1.0_spec | 1.1 | 直接依赖 | maven |
| org.springframework:spring-context | 5.3.28 | 直接依赖 | maven |
| org.apache.xbean:xbean-asm7-shaded | 4.13 | 间接依赖 | maven |
| net.bytebuddy:byte-buddy | 1.9.11 | 间接依赖 | maven |
| org.jboss.threads:jboss-threads | 3.1.0.Final | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-hibernate3-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| javax.enterprise:cdi-api | 2.0.SP1 | 间接依赖 | maven |
| org.jboss.weld:weld-core-impl | 3.1.7.Final | 间接依赖 | maven |
| net.bytebuddy:byte-buddy | 1.12.9 | 间接依赖 | maven |
| org.jboss.logging:jboss-logging-annotations | 2.2.1.Final | 间接依赖 | maven |
| org.owasp.encoder:encoder | 1.2.2 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-jbossmodules-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-cdi-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-weld-jakarta-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.openwebbeans:openwebbeans-spi | 2.0.13 | 间接依赖 | maven |
| org.apache.geronimo.specs:geronimo-jcdi_2.0_spec | 1.2 | 直接依赖 | maven |
| org.jboss.weld.environment:weld-environment-common | 5.1.0.Final | 间接依赖 | maven |
| org.hibernate.common:hibernate-commons-annotations | 5.0.4.Final | 间接依赖 | maven |
| org.jboss.weld:weld-core-impl | 5.1.0.Final | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-undertow-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.deltaspike.modules:deltaspike-proxy-module-api | 1.9.6 | 直接依赖 | maven |
| org.hibernate.common:hibernate-commons-annotations | 5.1.2.Final | 间接依赖 | maven |
| org.apache.openwebbeans:openwebbeans-web | 2.0.27 | 直接依赖 | maven |
| org.jboss.spec.javax.el:jboss-el-api_3.0_spec | 1.0.5.Final | 直接依赖 | maven |
| org.jboss.xnio:xnio-api | 3.8.7.Final | 间接依赖 | maven |
| org.jboss.weld:weld-api | 5.0.SP3 | 间接依赖 | maven |
| org.hibernate.javax.persistence:hibernate-jpa-2.0-api | 1.0.1.Final | 间接依赖 | maven |
| org.apache.geronimo.specs:geronimo-atinject_1.0_spec | 1.0 | 间接依赖 | maven |
| org.mybatis:mybatis | 3.5.9 | 直接依赖 | maven |
| javax.persistence:javax.persistence-api | 2.2 | 间接依赖 | maven |
| org.reactivestreams:reactive-streams | 1.0.3 | 间接依赖 | maven |
| org.apache.geronimo.specs:geronimo-interceptor_1.2_spec | 1.1 | 直接依赖 | maven |
| org.jboss.weld.se:weld-se-core | 5.1.0.Final | 直接依赖 | maven |
| org.springframework:spring-beans | 5.3.28 | 间接依赖 | maven |
| jakarta.validation:jakarta.validation-api | 2.0.2 | 间接依赖 | maven |
| org.glassfish.jaxb:txw2 | 2.3.1 | 间接依赖 | maven |
| org.jboss.classfilewriter:jboss-classfilewriter | 1.2.4.Final | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-jetty-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-el-resolver-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.ow2.asm:asm | 4.1 | 间接依赖 | maven |
| org.jboss.logging:jboss-logging | 3.4.1.Final | 间接依赖 | maven |
| org.apache.xbean:xbean-finder-shaded | 4.21 | 间接依赖 | maven |
| com.sun.faces:jsf-api | 2.2.16 | 直接依赖 | maven |
| org.apache.openwebbeans:openwebbeans-impl | 2.0.13 | 直接依赖 | maven |
| org.hibernate:hibernate-core | 3.6.10.Final | 间接依赖 | maven |
| jakarta.activation:jakarta.activation-api | 2.0.1 | 间接依赖 | maven |
| org.apache.deltaspike.modules:deltaspike-jsf-module-api | 1.9.6 | 直接依赖 | maven |
| jakarta.xml.bind:jakarta.xml.bind-api | 3.0.1 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-wildfly-el-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| commons-collections:commons-collections | 3.2.2 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-omnifaces-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-hibernate-jakarta-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| javax.transaction:jta | 1.1 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-resteasy-registry-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| jakarta.enterprise:jakarta.enterprise.cdi-api | 2.0.2 | 间接依赖 | maven |
| org.jvnet.staxex:stax-ex | 1.8 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-spring-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| commons-beanutils:commons-beanutils | 1.9.2 | 间接依赖 | maven |
| org.jboss.weld.environment:weld-environment-common | 3.1.7.Final | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-hibernate-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.deltaspike.modules:deltaspike-partial-bean-module-impl | 1.9.6 | 直接依赖 | maven |
| org.jboss.modules:jboss-modules | 1.10.1.Final | 直接依赖 | maven |
| org.mybatis:mybatis-spring | 2.0.7 | 直接依赖 | maven |
| org.hibernate:hibernate-commons-annotations | 3.2.0.Final | 间接依赖 | maven |
| org.jboss:jandex | 2.0.5.Final | 间接依赖 | maven |
| org.springframework:spring-core | 5.3.28 | 直接依赖 | maven |
| org.apache.openwebbeans:openwebbeans-web | 2.0.13 | 直接依赖 | maven |
| org.glassfish.jaxb:jaxb-core | 3.0.0 | 间接依赖 | maven |
| org.apache.xbean:xbean-asm9-shaded | 4.21 | 间接依赖 | maven |
| org.ow2.asm:asm-analysis | 4.1 | 间接依赖 | maven |
| org.jboss.spec.javax.el:jboss-el-api_3.0_spec | 2.0.0.Final | 间接依赖 | maven |
| org.hibernate:hibernate-entitymanager | 5.3.14.Final | 直接依赖 | maven |
| commons-io:commons-io | 2.5 | 间接依赖 | maven |
| com.sun.activation:jakarta.activation | 1.2.1 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-logback-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.deltaspike.modules:deltaspike-proxy-module-impl-asm | 1.9.6 | 直接依赖 | maven |
| jakarta.inject:jakarta.inject-api | 2.0.1 | 间接依赖 | maven |
| org.javassist:javassist | 3.23.2-GA | 间接依赖 | maven |
| org.ow2.asm:asm-util | 4.1 | 间接依赖 | maven |
| org.wildfly.client:wildfly-client-config | 1.0.1.Final | 间接依赖 | maven |
| jakarta.persistence:jakarta.persistence-api | 3.0.0 | 间接依赖 | maven |
| dom4j:dom4j | 1.6.1 | 间接依赖 | maven |
| org.jboss.spec.javax.xml.bind:jboss-jaxb-api_2.3_spec | 1.0.1.Final | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-core | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.hibernate:hibernate-entitymanager | 5.6.8.Final | 直接依赖 | maven |
| antlr:antlr | 2.7.7 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-owb-jakarta-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.xbean:xbean-finder-shaded | 4.13 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-tomcat-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.geronimo.specs:geronimo-annotation_1.3_spec | 1.3 | 直接依赖 | maven |
| org.jboss.weld:weld-spi | 5.0.SP3 | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-log4j2-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-owb-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.deltaspike.core:deltaspike-core-api | 1.9.6 | 直接依赖 | maven |
| com.sun.faces:jsf-impl | 2.2.16 | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-vaadin-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| com.sun.activation:jakarta.activation | 2.0.1 | 间接依赖 | maven |
| com.fasterxml:classmate | 1.3.4 | 间接依赖 | maven |
| com.sun.istack:istack-commons-runtime | 3.0.7 | 间接依赖 | maven |
| com.sun.xml.fastinfoset:FastInfoset | 1.2.15 | 间接依赖 | maven |
| org.glassfish.jaxb:txw2 | 3.0.0 | 间接依赖 | maven |
| org.wildfly.common:wildfly-common | 1.5.4.Final | 间接依赖 | maven |
| org.ow2.asm:asm-tree | 4.1 | 间接依赖 | maven |
| org.apache.deltaspike.modules:deltaspike-data-module-impl | 1.9.6 | 直接依赖 | maven |
| org.apache.geronimo.specs:geronimo-annotation_1.3_spec | 1.2 | 直接依赖 | maven |
| org.springframework:spring-aop | 5.3.28 | 间接依赖 | maven |
| org.apache.deltaspike.core:deltaspike-core-impl | 1.9.6 | 直接依赖 | maven |
| javassist:javassist | 3.12.0.GA | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-jersey1-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.deltaspike.modules:deltaspike-jpa-module-impl | 1.9.6 | 间接依赖 | maven |
| commons-logging:commons-logging | 1.1.1 | 间接依赖 | maven |
| org.parboiled:parboiled-core | 1.1.5 | 间接依赖 | maven |
| org.hibernate:hibernate-core | 5.6.8.Final | 间接依赖 | maven |
| org.hibernate:hibernate-core | 5.3.14.Final | 间接依赖 | maven |
| org.jboss.weld.se:weld-se-core | 3.1.7.Final | 直接依赖 | maven |
| javax.interceptor:javax.interceptor-api | 1.2 | 间接依赖 | maven |
| org.apache.deltaspike.modules:deltaspike-security-module-api | 1.9.6 | 间接依赖 | maven |
| org.apache.openwebbeans:openwebbeans-el22 | 2.0.13 | 间接依赖 | maven |
| org.glassfish.jaxb:jaxb-runtime | 3.0.0 | 间接依赖 | maven |
| org.jboss.weld:weld-spi | 3.1.SP1 | 直接依赖 | maven |
| org.jboss.spec.javax.transaction:jboss-transaction-api_1.2_spec | 1.1.1.Final | 间接依赖 | maven |
| org.apache.myfaces.core:myfaces-api | 2.2.12 | 直接依赖 | maven |
| org.jboss.resteasy:resteasy-jaxrs | 3.11.0.Final | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-weld-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.parboiled:parboiled-java | 1.1.5 | 间接依赖 | maven |
| org.hibernate:hibernate-entitymanager | 3.6.10.Final | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-weblogic-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| commons-collections:commons-collections | 3.1 | 间接依赖 | maven |
| org.jboss.spec.javax.annotation:jboss-annotations-api_1.3_spec | 2.0.1.Final | 间接依赖 | maven |
| antlr:antlr | 2.7.6 | 间接依赖 | maven |
| org.pegdown:pegdown | 1.4.1 | 直接依赖 | maven |
| org.apache.geronimo.specs:geronimo-atinject_1.0_spec | 1.2 | 直接依赖 | maven |
| org.jboss.weld:weld-lite-extension-translator | 5.1.0.Final | 间接依赖 | maven |
| org.apache.ibatis:ibatis-sqlmap | 2.3.4.726 | 直接依赖 | maven |
| org.apache.myfaces.core:myfaces-impl | 2.2.12 | 直接依赖 | maven |
| org.jboss:jandex | 2.4.2.Final | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-mojarra-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-osgiequinox-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.jboss.jdeparser:jdeparser | 2.0.3.Final | 间接依赖 | maven |
| io.undertow:undertow-core | 2.3.0.Alpha2 | 直接依赖 | maven |
| org.apache.deltaspike.modules:deltaspike-data-module-api | 1.9.6 | 直接依赖 | maven |
| javax.servlet:javax.servlet-api | 3.0.1 | 直接依赖 | maven |
| org.dom4j:dom4j | 2.1.1 | 间接依赖 | maven |
| org.glassfish.jaxb:jaxb-runtime | 2.3.1 | 间接依赖 | maven |
| org.jboss.classfilewriter:jboss-classfilewriter | 1.2.5.Final | 间接依赖 | maven |
| javax.inject:javax.inject | 1 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-ibatis-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-freemarker-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| com.fasterxml:classmate | 1.5.1 | 间接依赖 | maven |
| org.jboss.logging:jboss-logging-processor | 2.2.1.Final | 间接依赖 | maven |
| cglib:cglib | 2.2 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-wicket-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| jakarta.enterprise:jakarta.enterprise.cdi-api | 4.0.1 | 间接依赖 | maven |
| org.jboss.weld.probe:weld-probe-core | 3.1.7.Final | 间接依赖 | maven |
| org.jboss.logging:jboss-logging | 3.5.0.Final | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-proxy-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.openwebbeans:openwebbeans-el22 | 2.0.27 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-zk-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.apache.openwebbeans:openwebbeans-impl | 2.0.27 | 直接依赖 | maven |
| org.hotswapagent:hotswap-agent-cxf-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| com.github.stephenc.jcip:jcip-annotations | 1.0-1 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-jackson-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| org.slf4j:slf4j-api | 1.6.1 | 间接依赖 | maven |
| javax.el:javax.el-api | 3.0.0 | 间接依赖 | maven |
| jakarta.el:jakarta.el-api | 5.0.1 | 间接依赖 | maven |
| com.sun.istack:istack-commons-runtime | 4.0.0 | 间接依赖 | maven |
| org.jboss.xnio:xnio-nio | 3.8.7.Final | 间接依赖 | maven |
| org.springframework:spring-jcl | 5.3.28 | 间接依赖 | maven |
| asm:asm | 3.1 | 间接依赖 | maven |
| org.hotswapagent:hotswap-agent-webobjects-plugin | 1.4.2-SNAPSHOT | 直接依赖 | maven |
| javax.activation:javax.activation-api | 1.2.0 | 间接依赖 | maven |
| org.apache.openwebbeans:openwebbeans-spi | 2.0.27 | 直接依赖 | maven |
| commons-digester:commons-digester | 1.8 | 间接依赖 | maven |
| jakarta.enterprise:jakarta.enterprise.lang-model | 4.0.1 | 间接依赖 | maven |
| javax.xml.bind:jaxb-api | 2.3.1 | 间接依赖 | maven |