基础信息
项目名称：apache/pig
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1720635484774252544/1720635485076242432
此报告由Murphysec提供
漏洞列表
暂无
缺陷组件
暂无
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| Apache-2.0 | 125 | 低 |
| 自定义许可证 | 17 | 低 |
| CDDL-1.1 | 5 | 低 |
| CDDL-1.0 | 1 | 低 |
| MIT | 3 | 低 |
| BSD-3-Clause | 3 | 低 |
| EPL-2.0 | 10 | 低 |
| GPL-2.0 | 1 | 中 |
| LGPL-2.1 | 1 | 中 |
| MPL-1.1 | 1 | 低 |
| EPL-1.0 | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| org.apache.hadoop:hadoop-yarn-server-nodemanager | 间接依赖 | maven | |
| org.apache.hbase:hbase-shaded-mapreduce | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-mapreduce-client-core | 间接依赖 | maven | |
| org.apache.htrace:htrace-core4 | 间接依赖 | maven | |
| org.apache.tez:tez | 间接依赖 | maven | |
| org.apache.orc:orc-shims | 间接依赖 | maven | |
| org.codehaus.jackson:jackson-core-asl | 间接依赖 | maven | |
| org.apache.hive.shims:hive-shims-common | 间接依赖 | maven | |
| net.java.dev.javacc:javacc | 间接依赖 | maven | |
| javax.xml.bind:jaxb-api | 间接依赖 | maven | |
| org.apache.hbase:hbase-hadoop2-compat | 间接依赖 | maven | |
| org.apache.hbase:hbase-metrics-api | 间接依赖 | maven | |
| org.apache.tez:tez-runtime-internals | 间接依赖 | maven | |
| org.apache.hbase:hbase-server | 间接依赖 | maven | |
| org.roaringbitmap:RoaringBitmap | 0.7.14 | 直接依赖 | maven |
| commons-io:commons-io | 间接依赖 | maven | |
| org.apache.accumulo:accumulo-gc | 间接依赖 | maven | |
| org.apache.avro:avro | 间接依赖 | maven | |
| org.apache.tez:tez-mapreduce | 间接依赖 | maven | |
| org.apache.hbase:hbase-metrics | 间接依赖 | maven | |
| com.googlecode.json-simple:json-simple | 间接依赖 | maven | |
| org.apache.hbase:hbase-common | 间接依赖 | maven | |
| javax.ws.rs:jsr311-api | 间接依赖 | maven | |
| org.apache.hive:hive-exec | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-yarn-common | 间接依赖 | maven | |
| org.apache.commons:commons-math3 | 间接依赖 | maven | |
| org.apache.spark:spark-core_2.11 | 间接依赖 | maven | |
| org.slf4j:slf4j-reload4j | 间接依赖 | maven | |
| com.google.inject.extensions:guice-servlet | 间接依赖 | maven | |
| com.esotericsoftware:kryo-shaded | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-yarn-server-timelineservice | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-mapreduce-client-common | 间接依赖 | maven | |
| org.apache.ivy:ivy | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-hdfs | 间接依赖 | maven | |
| javax.inject:javax.inject | 间接依赖 | maven | |
| javax.servlet:javax.servlet-api | 间接依赖 | maven | |
| org.fusesource.leveldbjni:leveldbjni-all | 间接依赖 | maven | |
| org.apache.parquet:parquet-pig-bundle | 间接依赖 | maven | |
| org.apache.tez:tez-common | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-mapreduce-client-app | 间接依赖 | maven | |
| com.sun.jersey:jersey-server | 间接依赖 | maven | |
| com.google.guava:guava | 间接依赖 | maven | |
| jline:jline | 间接依赖 | maven | |
| org.eclipse.jetty:jetty-io | 间接依赖 | maven | |
| org.apache.commons:commons-collections4 | 间接依赖 | maven | |
| org.apache.hbase:hbase-http | 间接依赖 | maven | |
| com.sun.jersey.contribs:jersey-guice | 间接依赖 | maven | |
| org.apache.curator:curator-framework | 间接依赖 | maven | |
| org.apache.hive.shims:hive-shims-0.23 | 间接依赖 | maven | |
| org.xerial.snappy:snappy-java | 间接依赖 | maven | |
| org.codehaus.jackson:jackson-mapper-asl | 间接依赖 | maven | |
| org.apache.hbase:hbase-logging | 间接依赖 | maven | |
| org.scala-lang.modules:scala-xml_2.11 | 间接依赖 | maven | |
| org.codehaus.jettison:jettison | 间接依赖 | maven | |
| xerces:xercesImpl | 间接依赖 | maven | |
| org.apache.hbase.thirdparty:hbase-shaded-protobuf | 间接依赖 | maven | |
| org.apache.tez:tez-dag | 间接依赖 | maven | |
| org.eclipse.jetty:jetty-security | 间接依赖 | maven | |
| org.eclipse.jetty:jetty-server | 间接依赖 | maven | |
| org.jruby:jruby-complete | 间接依赖 | maven | |
| org.apache.avro:avro-tools | 间接依赖 | maven | |
| com.google.inject:guice | 间接依赖 | maven | |
| com.yammer.metrics:metrics-core | 间接依赖 | maven | |
| org.fusesource.jansi:jansi | 间接依赖 | maven | |
| org.apache.tez:hadoop-shim | 间接依赖 | maven | |
| org.apache.curator:curator-client | 间接依赖 | maven | |
| org.apache.hive:hive-storage-api | 间接依赖 | maven | |
| org.apache.commons:commons-lang3 | 间接依赖 | maven | |
| commons-configuration:commons-configuration | 间接依赖 | maven | |
| org.apache.accumulo:accumulo-core | 间接依赖 | maven | |
| com.fasterxml.woodstox:woodstox-core | 间接依赖 | maven | |
| commons-collections:commons-collections | 间接依赖 | maven | |
| aopalliance:aopalliance | 间接依赖 | maven | |
| commons-beanutils:commons-beanutils-core | 间接依赖 | maven | |
| org.eclipse.jetty:jetty-util | 间接依赖 | maven | |
| com.esotericsoftware.kryo:kryo | 间接依赖 | maven | |
| com.lmax:disruptor | 间接依赖 | maven | |
| org.apache.httpcomponents:httpcore | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-yarn-server-web-proxy | 间接依赖 | maven | |
| org.apache.hive:hive-contrib | 间接依赖 | maven | |
| org.apache.hbase:hbase-mapreduce | 间接依赖 | maven | |
| org.codehaus.woodstox:stax2-api | 间接依赖 | maven | |
| org.mockito:mockito-all | 间接依赖 | maven | |
| org.apache.hive:hive-serde | 间接依赖 | maven | |
| org.eclipse.jetty:jetty-util-ajax | 间接依赖 | maven | |
| org.glassfish:javax.el | 间接依赖 | maven | |
| rhino:js | 间接依赖 | maven | |
| org.apache.avro:trevni-avro | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-common | 间接依赖 | maven | |
| org.apache.hbase.thirdparty:hbase-shaded-miscellaneous | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-hdfs-client | 间接依赖 | maven | |
| org.apache.hbase:hbase-protocol-shaded | 间接依赖 | maven | |
| org.apache.hive:hive-classification | 间接依赖 | maven | |
| org.apache.zookeeper:zookeeper-jute | 间接依赖 | maven | |
| org.apache.hbase:hbase-hadoop-compat | 间接依赖 | maven | |
| org.apache.htrace:htrace-core | 间接依赖 | maven | |
| com.codahale.metrics:metrics-core | 间接依赖 | maven | |
| com.google.code.p.arat:rat-lib | 间接依赖 | maven | |
| org.owasp:dependency-check-ant | 间接依赖 | maven | |
| org.roaringbitmap:RoaringBitmap | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-yarn-server-applicationhistoryservice | 间接依赖 | maven | |
| com.sun.jersey:jersey-bundle | 间接依赖 | maven | |
| io.netty:netty | 间接依赖 | maven | |
| org.apache.accumulo:accumulo-master | 间接依赖 | maven | |
| org.eclipse.jetty:jetty-xml | 间接依赖 | maven | |
| org.apache.hive:hive-llap-common | 间接依赖 | maven | |
| javax.servlet:servlet-api | 间接依赖 | maven | |
| net.sf.jopt-simple:jopt-simple | 间接依赖 | maven | |
| io.netty:netty-all | 间接依赖 | maven | |
| org.antlr:antlr | 间接依赖 | maven | |
| org.eclipse.jetty:jetty-http | 间接依赖 | maven | |
| org.apache.hive:hive-common | 间接依赖 | maven | |
| org.apache.hbase:hbase-replication | 间接依赖 | maven | |
| org.apache.hbase:hbase-procedure | 间接依赖 | maven | |
| org.apache.hbase:hbase-protocol | 间接依赖 | maven | |
| org.eclipse.jetty:jetty-servlet | 间接依赖 | maven | |
| checkstyle:checkstyle | 间接依赖 | maven | |
| org.apache.tez:tez-runtime-library | 间接依赖 | maven | |
| dk.brics.automaton:automaton | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-yarn-client | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-auth | 间接依赖 | maven | |
| com.sun.xml.bind:jaxb-impl | 间接依赖 | maven | |
| org.apache.curator:curator-recipes | 间接依赖 | maven | |
| commons-cli:commons-cli | 间接依赖 | maven | |
| org.vafer:jdeb | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-yarn-server | 间接依赖 | maven | |
| org.apache.tez:tez-yarn-timeline-history-with-acls | 间接依赖 | maven | |
| com.google.re2j:re2j | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-mapreduce-client-jobclient | 间接依赖 | maven | |
| org.apache.hbase:hbase-client | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-annotations | 间接依赖 | maven | |
| org.iq80.snappy:snappy | 间接依赖 | maven | |
| org.apache.zookeeper:zookeeper | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-yarn-server-resourcemanager | 间接依赖 | maven | |
| org.apache.httpcomponents:httpclient | 间接依赖 | maven | |
| org.codehaus.groovy:groovy-all | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-yarn-server-tests | 间接依赖 | maven | |
| org.mortbay.jetty:jetty-sslengine | 间接依赖 | maven | |
| org.apache.avro:trevni-core | 间接依赖 | maven | |
| org.apache.orc:orc-core | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-yarn-server-common | 间接依赖 | maven | |
| org.apache.accumulo:accumulo-minicluster | 间接依赖 | maven | |
| org.apache.hbase.thirdparty:hbase-shaded-jetty | 间接依赖 | maven | |
| xalan:xalan | 间接依赖 | maven | |
| commons-el:commons-el | 间接依赖 | maven | |
| commons-codec:commons-codec | 间接依赖 | maven | |
| org.hsqldb:hsqldb | 间接依赖 | maven | |
| org.apache.tez:tez-api | 间接依赖 | maven | |
| org.antlr:ST4 | 间接依赖 | maven | |
| ch.qos.reload4j:reload4j | 间接依赖 | maven | |
| junit:junit | 间接依赖 | maven | |
| org.apache.spark:spark-yarn_2.11 | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-yarn-api | 间接依赖 | maven | |
| org.eclipse.jetty:jetty-webapp | 间接依赖 | maven | |
| org.apache.avro:avro-mapred | 间接依赖 | maven | |
| org.apache.accumulo:accumulo-tserver | 间接依赖 | maven | |
| org.antlr:antlr-runtime | 间接依赖 | maven | |
| org.apache.hbase:hbase-zookeeper | 间接依赖 | maven | |
| org.apache.accumulo:accumulo-server-base | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-mapreduce-client-shuffle | 间接依赖 | maven | |
| asm:asm | 间接依赖 | maven | |
| jdiff:jdiff | 间接依赖 | maven | |
| nl.basjes.parse.httpdlog:httpdlog-pigloader | 间接依赖 | maven | |
| org.python:jython-standalone | 间接依赖 | maven | |
| joda-time:joda-time | 间接依赖 | maven | |
| commons-logging:commons-logging | 间接依赖 | maven | |
| com.google.protobuf:protobuf-java | 间接依赖 | maven | |
| org.apache.hadoop:hadoop-mapreduce-client-hs | 间接依赖 | maven |