apache/atlas 软件分析报告

2023年12月2日上午12:34 • 软件分析

目录隐藏

4 许可证风险

基础信息

项目名称：apache/atlas

项目徽章：

仓库地址：https://github.com/pterodactyl/panel

检测报告地址：https://www.murphysec.com/console/report/1730624473182195712/1730624473278664704

此报告由Murphysec提供

漏洞列表

漏洞名称	漏洞类型	MPS编号	CVE编号	漏洞等级
Eclipse Jetty 资源管理错误漏洞	拒绝服务	MPS-0e59-bdsi	CVE-2023-36478	高危
Apache Hadoop 信息泄露漏洞	密码学问题	MPS-2012-2233	CVE-2012-3376	高危
LZ4	输入验证不恰当	MPS-2014-3344	CVE-2014-4611	中危
LZ4 拒绝服务漏洞	数字错误	MPS-2014-3351	CVE-2014-4715	中危
Hibernate Validator 认证绕过漏洞	认证绕过	MPS-2014-5374	CVE-2014-3558	中危
jBCrypt key-stretching 数字错误漏洞	整数溢出或环绕	MPS-2015-1196	CVE-2015-0886	中危
Google protobuf 缓冲区错误漏洞	越界写入	MPS-2017-10841	CVE-2015-5237	高危
Apache Zookeeper 安全漏洞	拒绝服务	MPS-2017-11297	CVE-2017-5637	高危
Netty和Play Framework 输入验证错误漏洞	未授权敏感信息泄露	MPS-2017-11682	CVE-2015-2156	高危
QOS.ch Logback SocketServer和ServerSocketReceiver组件代码问题漏洞	反序列化	MPS-2017-2574	CVE-2017-5929	严重
Cloudera CDH Apache Hadoop 安全漏洞	权限、特权和访问控制	MPS-2017-3149	CVE-2014-0229	中危
Apache Hadoop 跨站脚本漏洞	XSS	MPS-2017-4858	CVE-2017-3161	中危
Apache Hadoop 输入验证错误漏洞	输入验证不恰当	MPS-2017-4859	CVE-2017-3162	高危
Jetty 信息泄露漏洞	通过差异性导致的信息暴露	MPS-2017-6690	CVE-2017-9735	高危
Nimbus JOSE+JWT 安全漏洞	对数据真实性的验证不充分	MPS-2017-9387	CVE-2017-12972	高危
Nimbus JOSE+JWT 安全漏洞	完整性检查值验证不恰当	MPS-2017-9388	CVE-2017-12973	低危
Nimbus JOSE+JWT	密码学签名的验证不恰当	MPS-2017-9389	CVE-2017-12974	高危
Apache Hadoop 信息泄露漏洞	未授权敏感信息泄露	MPS-2017-9780	CVE-2016-5001	中危
FasterXML Jackson-databind 反序列化漏洞(dbcp2 gadget绕过)	反序列化	MPS-2018-0362	CVE-2017-17485	严重
FasterXML jackson-databind 反序列化漏洞(Hibernate/iBatis gadget绕过)	反序列化	MPS-2018-0934	CVE-2018-5968	高危
Apache Commons Compress 存在拒绝服务漏洞	不可达退出条件的循环（无限循环）	MPS-2018-11233	CVE-2018-11771	中危
FasterXML Jackson-databind 反序列化漏洞(JdbcRowSetImpl gadget绕过)	反序列化	MPS-2018-1438	CVE-2017-15095	严重
FasterXML Jackson-databind反序列化漏洞	反序列化	MPS-2018-1439	CVE-2017-7525	严重
LibSass 拒绝服务漏洞	越界读取	MPS-2018-15397	CVE-2018-19839	中危
LibSass 拒绝服务漏洞	空指针取消引用	MPS-2018-15962	CVE-2018-20190	中危
FasterXML jackson-databind 反序列化漏洞(c3p0 gadget绕过)	反序列化	MPS-2018-2477	CVE-2018-7489	严重
Google Guava 不可信数据的反序列化漏洞	不加限制或调节的资源分配	MPS-2018-5515	CVE-2018-10237	中危
Apache Zookeeper 访问控制错误漏洞	授权检查缺失	MPS-2018-6313	CVE-2018-8012	高危
Bouncy Castle 数据伪造问题漏洞	密码学签名的验证不恰当	MPS-2018-6849	CVE-2016-1000338	高危
Bouncy Castle AES 密钥信息泄露漏洞	密码学问题	MPS-2018-6922	CVE-2016-1000339	中危
Bouncy Castle 不安全加密漏洞	数据处理错误	MPS-2018-6923	CVE-2016-1000340	高危
Bouncy Castle 签名信息泄露漏洞	7PK – 时间和状态	MPS-2018-6924	CVE-2016-1000341	中危
Bouncy Castle	密码学签名的验证不恰当	MPS-2018-6925	CVE-2016-1000342	高危
Bouncy Castle 弱私钥漏洞	密码学问题	MPS-2018-6926	CVE-2016-1000343	高危
Bouncy Castle 不安全加密漏洞	密码学问题	MPS-2018-7042	CVE-2016-1000344	高危
Bouncy Castle 服务异常漏洞	7PK – 时间和状态	MPS-2018-7043	CVE-2016-1000345	中危
Bouncy Castle 私钥信息泄露漏洞	密钥管理错误	MPS-2018-7044	CVE-2016-1000346	低危
Bouncy Castle 不安全加密漏洞	密码学问题	MPS-2018-7045	CVE-2016-1000352	高危
Eclipse Jetty 缓存中毒漏洞	HTTP请求走私	MPS-2018-8346	CVE-2017-7656	高危
Eclipse Jetty	HTTP请求走私	MPS-2018-8347	CVE-2017-7657	严重
Eclipse Jetty	HTTP请求走私	MPS-2018-8415	CVE-2017-7658	严重
Eclipse Jetty Server 系统路径泄露漏洞	未授权敏感信息泄露	MPS-2018-8456	CVE-2018-12536	中危
FasterXML jackson-databind反序列化漏洞(slf4j-ext gadget绕过)	反序列化	MPS-2019-0018	CVE-2018-14718	严重
FasterXML jackson-databind反序列化漏洞(blaze-ds-opt gadget绕过)	反序列化	MPS-2019-0019	CVE-2018-14719	严重
FasterXML jackson-databind XXE漏洞(DRSHelper gadget绕过)	XXE	MPS-2019-0020	CVE-2018-14720	严重
FasterXML Jackson-databind服务器端请求伪造漏洞(axis2-jaxws gadget绕过)	SSRF	MPS-2019-0021	CVE-2018-14721	严重
FasterXML Jackson-databind代码问题漏洞(axis2-transport-jms gadget绕过)	反序列化	MPS-2019-0023	CVE-2018-19360	严重
FasterXML Jackson-databind代码问题漏洞(openjpa gadget绕过)	反序列化	MPS-2019-0024	CVE-2018-19361	严重
FasterXML Jackson-databind代码问题漏洞(jboss-common-core gadget绕过)	反序列化	MPS-2019-0025	CVE-2018-19362	严重
Apache Thrift	证书验证不恰当	MPS-2019-0104	CVE-2018-1320	高危
LibSass 堆缓冲区错误漏洞	越界读取	MPS-2019-0502	CVE-2019-6283	中危
LibSass 堆缓冲区错误漏洞	越界读取	MPS-2019-0503	CVE-2019-6284	中危
LibSass 堆缓冲区错误漏洞	越界读取	MPS-2019-0505	CVE-2019-6286	中危
Apache Commons Beanutils 存在不可信数据的反序列化漏洞	反序列化	MPS-2019-10233	CVE-2019-10086	高危
FasterXML jackson-databind 反序列化漏洞(HikariCP gadget绕过)	反序列化	MPS-2019-11529	CVE-2019-14540	严重
FasterXML jackson-databind 反序列化漏洞(HikariCP gadget绕过)	反序列化	MPS-2019-11533	CVE-2019-16335	严重
Netty 存在 HTTP 请求走私漏洞	HTTP请求走私	MPS-2019-12064	CVE-2019-16869	高危
Red Hat JBoss Enterprise Application Platform 代码问题漏洞	反序列化	MPS-2019-12470	CVE-2019-10202	严重
FasterXML jackson-databind 反序列化漏洞(commons-dbcp gadget绕过)	反序列化	MPS-2019-12479	CVE-2019-16942	严重
FasterXML jackson-databind 反序列化漏洞(p6spy gadget绕过)	反序列化	MPS-2019-12480	CVE-2019-16943	严重
FasterXML jackson-databind 反序列化漏洞(ehcache gadget绕过)	反序列化	MPS-2019-12676	CVE-2019-17267	严重
FasterXML jackson-databind 反序列化漏洞(apache-log4j-extras gadget绕过)	反序列化	MPS-2019-13103	CVE-2019-17531	严重
Connect2id Nimbus JOSE+JWT 存在对异常或异常情况的不当检查漏洞	对异常条件的处理不恰当	MPS-2019-13154	CVE-2019-17195	中危
Apache Thrift	不可达退出条件的循环（无限循环）	MPS-2019-13876	CVE-2019-0205	高危
LibSass	越界读取	MPS-2019-14247	CVE-2019-18798	中危
hibernate-validator 存在跨站脚本（XSS）漏洞	XSS	MPS-2019-14389	CVE-2019-10219	中危
jackson-mapper-asl	XXE	MPS-2019-15048	CVE-2019-10172	高危
SnakeYAML	拒绝服务	MPS-2019-16129	CVE-2017-18640	高危
Apache Log4j SocketServer反序列化漏洞	反序列化	MPS-2019-17271	CVE-2019-17571	严重
FasterXML Jackson-databind反序列化漏洞（Jodd-db gadget绕过）	反序列化	MPS-2019-2619	CVE-2018-12022	高危
FasterXML Jackson-databind反序列化漏洞(Oracle JDBC driver gadget绕过)	反序列化	MPS-2019-2620	CVE-2018-12023	高危
Eclipse Jetty 跨站脚本漏洞	XSS	MPS-2019-4268	CVE-2019-10241	中危
Eclipse Jetty 信息泄露漏洞	未授权敏感信息泄露	MPS-2019-4270	CVE-2019-10247	中危
FasterXML jackson-databind 反序列化漏洞(mysql gadget绕过)	反序列化	MPS-2019-5442	CVE-2019-12086	高危
Apache Zookeeper 授权问题漏洞	授权检查缺失	MPS-2019-5668	CVE-2019-0201	中危
FasterXML jackson-databind 反序列化漏洞(jdom gadget绕过)	反序列化	MPS-2019-6867	CVE-2019-12814	中危
FasterXML jackson-databind 反序列化漏洞(logback-classic gadget绕过)	反序列化	MPS-2019-7047	CVE-2019-12384	中危
FasterXML jackson-databind 反序列化漏洞(iBatis gadget绕过)	反序列化	MPS-2019-7711	CVE-2018-11307	严重
FasterXML jackson-databind 反序列化漏洞(ehcache gadget绕过)	动态确定对象属性修改的控制不恰当	MPS-2019-8717	CVE-2019-14379	严重
FasterXML jackson-databind 信息泄露漏洞(logback gadget绕过)	反序列化	MPS-2019-8770	CVE-2019-14439	高危
Red Hat Keycloak 输入验证错误漏洞	CSRF	MPS-2019-9765	CVE-2019-10199	高危
Red Hat Keycloak 授权问题漏洞	密码学签名的验证不恰当	MPS-2019-9766	CVE-2019-10201	高危
Spring Framework	反序列化	MPS-2020-0057	CVE-2016-1000027	严重
FasterXML jackson-databind反序列化漏洞(net.sf.ehcache gadget绕过)	反序列化	MPS-2020-0063	CVE-2019-20330	严重
Red Hat Keycloak 信息泄露漏洞	未授权敏感信息泄露	MPS-2020-0235	CVE-2019-14820	中危
Eclipse Jetty 验证凭据泄露漏洞	在过期或释放后对资源进行操作	MPS-2020-10038	CVE-2019-17638	严重
FasterXML jackson-databind反序列化漏洞(Anteros-DBCP gadget绕过)	反序列化	MPS-2020-11987	CVE-2020-24616	高危
Apache Cassandra 安全漏洞	将资源暴露给错误范围	MPS-2020-12353	CVE-2020-13946	中危
FasterXML jackson-databind 反序列化漏洞(pastdev gadget绕过)	反序列化	MPS-2020-13151	CVE-2020-24750	高危
Netty	HTTP请求走私	MPS-2020-1320	CVE-2020-7238	高危
Apache Calcite 访问控制错误漏洞	关键功能的认证机制缺失	MPS-2020-14130	CVE-2020-13955	中危
Junit 信息泄露漏洞	不安全的临时文件	MPS-2020-15183	CVE-2020-15250	中危
Netty	HTTP请求走私	MPS-2020-1526	CVE-2019-20444	严重
Netty	HTTP请求走私	MPS-2020-1527	CVE-2019-20445	严重
Eclipse Jetty 权限提升漏洞	权限、特权和访问控制	MPS-2020-15633	CVE-2020-27216	高危
Elasticsearch 存在权限管理不恰当漏洞	权限管理不当	MPS-2020-15777	CVE-2020-7020	低危
Red Hat Single Sign-On 安全漏洞	使用具有不充分计算复杂性的口令哈希	MPS-2020-16402	CVE-2020-14389	高危
Bouncy Castle 私钥信息泄漏漏洞	通过差异性导致的信息暴露	MPS-2020-16513	CVE-2020-26939	中危
Apache HttpClient URI解析错误漏洞	XSS	MPS-2020-17341	CVE-2020-13956	中危
FasterXML jackson-databind 代码问题漏洞	XXE	MPS-2020-17358	CVE-2020-25649	高危
Google Guava 访问控制错误漏洞	关键资源权限分配不当	MPS-2020-17429	CVE-2020-8908	低危
Eclipse Jetty HTTP 请求走私漏洞	在释放前未清除敏感信息	MPS-2020-17594	CVE-2020-27218	中危
FasterXML jackson-databind 反序列化漏洞(commons-dbcp2 gadget绕过)	反序列化	MPS-2020-17696	CVE-2020-35490	高危
FasterXML jackson-databind 反序列化漏洞(commons-dbcp2 gadget绕过)	反序列化	MPS-2020-17697	CVE-2020-35491	高危
FasterXML jackson-databind 反序列化漏洞(glassfish gadget绕过)	反序列化	MPS-2020-18089	CVE-2020-35728	高危
Red Hat Keycloak 跨站脚本漏洞	XSS	MPS-2020-1999	CVE-2020-1697	中危
FasterXML jackson-databind 反序列化漏洞(xbean-reflect gadget绕过)	反序列化	MPS-2020-2030	CVE-2020-8840	严重
FasterXML jackson-databind 反序列化漏洞(ignite-jta gadget绕过)	反序列化	MPS-2020-24779	CVE-2020-10650	高危
FasterXML jackson-databind 代码问题漏洞	反序列化	MPS-2020-3040	CVE-2020-9546	严重
FasterXML jackson-databind 反序列化漏洞(JtaTransactionConfig gadget绕过)	反序列化	MPS-2020-3041	CVE-2020-9547	严重
FasterXML jackson-databind反序列化漏洞(anteros-core gadget绕过)	反序列化	MPS-2020-3042	CVE-2020-9548	严重
Red Hat Keycloak operator 安全漏洞	从可观察状态的可预测	MPS-2020-3070	CVE-2020-1731	严重
Red Hat Keycloak 跨站脚本漏洞	XSS	MPS-2020-37990	CVE-2021-20323	中危
FasterXML jackson-databind反序列化漏洞(aries.transaction.jms gadget绕过)	反序列化	MPS-2020-4131	CVE-2020-10672	高危
FasterXML jackson-databind反序列化漏洞(caucho-quercus gadget绕过)	反序列化	MPS-2020-4132	CVE-2020-10673	高危
FasterXML jackson-databind反序列化漏洞(bus-proxy gadget绕过)	反序列化	MPS-2020-4658	CVE-2020-10968	高危
FasterXML jackson-databind反序列化漏洞(javax.swing gadget绕过)	反序列化	MPS-2020-4659	CVE-2020-10969	高危
FasterXML jackson-databind反序列化漏洞(activemq gadget绕过)	反序列化	MPS-2020-4754	CVE-2020-11111	高危
FasterXML jackson-databind反序列化漏洞(commons-proxy gadget绕过)	反序列化	MPS-2020-4755	CVE-2020-11112	高危
FasterXML jackson-databind反序列化漏洞(openjpa gadget绕过)	反序列化	MPS-2020-4756	CVE-2020-11113	高危
Elasticsearch API 密钥权限提升漏洞	权限管理不当	MPS-2020-4780	CVE-2020-7009	高危
Red Hat Keycloak 安全特征问题漏洞	渲染 UI 层或帧的不当限制	MPS-2020-4993	CVE-2020-1728	中危
Netty ZlibDecoders 存在拒绝服务漏洞	不加限制或调节的资源分配	MPS-2020-5127	CVE-2020-11612	高危
FasterXML jackson-databind 反序列化漏洞(spring-aop gadget绕过)	反序列化	MPS-2020-5138	CVE-2020-11619	高危
FasterXML jackson-databind 反序列化漏洞(commons-jelly gadget绕过)	反序列化	MPS-2020-5139	CVE-2020-11620	高危
Apache Log4j2 SmtpAppender证书验证不当漏洞	证书验证不恰当	MPS-2020-6684	CVE-2020-9488	低危
hibernate-validator 存在输入验证错误漏洞	代码注入	MPS-2020-7077	CVE-2020-10693	中危
Red Hat Keycloak 安全漏洞	特权定义了不安全动作	MPS-2020-7231	CVE-2019-10170	高危
Red Hat Keycloak 输入验证错误漏洞	代码注入	MPS-2020-7378	CVE-2020-1714	高危
Apache Ant 临时文件不安全问题	将资源暴露给错误范围	MPS-2020-7418	CVE-2020-1945	中危
Elasticsearch 权限管理不当漏洞	权限管理不当	MPS-2020-8144	CVE-2020-7014	高危
FasterXML jackson-databind反序列化漏洞(oracle-aqjms gadget绕过)	反序列化	MPS-2020-8801	CVE-2020-14061	高危
FasterXML jackson-databind反序列化漏洞(xalan2 gadget绕过)	反序列化	MPS-2020-8802	CVE-2020-14062	高危
FasterXML jackson-databind反序列化漏洞(apache drill gadget绕过)	反序列化	MPS-2020-8803	CVE-2020-14060	高危
FasterXML jackson-databind代码问题漏洞(jsecurity gadget绕过)	反序列化	MPS-2020-8911	CVE-2020-14195	高危
FasterXML jackson-databind 反序列化漏洞(DBCP gadget绕过)	反序列化	MPS-2021-0202	CVE-2020-36179	高危
FasterXML jackson-databind 反序列化漏洞(DBCP gadget绕过)	反序列化	MPS-2021-0203	CVE-2020-36181	高危
FasterXML jackson-databind 反序列化漏洞(DBCP gadget绕过)	反序列化	MPS-2021-0204	CVE-2020-36180	高危
FasterXML jackson-databind 反序列化漏洞(tomcat-dbcp gadget绕过)	反序列化	MPS-2021-0205	CVE-2020-36182	高危
FasterXML jackson-databind 反序列化漏洞(docx4j gadget绕过)	反序列化	MPS-2021-0206	CVE-2020-36183	高危
FasterXML jackson-databind 反序列化漏洞(tomcat-dbcp gadget绕过)	反序列化	MPS-2021-0207	CVE-2020-36184	高危
FasterXML jackson-databind 反序列化漏洞(tomcat-dbcp gadget绕过)	反序列化	MPS-2021-0208	CVE-2020-36185	高危
FasterXML jackson-databind 反序列化漏洞(naming-factory-dbcp gadget绕过)	反序列化	MPS-2021-0209	CVE-2020-36186	高危
FasterXML jackson-databind 反序列化漏洞(naming-factory-dbcp gadget绕过)	反序列化	MPS-2021-0210	CVE-2020-36187	高危
FasterXML jackson-databind 反序列化漏洞(newrelic-agent gadget绕过)	反序列化	MPS-2021-0211	CVE-2020-36188	高危
FasterXML jackson-databind 反序列化漏洞(newrelic-agent gadget绕过)	反序列化	MPS-2021-0212	CVE-2020-36189	高危
Red Hat Mobile Aplication Platform 输入验证错误漏洞	跨站重定向	MPS-2021-0639	CVE-2020-1723	中危
Red Hat Keycloak 访问控制错误漏洞	授权检查错误	MPS-2021-0878	CVE-2020-1725	中危
Apache Commons Compress 安存在拒绝服务漏洞	不加限制或调节的资源分配	MPS-2021-10550	CVE-2021-35517	高危
Apache Commons Compress 存在拒绝服务漏洞	不加限制或调节的资源分配	MPS-2021-10551	CVE-2021-35516	高危
Apache Commons Compress 存在拒绝服务漏洞	不加限制或调节的资源分配	MPS-2021-10564	CVE-2021-36090	高危
Apache Commons Compress 无限循环漏洞	不可达退出条件的循环（无限循环）	MPS-2021-10565	CVE-2021-35515	高危
Apache Cassandra 安全漏洞	使用欺骗进行的认证绕过	MPS-2021-1063	CVE-2020-17516	高危
Elasticsearch 资源管理错误漏洞	未经控制的递归	MPS-2021-11043	CVE-2021-22144	中危
Elasticsearch 日志信息泄露漏洞	日志敏感信息泄露	MPS-2021-1485	CVE-2020-7021	中危
Netty	在具有不安全权限的目录中创建临时文件	MPS-2021-1580	CVE-2021-21290	中危
Apache Thrift 资源管理错误漏洞	拒绝服务	MPS-2021-1609	CVE-2020-13949	高危
FasterXML jackson-databind 反序列化漏洞(javax.swing gadget绕过)	反序列化	MPS-2021-1625	CVE-2021-20190	高危
Apache Hadoop 权限管理不当漏洞	授权检查错误	MPS-2021-1705	CVE-2020-9492	高危
keycloak 安全漏洞	使用基本弱点进行的认证绕过	MPS-2021-1761	CVE-2020-14359	高危
Google protobuf DOS漏洞	不正确的行为次序	MPS-2021-19066	CVE-2021-22569	中危
FasterXML jackson-dataformat-cbor 内存耗尽漏洞	不加限制或调节的资源分配	MPS-2021-1998	CVE-2020-28491	高危
Apache Hadoop YARN 远程代码执行漏洞	代码注入	MPS-2021-20833	CVE-2021-25642	严重
netplex json-smart-v 分布式拒绝服务攻击	对因果或异常条件的不恰当检查	MPS-2021-2102	CVE-2021-27568	严重
Eclipse Jetty	拒绝服务	MPS-2021-2571	CVE-2020-27223	中危
lodash 拒绝服务漏洞	拒绝服务	MPS-2021-2574	CVE-2020-28500	中危
lodash 命令注入漏洞	代码注入	MPS-2021-2638	CVE-2021-23337	高危
Elasticsearch 信息泄露漏洞	未授权敏感信息泄露	MPS-2021-2736	CVE-2021-22134	中危
Netty Bzip2Decoder 存在资源穷尽漏洞	拒绝服务	MPS-2021-28116	CVE-2021-37136	高危
Netty 存在资源穷尽漏洞	拒绝服务	MPS-2021-28117	CVE-2021-37137	高危
Apache Commons Net	未授权敏感信息泄露	MPS-2021-28440	CVE-2021-37533	中危
Red Hat Keycloak 身份验证绕过漏洞	用户管理不正确	MPS-2021-30695	CVE-2021-3754	中危
Red Hat Keycloak 跨站脚本漏洞	XSS	MPS-2021-3167	CVE-2021-20222	高危
Quality Open Software logback JNDI注入漏洞	反序列化	MPS-2021-33911	CVE-2021-42550	中危
Ruy Adorno hosted-git-info 正则表达式拒绝服务漏洞	拒绝服务	MPS-2021-3400	CVE-2021-23362	中危
Apache Solr安全漏洞	路径遍历	MPS-2021-37949	CVE-2021-44548	严重
Apache Log4j2 远程代码执行漏洞	反序列化	MPS-2021-38241	CVE-2021-44228	严重
Apache Log4j2 JDBC Appender远程代码执行漏洞	代码注入	MPS-2021-38327	CVE-2021-44832	中危
Apache Log4j JMSAppender反序列化漏洞	反序列化	MPS-2021-38359	CVE-2021-4104	高危
Eclipse Jetty 资源管理错误漏洞	对异常条件的处理不恰当	MPS-2021-3864	CVE-2021-28165	高危
Apache Log4j2 基于上下文查找的远程代码执行漏洞	反序列化	MPS-2021-38665	CVE-2021-45046	严重
Apache Log4j2 自引用拒绝服务漏洞	未经控制的递归	MPS-2021-38752	CVE-2021-45105	中危
Apache Solr 安全漏洞	凭证保护不足	MPS-2021-4530	CVE-2021-29262	高危
Apache Commons IO 存在路径遍历漏洞	路径遍历	MPS-2021-4531	CVE-2021-29425	中危
Apache Solr 安全漏洞	授权检查错误	MPS-2021-4541	CVE-2021-29943	严重
Apache Solr 存在 SSRF 漏洞	SSRF	MPS-2021-5182	CVE-2021-27905	严重
npm path-parse 安全漏洞	拒绝服务	MPS-2021-6165	CVE-2021-23343	高危
Elasticsearch 信息泄露漏洞	未授权敏感信息泄露	MPS-2021-6747	CVE-2021-22137	中危
Elasticsearch 信息泄露漏洞	未授权敏感信息泄露	MPS-2021-6749	CVE-2021-22135	中危
Bouncy Castle 私钥信息泄露漏洞	竞争条件	MPS-2021-7064	CVE-2020-15522	中危
Red Hat Keycloak 输入验证错误漏洞	对输出编码和转义不恰当	MPS-2021-7172	CVE-2021-20195	严重
trim-newlines 存在拒绝服务漏洞	拒绝服务	MPS-2021-7398	CVE-2021-33623	高危
keycloak v7.4 存在身份管理不当漏洞	使用欺骗进行的认证绕过	MPS-2021-7518	CVE-2021-3424	中危
Jakarta Expression Language	表达式语言注入	MPS-2021-7671	CVE-2021-28170	中危
json-smart 存在拒绝服务漏洞	越界写入	MPS-2021-7737	CVE-2021-31684	高危
Eclipse Jetty 信息泄露漏洞	未授权敏感信息泄露	MPS-2021-8397	CVE-2021-28169	中危
Eclipse Jetty 存在信息泄露漏洞	不充分的会话过期机制	MPS-2021-8884	CVE-2021-34428	低危
Apache Ant 拒绝服务漏洞	长度参数不一致性处理不恰当	MPS-2021-9827	CVE-2021-36373	中危
Apache Ant 拒绝服务漏洞	长度参数不一致性处理不恰当	MPS-2021-9847	CVE-2021-36374	中危
jnr-posix 存在UAF漏洞	UAF	MPS-2022-11743		低危
commons-codec:commons-codec 存在信息泄露漏洞	未授权敏感信息泄露	MPS-2022-11853		低危
com.fasterxml.jackson.core:jackson-core 存在资源管理错误漏洞	资源管理错误	MPS-2022-11944		中危
com.nimbusds:nimbus-jose-jwt	未授权敏感信息泄露	MPS-2022-11950		高危
io.netty:netty-handler 存在证书验证不恰当漏洞	证书验证不恰当	MPS-2022-12067		中危
Apache Thrift	拒绝服务	MPS-2022-12148		中危
com.google.code.gson:gson 存在BigDecimal拒绝服务漏洞	反序列化	MPS-2022-12287	CVE-2022-25647	高危
Apache HttpClient URI解析错误漏洞	相对路径遍历	MPS-2022-12292		中危
Logback SSL证书校验不当漏洞	中间人攻击	MPS-2022-12411		中危
com.fasterxml.jackson.core:jackson-databind 存在反序列化漏洞	反序列化	MPS-2022-12433		高危
org.apache.hadoop:hadoop-hdfs	XXE	MPS-2022-12474		中危
org.apache.hadoop:hadoop-hdfs 存在信息暴露漏洞	未授权敏感信息泄露	MPS-2022-12484		高危
FasterXML Jackson-databind 拒绝服务漏洞	拒绝服务	MPS-2022-12500		中危
clean-css	拒绝服务	MPS-2022-12865		低危
d3-color	拒绝服务	MPS-2022-13618		中危
jstree 存在代码注入漏洞	代码注入	MPS-2022-13819		高危
uglify-js	ReDoS	MPS-2022-14112		中危
Apache Log4j JDBCAppender SQL注入漏洞	SQL注入	MPS-2022-1444	CVE-2022-23305	严重
Apache Log4j Chainsaw反序列化漏洞	反序列化	MPS-2022-1445	CVE-2022-23307	高危
Apache Log4j 反序列化漏洞	反序列化	MPS-2022-1446	CVE-2022-23302	高危
Eclipse Jetty URI注入漏洞	注入	MPS-2022-18060	CVE-2022-2047	低危
Eclipse Jetty 拒绝服务漏洞	在生命周期中对资源的控制不恰当	MPS-2022-18061	CVE-2022-2048	高危
Elastic Stack Kibana 存在缺少授权漏洞	授权检查缺失	MPS-2022-2136	CVE-2022-23709	中危
Elastic Stack Kibana 存在 XSS 漏洞	XSS	MPS-2022-2137	CVE-2022-23710	中危
Netty 存在信息泄露漏洞	将资源暴露给错误范围	MPS-2022-3790	CVE-2022-24823	中危
Express 中的 qs 模块存在原型污染漏洞	原型污染	MPS-2022-3967	CVE-2022-24999	高危
Apache Hadoop 存在shell命令注入漏洞	参数注入或修改	MPS-2022-4190	CVE-2022-25168	严重
Apache Kafka 拒绝服务漏洞	拒绝服务	MPS-2022-42906	CVE-2022-34917	中危
snakeYAML	拒绝服务	MPS-2022-5144	CVE-2022-25857	高危
http-cache-semantics 安全漏洞	ReDoS	MPS-2022-5164	CVE-2022-25881	高危
node-semver 安全漏洞	ReDoS	MPS-2022-5166	CVE-2022-25883	高危
Apache Calcite Avatica 代码注入漏洞	代码注入	MPS-2022-51965	CVE-2022-36364	高危
woodstox-core	XXE	MPS-2022-54303		中危
Bouncy Castle	密码学问题	MPS-2022-54305		中危
snakeYAML	栈缓冲区溢出	MPS-2022-56040	CVE-2022-38751	中危
snakeYAML	栈缓冲区溢出	MPS-2022-56041	CVE-2022-38752	低危
snakeYAML	栈缓冲区溢出	MPS-2022-56051	CVE-2022-38750	中危
snakeYAML	拒绝服务	MPS-2022-56081	CVE-2022-38749	中危
Apache Calcite 存在 XXE 漏洞	XXE	MPS-2022-56508	CVE-2022-39135	中危
XStream 缓冲区错误漏洞	输入验证不恰当	MPS-2022-57061	CVE-2022-40156	低危
xstream project跨界内存写漏洞	跨界内存写	MPS-2022-57062	CVE-2022-40155	高危
xstream project跨界内存写漏洞	跨界内存写	MPS-2022-57063	CVE-2022-40154	高危
XStream 缓冲区错误漏洞	越界写入	MPS-2022-57065	CVE-2022-40152	高危
Jettison	拒绝服务	MPS-2022-57067	CVE-2022-40150	高危
Jettison	越界写入	MPS-2022-57068	CVE-2022-40149	高危
SnakeYAML	栈缓冲区溢出	MPS-2022-58478	CVE-2022-41854	中危
FasterXML jackson-databind 小于2.14.0-rc1拒绝服务漏洞	拒绝服务	MPS-2022-58653	CVE-2022-42003	中危
FasterXML jackson-databind 小于2.13.4拒绝服务漏洞	拒绝服务	MPS-2022-58654	CVE-2022-42004	中危
Apache Hadoop 存在路径遍历漏洞	路径遍历	MPS-2022-5920	CVE-2022-26612	严重
Apache Commons Text	反序列化	MPS-2022-59712	CVE-2022-42889	严重
IBM WebSphere Application Server Liberty 存在拒绝服务漏洞	对因果或异常条件的不恰当检查	MPS-2022-59813	CVE-2022-3509	中危
minimatch 资源管理错误漏洞	拒绝服务	MPS-2022-59845	CVE-2022-3517	高危
FasterXML jackson-databind 拒绝服务漏洞	越界写入	MPS-2022-6242	CVE-2020-36518	高危
Spring 处理 SpEL 存在拒绝服务漏洞	拒绝服务	MPS-2022-62833	CVE-2023-20861	中危
Spring Security Logout实现不当	会话固定	MPS-2022-62834	CVE-2023-20862	中危
Spring Expression 存在拒绝服务漏洞	拒绝服务	MPS-2022-62835	CVE-2023-20863	高危
Jettison	越界写入	MPS-2022-64973	CVE-2022-45685	高危
Jettison	越界写入	MPS-2022-64981	CVE-2022-45693	高危
Apache Ivy	输入验证不恰当	MPS-2022-67125	CVE-2022-46751	中危
Oracle Java SE和Oracle GraalVM 安全漏洞		MPS-2022-68515	CVE-2023-21930	高危
Oracle Java SE和Oracle GraalVM 安全漏洞		MPS-2022-68522	CVE-2023-21937	低危
Oracle Java SE和Oracle GraalVM 安全漏洞		MPS-2022-68523	CVE-2023-21938	低危
Oracle Java SE和Oracle GraalVM 安全漏洞		MPS-2022-68524	CVE-2023-21939	中危
Oracle Java SE和Oracle GraalVM 安全漏洞		MPS-2022-68539	CVE-2023-21954	中危
Oracle Java SE和Oracle GraalVM 安全漏洞		MPS-2022-68552	CVE-2023-21967	中危
Oracle Java SE和Oracle GraalVM 安全漏洞		MPS-2022-68553	CVE-2023-21968	低危
Oracle Java SE 安全漏洞		MPS-2022-68591	CVE-2023-22006	低危
Oracle Java SE 安全漏洞		MPS-2022-68610	CVE-2023-22025	低危
Oracle Java SE 安全漏洞		MPS-2022-68621	CVE-2023-22036	低危
Oracle Java SE 安全漏洞		MPS-2022-68626	CVE-2023-22041	中危
Oracle Java SE 安全漏洞		MPS-2022-68629	CVE-2023-22044	低危
Oracle Java SE 安全漏洞		MPS-2022-68630	CVE-2023-22045	低危
Oracle Java SE 安全漏洞		MPS-2022-68634	CVE-2023-22049	低危
Oracle Java SE 安全漏洞		MPS-2022-68666	CVE-2023-22081	中危
Red Hat Single Sign-On 安全漏洞	授权检查错误	MPS-2022-9413	CVE-2022-1466	中危
snakeYAML	反序列化	MPS-2022-9425	CVE-2022-1471	高危
Red Hat Keycloak 安全漏洞	授权检查错误	MPS-2023-0330	CVE-2023-0091	低危
Red Hat Keycloak 授权问题漏洞	身份验证不当	MPS-2023-0550	CVE-2023-0105	中危
Apache Commons FileUpload	不加限制或调节的资源分配	MPS-2023-3553	CVE-2023-24998	中危
Apache Kafka Connect 模块JNDI注入漏洞	反序列化	MPS-2023-3834	CVE-2023-25194	高危
Eclipse Jetty 资源管理错误漏洞	拒绝服务	MPS-2023-4997	CVE-2023-26048	中危
Eclipse Jetty 信息泄露漏洞	XSS	MPS-2023-4998	CVE-2023-26049	中危
tough-cookie 安全漏洞	原型污染	MPS-2023-5130	CVE-2023-26136	严重
request SSRF防御绕过漏洞	SSRF	MPS-2023-7722	CVE-2023-28155	中危
netplex json-smart 安全漏洞	未经控制的递归	MPS-2023-7760	CVE-2023-1370	高危
Jettison 安全漏洞	未经控制的递归	MPS-2023-8270	CVE-2023-1436	高危
jackson-databind 拒绝服务漏洞	拒绝服务	MPS-2023-8438	CVE-2021-46877	中危
Red Hat Keycloak 信任管理问题漏洞	证书验证不恰当	MPS-2023-8960	CVE-2023-1664	中危
jose4j 安全漏洞	信息熵不充分	MPS-3pm2-8efx	CVE-2023-31582	高危
Eclipse Jetty 安全漏洞		MPS-49ot-3w07	CVE-2023-40167	中危
Elasticsearch 资源管理错误漏洞	拒绝服务	MPS-5mea-szlg	CVE-2023-31418	高危
snappy-java 输入验证错误漏洞	整数溢出或环绕	MPS-8znw-4jmi	CVE-2023-34453	高危
Eclipse Jetty 安全漏洞	引号语法转义处理不恰当	MPS-9q53-gmbl	CVE-2023-36479	中危
Netty 资源管理错误漏洞	不加限制或调节的资源分配	MPS-9u07-bna1	CVE-2023-34462	中危
Okio 安全漏洞	数值类型间的不正确转换	MPS-a2tx-d4fb	CVE-2023-3635	高危
snappy-java 的 compress 方法整数溢出漏洞导致拒绝服务	整数溢出或环绕	MPS-angp-mxl2	CVE-2023-34454	中危
Hot Rod 安全漏洞	证书验证不恰当	MPS-b7oj-adm3	CVE-2023-4586	高危
ZooKeeper SASL 身份验证绕过漏洞	通过用户控制密钥绕过授权机制	MPS-bznr-672x	CVE-2023-44981	高危
logback 安全漏洞		MPS-e8pm-na64	CVE-2023-6378	高危
Elasticsearch 缓冲区错误漏洞	越界写入	MPS-egv5-ijbt	CVE-2023-31419	高危
tough-cookie	原型污染	MPS-esyq-56vx		中危
Requests Proxy-Authorization 标头泄露漏洞	未授权敏感信息泄露	MPS-hr61-tzey	CVE-2023-32681	中危
Bouncy Castle 信任管理问题漏洞	证书验证不恰当	MPS-i6w7-d48e	CVE-2023-33201	中危
Spring Security 路径匹配漏洞	不恰当实现的标准安全检查	MPS-j3nx-691g	CVE-2023-34034	严重
Guava	创建拥有不安全权限的临时文件	MPS-mfku-xzh3	CVE-2023-2976	中危
Snappy 安全漏洞	不加限制或调节的资源分配	MPS-s7wb-p03z	CVE-2023-43642	高危
amqp-client 拒绝服务漏洞	拒绝服务	MPS-sqnw-9vcz	CVE-2023-46120	中危
Snappy 输入验证错误漏洞	不加限制或调节的资源分配	MPS-tnp7-60hk	CVE-2023-34455	高危
【存在争议】FasterXML jackson-databind 代码问题漏洞	不加限制或调节的资源分配	MPS-z1bx-p8y2	CVE-2023-35116	中危

缺陷组件

组件名称	版本	最小修复版本	依赖关系	修复建议
org.apache.logging.log4j:log4j-core	2.13.2	2.17.1	间接依赖	强烈建议修复
org.apache.solr:solr-core	8.6.3	9.4.0	间接依赖	强烈建议修复
com.fasterxml.jackson.core:jackson-databind	2.11.3		直接依赖	建议修复
commons-fileupload:commons-fileupload	1.3.3	1.5	直接依赖	建议修复
io.netty:netty-handler	4.1.50.Final		间接依赖	建议修复
io.netty:netty	3.7.0.Final		间接依赖	建议修复
org.apache.commons:commons-compress	1.9	1.21	间接依赖	建议修复
io.netty:netty	3.10.6.Final		间接依赖	建议修复
org.codehaus.jackson:jackson-mapper-asl	1.9.13		间接依赖	建议修复
com.fasterxml.jackson.core:jackson-databind	2.10.3		间接依赖	建议修复
org.apache.thrift:libthrift	0.9.3	0.14.0	间接依赖	建议修复
org.eclipse.jetty:jetty-server	9.4.31.v20200723	9.4.51	直接依赖	建议修复
org.keycloak:keycloak-common	6.0.1	11.0.0	间接依赖	建议修复
com.fasterxml.jackson.core:jackson-databind	2.7.8		间接依赖	建议修复
tough-cookie	2.5.0	4.1.3	间接依赖	建议修复
io.netty:netty-handler	4.1.45.Final		间接依赖	建议修复
net.minidev:json-smart	2.3	2.4.9	间接依赖	建议修复
minimatch	3.0.4	3.0.5	间接依赖	建议修复
org.eclipse.jetty:jetty-server	9.3.19.v20170502	9.4.51	间接依赖	建议修复
io.netty:netty-handler	4.1.47.Final		间接依赖	建议修复
org.apache.hadoop:hadoop-hdfs-client	3.2.0	3.2.2	间接依赖	建议修复
org.eclipse.jetty:jetty-io	9.4.14.v20181114	9.4.39.v20210325	间接依赖	建议修复
org.graalvm.sdk:graal-sdk	22.3.1		间接依赖	建议修复
org.eclipse.jetty:jetty-webapp	9.3.28.v20191105	9.4.33.v20201020	间接依赖	建议修复
org.eclipse.jetty:jetty-http	9.3.20.v20170531	11.0.16	间接依赖	建议修复
org.eclipse.jetty:jetty-io	9.4.20.v20190813	9.4.39.v20210325	间接依赖	建议修复
org.yaml:snakeyaml	1.11	2.0	间接依赖	建议修复
ch.qos.logback:logback-core	1.1.3	1.3.12	间接依赖	建议修复
com.squareup.okio:okio	1.6.0	3.4.0	间接依赖	建议修复
org.xerial.snappy:snappy-java	1.1.8.1	1.1.10.4	间接依赖	建议修复
org.apache.thrift:libthrift	0.9.2	0.14.0	间接依赖	建议修复
org.apache.hadoop:hadoop-common	3.3.0	3.3.3	直接依赖	建议修复
log4j:log4j	1.2.17		间接依赖	建议修复
org.eclipse.jetty:jetty-server	9.3.28.v20191105	9.4.51	间接依赖	建议修复
com.nimbusds:nimbus-jose-jwt	3.10	7.8.1	间接依赖	建议修复
org.eclipse.jetty.http2:http2-server	9.4.27.v20200227	9.4.47.v20220610	间接依赖	建议修复
io.netty:netty-all	4.0.44.Final	4.1.44.Final	间接依赖	建议修复
org.apache.kafka:kafka-clients	2.8.1	3.4.0	直接依赖	建议修复
io.netty:netty-codec	4.1.50.Final	4.1.68.Final	间接依赖	建议修复
org.apache.zookeeper:zookeeper	3.4.6	3.7.2	间接依赖	建议修复
org.apache.hadoop:hadoop-common	3.0.3	3.2.4	直接依赖	建议修复
org.bouncycastle:bcprov-jdk15on	1.52		间接依赖	建议修复
com.google.guava:guava	25.1-jre	32.0.0-jre	直接依赖	建议修复
requests	2.24	2.31.0	间接依赖	建议修复
com.google.guava:guava	29.0-jre	32.0.0-jre	间接依赖	建议修复
org.apache.hadoop:hadoop-yarn-server-resourcemanager	3.1.0	3.2.4	间接依赖	建议修复
qs	6.9.4	6.9.7	间接依赖	建议修复
org.eclipse.jetty:jetty-http	9.4.20.v20190813	11.0.16	间接依赖	建议修复
org.eclipse.jetty:jetty-server	9.4.14.v20181114	9.4.51	间接依赖	建议修复
org.eclipse.jetty:jetty-webapp	9.3.20.v20170531	9.4.33.v20201020	间接依赖	建议修复
io.netty:netty-codec	4.1.45.Final	4.1.68.Final	间接依赖	建议修复
org.keycloak:keycloak-core	6.0.1		间接依赖	建议修复
io.netty:netty	3.10.5.Final		间接依赖	建议修复
ch.qos.logback:logback-classic	1.1.3	1.3.12	间接依赖	建议修复
org.apache.hadoop:hadoop-hdfs-client	3.0.3	3.1.4	直接依赖	建议修复
org.eclipse.jetty:jetty-io	9.4.31.v20200723	9.4.39.v20210325	间接依赖	建议修复
org.eclipse.jetty:jetty-io	9.3.28.v20191105	9.4.39.v20210325	间接依赖	建议修复
org.apache.hadoop:hadoop-hdfs	2.2.0	3.3.2	间接依赖	建议修复
path-parse	1.0.6	1.0.7	间接依赖	建议修复
io.netty:netty-codec	4.1.47.Final	4.1.68.Final	间接依赖	建议修复
com.fasterxml.jackson.core:jackson-databind	2.10.1		间接依赖	建议修复
org.apache.zookeeper:zookeeper	3.5.9	3.7.2	间接依赖	建议修复
org.eclipse.jetty:jetty-io	9.4.27.v20200227	9.4.39.v20210325	间接依赖	建议修复
org.apache.cassandra:cassandra-all	2.2.13	2.3.0	间接依赖	建议修复
org.yaml:snakeyaml	1.32	2.0	间接依赖	建议修复
net.minidev:json-smart	1.3.1	2.4.9	间接依赖	建议修复
org.springframework:spring-web	5.3.27	6.0.14	直接依赖	建议修复
com.google.protobuf:protobuf-java	3.11.0	3.16.3	间接依赖	建议修复
trim-newlines	1.0.0	3.0.1	间接依赖	建议修复
org.eclipse.jetty:jetty-webapp	9.4.31.v20200723	9.4.33.v20201020	直接依赖	建议修复
org.eclipse.jetty:jetty-io	9.3.19.v20170502	9.4.39.v20210325	间接依赖	建议修复
org.springframework.security:spring-security-web	5.7.5	5.7.10	直接依赖	建议修复
ch.qos.logback:logback-classic	1.1.2	1.3.12	间接依赖	建议修复
org.apache.hadoop:hadoop-common	3.2.0	3.2.4	间接依赖	建议修复
org.eclipse.jetty:jetty-server	9.4.27.v20200227	9.4.51	间接依赖	建议修复
org.codehaus.jackson:jackson-mapper-asl	1.9.2		间接依赖	建议修复
com.nimbusds:nimbus-jose-jwt	4.41.1	7.8.1	间接依赖	建议修复
org.eclipse.jetty:jetty-webapp	9.4.27.v20200227	9.4.33.v20201020	间接依赖	建议修复
com.fasterxml.woodstox:woodstox-core	5.0.3	5.4.0	间接依赖	建议修复
org.eclipse.jetty:jetty-webapp	9.4.20.v20190813	9.4.33.v20201020	间接依赖	建议修复
org.eclipse.jetty:jetty-http	9.4.27.v20200227	11.0.16	间接依赖	建议修复
org.eclipse.jetty:jetty-io	9.3.20.v20170531	9.4.39.v20210325	间接依赖	建议修复
org.codehaus.jettison:jettison	1.3.8	1.5.4	间接依赖	建议修复
org.apache.zookeeper:zookeeper	3.5.6	3.7.2	间接依赖	建议修复
io.netty:netty-all	4.0.23.Final	4.1.44.Final	间接依赖	建议修复
org.codehaus.jackson:jackson-mapper-asl	1.8.8		间接依赖	建议修复
org.apache.zookeeper:zookeeper	3.5.7	3.7.2	直接依赖	建议修复
org.xerial.snappy:snappy-java	1.0.5	1.1.10.4	间接依赖	建议修复
org.eclipse.jetty:jetty-server	9.4.20.v20190813	9.4.51	间接依赖	建议修复
org.apache.commons:commons-compress	1.19	1.21	间接依赖	建议修复
com.google.guava:guava	27.0.1-jre	32.0.0-jre	间接依赖	建议修复
org.apache.cassandra:cassandra-all	2.1.8	2.3.0	直接依赖	建议修复
commons-beanutils:commons-beanutils	1.9.3	1.9.4	间接依赖	建议修复
org.eclipse.jetty:jetty-webapp	9.3.14.v20161028	9.4.33.v20201020	直接依赖	建议修复
org.eclipse.jetty:jetty-server	9.3.20.v20170531	9.4.51	间接依赖	建议修复
ch.qos.logback:logback-core	1.1.2	1.3.12	间接依赖	建议修复
jstree	3.3.5	3.3.7	直接依赖	建议修复
com.google.protobuf:protobuf-java	2.5.0	3.16.3	间接依赖	建议修复
com.google.guava:guava	11.0.2	32.0.0-jre	间接依赖	建议修复
org.eclipse.jetty:jetty-util	9.3.19.v20170502	9.3.27.v20190418	间接依赖	建议修复
com.fasterxml.jackson.core:jackson-databind	2.10.5.1		间接依赖	建议修复
org.codehaus.jettison:jettison	1.1	1.5.4	间接依赖	建议修复
org.apache.commons:commons-text	1.9	1.10.0	间接依赖	建议修复
org.xerial.snappy:snappy-java	1.0.5-M3	1.1.10.4	间接依赖	建议修复
org.apache.calcite.avatica:avatica-core	1.13.0	1.22.0	间接依赖	建议修复
org.elasticsearch:elasticsearch	7.6.0	7.17.13	间接依赖	建议修复
semver	5.7.1	7.5.2	间接依赖	可选修复
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor	2.8.11	2.11.4	间接依赖	可选修复
io.netty:netty-common	4.1.47.Final	4.1.77.Final	间接依赖	可选修复
io.netty:netty-common	4.1.45.Final	4.1.77.Final	间接依赖	可选修复
uglify-js	2.7.5	3.14.3	间接依赖	可选修复
org.mindrot:jbcrypt	0.3m	0.4	间接依赖	可选修复
io.netty:netty-transport-native-epoll	4.1.50.Final	4.1.59.Final	间接依赖	可选修复
org.springframework:spring-core	5.3.23	5.3.26	间接依赖	可选修复
com.google.guava:guava	30.1.1-jre	32.0.0-jre	直接依赖	可选修复
node-sass	7.0.3		直接依赖	可选修复
org.eclipse.jetty:jetty-servlets	9.4.27.v20200227	9.4.52	间接依赖	可选修复
org.apache.hadoop:hadoop-hdfs	3.3.0	3.3.2	直接依赖	可选修复
org.apache.ivy:ivy	2.5.1	2.5.2	间接依赖	可选修复
org.springframework:spring-expression	5.3.23	5.3.27	间接依赖	可选修复
org.eclipse.jetty:jetty-util	9.3.20.v20170531	9.3.27.v20190418	间接依赖	可选修复
org.apache.hadoop:hadoop-hdfs	3.0.3	3.3.2	直接依赖	可选修复
org.apache.calcite:calcite-core	1.18.0	1.32.0	间接依赖	可选修复
commons-io:commons-io	2.5	2.7	间接依赖	可选修复
request	2.88.2		间接依赖	可选修复
org.eclipse.jetty.http2:http2-hpack	9.4.27.v20200227	9.4.53.v20231009	间接依赖	可选修复
org.glassfish:javax.el	3.0.0		直接依赖	可选修复
http-cache-semantics	4.1.0	4.1.1	间接依赖	可选修复
org.apache.httpcomponents:httpclient	4.5.2	4.5.13	间接依赖	可选修复
org.apache.httpcomponents:httpclient	4.5.6	4.5.13	间接依赖	可选修复
hosted-git-info	2.8.8	2.8.9	间接依赖	可选修复
commons-codec:commons-codec	1.11	1.13	间接依赖	可选修复
org.eclipse.jetty:jetty-servlets	9.4.14.v20181114	9.4.52	间接依赖	可选修复
org.apache.httpcomponents:httpclient	4.5.10	4.5.13	间接依赖	可选修复
org.apache.ant:ant	1.8.2	1.9.16	间接依赖	可选修复
com.google.code.gson:gson	2.2.4	2.8.9	间接依赖	可选修复
d3-color	1.4.1	3.1.0	间接依赖	可选修复
commons-net:commons-net	3.6	3.9.0	间接依赖	可选修复
io.netty:netty-transport-native-epoll	4.1.47.Final	4.1.59.Final	间接依赖	可选修复
com.rabbitmq:amqp-client	5.15.0	5.18.0	间接依赖	可选修复
org.hibernate:hibernate-validator	4.3.0.Final	6.0.19.Final	间接依赖	可选修复
commons-codec:commons-codec	1.4	1.13	间接依赖	可选修复
commons-io:commons-io	2.4	2.7	间接依赖	可选修复
io.netty:netty-transport-native-epoll	4.1.45.Final	4.1.59.Final	间接依赖	可选修复
com.fasterxml.jackson.core:jackson-core	2.7.8	2.8.6	间接依赖	可选修复
commons-io:commons-io	2.6	2.7	间接依赖	可选修复
com.github.jnr:jnr-posix	3.0.27	3.1.8	间接依赖	可选修复
lodash	4.17.20	4.17.21	间接依赖	可选修复
net.jpountz.lz4:lz4	1.2.0	1.3.0	间接依赖	可选修复
org.apache.commons:commons-compress	1.4.1	1.21	间接依赖	可选修复
io.netty:netty-common	4.1.50.Final	4.1.77.Final	间接依赖	可选修复
org.bouncycastle:bcprov-jdk15on	1.60		间接依赖	可选修复
org.apache.kafka:kafka_2.12	2.8.1	2.8.2	直接依赖	可选修复
clean-css	4.0.13	4.1.11	间接依赖	可选修复
org.apache.ant:ant	1.9.1	1.9.16	间接依赖	可选修复
org.bitbucket.b_c:jose4j	0.6.5	0.9.3	间接依赖	可选修复
junit:junit	4.8.1	4.13.1	间接依赖	可选修复

许可证风险

许可证类型	相关组件	许可证风险
ISC	51	低
MIT	369	低
Apache-2.0	658	低
UPL-1.0	2	低
自定义许可证	67	低
BSD-3-Clause	52	低
LGPL-2.1	7	中
BSD-2-Clause	9	低
CDDL-1.0	1	低
CDDL-1.1	12	低
Unlicense	1	低
EPL-2.0	2	低
CC0-1.0	1	低
EPL-1.0	8	低
WTFPL	1	低
MPL-2.0	2	低
CPL-1.0	1	低
MIT-0	1	低
MPL-1.1	1	低
CC-BY-3.0	1	低
GPL-2.0	1	中

SBOM清单

组件名称	组件版本	是否直接依赖	仓库
make-fetch-happen	9.1.0	间接依赖	npm
has-symbols	1.0.1	间接依赖	npm
org.apache.hbase:hbase-testing-util	2.3.3	直接依赖	maven
org.eclipse.jetty:jetty-xml	9.3.28.v20191105	间接依赖	maven
com.sleepycat:je	18.3.12	间接依赖	maven
he	1.1.1	间接依赖	npm
kind-of	3.2.2	间接依赖	npm
select2	4.0.13	直接依赖	npm
pako	0.2.9	间接依赖	npm
org.eclipse.jetty:jetty-io	9.4.31.v20200723	间接依赖	maven
com.squareup.okhttp:okhttp	2.7.5	间接依赖	maven
org.eclipse.jetty:jetty-io	9.4.14.v20181114	间接依赖	maven
is-typedarray	1.0.0	间接依赖	npm
it.unimi.dsi:fastutil	6.5.7	间接依赖	maven
com.fasterxml.jackson.core:jackson-core	2.10.0	间接依赖	maven
io.grpc:grpc-api		间接依赖	maven
org.apache.curator:curator-framework	2.13.0	间接依赖	maven
org.mockito:mockito-inline	3.5.10	直接依赖	maven
com.nimbusds:nimbus-jose-jwt	7.9	间接依赖	maven
p-map	4.0.0	间接依赖	npm
async-foreach	0.1.3	间接依赖	npm
com.datastax.cassandra:cassandra-driver-core	3.2.0	直接依赖	maven
org.apache.hadoop:hadoop-mapreduce-client-core	3.0.3	间接依赖	maven
connect	3.7.0	间接依赖	npm
io.opentracing:opentracing-util	0.33.0	间接依赖	maven
org.graalvm.truffle:truffle-api	22.3.1	间接依赖	maven
stdout-stream	1.4.1	间接依赖	npm
uglify-to-browserify	1.0.2	间接依赖	npm
p-locate	4.1.0	间接依赖	npm
io.netty:netty-resolver	4.1.45.Final	间接依赖	maven
osenv	0.1.5	直接依赖	npm
com.google.re2j:re2j	1.1	间接依赖	maven
arrify	1.0.1	间接依赖	npm
isexe	2.0.0	间接依赖	npm
net.jpountz.lz4:lz4	1.3.0	间接依赖	maven
sprintf-js	1.1.2	间接依赖	npm
org.apache.hadoop:hadoop-mapreduce-client-common	3.3.0	间接依赖	maven
org.codehaus.jackson:jackson-core-asl	1.8.8	间接依赖	maven
platform	1.3.4	直接依赖	npm
http-errors	1.6.3	间接依赖	npm
com.github.tjake:crc32ex	0.1.1	间接依赖	maven
org.jboss.logging:jboss-logging	3.1.0.CR2	间接依赖	maven
org.springframework:spring-aop	5.3.23	间接依赖	maven
org.apache.hadoop:hadoop-aws	3.3.0	直接依赖	maven
array-union	1.0.2	间接依赖	npm
isstream	0.1.2	间接依赖	npm
org.checkerframework:checker-qual	2.5.2	间接依赖	maven
commons-fileupload:commons-fileupload	1.3.3	直接依赖	maven
com.github.jnr:jnr-ffi	2.0.7	间接依赖	maven
org.apache.kerby:kerb-common	1.0.1	间接依赖	maven
grunt-known-options	1.1.1	间接依赖	npm
org.apache.kerby:kerb-crypto	1.0.1	间接依赖	maven
underscore	1.13.1	间接依赖	npm
javax.ws.rs:jsr311-api	1.1.1	间接依赖	maven
org.apache.kafka:kafka-raft	2.8.1	间接依赖	maven
com.datastax.cassandra:cassandra-driver-core	3.11.2	间接依赖	maven
aws4	1.11.0	间接依赖	npm
org.apache.kerby:token-provider	1.0.1	间接依赖	maven
@types/minimist	1.2.2	直接依赖	npm
js-tokens	4.0.0	间接依赖	npm
array-slice	1.1.0	间接依赖	npm
inherits	2.0.4	间接依赖	npm
org.apache.hadoop:hadoop-mapreduce-client-jobclient	3.3.0	间接依赖	maven
object.defaults	1.1.0	间接依赖	npm
agentkeepalive	4.2.1	间接依赖	npm
org.eclipse.jetty.websocket:websocket-client	9.4.20.v20190813	间接依赖	maven
com.github.jnr:jnr-a64asm	1.0.0	间接依赖	maven
parseurl	1.3.3	间接依赖	npm
is-unc-path	1.0.0	间接依赖	npm
uglify-js	2.7.5	间接依赖	npm
org.apache.commons:commons-lang3	3.7	间接依赖	maven
org.eclipse.jetty:jetty-security	9.3.14.v20161028	间接依赖	maven
org.ow2.asm:asm-commons	5.0.3	间接依赖	maven
org.apache.curator:curator-recipes	2.12.0	间接依赖	maven
org.apache.logging.log4j:log4j-core	2.13.2	间接依赖	maven
org.scala-lang:scala-library	2.12.13	间接依赖	maven
com.amazonaws:aws-java-sdk-bundle	1.11.563	间接依赖	maven
org.eclipse.jetty:jetty-util	9.4.27.v20200227	间接依赖	maven
commons-codec:commons-codec	1.15	间接依赖	maven
org.apache.tinkerpop:gremlin-core	3.5.5	直接依赖	maven
com.netflix.astyanax:astyanax-thrift	3.10.2	间接依赖	maven
org.caffinitas.ohc:ohc-core	0.3.4	间接依赖	maven
com.fasterxml.jackson.core:jackson-databind	2.7.8	间接依赖	maven
org.elasticsearch.plugin:aggs-matrix-stats-client	7.6.0	间接依赖	maven
atoa	1.0.0	间接依赖	npm
org.apache.hive:hive-shims	3.1.2	间接依赖	maven
org.apache.commons:commons-configuration2	2.8.0	直接依赖	maven
exit	0.1.2	间接依赖	npm
d3-drag	1.2.5	间接依赖	npm
io.grpc:grpc-protobuf-lite	1.53.0	间接依赖	maven
com.fasterxml.jackson.module:jackson-module-paranamer	2.10.5	间接依赖	maven
qs	6.9.4	间接依赖	npm
org.apache.curator:curator-client	4.3.0	直接依赖	maven
org.apache.solr:solr-test-framework	8.6.3	直接依赖	maven
org.apache.atlas:storm-bridge	3.0.0-SNAPSHOT	直接依赖	maven
com.github.spotbugs:spotbugs-annotations	3.1.12	间接依赖	maven
org.apache.hadoop.thirdparty:hadoop-shaded-protobuf_3_7	1.0.0	间接依赖	maven
com.carrotsearch:hppc	0.8.1	直接依赖	maven
commons-io:commons-io	2.6	间接依赖	maven
org.locationtech.spatial4j:spatial4j	0.8	间接依赖	maven
org.apache.kerby:kerby-asn1	1.0.1	间接依赖	maven
grunt-contrib-watch	1.1.0	直接依赖	npm
org.apache.commons:commons-math3	3.1.1	间接依赖	maven
caseless	0.12.0	间接依赖	npm
org.apache.atlas:atlas-janusgraph-hbase2	3.0.0-SNAPSHOT	直接依赖	maven
org.slf4j:jul-to-slf4j	1.7.30	直接依赖	maven
mime	1.6.0	间接依赖	npm
tiny-lr	1.1.1	间接依赖	npm
node-sass	7.0.3	直接依赖	npm
org.apache.httpcomponents:httpcore	4.4.12	间接依赖	maven
safe-json-parse	1.0.1	间接依赖	npm
ee-first	1.1.1	间接依赖	npm
org.elasticsearch:elasticsearch-secure-sm	7.6.0	间接依赖	maven
io.dropwizard.metrics:metrics-graphite	3.2.2	直接依赖	maven
clean-css	4.0.13	间接依赖	npm
com.eaio.uuid:uuid	3.2	间接依赖	maven
org.eclipse.jetty:jetty-security	9.4.27.v20200227	间接依赖	maven
org.apache.commons:commons-crypto	1.0.0	间接依赖	maven
com.github.joshelser:dropwizard-metrics-hadoop-metrics2-reporter	0.1.2	间接依赖	maven
org.apache.commons:commons-compress	1.9	间接依赖	maven
org.apache.hadoop:hadoop-yarn-api	3.3.0	间接依赖	maven
org.eclipse.jetty:jetty-webapp	9.3.28.v20191105	间接依赖	maven
org.apache.atlas:atlas-client-v2	3.0.0-SNAPSHOT	直接依赖	maven
log4j:log4j	1.2.17	间接依赖	maven
org.elasticsearch:elasticsearch-geo	7.6.0	间接依赖	maven
y18n	5.0.8	直接依赖	npm
org.apache.hadoop:hadoop-yarn-server-resourcemanager	3.1.0	间接依赖	maven
continuable-cache	0.3.1	间接依赖	npm
lower-case	1.1.4	间接依赖	npm
net.hydromatic:eigenbase-properties	1.1.5	间接依赖	maven
org.eclipse.jetty:jetty-servlets	9.4.27.v20200227	间接依赖	maven
error	7.2.1	间接依赖	npm
d3-dispatch	1.0.6	间接依赖	npm
isarray	1.0.0	间接依赖	npm
org.bouncycastle:bcprov-jdk15on	1.52	间接依赖	maven
d3-time	1.1.0	间接依赖	npm
javax.xml.stream:stax-api	1.0-2	间接依赖	maven
retry	0.12.0	间接依赖	npm
d3-force	1.2.1	间接依赖	npm
org.springframework.security:spring-security-config	5.7.5	直接依赖	maven
org.ow2.asm:asm-analysis	5.0.3	间接依赖	maven
ms	2.0.0	间接依赖	npm
org.codehaus.jettison:jettison	1.3.8	间接依赖	maven
fast-json-stable-stringify	2.1.0	间接依赖	npm
array-uniq	1.0.3	间接依赖	npm
org.apache.lucene:lucene-join	8.6.3	间接依赖	maven
d3-dsv	1.2.0	间接依赖	npm
console-control-strings	1.1.0	间接依赖	npm
load-json-file	1.1.0	间接依赖	npm
com.fasterxml.jackson.module:jackson-module-jaxb-annotations	2.11.3	间接依赖	maven
json-schema-traverse	0.4.1	间接依赖	npm
org.glassfish:javax.el	3.0.0	直接依赖	maven
are-we-there-yet	3.0.1	间接依赖	npm
liftup	3.0.1	直接依赖	npm
humanize-ms	1.2.1	间接依赖	npm
org.rrd4j:rrd4j	3.5	间接依赖	maven
graphlib	2.1.8	间接依赖	npm
com.github.jnr:jffi	1.3.9	间接依赖	maven
com.github.jnr:jnr-x86asm	1.0.2	间接依赖	maven
org.elasticsearch:jna	4.5.1	间接依赖	maven
org.eclipse.jetty:jetty-continuation	9.4.27.v20200227	间接依赖	maven
graceful-fs	4.2.4	间接依赖	npm
org.ow2.asm:asm-analysis	9.2	间接依赖	maven
org.wildfly.openssl:wildfly-openssl	1.0.7.Final	间接依赖	maven
org.eclipse.jetty:jetty-servlet	9.3.14.v20161028	间接依赖	maven
io.netty:netty-resolver	4.1.47.Final	间接依赖	maven
com.sun.jersey:jersey-client	1.19	直接依赖	maven
safe-buffer	5.1.2	间接依赖	npm
right-align	0.1.3	间接依赖	npm
org.springframework.security:spring-security-web	5.7.5	直接依赖	maven
requirejs	2.3.3	直接依赖	npm
com.github.luben:zstd-jni	1.4.9-1	间接依赖	maven
org.springframework.security:spring-security-core	5.7.5	直接依赖	maven
org.springframework.ldap:spring-ldap-core	2.4.1	间接依赖	maven
hooker	0.2.3	间接依赖	npm
strip-indent	1.0.1	间接依赖	npm
com.datastax.oss:native-protocol	1.5.1	间接依赖	maven
com.netflix.astyanax:astyanax-cassandra	3.10.2	间接依赖	maven
dropzone	5.7.0	直接依赖	npm
com.fasterxml.jackson.core:jackson-annotations	2.10.3	间接依赖	maven
xml-char-classes	1.0.0	间接依赖	npm
org.elasticsearch.plugin:rank-eval-client	7.6.0	间接依赖	maven
org.apache.hive:hive-common	3.1.2	直接依赖	maven
org.kohsuke:libpam4j	1.11	直接依赖	maven
rx	4.1.0	间接依赖	npm
io.netty:netty-handler	4.1.50.Final	间接依赖	maven
info.picocli:picocli	4.3.2	间接依赖	maven
dot	1.1.3	间接依赖	npm
org.janusgraph:janusgraph-core	0.6.3	直接依赖	maven
joda-time:joda-time	2.3	间接依赖	maven
com.google.guava:guava	25.1-jre	直接依赖	maven
com.google.j2objc:j2objc-annotations	1.1	间接依赖	maven
org.apache.tinkerpop:gremlin-shaded	3.5.5	间接依赖	maven
org.apache.hadoop:hadoop-yarn-server-applicationhistoryservice	3.1.0	间接依赖	maven
minipass-fetch	1.4.1	间接依赖	npm
io.dropwizard.metrics:metrics-json	3.1.0	间接依赖	maven
com.google.android:annotations	4.1.1.4	间接依赖	maven
minipass-pipeline	1.2.4	间接依赖	npm
com.github.jnr:jnr-constants	0.9.0	间接依赖	maven
com.google.errorprone:error_prone_annotations	2.2.0	间接依赖	maven
org.keycloak:keycloak-adapter-spi	6.0.1	间接依赖	maven
org.apache.hbase.thirdparty:hbase-shaded-netty	3.3.0	间接依赖	maven
org.keycloak:keycloak-core	6.0.1	间接依赖	maven
eventemitter2	0.4.14	间接依赖	npm
pnotify	3.2.0	直接依赖	npm
com.fasterxml.jackson.core:jackson-databind	2.10.5.1	间接依赖	maven
d3-queue	3.0.7	直接依赖	npm
d3-quadtree	1.0.7	间接依赖	npm
file-sync-cmp	0.1.1	间接依赖	npm
expand-tilde	2.0.2	间接依赖	npm
com.github.ben-manes.caffeine:caffeine	2.3.1	间接依赖	maven
com.codahale.metrics:metrics-core	3.0.1	间接依赖	maven
org.slf4j:slf4j-api	1.7.30	直接依赖	maven
org.apache.lucene:lucene-suggest	8.4.0	间接依赖	maven
on-finished	2.3.0	间接依赖	npm
balanced-match	1.0.0	间接依赖	npm
d3-voronoi	1.1.4	间接依赖	npm
org.eclipse.jetty:jetty-alpn-java-server	9.4.27.v20200227	间接依赖	maven
err-code	2.0.3	间接依赖	npm
org.codehaus.janino:janino	3.0.9	间接依赖	maven
com.github.jnr:jnr-ffi	2.2.11	间接依赖	maven
org.apache.hive.shims:hive-shims-common	3.1.2	间接依赖	maven
com.sun.jersey.contribs:jersey-spring	1.19.4	直接依赖	maven
range-parser	1.2.1	间接依赖	npm
com.jcraft:jsch	0.1.54	间接依赖	maven
tweetnacl	0.14.5	间接依赖	npm
org.ow2.asm:asm-util	5.0.3	间接依赖	maven
org.apache.hbase:hbase-hadoop2-compat	2.3.3	直接依赖	maven
org.slf4j:log4j-over-slf4j	1.7.7	间接依赖	maven
wide-align	1.1.5	间接依赖	npm
org.apache.ant:ant	1.8.2	间接依赖	maven
net.bytebuddy:byte-buddy	1.10.13	间接依赖	maven
process-nextick-args	2.0.1	间接依赖	npm
com.sun.jersey.contribs:jersey-guice	1.19	间接依赖	maven
io.netty:netty-codec	4.1.50.Final	间接依赖	maven
lodash	4.17.20	间接依赖	npm
com.jcraft:jsch	0.1.55	间接依赖	maven
org.apache.logging.log4j:log4j-api	2.17.2	间接依赖	maven
com.ning:compress-lzf	0.8.4	间接依赖	maven
finalhandler	1.1.2	间接依赖	npm
tunnel-agent	0.6.0	间接依赖	npm
com.microsoft.sqlserver:mssql-jdbc	6.2.1.jre7	间接依赖	maven
path-parse	1.0.6	间接依赖	npm
io.dropwizard.metrics:metrics-graphite	4.1.33	间接依赖	maven
fined	1.2.0	间接依赖	npm
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor	2.8.11	间接依赖	maven
org.apache.hadoop:hadoop-hdfs	2.2.0	间接依赖	maven
read-pkg-up	1.0.1	间接依赖	npm
com.google.code.gson:gson	2.8.9	间接依赖	maven
com.github.jnr:jnr-posix	3.1.15	间接依赖	maven
io.opentracing:opentracing-mock	0.33.0	间接依赖	maven
minipass-collect	1.0.2	间接依赖	npm
org.apache.httpcomponents:httpasyncclient	4.1.4	间接依赖	maven
upper-case	1.1.3	间接依赖	npm
org.apache.hadoop:hadoop-yarn-common	3.3.0	间接依赖	maven
buffer-from	1.1.1	间接依赖	npm
org.springframework:spring-webmvc	5.3.27	直接依赖	maven
is-plain-object	2.0.4	间接依赖	npm
resolve	1.17.0	间接依赖	npm
grunt-contrib-connect	1.0.2	直接依赖	npm
org.eclipse.jetty:jetty-io	9.4.20.v20190813	间接依赖	maven
io.grpc:grpc-netty-shaded	1.53.0	间接依赖	maven
com.google.api.grpc:proto-google-common-protos	2.9.0	间接依赖	maven
serve-index	1.9.1	间接依赖	npm
@babel/code-frame	7.18.6	直接依赖	npm
graceful-readlink	1.0.1	直接依赖	npm
org.eclipse.jetty:jetty-rewrite	9.4.27.v20200227	间接依赖	maven
org.elasticsearch:elasticsearch-cli	7.6.0	间接依赖	maven
com.squareup:javapoet	1.8.0	间接依赖	maven
object.pick	1.3.0	间接依赖	npm
com.fasterxml.jackson.module:jackson-module-jaxb-annotations	2.10.3	间接依赖	maven
path-root	0.1.1	间接依赖	npm
org.apache.httpcomponents:httpmime	4.5.10	间接依赖	maven
org.apache.curator:curator-recipes	2.13.0	间接依赖	maven
net.minidev:json-smart	2.3	间接依赖	maven
org.apache.commons:commons-lang3	3.12.0	间接依赖	maven
source-map	0.5.7	间接依赖	npm
com.fasterxml.jackson.core:jackson-core	2.10.1	间接依赖	maven
resolve-from	2.0.0	间接依赖	npm
org.apache.hadoop:hadoop-common	3.3.0	直接依赖	maven
org.apache.hbase:hbase-protocol-shaded	2.3.3	间接依赖	maven
org.apache.calcite:calcite-linq4j	1.18.0	间接依赖	maven
com.google.guava:failureaccess	1.0.1	间接依赖	maven
json-stringify-safe	5.0.1	间接依赖	npm
jquery-sparkline	2.4.0	直接依赖	npm
org.eclipse.jetty:jetty-servlet	9.4.14.v20181114	间接依赖	maven
org.apache.hadoop:hadoop-yarn-api	3.0.3	间接依赖	maven
org.hdrhistogram:HdrHistogram	2.1.12	间接依赖	maven
object-keys	1.1.1	间接依赖	npm
com.addthis.metrics:reporter-config	2.1.0	间接依赖	maven
dashdash	1.14.1	间接依赖	npm
com.fasterxml.jackson.datatype:jackson-datatype-jdk8	2.10.5	间接依赖	maven
camel-case	3.0.0	间接依赖	npm
org.apache.lucene:lucene-suggest	8.6.3	间接依赖	maven
org.graalvm.nativeimage:native-image-base	22.3.1	间接依赖	maven
wrappy	1.0.2	间接依赖	npm
asm:asm	3.3.1	间接依赖	maven
spdx-license-ids	3.0.5	间接依赖	npm
org.eclipse.jetty:jetty-rewrite	9.3.20.v20170531	间接依赖	maven
array-each	1.0.1	间接依赖	npm
async	1.5.2	间接依赖	npm
http-signature	1.2.0	间接依赖	npm
ch.qos.logback:logback-classic	1.1.3	间接依赖	maven
com.thoughtworks.paranamer:paranamer	2.3	间接依赖	maven
org.aspectj:aspectjrt	1.8.9	直接依赖	maven
mime-db	1.44.0	间接依赖	npm
json-schema	0.4.0	间接依赖	npm
net.sf.supercsv:super-csv	2.1.0	间接依赖	maven
org.apache.thrift:libthrift	0.9.3	间接依赖	maven
commons-digester:commons-digester	1.8.1	间接依赖	maven
http2	3.3.7	间接依赖	npm
io.micrometer:micrometer-commons	1.10.4	间接依赖	maven
org.apache.commons:commons-math3	3.6.1	间接依赖	maven
uri-path	1.0.0	间接依赖	npm
com.zaxxer:SparseBitSet	1.2	间接依赖	maven
type-fest	0.18.1	直接依赖	npm
org.apache.lucene:lucene-backward-codecs	8.4.0	间接依赖	maven
camelcase	2.1.1	间接依赖	npm
org.eclipse.jetty:jetty-http	9.4.20.v20190813	间接依赖	maven
har-validator	5.1.5	间接依赖	npm
websocket-driver	0.7.4	间接依赖	npm
org.codehaus.groovy:groovy-groovysh	2.5.15	间接依赖	maven
org.codehaus.jettison:jettison	1.1	间接依赖	maven
org.eclipse.jetty:jetty-client	9.4.20.v20190813	间接依赖	maven
org.eclipse.jetty.http2:http2-common	9.4.27.v20200227	间接依赖	maven
javax.servlet.jsp:jsp-api	2.1	直接依赖	maven
org.apache.zookeeper:zookeeper	3.5.7	直接依赖	maven
org.apache.httpcomponents:httpclient	4.5.2	间接依赖	maven
org.graalvm.compiler:compiler	22.3.1	间接依赖	maven
d3-shape	1.3.7	间接依赖	npm
org.eclipse.jetty:jetty-security	9.3.20.v20170531	间接依赖	maven
org.apache.lucene:lucene-queries	8.6.3	间接依赖	maven
jakarta.xml.bind:jakarta.xml.bind-api	2.3.2	间接依赖	maven
com.google.code.findbugs:jsr305	3.0.0	间接依赖	maven
fill-range	7.0.1	间接依赖	npm
org.apache.yetus:audience-annotations	0.5.0	间接依赖	maven
set-blocking	2.0.0	间接依赖	npm
@babel/highlight	7.18.6	间接依赖	npm
net.sourceforge.argparse4j:argparse4j	0.7.0	间接依赖	maven
io.netty:netty-all	4.0.44.Final	间接依赖	maven
@tootallnate/once	1.1.2	间接依赖	npm
org.eclipse.jetty:jetty-http	9.4.27.v20200227	间接依赖	maven
org.checkerframework:checker-qual	2.0.0	间接依赖	maven
org.eclipse.jetty:jetty-util	9.4.14.v20181114	间接依赖	maven
io.netty:netty	3.10.5.Final	间接依赖	maven
org.apache.hbase:hbase-protocol	2.3.3	直接依赖	maven
grunt-contrib-uglify	2.1.0	直接依赖	npm
org.apache.lucene:lucene-expressions	8.6.3	间接依赖	maven
net.bytebuddy:byte-buddy-agent	1.10.13	间接依赖	maven
org.janusgraph:janusgraph-grpc	0.6.3	间接依赖	maven
org.apache.hadoop:hadoop-hdfs-client	3.2.0	间接依赖	maven
org.glassfish:javax.el		间接依赖	maven
commons-lang:commons-lang	2.6	直接依赖	maven
com.google.inject.extensions:guice-servlet	4.0	间接依赖	maven
org.eclipse.jetty:jetty-xml	9.4.31.v20200723	间接依赖	maven
is-finite	1.1.0	间接依赖	npm
is-fullwidth-code-point	3.0.0	间接依赖	npm
backgrid-paginator	0.3.9	直接依赖	npm
org.elasticsearch.plugin:lang-mustache-client	7.6.0	间接依赖	maven
org.keycloak:keycloak-common	6.0.1	间接依赖	maven
org.eclipse.jetty:jetty-alpn-java-client	9.4.27.v20200227	间接依赖	maven
org.codehaus.groovy:groovy-cli-picocli	2.5.15	间接依赖	maven
net.oneandone.reflections8:reflections8	0.11.7	间接依赖	maven
cglib:cglib	2.2.2	直接依赖	maven
commander	2.20.3	间接依赖	npm
io.netty:netty-transport	4.1.50.Final	间接依赖	maven
websocket-extensions	0.1.4	间接依赖	npm
org.jamon:jamon-runtime	2.4.1	间接依赖	maven
commons-net:commons-net	3.6	间接依赖	maven
jsprim	1.4.2	间接依赖	npm
com.fasterxml.jackson.core:jackson-databind	2.10.3	间接依赖	maven
org.springframework:spring-core	5.3.27	直接依赖	maven
org.apache.poi:poi-ooxml	5.2.2	直接依赖	maven
inflight	1.0.6	间接依赖	npm
pify	2.3.0	间接依赖	npm
org.acplt:oncrpc	1.0.7	间接依赖	maven
org.janusgraph:janusgraph-berkeleyje	0.6.3	直接依赖	maven
com.fasterxml.jackson.core:jackson-annotations	2.11.3	直接依赖	maven
javax.annotation:javax.annotation-api	1.3.2	直接依赖	maven
decamelize	1.2.0	间接依赖	npm
pretty-checkbox	3.0.3	直接依赖	npm
grunt-template	1.0.0	直接依赖	npm
org.apache.geronimo.specs:geronimo-jcache_1.0_spec	1.0-alpha-1	间接依赖	maven
io.vavr:vavr	0.10.3	间接依赖	maven
destroy	1.0.4	间接依赖	npm
com.google.re2j:re2j	1.2	间接依赖	maven
org.apache.hadoop:hadoop-yarn-client	3.3.0	间接依赖	maven
org.apache.zookeeper:zookeeper	3.5.9	间接依赖	maven
org.apache.kafka:kafka-metadata	2.8.1	间接依赖	maven
org.eclipse.jetty:jetty-security	9.4.31.v20200723	间接依赖	maven
org.apache.httpcomponents:httpcore	4.2.4	间接依赖	maven
net.minidev:accessors-smart	1.2	间接依赖	maven
d3-fetch	1.2.0	间接依赖	npm
org.apache.ant:ant	1.9.1	间接依赖	maven
org.apache.kerby:kerb-identity	1.0.1	间接依赖	maven
org.apache.ant:ant-launcher	1.9.1	间接依赖	maven
org.apache.hbase:hbase-common	2.3.3	直接依赖	maven
tar	6.1.11	间接依赖	npm
org.codehaus.jackson:jackson-mapper-asl	1.8.8	间接依赖	maven
org.apache.hadoop:hadoop-client	3.0.3	直接依赖	maven
minipass-sized	1.0.3	间接依赖	npm
d3-transition	1.3.2	间接依赖	npm
multimatch	2.1.0	间接依赖	npm
org.janusgraph:janusgraph-solr	0.6.3	直接依赖	maven
promise-retry	2.0.1	间接依赖	npm
org.apache.hbase:hbase-client	2.3.3	直接依赖	maven
os-tmpdir	1.0.2	间接依赖	npm
org.apache.httpcomponents:httpclient	4.5.13	直接依赖	maven
getobject	1.0.2	间接依赖	npm
org.apache.lucene:lucene-highlighter	8.6.3	间接依赖	maven
commons-pool:commons-pool	1.6	间接依赖	maven
org.apache.zookeeper:zookeeper-jute	3.5.6	间接依赖	maven
send	0.17.1	间接依赖	npm
has-ansi	2.0.0	直接依赖	npm
org.eclipse.jetty:jetty-server	9.4.20.v20190813	间接依赖	maven
dateformat	3.0.3	间接依赖	npm
com.netflix.astyanax:astyanax-core	3.10.2	间接依赖	maven
ncname	1.0.0	间接依赖	npm
io.dropwizard.metrics:metrics-core	3.2.6	间接依赖	maven
micromatch	4.0.5	直接依赖	npm
com.sun.jersey:jersey-servlet	1.19	直接依赖	maven
opn	4.0.2	间接依赖	npm
negotiator	0.6.2	间接依赖	npm
org.apache.kerby:kerb-util	1.0.1	间接依赖	maven
org.springframework:spring-test	5.3.27	直接依赖	maven
org.codehaus.groovy:groovy-json	2.5.15	间接依赖	maven
p-limit	2.3.0	间接依赖	npm
com.couchbase.client:java-client	3.4.4	直接依赖	maven
org.apache.logging.log4j:log4j-web	2.13.2	间接依赖	maven
org.apache.orc:orc-core	1.5.6	间接依赖	maven
com.github.jbellis:jamm	0.3.0	间接依赖	maven
https-proxy-agent	5.0.1	间接依赖	npm
abbrev	1.1.1	间接依赖	npm
fast-deep-equal	3.1.3	间接依赖	npm
backbone.paginator	2.0.5	间接依赖	npm
grunt-sass	3.1.0	直接依赖	npm
io.dropwizard.metrics:metrics-core	3.1.0	间接依赖	maven
nan	2.17.0	间接依赖	npm
org.antlr:ST4	4.0.8	间接依赖	maven
socks-proxy-agent	6.2.1	间接依赖	npm
@npmcli/fs	1.1.1	间接依赖	npm
com.fasterxml.jackson.dataformat:jackson-dataformat-csv	2.10.5	间接依赖	maven
org.ow2.asm:asm-commons	7.2	间接依赖	maven
org.apache.hive.shims:hive-shims-scheduler	3.1.2	间接依赖	maven
d3-random	1.1.2	间接依赖	npm
org.eclipse.jetty:jetty-io	9.3.28.v20191105	间接依赖	maven
com.github.ben-manes.caffeine:caffeine	2.8.1	间接依赖	maven
org.latencyutils:LatencyUtils	2.0.3	间接依赖	maven
org.apache.hadoop:hadoop-yarn-common	3.0.3	间接依赖	maven
org.apache.directory.api:api-util	1.0.0-M20	间接依赖	maven
org.apache.tinkerpop:tinkergraph-gremlin	3.5.5	直接依赖	maven
io.dropwizard.metrics:metrics-graphite	4.1.5	间接依赖	maven
basic-auth	2.0.1	间接依赖	npm
com.google.protobuf:protobuf-java-util	3.22.0	间接依赖	maven
org.eclipse.jetty:jetty-client	9.3.20.v20170531	间接依赖	maven
com.fasterxml.jackson.core:jackson-databind	2.11.3	直接依赖	maven
commons-codec:commons-codec	1.4	间接依赖	maven
com.sun.jersey:jersey-json	1.19	间接依赖	maven
org.apache.curator:curator-client	2.12.0	间接依赖	maven
sass-graph	4.0.1	间接依赖	npm
pkg-up	1.0.0	间接依赖	npm
require-directory	2.1.1	直接依赖	npm
io.netty:netty-common	4.1.45.Final	间接依赖	maven
d3-format	1.4.5	间接依赖	npm
io.netty:netty-transport	4.1.47.Final	间接依赖	maven
com.google.guava:guava	11.0.2	间接依赖	maven
javax.xml.bind:jaxb-api	2.2.2	间接依赖	maven
org.springframework:spring-expression	5.3.27	间接依赖	maven
cacache	15.3.0	间接依赖	npm
request	2.88.2	间接依赖	npm
org.janusgraph:janusgraph-server	0.6.3	直接依赖	maven
net.java.dev.jna:jna	5.2.0	直接依赖	maven
org.apache.commons:commons-compress	1.19	间接依赖	maven
com.clearspring.analytics:stream	2.5.2	间接依赖	maven
org.apache.httpcomponents:httpcore	4.4.10	间接依赖	maven
html-minifier	3.3.3	间接依赖	npm
commons-daemon:commons-daemon	1.0.13	间接依赖	maven
org.tukaani:xz	1.0	间接依赖	maven
jsbn	0.1.1	间接依赖	npm
io.netty:netty-resolver	4.1.50.Final	间接依赖	maven
repeating	2.0.1	间接依赖	npm
sshpk	1.17.0	间接依赖	npm
com.fasterxml.jackson.core:jackson-core	2.7.8	间接依赖	maven
yargs-parser	20.2.9	直接依赖	npm
os-homedir	1.0.2	间接依赖	npm
almond	0.3.3	间接依赖	npm
com.sun.jersey:jersey-server	1.19	直接依赖	maven
org.springframework:spring-core	5.3.23	间接依赖	maven
bootstrap	3.4.1	间接依赖	npm
fs.realpath	1.0.0	间接依赖	npm
org.keycloak:keycloak-spring-security-adapter	6.0.1	直接依赖	maven
org.apache.hadoop:hadoop-annotations	3.3.0	直接依赖	maven
oauth-sign	0.9.0	间接依赖	npm
org.apache.thrift:libthrift	0.9.2	间接依赖	maven
pinkie-promise	2.0.1	间接依赖	npm
org.eclipse.jetty:jetty-xml	9.4.27.v20200227	间接依赖	maven
util-deprecate	1.0.2	间接依赖	npm
org.apache.zookeeper:zookeeper-jute	3.5.7	间接依赖	maven
com.googlecode.json-simple:json-simple	1.1.1	直接依赖	maven
com.github.spullara.mustache.java:compiler	0.9.6	间接依赖	maven
com.typesafe:config	1.4.1	间接依赖	maven
esprima	4.0.1	间接依赖	npm
org.elasticsearch:elasticsearch-x-content	7.6.0	间接依赖	maven
com.fasterxml.jackson.core:jackson-annotations	2.7.8	间接依赖	maven
is-lambda	1.0.1	间接依赖	npm
org.apache.curator:curator-framework	2.12.0	间接依赖	maven
jstree	3.3.5	直接依赖	npm
param-case	2.1.1	间接依赖	npm
org.objenesis:objenesis	3.1	间接依赖	maven
com.jayway.jsonpath:json-path	2.4.0	间接依赖	maven
org.apache.lucene:lucene-grouping	8.4.0	间接依赖	maven
org.apache.commons:commons-lang3	3.9	间接依赖	maven
com.github.jnr:jnr-constants	0.10.3	间接依赖	maven
org.apache.tinkerpop:gremlin-language	3.5.5	间接依赖	maven
org.eclipse.jetty.http2:http2-server	9.4.27.v20200227	间接依赖	maven
javax.activation:javax.activation-api	1.2.0	间接依赖	maven
org.apache.hbase:hbase-hadoop-compat	2.3.3	直接依赖	maven
rimraf	2.6.3	间接依赖	npm
org.codehaus.jackson:jackson-core-asl	1.9.13	间接依赖	maven
org.aspectj:aspectjweaver	1.8.9	直接依赖	maven
io.netty:netty-common	4.1.47.Final	间接依赖	maven
org.apache.httpcomponents:httpcore	4.4.4	间接依赖	maven
de.ruedigermoeller:fst	2.50	间接依赖	maven
is-windows	1.0.2	间接依赖	npm
debug	2.6.9	间接依赖	npm
org.apache.commons:commons-math3	3.2	间接依赖	maven
d3-color	1.4.1	间接依赖	npm
com.google.errorprone:error_prone_annotations	2.1.3	间接依赖	maven
io.sgr:s2-geometry-library-java	1.0.0	间接依赖	maven
com.couchbase.client:dcp-client	0.44.0	直接依赖	maven
org.eclipse.jetty:jetty-server	9.4.27.v20200227	间接依赖	maven
org.janusgraph:janusgraph-lucene	0.6.3	直接依赖	maven
org.apache.hadoop:hadoop-hdfs	3.0.3	直接依赖	maven
joda-time:joda-time	2.10.6	直接依赖	maven
lru-cache	6.0.0	间接依赖	npm
org.apache.lucene:lucene-grouping	8.6.3	间接依赖	maven
d3-hierarchy	1.1.9	间接依赖	npm
@npmcli/move-file	1.1.2	间接依赖	npm
detect-file	1.0.0	直接依赖	npm
com.netflix.astyanax:astyanax-recipes	3.10.2	间接依赖	maven
is-core-module	2.9.0	直接依赖	npm
com.googlecode.concurrentlinkedhashmap:concurrentlinkedhashmap-lru	1.4	间接依赖	maven
d3-geo	1.12.1	间接依赖	npm
org.apache.commons:commons-exec	1.3	间接依赖	maven
is-glob	4.0.3	直接依赖	npm
org.apache.calcite.avatica:avatica-core	1.13.0	间接依赖	maven
jstree-bootstrap-theme	1.0.1	直接依赖	npm
org.scala-lang:scala-reflect	2.12.13	间接依赖	maven
org.eclipse.jetty:jetty-io	9.3.20.v20170531	间接依赖	maven
com.github.jnr:jnr-posix	3.0.27	间接依赖	maven
@babel/helper-validator-identifier	7.19.1	间接依赖	npm
org.apache.hadoop:hadoop-mapreduce-client-common	3.0.3	间接依赖	maven
com.fasterxml.woodstox:woodstox-core	5.0.3	间接依赖	maven
org.janusgraph:janusgraph-hbase	0.6.3	直接依赖	maven
escalade	3.1.1	直接依赖	npm
org.apache.cassandra:cassandra-thrift	2.1.8	间接依赖	maven
com.couchbase.client:core-io	2.4.4	间接依赖	maven
org.apache.hadoop:hadoop-yarn-server-web-proxy	3.0.3	间接依赖	maven
io.netty:netty-transport-native-epoll	4.1.47.Final	间接依赖	maven
d3-interpolate	1.4.0	间接依赖	npm
grunt-contrib-copy	1.0.0	直接依赖	npm
org.apache.hbase.thirdparty:hbase-shaded-miscellaneous	3.3.0	间接依赖	maven
is-relative	1.0.0	间接依赖	npm
org.codehaus.mojo:animal-sniffer-annotations	1.17	间接依赖	maven
org.ow2.asm:asm-util	9.2	间接依赖	maven
interpret	1.1.0	直接依赖	npm
org.eclipse.jetty:jetty-webapp	9.3.20.v20170531	间接依赖	maven
io.opentracing:opentracing-noop	0.33.0	间接依赖	maven
org.apache.lucene:lucene-analyzers-common	8.6.3	直接依赖	maven
org.eclipse.jetty:jetty-xml	9.4.20.v20190813	间接依赖	maven
aopalliance:aopalliance	1.0	间接依赖	maven
org.apache.atlas:atlas-common	3.0.0-SNAPSHOT	直接依赖	maven
org.eclipse.jetty:jetty-util	9.3.20.v20170531	间接依赖	maven
org.janusgraph:janusgraph-cql	0.6.3	直接依赖	maven
ip	2.0.0	间接依赖	npm
com.fasterxml.jackson.core:jackson-annotations	2.7.0	间接依赖	maven
org.ow2.asm:asm	7.2	间接依赖	maven
org.apache.logging.log4j:log4j-api	2.11.1	间接依赖	maven
io.dropwizard.metrics:metrics-ganglia	3.2.2	直接依赖	maven
tough-cookie	2.5.0	间接依赖	npm
com.google.code.findbugs:jsr305	3.0.2	间接依赖	maven
com.fasterxml.jackson.jaxrs:jackson-jaxrs-base	2.7.8	间接依赖	maven
org.eclipse.jetty:jetty-server	9.4.31.v20200723	直接依赖	maven
brace-expansion	1.1.11	间接依赖	npm
object.assign	4.1.0	间接依赖	npm
org.yaml:snakeyaml	1.11	间接依赖	maven
org.codehaus.jettison:jettison	1.5.4	直接依赖	maven
org.graalvm.nativeimage:objectfile	22.3.1	间接依赖	maven
org.apache.hadoop:hadoop-mapreduce-client-shuffle	3.0.3	间接依赖	maven
com.google.guava:guava	27.0.1-jre	间接依赖	maven
currently-unhandled	0.4.1	间接依赖	npm
utils-merge	1.0.1	间接依赖	npm
grunt-legacy-log	3.0.0	间接依赖	npm
spdx-correct	3.1.1	间接依赖	npm
assert-plus	1.0.0	间接依赖	npm
minimist-options	4.1.0	直接依赖	npm
isobject	3.0.1	间接依赖	npm
com.opencsv:opencsv	5.0	直接依赖	maven
ansi-styles	4.3.0	间接依赖	npm
p-try	2.2.0	间接依赖	npm
org.ow2.asm:asm	5.0.3	间接依赖	maven
org.apache.curator:curator-recipes	4.2.0	间接依赖	maven
d3-axis	1.0.12	间接依赖	npm
io.netty:netty-common	4.1.50.Final	间接依赖	maven
org.reactivestreams:reactive-streams	1.0.4	间接依赖	maven
color-convert	2.0.1	间接依赖	npm
find-up	1.1.2	间接依赖	npm
ansi-regex	2.1.1	间接依赖	npm
org.springframework.security:spring-security-ldap	5.7.5	直接依赖	maven
org.checkerframework:checker-qual	3.1.0	间接依赖	maven
d3-brush	1.1.6	间接依赖	npm
javax.xml.bind:jaxb-api	2.2.11	间接依赖	maven
globule	1.3.2	间接依赖	npm
org.apache.lucene:lucene-analyzers-phonetic	8.6.3	间接依赖	maven
d3-time-format	2.3.0	间接依赖	npm
org.apache.atlas:hive-bridge	3.0.0-SNAPSHOT	直接依赖	maven
com.fasterxml.jackson.jaxrs:jackson-jaxrs-base	2.10.3	间接依赖	maven
is-extglob	2.1.1	间接依赖	npm
commons-cli:commons-cli	1.4	直接依赖	maven
on-headers	1.0.2	间接依赖	npm
glob	7.2.3	间接依赖	npm
org.apache.poi:poi	5.2.2	直接依赖	maven
org.apache.logging.log4j:log4j-web	2.10.0	间接依赖	maven
net.jpountz.lz4:lz4	1.2.0	间接依赖	maven
homedir-polyfill	1.0.3	间接依赖	npm
org.elasticsearch.client:elasticsearch-rest-client	7.6.0	间接依赖	maven
d3-tip	0.7.1	直接依赖	npm
combined-stream	1.0.8	间接依赖	npm
org.janusgraph:janusgraph-es	0.6.3	直接依赖	maven
to-regex-range	5.0.1	间接依赖	npm
com.tdunning:json	1.8	间接依赖	maven
no-case	2.3.2	间接依赖	npm
org.apache.kerby:kerb-simplekdc	1.0.1	间接依赖	maven
nopt	3.0.6	间接依赖	npm
shebang-regex	3.0.0	间接依赖	npm
com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider	2.11.3	直接依赖	maven
junit:junit	4.8.1	间接依赖	maven
stax:stax-api	1.0.1	间接依赖	maven
lines-and-columns	1.2.4	直接依赖	npm
org.apache.atlas:impala-hook-api	3.0.0-SNAPSHOT	直接依赖	maven
har-schema	2.0.0	间接依赖	npm
argparse	1.0.10	间接依赖	npm
org.graalvm.nativeimage:pointsto	22.3.1	间接依赖	maven
http-parser-js	0.5.2	间接依赖	npm
ch.qos.logback:logback-core	1.1.2	间接依赖	maven
xmlhttprequest	1.8.0	间接依赖	npm
org.apache.hive.shims:hive-shims-0.23	3.1.2	间接依赖	maven
org.eclipse.jdt.core.compiler:ecj	4.4.2	间接依赖	maven
org.apache.avro:avro	1.7.7	间接依赖	maven
org.slf4j:log4j-over-slf4j	1.7.36	间接依赖	maven
com.nimbusds:nimbus-jose-jwt	4.41.1	间接依赖	maven
commons-cli:commons-cli	1.2	间接依赖	maven
fresh	0.5.2	间接依赖	npm
emoji-regex	8.0.0	间接依赖	npm
extend	3.0.2	间接依赖	npm
underscore.string	3.3.6	间接依赖	npm
com.google.protobuf:protobuf-java	3.22.0	间接依赖	maven
is-buffer	1.1.6	间接依赖	npm
env-paths	2.2.1	间接依赖	npm
org.xerial.snappy:snappy-java	1.0.5	间接依赖	maven
org.codehaus.jackson:jackson-mapper-asl	1.9.13	间接依赖	maven
org.apache.cassandra:cassandra-thrift	2.2.13	间接依赖	maven
org.eclipse.jetty:jetty-jmx	9.4.27.v20200227	间接依赖	maven
wordwrap	0.0.2	间接依赖	npm
batch	0.6.1	间接依赖	npm
path-root-regex	0.1.2	间接依赖	npm
rw	1.3.3	间接依赖	npm
grunt-cli	1.2.0	间接依赖	npm
d3-zoom	1.8.3	间接依赖	npm
org.codehaus.janino:commons-compiler	3.0.9	间接依赖	maven
com.nimbusds:nimbus-jose-jwt	9.8.1	直接依赖	maven
org.apache.lucene:lucene-queryparser	8.6.3	直接依赖	maven
grunt	1.5.3	直接依赖	npm
org.apache.solr:solr-solrj	8.6.3	直接依赖	maven
io.airlift:aircompressor	0.10	间接依赖	maven
org.eclipse.jetty:jetty-continuation	9.4.14.v20181114	间接依赖	maven
com.addthis.metrics:reporter-config-base	3.0.0	间接依赖	maven
psl	1.9.0	间接依赖	npm
org.javatuples:javatuples	1.2	间接依赖	maven
org.mockito:mockito-core	3.5.10	直接依赖	maven
chalk	4.1.2	间接依赖	npm
io.netty:netty-buffer	4.1.45.Final	间接依赖	maven
org.codehaus.mojo:animal-sniffer-annotations	1.14	间接依赖	maven
org.eclipse.jetty:jetty-security	9.3.28.v20191105	间接依赖	maven
io.dropwizard.metrics:metrics-core	3.2.2	直接依赖	maven
org.antlr:antlr4-runtime	4.5.1-1	间接依赖	maven
org.apache.commons:commons-text	1.10.0	直接依赖	maven
connect-livereload	0.5.4	间接依赖	npm
grunt-contrib-htmlmin	2.2.0	直接依赖	npm
maxmin	1.1.0	间接依赖	npm
org.apache.zookeeper:zookeeper	3.4.6	间接依赖	maven
com.squareup.okio:okio	1.6.0	间接依赖	maven
net.minidev:json-smart	1.3.1	间接依赖	maven
dagre	0.8.5	间接依赖	npm
com.typesafe.scala-logging:scala-logging_2.12	3.9.2	间接依赖	maven
io.vavr:vavr-match	0.10.3	间接依赖	maven
io.netty:netty-handler	4.1.47.Final	间接依赖	maven
commons-logging:commons-logging	1.2	间接依赖	maven
minimist	1.2.6	间接依赖	npm
com.jcabi:jcabi-manifests	1.2.1	间接依赖	maven
net.sf.jopt-simple:jopt-simple	5.0.4	间接依赖	maven
is-absolute	1.0.0	间接依赖	npm
org.codehaus.woodstox:woodstox-core-asl	4.4.1	间接依赖	maven
org.restlet.jee:org.restlet	2.4.3	间接依赖	maven
org.springframework:spring-jcl	5.3.27	间接依赖	maven
gauge	4.0.4	间接依赖	npm
org.apache.lucene:lucene-test-framework	8.6.3	间接依赖	maven
array-find-index	1.0.2	间接依赖	npm
com.sun.jersey:jersey-core	1.19	直接依赖	maven
org.codehaus.groovy:groovy-jsr223	2.5.15	间接依赖	maven
org.graalvm.sdk:graal-sdk	22.3.1	间接依赖	maven
lazy-cache	1.0.4	间接依赖	npm
org.glassfish:javax.json	1.1.4	间接依赖	maven
org.eclipse.jetty:jetty-servlet	9.3.20.v20170531	间接依赖	maven
babel-runtime	6.26.0	间接依赖	npm
org.fusesource:sigar	1.6.4	间接依赖	maven
concat-stream	1.6.2	间接依赖	npm
org.apache.cassandra:cassandra-all	2.1.8	直接依赖	maven
org.slf4j:jcl-over-slf4j	1.7.24	间接依赖	maven
function-bind	1.1.1	间接依赖	npm
org.apache.atlas:atlas-dashboardv2	3.0.0-SNAPSHOT	直接依赖	maven
org.apache.hadoop:hadoop-yarn-server-tests	3.0.3	间接依赖	maven
verror	1.10.0	间接依赖	npm
org.fusesource.leveldbjni:leveldbjni-all	1.8	间接依赖	maven
org.eclipse.jetty:jetty-util-ajax	9.3.19.v20170502	间接依赖	maven
org.bouncycastle:bcprov-jdk15on	1.60	间接依赖	maven
io.netty:netty	3.10.6.Final	间接依赖	maven
com.datastax.oss:java-driver-core	4.15.0	间接依赖	maven
io.netty:netty-buffer	4.1.50.Final	间接依赖	maven
object-assign	4.1.1	间接依赖	npm
javax.validation:validation-api	1.1.0.Final	间接依赖	maven
org.apache.poi:poi-ooxml-lite	5.2.2	间接依赖	maven
org.eclipse.jetty:jetty-security	9.4.20.v20190813	间接依赖	maven
d3	5.14.2	间接依赖	npm
org.apache.commons:commons-compress	1.21	间接依赖	maven
http-cache-semantics	4.1.0	间接依赖	npm
iconv-lite	0.4.24	间接依赖	npm
regenerator-runtime	0.11.1	间接依赖	npm
ch.qos.logback:logback-core	1.1.3	间接依赖	maven
javolution:javolution	5.5.1	间接依赖	maven
com.google.guava:guava	29.0-jre	间接依赖	maven
org.elasticsearch.plugin:parent-join-client	7.6.0	间接依赖	maven
org.springframework:spring-beans	5.3.27	直接依赖	maven
org.apache.httpcomponents:httpclient	4.5.6	间接依赖	maven
d3-selection	1.4.2	间接依赖	npm
org.apache.hadoop:hadoop-mapreduce-client-core	3.3.0	间接依赖	maven
org.antlr:antlr-runtime	3.5.2	间接依赖	maven
npmlog	5.0.1	间接依赖	npm
supports-preserve-symlinks-flag	1.0.0	直接依赖	npm
org.slf4j:jcl-over-slf4j	1.7.25	间接依赖	maven
toidentifier	1.0.0	直接依赖	npm
commons-logging:commons-logging	1.1.1	间接依赖	maven
org.apache.hadoop:hadoop-yarn-client	3.0.3	间接依赖	maven
org.ow2.asm:asm-tree	9.2	间接依赖	maven
@gar/promisify	1.1.3	间接依赖	npm
extsprintf	1.3.0	间接依赖	npm
org.apache.hadoop:hadoop-auth	2.8.5	间接依赖	maven
org.eclipse.jetty:jetty-servlets	9.4.14.v20181114	间接依赖	maven
org.apache.kerby:kerby-pkix	1.0.1	间接依赖	maven
com.google.j2objc:j2objc-annotations	1.3	间接依赖	maven
performance-now	2.1.0	间接依赖	npm
net.minidev:json-smart		间接依赖	maven
org.apache.hadoop:hadoop-yarn-server-nodemanager	3.0.3	间接依赖	maven
decamelize-keys	1.1.0	直接依赖	npm
d3-polygon	1.0.6	间接依赖	npm
asynckit	0.4.0	间接依赖	npm
org.eclipse.jetty:jetty-server	9.3.28.v20191105	间接依赖	maven
org.springframework.security:spring-security-crypto	5.7.5	间接依赖	maven
org.locationtech.jts:jts-core	1.17.0	间接依赖	maven
org.springframework:spring-jcl	5.3.23	间接依赖	maven
org.apache.curator:curator-framework	4.2.0	间接依赖	maven
org.apache.kerby:kerby-util	1.0.1	间接依赖	maven
com.fasterxml.jackson.module:jackson-module-scala_2.12	2.10.5	间接依赖	maven
org.bitbucket.b_c:jose4j	0.6.5	间接依赖	maven
org.reactivestreams:reactive-streams	1.0.3	间接依赖	maven
org.mindrot:jbcrypt	0.3m	间接依赖	maven
commons-codec:commons-codec	1.13	间接依赖	maven
strip-bom	2.0.0	间接依赖	npm
backbone.wreqr	1.4.0	间接依赖	npm
org.xerial.snappy:snappy-java	1.0.5-M3	间接依赖	maven
org.eclipse.jetty:jetty-xml	9.3.20.v20170531	间接依赖	maven
backgrid-orderable-columns	0.1.2	直接依赖	npm
org.apache.commons:commons-lang3	3.11	间接依赖	maven
org.apache.hbase:hbase-asyncfs	2.3.3	间接依赖	maven
serve-static	1.14.1	间接依赖	npm
dnsjava:dnsjava	2.1.7	间接依赖	maven
org.apache.atlas:atlas-client-v1	3.0.0-SNAPSHOT	直接依赖	maven
org.keycloak:keycloak-adapter-core	6.0.1	间接依赖	maven
org.apache.httpcomponents:httpclient	4.5.10	间接依赖	maven
http-proxy-agent	4.0.1	间接依赖	npm
custom-event	1.0.1	间接依赖	npm
com.github.virtuald:curvesapi	1.07	间接依赖	maven
flagged-respawn	1.0.1	间接依赖	npm
org.apache.hadoop:hadoop-yarn-server-common	3.1.0	间接依赖	maven
org.ehcache:ehcache	3.3.1	间接依赖	maven
color-support	1.1.3	间接依赖	npm
org.apache.hadoop:hadoop-common	3.0.3	直接依赖	maven
com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider	2.10.3	间接依赖	maven
org.apache.hadoop:hadoop-hdfs	3.3.0	直接依赖	maven
org.springframework:spring-tx	5.3.23	间接依赖	maven
org.graalvm.nativeimage:svm	22.3.1	间接依赖	maven
jquery-mousewheel	3.1.13	间接依赖	npm
has-flag	4.0.0	间接依赖	npm
org.apache.logging.log4j:log4j-1.2-api	2.10.0	间接依赖	maven
d3-path	1.0.9	间接依赖	npm
colors	1.1.2	间接依赖	npm
typedarray	0.0.6	间接依赖	npm
org.codehaus.groovy:groovy-xml	2.5.15	间接依赖	maven
com.lmax:disruptor	3.4.2	间接依赖	maven
org.apache.commons:commons-compress	1.4.1	间接依赖	maven
io.dropwizard.metrics:metrics-core	4.1.5	间接依赖	maven
io.micrometer:micrometer-observation	1.10.4	间接依赖	maven
is-number	7.0.0	间接依赖	npm
org.yaml:snakeyaml	1.32	间接依赖	maven
object.map	1.0.1	间接依赖	npm
org.apache.directory.api:api-asn1-api	1.0.0-M20	间接依赖	maven
org.apache.hadoop:hadoop-client	3.3.0	直接依赖	maven
path-is-absolute	1.0.1	间接依赖	npm
com.fasterxml.jackson.module:jackson-module-jaxb-annotations	2.7.8	间接依赖	maven
org.apache.logging.log4j:log4j-api	2.13.2	间接依赖	maven
org.apache.atlas:atlas-client-common	3.0.0-SNAPSHOT	直接依赖	maven
backgrid	0.3.8	间接依赖	npm
org.apache.httpcomponents:httpcore-nio	4.4.12	间接依赖	maven
com.tdunning:t-digest	3.2	间接依赖	maven
encodeurl	1.0.2	间接依赖	npm
org.apache.logging.log4j:log4j-web	2.17.1	直接依赖	maven
org.apache.curator:curator-client	2.13.0	间接依赖	maven
io.dropwizard.metrics:metrics-jvm	3.1.0	间接依赖	maven
once	1.4.0	间接依赖	npm
commons-beanutils:commons-beanutils	1.9.3	间接依赖	maven
org.apache.atlas:atlas-plugin-classloader	3.0.0-SNAPSHOT	直接依赖	maven
com.google.code.gson:gson	2.2.4	间接依赖	maven
window-size	0.1.0	间接依赖	npm
org.eclipse.jetty:jetty-webapp	9.4.27.v20200227	间接依赖	maven
io.netty:netty-transport-native-unix-common	4.1.45.Final	间接依赖	maven
io.netty:netty-all	4.1.50.Final	间接依赖	maven
statuses	1.5.0	间接依赖	npm
org.codehaus.groovy:groovy-swing	2.5.15	间接依赖	maven
semver	5.7.1	间接依赖	npm
io.dropwizard.metrics:metrics-jmx	4.1.5	间接依赖	maven
jquery-placeholder	2.3.1	直接依赖	npm
org.apache.logging.log4j:log4j-slf4j-impl	2.10.0	间接依赖	maven
align-text	0.1.4	间接依赖	npm
org.springframework:spring-aop	5.3.27	直接依赖	maven
org.noggit:noggit	0.8	间接依赖	maven
com.jcabi:jcabi-log	0.20.0	间接依赖	maven
v8flags	3.2.0	直接依赖	npm
org.apache.hadoop:hadoop-mapreduce-client-app	3.0.3	间接依赖	maven
org.apache.hadoop:hadoop-mapreduce-client-jobclient	3.0.3	间接依赖	maven
org.jboss.logging:jboss-logging	3.3.2.Final	间接依赖	maven
infer-owner	1.0.4	间接依赖	npm
escape-string-regexp	1.0.5	间接依赖	npm
uuid	3.4.0	间接依赖	npm
picomatch	2.3.1	间接依赖	npm
grunt-middleware-proxy	1.0.7	直接依赖	npm
org.eclipse.jetty:jetty-client	9.4.27.v20200227	间接依赖	maven
io.netty:netty-transport-native-epoll	4.1.50.Final	间接依赖	maven
org.ow2.asm:asm	9.2	间接依赖	maven
org.eclipse.jetty.http2:http2-client	9.4.27.v20200227	间接依赖	maven
org.apache.sqoop:sqoop	1.4.6.2.3.99.0-195	直接依赖	maven
ssri	8.0.1	间接依赖	npm
org.codehaus.groovy:groovy-console	2.5.15	间接依赖	maven
safer-buffer	2.1.2	间接依赖	npm
commons-beanutils:commons-beanutils	1.9.4	间接依赖	maven
org.codehaus.jackson:jackson-core-asl	1.9.2	间接依赖	maven
com.github.jnr:jffi	1.2.10	间接依赖	maven
org.apache.logging.log4j:log4j-api	2.17.1	直接依赖	maven
org.apache.commons:commons-lang3	3.4	直接依赖	maven
jquery	3.5.1	间接依赖	npm
json-parse-even-better-errors	2.3.1	直接依赖	npm
org.codehaus.woodstox:stax2-api	3.1.4	间接依赖	maven
org.apache.atlas:atlas-testtools	3.0.0-SNAPSHOT	直接依赖	maven
cross-spawn	7.0.3	间接依赖	npm
org.eclipse.jetty:jetty-io	9.4.27.v20200227	间接依赖	maven
org.eclipse.jetty:jetty-deploy	9.4.27.v20200227	间接依赖	maven
org.eclipse.jetty:jetty-webapp	9.4.20.v20190813	间接依赖	maven
org.apache.cassandra:cassandra-all	2.2.13	间接依赖	maven
org.eclipse.jetty:jetty-server	9.3.20.v20170531	间接依赖	maven
quick-lru	4.0.1	直接依赖	npm
jline:jline	2.12	间接依赖	maven
${graphGroup}:${graphArtifact}		直接依赖	maven
commons-io:commons-io	2.4	间接依赖	maven
io.netty:netty-all	4.0.23.Final	间接依赖	maven
io.netty:netty-transport	4.1.45.Final	间接依赖	maven
redent	1.0.0	间接依赖	npm
org.apache.hbase:hbase-zookeeper	2.3.3	直接依赖	maven
org.codehaus.jackson:jackson-mapper-asl	1.9.2	间接依赖	maven
javax.inject:javax.inject	1	直接依赖	maven
shebang-command	2.0.0	间接依赖	npm
d3-request	1.0.6	直接依赖	npm
net.jcip:jcip-annotations	1.0	间接依赖	maven
org.apache.hbase.thirdparty:hbase-shaded-protobuf	3.3.0	间接依赖	maven
javax.validation:validation-api	1.0.0.GA	间接依赖	maven
com.google.errorprone:error_prone_annotations	2.3.4	间接依赖	maven
js-base64	2.6.4	间接依赖	npm
requests	2.24	间接依赖	pip
org.apache.curator:curator-framework	2.7.1	间接依赖	maven
parse-json	2.2.0	间接依赖	npm
com.lmax:disruptor	3.0.1	间接依赖	maven
com.github.stephenc.jcip:jcip-annotations	1.0-1	间接依赖	maven
org.apache.hive:hive-classification	3.1.2	间接依赖	maven
io.netty:netty-codec	4.1.45.Final	间接依赖	maven
org.eclipse.jetty:jetty-xml	9.3.14.v20161028	间接依赖	maven
spdx-expression-parse	3.0.1	间接依赖	npm
org.apache.hadoop:hadoop-hdfs-client	3.0.3	直接依赖	maven
accepts	1.3.7	间接依赖	npm
io.opentracing:opentracing-api	0.33.0	间接依赖	maven
org.apache.calcite:calcite-core	1.18.0	间接依赖	maven
is-plain-obj	1.1.0	间接依赖	npm
org.apache.lucene:lucene-codecs	8.6.3	间接依赖	maven
org.apache.lucene:lucene-sandbox	8.6.3	间接依赖	maven
has	1.0.3	间接依赖	npm
readable-stream	2.3.7	间接依赖	npm
dagre-d3	0.6.4	直接依赖	npm
agent-base	6.0.2	间接依赖	npm
commons-logging:commons-logging	1.0.4	间接依赖	maven
io.grpc:grpc-protobuf	1.53.0	间接依赖	maven
morgan	1.10.0	间接依赖	npm
min-indent	1.0.1	直接依赖	npm
org.apache.hadoop:hadoop-annotations	3.0.3	直接依赖	maven
path-type	1.1.0	间接依赖	npm
d3-scale-chromatic	1.5.0	间接依赖	npm
io.dropwizard.metrics:metrics-jmx	4.1.33	间接依赖	maven
com.thinkaurelius.thrift:thrift-server	0.3.7	间接依赖	maven
portscanner	1.2.0	间接依赖	npm
org.antlr:antlr	3.5.2	间接依赖	maven
org.jline:jline	3.9.0	间接依赖	maven
org.ow2.asm:asm	5.0.4	间接依赖	maven
io.netty:netty	3.7.0.Final	间接依赖	maven
org.antlr:antlr4-runtime	4.7	直接依赖	maven
mkdirp	1.0.4	间接依赖	npm
asn1	0.2.6	间接依赖	npm
minipass-flush	1.0.5	间接依赖	npm
org.codehaus.mojo:animal-sniffer-annotations	1.21	间接依赖	maven
org.apache.kerby:kerb-server	1.0.1	间接依赖	maven
com.nimbusds:nimbus-jose-jwt	3.10	间接依赖	maven
aproba	2.0.0	间接依赖	npm
form-data	2.3.3	间接依赖	npm
d3-array	1.2.4	间接依赖	npm
org.apache.lucene:lucene-classification	8.6.3	间接依赖	maven
io.dropwizard.metrics:metrics-core	4.1.33	间接依赖	maven
org.apache.hadoop:hadoop-yarn-server-common	3.0.3	间接依赖	maven
org.apache.logging.log4j:log4j-core	2.17.1	直接依赖	maven
org.eclipse.jetty:jetty-server	9.3.19.v20170502	间接依赖	maven
org.apache.httpcomponents:httpcore	4.4.13	直接依赖	maven
get-stdin	4.0.1	间接依赖	npm
org.ow2.asm:asm-commons	9.2	间接依赖	maven
org.apache.atlas:atlas-graphdb-impls	3.0.0-SNAPSHOT	直接依赖	maven
com.google.protobuf:protobuf-java	2.5.0	间接依赖	maven
indent-string	2.1.0	间接依赖	npm
jline:jline	2.14.6	间接依赖	maven
font-awesome	4.7.0	直接依赖	npm
org.apache.hadoop:hadoop-yarn-server-web-proxy	3.1.0	间接依赖	maven
com.datastax.oss:java-driver-query-builder	4.15.0	间接依赖	maven
grunt-contrib-cssmin	2.0.0	直接依赖	npm
com.fasterxml.jackson.core:jackson-core	2.10.3	间接依赖	maven
requirejs-text	2.0.15	直接依赖	npm
lunr	0.7.2	间接依赖	npm
org.apache.hadoop:hadoop-annotations	3.2.0	间接依赖	maven
org.apache.hadoop:hadoop-minicluster	3.0.3	直接依赖	maven
d3-collection	1.0.7	间接依赖	npm
org.eclipse.jetty:jetty-servlet	9.4.20.v20190813	间接依赖	maven
org.apache.directory.server:apacheds-kerberos-codec	2.0.0-M15	间接依赖	maven
concat-map	0.0.1	间接依赖	npm
depd	2.0.0	间接依赖	npm
org.springframework:spring-context	5.3.27	直接依赖	maven
d3-scale	2.2.2	间接依赖	npm
path-key	3.1.1	间接依赖	npm
org.eclipse.jetty:jetty-http	9.3.20.v20170531	间接依赖	maven
jQuery-QueryBuilder	2.4.3	直接依赖	npm
unique-filename	1.1.1	间接依赖	npm
org.apache.hadoop:hadoop-auth	3.2.0	间接依赖	maven
locate-path	5.0.0	直接依赖	npm
org.apache.tinkerpop:gremlin-groovy	3.5.5	直接依赖	maven
grunt-contrib-clean	1.1.0	直接依赖	npm
core-util-is	1.0.2	间接依赖	npm
bcrypt-pbkdf	1.0.2	间接依赖	npm
org.apache.atlas:atlas-authorization	3.0.0-SNAPSHOT	直接依赖	maven
org.apache.zookeeper:zookeeper	3.5.6	间接依赖	maven
aggregate-error	3.1.0	间接依赖	npm
org.checkerframework:checker-qual	3.8.0	间接依赖	maven
org.apache.ivy:ivy	2.5.1	间接依赖	maven
com.carrotsearch:hppc	0.8.2	间接依赖	maven
org.locationtech.spatial4j:spatial4j	0.7	间接依赖	maven
org.objenesis:objenesis	2.6	间接依赖	maven
net.java.dev.jna:jna	4.0.0	间接依赖	maven
which	1.3.1	间接依赖	npm
org.eclipse.jetty:jetty-servlet	9.4.27.v20200227	间接依赖	maven
array-differ	1.0.0	间接依赖	npm
commons-configuration:commons-configuration	1.10	直接依赖	maven
jquery-steps	1.1.0	直接依赖	npm
string-width	4.2.3	间接依赖	npm
org.apache.curator:curator-recipes	4.3.0	直接依赖	maven
ch.qos.logback:logback-classic	1.1.2	间接依赖	maven
for-in	1.0.2	间接依赖	npm
d3-timer	1.0.10	间接依赖	npm
commons-cli:commons-cli	1.1	间接依赖	maven
org.apache.lucene:lucene-analyzers-kuromoji	8.6.3	间接依赖	maven
org.restlet.jee:org.restlet.ext.servlet	2.4.3	间接依赖	maven
trim-newlines	1.0.0	间接依赖	npm
org.codehaus.groovy:groovy-templates	2.5.15	间接依赖	maven
org.apache.hadoop:hadoop-auth	3.0.3	直接依赖	maven
read-pkg	1.1.0	间接依赖	npm
org.eclipse.jetty:jetty-webapp	9.4.31.v20200723	直接依赖	maven
org.hibernate:hibernate-validator	4.3.0.Final	间接依赖	maven
org.lz4:lz4-java	1.7.1	间接依赖	maven
commons-collections:commons-collections	3.2.2	直接依赖	maven
org.apache.hbase:hbase-replication	2.3.3	间接依赖	maven
moment	2.29.4	间接依赖	npm
com.google.guava:listenablefuture	9999.0-empty-to-avoid-conflict-with-guava	间接依赖	maven
org.eclipse.jetty:jetty-util	9.3.19.v20170502	间接依赖	maven
string_decoder	1.1.1	间接依赖	npm
pretty-bytes	1.0.4	间接依赖	npm
org.apache.hadoop:hadoop-auth	3.3.0	直接依赖	maven
cliui	2.1.0	间接依赖	npm
fs-minipass	2.1.0	间接依赖	npm
org.apache.hadoop:hadoop-mapreduce-client-hs	3.0.3	间接依赖	maven
org.apache.atlas:atlas-server-api	3.0.0-SNAPSHOT	直接依赖	maven
dragula-with-animation	3.7.4	间接依赖	npm
livereload-js	2.4.0	间接依赖	npm
io.grpc:grpc-core	1.53.0	间接依赖	maven
ticky	1.0.1	间接依赖	npm
js-yaml	3.14.1	间接依赖	npm
org.eclipse.jetty:jetty-alpn-server	9.4.27.v20200227	间接依赖	maven
for-own	1.0.0	间接依赖	npm
org.springframework:spring-web	5.3.27	直接依赖	maven
org.apache.kerby:kerb-client	1.0.1	间接依赖	maven
grunt-legacy-util	2.0.1	间接依赖	npm
normalize-package-data	2.5.0	间接依赖	npm
com.fasterxml.jackson.core:jackson-annotations	2.10.1	间接依赖	maven
org.ow2.asm:asm-tree	5.0.3	间接依赖	maven
rechoir	0.7.1	间接依赖	npm
io.perfmark:perfmark-api	0.25.0	间接依赖	maven
org.apache.lucene:lucene-misc	8.4.0	间接依赖	maven
raw-body	1.1.7	间接依赖	npm
com.datastax.oss:java-driver-shaded-guava	25.1-jre-graal-sub-1	间接依赖	maven
com.fasterxml.jackson.dataformat:jackson-dataformat-smile	2.10.1	间接依赖	maven
org.apache.lucene:lucene-memory	8.6.3	间接依赖	maven
org.apache.storm:storm-core	2.4.0	直接依赖	maven
uri-js	4.4.1	间接依赖	npm
org.apache.lucene:lucene-highlighter	8.4.0	间接依赖	maven
minimatch	3.0.4	间接依赖	npm
encoding	0.1.13	间接依赖	npm
make-iterator	1.0.1	间接依赖	npm
has-unicode	2.0.1	间接依赖	npm
org.jruby.joni:joni	2.1.11	间接依赖	maven
com.addthis.metrics:reporter-config3	3.0.0	间接依赖	maven
string-template	0.2.1	间接依赖	npm
org.javassist:javassist	3.22.0-GA	间接依赖	maven
org.elasticsearch.client:elasticsearch-rest-high-level-client	7.6.0	直接依赖	maven
com.zaxxer:HikariCP-java7	2.4.12	间接依赖	maven
org.codehaus.jackson:jackson-jaxrs	1.9.2	间接依赖	maven
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml	2.8.11	间接依赖	maven
org.apache.orc:orc-shims	1.5.6	间接依赖	maven
org.apache.lucene:lucene-backward-codecs	8.6.3	间接依赖	maven
org.elasticsearch:elasticsearch-core	7.6.0	间接依赖	maven
load-grunt-tasks	3.5.2	直接依赖	npm
center-align	0.1.3	间接依赖	npm
figures	1.7.0	间接依赖	npm
backbone	1.2.3	间接依赖	npm
signal-exit	3.0.3	间接依赖	npm
org.apache.lucene:lucene-spatial3d	8.6.3	间接依赖	maven
org.eclipse.jetty.http2:http2-hpack	9.4.27.v20200227	间接依赖	maven
io.netty:netty-transport-native-unix-common	4.1.50.Final	间接依赖	maven
org.apache.curator:curator-client	2.7.1	间接依赖	maven
com.fasterxml.jackson.dataformat:jackson-dataformat-smile	2.8.11	间接依赖	maven
org.antlr:antlr4-runtime	4.9.1	间接依赖	maven
org.jvnet.mimepull:mimepull	1.9.3	间接依赖	maven
path-exists	2.1.0	间接依赖	npm
resolve-pkg	0.1.0	间接依赖	npm
info.ganglia.gmetric4j:gmetric4j	1.0.7	间接依赖	maven
delegates	1.0.0	间接依赖	npm
com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider	2.7.8	间接依赖	maven
contra	1.9.4	间接依赖	npm
org.elasticsearch:elasticsearch	7.6.0	间接依赖	maven
com.github.zafarkhaja:java-semver	0.9.0	间接依赖	maven
bootstrap-daterangepicker	3.1.0	直接依赖	npm
browserify-zlib	0.1.4	间接依赖	npm
org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-csv	1.0-r706900_3	间接依赖	maven
org.apache.htrace:htrace-core4	4.2.0-incubating	间接依赖	maven
net.objecthunter:exp4j	0.4.8	间接依赖	maven
io.netty:netty-buffer	4.1.47.Final	间接依赖	maven
org.apache.atlas:atlas-graphdb-api	3.0.0-SNAPSHOT	直接依赖	maven
com.carrotsearch:hppc	0.7.1	间接依赖	maven
hard-rejection	2.1.0	直接依赖	npm
org.elasticsearch.plugin:mapper-extras-client	7.6.0	间接依赖	maven
yallist	4.0.0	间接依赖	npm
org.apache.directory.server:apacheds-i18n	2.0.0-M15	间接依赖	maven
com.sun.xml.bind:jaxb-impl	2.2.3-1	间接依赖	maven
org.apache.hive:hive-upgrade-acid	3.1.2	间接依赖	maven
com.google.inject:guice	4.0	间接依赖	maven
com.carrotsearch.randomizedtesting:junit4-ant	2.7.2	间接依赖	maven
org.eclipse.jetty:jetty-util	9.4.20.v20190813	间接依赖	maven
color-name	1.1.4	间接依赖	npm
moment-timezone	0.5.35	直接依赖	npm
table-dragger	1.0.2	直接依赖	npm
javax.servlet.jsp:javax.servlet.jsp-api	2.3.1	间接依赖	maven
jakarta.activation:jakarta.activation-api	1.2.1	间接依赖	maven
io.dropwizard.metrics:metrics-jvm	4.1.5	间接依赖	maven
backbone.marionette	2.3.2	直接依赖	npm
org.eclipse.jetty:jetty-io	9.3.19.v20170502	间接依赖	maven
io.netty:netty-handler	4.1.45.Final	间接依赖	maven
body	5.1.0	间接依赖	npm
com.sun.jersey.contribs:jersey-multipart	1.19	直接依赖	maven
org.apache.solr:solr-core	8.6.3	间接依赖	maven
org.apache.lucene:lucene-memory	8.4.0	间接依赖	maven
com.fasterxml.jackson.core:jackson-core	2.10.5	间接依赖	maven
d3-ease	1.0.7	间接依赖	npm
promise-inflight	1.0.1	间接依赖	npm
lossless-json	1.0.4	直接依赖	npm
com.googlecode.json-simple:json-simple	1.1	间接依赖	maven
camelcase-keys	2.1.0	间接依赖	npm
org.apache.curator:curator-client	4.2.0	间接依赖	maven
com.github.stephenc.high-scale-lib:high-scale-lib	1.1.4	间接依赖	maven
org.apache.hadoop:hadoop-common	3.2.0	间接依赖	maven
org.mockito:mockito-core	3.4.6	间接依赖	maven
io.netty:netty-transport-native-unix-common	4.1.47.Final	间接依赖	maven
com.tdunning:t-digest	3.1	间接依赖	maven
jquery-extendext	1.0.0	间接依赖	npm
commons-io:commons-io	2.11.0	直接依赖	maven
org.apache.htrace:htrace-core4	4.1.0-incubating	间接依赖	maven
io.netty:netty-transport-native-epoll	4.1.45.Final	间接依赖	maven
org.eclipse.jetty:jetty-webapp	9.3.14.v20161028	直接依赖	maven
joda-time:joda-time	2.4	间接依赖	maven
io.netty:netty-codec	4.1.47.Final	间接依赖	maven
org.xerial.snappy:snappy-java	1.1.8.1	间接依赖	maven
org.apache.kerby:kerb-admin	1.0.1	间接依赖	maven
javax.activation:activation	1.1	间接依赖	maven
d3-contour	1.3.2	间接依赖	npm
@types/normalize-package-data	2.4.1	直接依赖	npm
io.micrometer:micrometer-core	1.10.4	间接依赖	maven
org.hamcrest:hamcrest-core	1.3	间接依赖	maven
org.apache.hive:hive-storage-api	2.7.0	间接依赖	maven
spdx-exceptions	2.3.0	间接依赖	npm
org.bouncycastle:bcpkix-jdk15on	1.60	间接依赖	maven
escape-html	1.0.3	间接依赖	npm
org.apache.commons:commons-text	1.9	间接依赖	maven
org.apache.logging.log4j:log4j-slf4j-impl	2.17.1	间接依赖	maven
gaze	1.1.3	间接依赖	npm
grunt-contrib-rename	0.2.0	直接依赖	npm
com.google.guava:guava	30.1.1-jre	直接依赖	maven
org.apache.lucene:lucene-spatial3d	8.4.0	间接依赖	maven
forever-agent	0.6.1	间接依赖	npm
org.apache.lucene:lucene-misc	8.6.3	间接依赖	maven
joda-time:joda-time	2.9.9	间接依赖	maven
org.apache.lucene:lucene-analyzers-nori	8.6.3	间接依赖	maven
org.glassfish.web:javax.servlet.jsp	2.3.2	间接依赖	maven
org.eclipse.jetty:jetty-security	9.4.14.v20181114	间接依赖	maven
getpass	0.1.7	间接依赖	npm
org.apache.kerby:kerb-core	1.0.1	间接依赖	maven
com.netflix.astyanax:astyanax-cassandra-all-shaded	3.10.2	间接依赖	maven
org.apache.hbase:hbase-server	2.3.3	直接依赖	maven
grunt-legacy-log-utils	2.1.0	间接依赖	npm
org.apache.lucene:lucene-core	8.6.3	直接依赖	maven
true-case-path	1.0.3	间接依赖	npm
jline:jline	0.9.94	间接依赖	maven
scss-tokenizer	0.4.3	间接依赖	npm
org.scala-lang.modules:scala-java8-compat_2.12	0.9.1	间接依赖	maven
org.eclipse.jetty:jetty-servlet	9.4.31.v20200723	直接依赖	maven
commons-logging:commons-logging	1.1.3	间接依赖	maven
yargs	3.10.0	间接依赖	npm
map-cache	0.2.2	间接依赖	npm
org.eclipse.jetty.http2:http2-http-client-transport	9.4.27.v20200227	间接依赖	maven
org.apache.kerby:kerby-config	1.0.1	间接依赖	maven
wrap-ansi	7.0.0	直接依赖	npm
org.eclipse.jetty:jetty-server	9.4.14.v20181114	间接依赖	maven
relateurl	0.2.7	间接依赖	npm
org.checkerframework:checker-qual	2.11.1	间接依赖	maven
com.fasterxml.jackson.jaxrs:jackson-jaxrs-base	2.11.3	直接依赖	maven
commons-io:commons-io	2.5	间接依赖	maven
gzip-size	1.0.0	间接依赖	npm
supports-color	7.2.0	间接依赖	npm
org.eclipse.jetty:jetty-util-ajax	9.4.20.v20190813	间接依赖	maven
org.apache.hadoop:hadoop-yarn-registry	3.0.3	间接依赖	maven
org.apache.curator:curator-framework	4.3.0	直接依赖	maven
unique-slug	2.0.2	间接依赖	npm
commons-codec:commons-codec	1.11	间接依赖	maven
mime-types	2.1.27	间接依赖	npm
backbone.babysitter	0.1.12	间接依赖	npm
aws-sign2	0.7.0	间接依赖	npm
io.dropwizard.metrics:metrics-jetty9	4.1.5	间接依赖	maven
com.google.protobuf:protobuf-java	3.11.0	间接依赖	maven
org.slf4j:slf4j-log4j12	1.7.30	直接依赖	maven
net.sf.jopt-simple:jopt-simple	5.0.2	间接依赖	maven
org.apache.kerby:kerby-xdr	1.0.1	间接依赖	maven
com.rabbitmq:amqp-client	5.15.0	间接依赖	maven
org.apache.hadoop:hadoop-hdfs-client	3.3.0	直接依赖	maven
minizlib	2.1.2	间接依赖	npm
d3-chord	1.0.6	间接依赖	npm
jline:jline	1.0	间接依赖	maven
org.apache.tinkerpop:gremlin-driver	3.5.5	间接依赖	maven
backgrid-sizeable-columns	0.1.1	直接依赖	npm
etag	1.8.1	间接依赖	npm
get-caller-file	2.0.5	直接依赖	npm
org.eclipse.jetty:jetty-servlet	9.3.28.v20191105	间接依赖	maven
node-gyp	8.4.1	间接依赖	npm
org.apache.atlas:atlas-notification	3.0.0-SNAPSHOT	直接依赖	maven
define-properties	1.1.3	间接依赖	npm
socks	2.7.1	间接依赖	npm
validate-npm-package-license	3.0.4	间接依赖	npm
ajv	6.12.6	间接依赖	npm
map-obj	1.0.1	间接依赖	npm
org.apache.atlas:atlas-graphdb-janus	3.0.0-SNAPSHOT	直接依赖	maven
net.sf.jpam:jpam	1.1	间接依赖	maven
braces	3.0.2	间接依赖	npm
commons-codec:commons-codec	1.14	直接依赖	maven
com.boundary:high-scale-lib	1.0.6	间接依赖	maven
com.webcohesion.enunciate:enunciate-core-annotations	2.13.2	直接依赖	maven
io.grpc:grpc-stub	1.53.0	间接依赖	maven
com.fasterxml.jackson.core:jackson-databind	2.10.1	间接依赖	maven
loud-rejection	1.6.0	间接依赖	npm
xmlenc:xmlenc	0.52	间接依赖	maven
org.apache.commons:commons-collections4	4.4	直接依赖	maven
backgrid-filter	0.3.7	直接依赖	npm
hosted-git-info	2.8.8	间接依赖	npm
ecc-jsbn	0.1.2	间接依赖	npm
strip-ansi	3.0.1	间接依赖	npm
punycode	2.1.1	间接依赖	npm
javax.servlet:javax.servlet-api	3.1.0	直接依赖	maven
com.google.errorprone:error_prone_annotations	2.5.1	间接依赖	maven
org.codehaus.groovy:groovy	2.5.15	间接依赖	maven
org.apache.lucene:lucene-spatial-extras	8.6.3	直接依赖	maven
com.yammer.metrics:metrics-core	2.2.0	间接依赖	maven
org.apache.atlas:atlas-dashboardv3	3.0.0-SNAPSHOT	直接依赖	maven
org.scala-lang.modules:scala-collection-compat_2.12	2.3.0	间接依赖	maven
parse-passwd	1.0.0	间接依赖	npm
meow	3.7.0	间接依赖	npm
org.mindrot:jbcrypt	0.4	间接依赖	maven
backgrid-select-all	0.3.5	直接依赖	npm
org.apache.hadoop:hadoop-yarn-registry	3.1.0	间接依赖	maven
junit:junit	4.13.2	直接依赖	maven
org.janusgraph:janusgraph-driver	0.6.3	间接依赖	maven
minipass	3.3.4	间接依赖	npm
org.apache.kafka:kafka_2.12	2.8.1	直接依赖	maven
com.googlecode.concurrentlinkedhashmap:concurrentlinkedhashmap-lru	1.3	间接依赖	maven
delayed-stream	1.0.0	间接依赖	npm
io.projectreactor:reactor-core	3.5.0	间接依赖	maven
org.apache.zookeeper:zookeeper-jute	3.5.9	间接依赖	maven
org.eclipse.jetty:jetty-alpn-client	9.4.27.v20200227	间接依赖	maven
org.codehaus.jackson:jackson-xc	1.9.2	间接依赖	maven
org.apache.hbase:hbase-annotations	2.3.3	直接依赖	maven
com.fasterxml.jackson.core:jackson-core	2.11.3	直接依赖	maven
org.apache.lucene:lucene-join	8.4.0	间接依赖	maven
crossvent	1.5.5	间接依赖	npm
unpipe	1.0.0	间接依赖	npm
org.jruby.jcodings:jcodings	1.0.18	间接依赖	maven
org.janusgraph:janusgraph-cassandra	0.5.3	直接依赖	maven
parse-filepath	1.0.2	间接依赖	npm
faye-websocket	0.10.0	间接依赖	npm
org.apache.lucene:lucene-spatial	8.4.0	间接依赖	maven
org.apache.avro:avro	1.7.5	直接依赖	maven
io.dropwizard.metrics:metrics-jvm	3.2.2	间接依赖	maven
commons-validator:commons-validator	1.6	直接依赖	maven
bytes	1.0.0	间接依赖	npm
com.fasterxml.jackson.dataformat:jackson-dataformat-smile	2.10.0	间接依赖	maven
org.apache.xmlbeans:xmlbeans	5.0.3	间接依赖	maven
pinkie	2.0.4	间接依赖	npm
core-js	2.6.11	间接依赖	npm
org.springframework:spring-expression	5.3.23	间接依赖	maven
findup-sync	0.3.0	间接依赖	npm
setprototypeof	1.1.0	间接依赖	npm
org.apache.kafka:kafka-clients	2.8.1	直接依赖	maven
smart-buffer	4.2.0	间接依赖	npm
org.apache.hbase.thirdparty:hbase-shaded-gson	3.3.0	间接依赖	maven
chownr	2.0.0	间接依赖	npm

SBOM 开源软件漏洞

赞 (0)

apache/apr 软件分析报告

上一篇 2023年12月2日

apache/commons-weaver 软件分析报告

下一篇 2023年12月2日

jordanbyron/react-native-quick-actions 软件分析报告

基础信息项目名称：jordanbyron/react-native-quick-actions 项目徽章：仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1719255664459120640/171925566669468…

软件分析 2023年10月31日
00
jakob-grabner/Circle-Progress-View 软件分析报告

基础信息项目名称：jakob-grabner/Circle-Progress-View 项目徽章：仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1721291056745054208/1724061658350833664…

软件分析 2023年11月13日
00
inh3/nPool 软件分析报告

基础信息项目名称：inh3/nPool 项目徽章：仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1718818129194909696/1718818130029576192 此报告由Murphysec提供漏洞列表暂无…

软件分析 2023年10月30日
00
iExecBlockchainComputing/iexec-sdk 软件分析报告

基础信息项目名称：iExecBlockchainComputing/iexec-sdk 项目徽章：仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1721273278650679296/1728331390134472704…

软件分析 2023年11月25日
00
IBM/kui 软件分析报告

基础信息项目名称：IBM/kui 项目徽章：仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1718755173711085568/1718755173786583040 此报告由Murphysec提供漏洞列表漏洞名称 …

软件分析 2023年10月30日
00