201206030/novel-cloud 软件分析报告

基础信息

项目名称:201206030/novel-cloud

项目徽章:

Security Status

仓库地址:https://github.com/pterodactyl/panel

检测报告地址:https://www.murphysec.com/console/report/1715425879407771648/1715425879453908992

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
Spring AMQP 反序列化漏洞 反序列化 MPS-1mr6-9hnw CVE-2023-34050 中危
Apache Log4j SocketServer反序列化漏洞 反序列化 MPS-2019-17271 CVE-2019-17571 严重
Apache Log4j2 SmtpAppender证书验证不当漏洞 证书验证不恰当 MPS-2020-6684 CVE-2020-9488 低危
Google protobuf DOS漏洞 不正确的行为次序 MPS-2021-19066 CVE-2021-22569 中危
Apache Log4j JMSAppender反序列化漏洞 反序列化 MPS-2021-38359 CVE-2021-4104 高危
Apache Commons IO 存在路径遍历漏洞 路径遍历 MPS-2021-4531 CVE-2021-29425 中危
Red Hat XNIO 资源错误分配漏洞 不加限制或调节的资源分配 MPS-2022-0191 CVE-2022-0084 高危
io.netty:netty-handler 存在证书验证不恰当漏洞 证书验证不恰当 MPS-2022-12067 中危
Apache Log4j JDBCAppender SQL注入漏洞 SQL注入 MPS-2022-1444 CVE-2022-23305 严重
Apache Log4j Chainsaw反序列化漏洞 反序列化 MPS-2022-1445 CVE-2022-23307 高危
Apache Log4j 反序列化漏洞 反序列化 MPS-2022-1446 CVE-2022-23302 高危
Apache Calcite Avatica 代码注入漏洞 代码注入 MPS-2022-51965 CVE-2022-36364 高危
Apache Calcite 存在 XXE 漏洞 XXE MPS-2022-56508 CVE-2022-39135 中危
xuxueli xxl-job 存在命令注入漏洞 命令注入 MPS-2022-57270 CVE-2022-40929 严重
IBM WebSphere Application Server Liberty 存在拒绝服务漏洞 对因果或异常条件的不恰当检查 MPS-2022-59813 CVE-2022-3509 中危
Spring Security Logout实现不当 会话固定 MPS-2022-62834 CVE-2023-20862 中危
Spring Expression 存在拒绝服务漏洞 拒绝服务 MPS-2022-62835 CVE-2023-20863 高危
Spring Boot在Cloud Foundry中部署存在路由限制绕过风险 访问控制不当 MPS-2022-62845 CVE-2023-20873 高危
Spring Boot 欢迎页功能拒绝服务风险 拒绝服务 MPS-2022-62855 CVE-2023-20883 高危
Red Hat Undertow 安全漏洞 证书验证不恰当 MPS-2022-68061 CVE-2022-4492 高危
Oracle MySQL Server存在未明漏洞 MPS-2022-68556 CVE-2023-21971 中危
Red Hat Undertow 资源管理错误漏洞 拒绝服务 MPS-2022-7892 CVE-2022-1259 高危
snakeYAML 反序列化 MPS-2022-9425 CVE-2022-1471 高危
Apache Commons FileUpload 不加限制或调节的资源分配 MPS-2023-3553 CVE-2023-24998 中危
XXL-JOB 跨站请求伪造漏洞 CSRF MPS-2023-3818 CVE-2023-0674 中危
【存在争议】MybatisPlus SQL注入 MPS-2023-3977 CVE-2023-25330 高危
xxl-job 存在存储型XSS漏洞 XSS MPS-2023-5196 中危
Red Hat JBoss Enterprise Application Platform 安全漏洞 不可达退出条件的循环(无限循环) MPS-2023-6619 CVE-2023-1108 高危
Netty 资源管理错误漏洞 拒绝服务 MPS-9u07-bna1 CVE-2023-34462 中危
Apache Tomcat http请求走私漏洞 输入验证不恰当 MPS-b5of-dwyh CVE-2023-45648 中危
Hot Rod 安全漏洞 证书验证不恰当 MPS-b7oj-adm3 CVE-2023-4586 高危
ZooKeeper SASL 身份验证绕过漏洞 通过用户控制密钥绕过授权机制 MPS-bznr-672x CVE-2023-44981 高危
Apache Tomcat 安全漏洞 清理环节不完整 MPS-hz9y-jtfe CVE-2023-42795 中危
Bouncy Castle 信任管理问题漏洞 证书验证不恰当 MPS-i6w7-d48e CVE-2023-33201 中危
Spring Security 路径匹配漏洞 不恰当实现的标准安全检查 MPS-j3nx-691g CVE-2023-34034 严重
Spring Security鉴权规则错误配置风险 关键资源权限分配不当 MPS-l6z0-dktm CVE-2023-34035 高危
Guava 创建拥有不安全权限的临时文件 MPS-mfku-xzh3 CVE-2023-2976 中危
基于 Thymeleaf 沙箱逃逸的 Spring Boot Admin 远程代码执行漏洞 代码注入 MPS-p6bo-i7nw CVE-2023-38286 严重
Redisson 代码问题漏洞 反序列化 MPS-t5lb-2zr9 CVE-2023-42809 高危
Apache Tomcat FORM 重定向漏洞 跨站重定向 MPS-uy56-j8e4 CVE-2023-41080 低危
【存在争议】FasterXML jackson-databind 代码问题漏洞 不加限制或调节的资源分配 MPS-z1bx-p8y2 CVE-2023-35116 中危

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
de.codecentric:spring-boot-admin-server 3.0.2 间接依赖 强烈建议修复
org.apache.zookeeper:zookeeper 3.6.0 3.9.1 间接依赖 建议修复
org.apache.tomcat.embed:tomcat-embed-core 10.1.7 11.0.0-m6 间接依赖 建议修复
org.yaml:snakeyaml 1.33 2.0 间接依赖 建议修复
org.springframework.boot:spring-boot-actuator-autoconfigure 3.0.5 3.0.6 间接依赖 建议修复
org.springframework.amqp:spring-amqp 3.0.3 3.0.10 间接依赖 建议修复
org.springframework.security:spring-security-web 6.0.2 6.1.2 间接依赖 建议修复
commons-fileupload:commons-fileupload 1.4 1.5 间接依赖 建议修复
com.google.protobuf:protobuf-java 3.6.1 3.21.7 间接依赖 建议修复
org.apache.calcite.avatica:avatica-core 1.18.0 1.22.0 间接依赖 建议修复
io.undertow:undertow-core 2.3.4.Final 2.3.6.final 间接依赖 建议修复
com.mysql:mysql-connector-j 8.0.32 8.0.33 直接依赖 建议修复
com.baomidou:mybatis-plus-extension 3.5.3 间接依赖 建议修复
com.xuxueli:xxl-job-core 2.3.1 直接依赖 建议修复
io.netty:netty-handler 4.1.90.Final 4.1.94.final 间接依赖 建议修复
org.springframework.security:spring-security-config 6.0.2 6.1.4 间接依赖 建议修复
log4j:log4j 1.2.17 间接依赖 建议修复
com.fasterxml.jackson.core:jackson-databind 2.14.2 直接依赖 建议修复
org.springframework.boot:spring-boot-autoconfigure 3.0.5 3.0.7 间接依赖 可选修复
org.apache.calcite:calcite-core 1.27.0 1.32.0 间接依赖 可选修复
org.bouncycastle:bcprov-jdk15on 1.69 间接依赖 可选修复
org.jboss.xnio:xnio-api 3.8.8.Final 3.8.8 间接依赖 可选修复
commons-io:commons-io 2.4 2.7 间接依赖 可选修复
org.springframework:spring-expression 6.0.7 6.0.8 间接依赖 可选修复
org.bouncycastle:bcprov-jdk15on 1.70 间接依赖 可选修复
com.google.guava:guava 30.0-jre 32.0.0-jre 间接依赖 可选修复
org.redisson:redisson 3.19.1 3.22.0 间接依赖 可选修复

许可证风险

许可证类型 相关组件 许可证风险
Apache-2.0 339
MIT 6
BSD-3-Clause 7
BSD-2-Clause 3
自定义许可证 15
EPL-2.0 8
GPL-3.0 1
MIT-0 1
EPL-1.0 3
LGPL-2.1 1
GPL-2.0 1
MPL-2.0 1
CDDL-1.1 1

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
io.github.openfeign.form:feign-form 3.8.0 间接依赖 maven
org.jboss.logging:jboss-logging 3.5.0.Final 间接依赖 maven
org.springframework.boot:spring-boot 3.0.5 间接依赖 maven
org.apache.zookeeper:zookeeper-jute 3.6.0 间接依赖 maven
org.springframework.boot:spring-boot-starter-reactor-netty 3.0.5 间接依赖 maven
org.springframework.boot:spring-boot-starter-validation 3.0.5 间接依赖 maven
org.apache.curator:curator-framework 5.1.0 间接依赖 maven
com.yahoo.datasketches:sketches-core 0.9.0 间接依赖 maven
io.github.classgraph:classgraph 4.8.149 间接依赖 maven
org.apache.shardingsphere:shardingsphere-distsql-parser 5.1.1 间接依赖 maven
org.thymeleaf:thymeleaf-spring6 3.1.1.RELEASE 间接依赖 maven
io.netty:netty-transport-classes-kqueue 4.1.90.Final 间接依赖 maven
io.netty:netty-codec-dns 4.1.90.Final 间接依赖 maven
com.google.protobuf:protobuf-java 3.6.1 间接依赖 maven
com.alibaba.csp:sentinel-transport-common 1.8.6 间接依赖 maven
io.netty:netty-transport-rxtx 4.1.90.Final 间接依赖 maven
io.netty:netty-resolver-dns-classes-macos 4.1.90.Final 间接依赖 maven
org.apache.httpcomponents:httpcore 4.4.16 间接依赖 maven
org.apache.curator:curator-recipes 5.1.0 间接依赖 maven
io.netty:netty-codec-xml 4.1.90.Final 间接依赖 maven
org.springframework.boot:spring-boot-starter-json 3.0.5 间接依赖 maven
org.apache.commons:commons-exec 1.3 间接依赖 maven
io.jsonwebtoken:jjwt-impl 0.11.5 直接依赖 maven
org.quartz-scheduler:quartz 2.3.2 间接依赖 maven
org.hdrhistogram:HdrHistogram 2.1.12 间接依赖 maven
com.alibaba.csp:sentinel-cluster-server-default 1.8.6 间接依赖 maven
org.springframework.cloud:spring-cloud-starter-bootstrap 3.1.1 直接依赖 maven
io.netty:netty-codec-socks 4.1.90.Final 间接依赖 maven
org.apache.commons:commons-dbcp2 2.9.0 间接依赖 maven
org.latencyutils:LatencyUtils 2.0.3 间接依赖 maven
org.apache.shardingsphere:shardingsphere-standalone-mode-core 5.1.1 间接依赖 maven
org.apache.logging.log4j:log4j-to-slf4j 2.19.0 间接依赖 maven
jakarta.json:jakarta.json-api 2.1.1 间接依赖 maven
jakarta.activation:jakarta.activation-api 2.1.1 间接依赖 maven
io.github.xxyopen:novel-book-api 2.0.0-SNAPSHOT 直接依赖 maven
com.alibaba.csp:sentinel-spring-webflux-adapter 1.8.6 间接依赖 maven
org.apache.shardingsphere:shardingsphere-cluster-mode-core 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sharding-distsql-handler 5.1.1 间接依赖 maven
org.apache.tomcat.embed:tomcat-embed-core 10.1.7 间接依赖 maven
org.springframework.data:spring-data-redis 3.0.4 间接依赖 maven
org.attoparser:attoparser 2.0.6.RELEASE 间接依赖 maven
org.apache.shardingsphere:shardingsphere-shadow-distsql-parser 5.1.1 间接依赖 maven
com.alibaba.nacos:nacos-auth-plugin 2.2.1-RC 间接依赖 maven
org.jboss.xnio:xnio-api 3.8.8.Final 间接依赖 maven
com.alibaba.spring:spring-context-support 1.0.11 间接依赖 maven
com.google.code.gson:gson 2.9.1 间接依赖 maven
org.springframework.cloud:spring-cloud-gateway-server 4.0.1 间接依赖 maven
io.micrometer:micrometer-observation 1.10.5 间接依赖 maven
jakarta.annotation:jakarta.annotation-api 2.1.1 间接依赖 maven
com.alibaba.csp:sentinel-cluster-client-default 1.8.6 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sharding-spring-boot-starter 5.1.1 间接依赖 maven
com.esri.geometry:esri-geometry-api 2.2.0 间接依赖 maven
org.apache.shardingsphere:shardingsphere-data-pipeline-spi 5.1.1 间接依赖 maven
io.lettuce:lettuce-core 6.2.3.RELEASE 间接依赖 maven
io.netty:netty-resolver-dns-native-macos 4.1.90.Final 间接依赖 maven
org.apache.commons:commons-lang3 3.12.0 间接依赖 maven
org.apache.shardingsphere:shardingsphere-jdbc-transaction-spring 5.1.1 间接依赖 maven
org.springframework:spring-web 6.0.7 间接依赖 maven
com.alibaba.csp:sentinel-parameter-flow-control 1.8.6 间接依赖 maven
com.baomidou:mybatis-plus 3.5.3 间接依赖 maven
com.google.guava:listenablefuture 9999.0-empty-to-avoid-conflict-with-guava 间接依赖 maven
com.mysql:mysql-connector-j 8.0.32 直接依赖 maven
com.alibaba.csp:sentinel-transport-simple-http 1.8.6 间接依赖 maven
org.apache.httpcomponents.client5:httpclient5 5.1.4 间接依赖 maven
org.apache.shardingsphere:shardingsphere-readwrite-splitting-distsql-parser 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sql-parser-sqlserver 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-encrypt-core 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-encrypt-api 5.1.1 间接依赖 maven
org.apache.calcite.avatica:avatica-core 1.18.0 间接依赖 maven
com.github.jsqlparser:jsqlparser 4.4 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sql-parser-sql92 5.1.1 间接依赖 maven
org.springframework:spring-webflux 6.0.7 间接依赖 maven
org.apache.shardingsphere:shardingsphere-transaction-api 5.1.1 间接依赖 maven
org.bouncycastle:bcutil-jdk15on 1.69 间接依赖 maven
org.apache.zookeeper:zookeeper 3.6.0 间接依赖 maven
org.slf4j:slf4j-api 2.0.7 间接依赖 maven
org.apache.shardingsphere:shardingsphere-schedule-core 5.1.1 间接依赖 maven
org.springframework.boot:spring-boot-configuration-processor 3.0.5 直接依赖 maven
io.swagger.core.v3:swagger-core-jakarta 2.2.7 间接依赖 maven
io.projectreactor.netty:reactor-netty-core 1.1.5 间接依赖 maven
io.netty:netty-transport-native-unix-common 4.1.90.Final 间接依赖 maven
net.hydromatic:aggdesigner-algorithm 6.0 间接依赖 maven
org.springframework.boot:spring-boot-starter-data-redis 3.0.5 直接依赖 maven
org.springframework.boot:spring-boot-starter-jdbc 3.0.5 间接依赖 maven
commons-fileupload:commons-fileupload 1.4 间接依赖 maven
com.alibaba.cloud:spring-cloud-circuitbreaker-sentinel 2022.0.0.0-RC1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sql-parser-oracle 5.1.1 间接依赖 maven
org.springframework.security:spring-security-config 6.0.2 间接依赖 maven
org.ow2.asm:asm 9.3 间接依赖 maven
org.apache.httpcomponents:httpasyncclient 4.1.5 间接依赖 maven
com.googlecode.concurrentlinkedhashmap:concurrentlinkedhashmap-lru 1.4.2 间接依赖 maven
com.esotericsoftware:reflectasm 1.11.9 间接依赖 maven
io.netty:netty-transport-native-kqueue 4.1.90.Final 间接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-error-handler-spi 3.0.1 间接依赖 maven
org.apache.httpcomponents.core5:httpcore5-h2 5.1.5 间接依赖 maven
org.apache.shardingsphere:shardingsphere-encrypt-distsql-statement 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-infra-binder 5.1.1 间接依赖 maven
org.apache.logging.log4j:log4j-api 2.19.0 间接依赖 maven
org.apache.shardingsphere:shardingsphere-infra-common 5.1.1 间接依赖 maven
org.springframework.security:spring-security-rsa 1.0.11.RELEASE 间接依赖 maven
org.apache.shardingsphere:shardingsphere-infra-federation-executor 5.1.1 间接依赖 maven
io.jsonwebtoken:jjwt-jackson 0.11.5 直接依赖 maven
org.apache.shardingsphere:shardingsphere-readwrite-splitting-distsql-statement 5.1.1 间接依赖 maven
log4j:log4j 1.2.17 间接依赖 maven
org.springframework.cloud:spring-cloud-loadbalancer 4.0.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-mode-core 5.1.1 间接依赖 maven
org.jboss.threads:jboss-threads 3.5.0.Final 间接依赖 maven
io.netty:netty-handler-proxy 4.1.90.Final 间接依赖 maven
org.springframework.boot:spring-boot-starter-web 3.0.5 直接依赖 maven
jakarta.websocket:jakarta.websocket-client-api 2.1.0 间接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-infra-common 3.0.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sharding-core 5.1.1 间接依赖 maven
org.checkerframework:checker-qual 3.32.0 间接依赖 maven
org.springframework.boot:spring-boot-starter-tomcat 3.0.5 间接依赖 maven
org.apache.shardingsphere:shardingsphere-encrypt-spring-boot-starter 5.1.1 间接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-executor-kernel 3.0.1 间接依赖 maven
org.springframework.cloud:spring-cloud-context 4.0.1 间接依赖 maven
com.alibaba.csp:sentinel-datasource-extension 1.8.6 间接依赖 maven
io.netty:netty-resolver-dns 4.1.90.Final 间接依赖 maven
org.apache.shardingsphere:shardingsphere-transaction-core 5.1.1 间接依赖 maven
org.elasticsearch.client:elasticsearch-rest-client 8.5.3 间接依赖 maven
org.springframework:spring-tx 6.0.7 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sql-parser-mysql 5.1.1 间接依赖 maven
io.projectreactor:reactor-core 3.5.4 间接依赖 maven
com.google.code.findbugs:jsr305 3.0.2 间接依赖 maven
org.apache.calcite.avatica:avatica-metrics 1.18.0 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sharding-distsql-statement 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-infra-route 5.1.1 间接依赖 maven
io.prometheus:simpleclient_tracer_otel 0.16.0 间接依赖 maven
org.jboss.marshalling:jboss-marshalling 2.0.11.Final 间接依赖 maven
io.github.xxyopen:novel-author-api 2.0.0-SNAPSHOT 直接依赖 maven
org.springframework:spring-messaging 6.0.7 间接依赖 maven
org.apache.shardingsphere:shardingsphere-single-table-api 5.1.1 间接依赖 maven
com.esotericsoftware:minlog 1.3.1 间接依赖 maven
de.codecentric:spring-boot-admin-server 3.0.2 间接依赖 maven
io.github.xxyopen:novel-user-api 2.0.0-SNAPSHOT 直接依赖 maven
com.fasterxml:classmate 1.5.1 间接依赖 maven
io.netty:netty-codec-mqtt 4.1.90.Final 间接依赖 maven
org.apache.httpcomponents:httpclient 4.5.14 间接依赖 maven
io.github.xxyopen:novel-common 2.0.0-SNAPSHOT 直接依赖 maven
de.codecentric:spring-boot-admin-starter-server 3.0.2 直接依赖 maven
com.alibaba.csp:sentinel-spring-webmvc-6x-adapter 1.8.6 间接依赖 maven
org.jodd:jodd-bean 5.1.6 间接依赖 maven
org.mybatis:mybatis 3.5.10 间接依赖 maven
org.springframework.security:spring-security-crypto 6.0.2 间接依赖 maven
org.wildfly.client:wildfly-client-config 1.0.1.Final 间接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-http-executor 3.0.1 间接依赖 maven
org.springframework.cloud:spring-cloud-openfeign-core 4.0.1 间接依赖 maven
org.apache.yetus:audience-annotations 0.5.0 间接依赖 maven
com.baomidou:mybatis-plus-annotation 3.5.3 间接依赖 maven
org.springdoc:springdoc-openapi-starter-common 2.0.0 直接依赖 maven
io.micrometer:micrometer-commons 1.10.5 间接依赖 maven
io.netty:netty-buffer 4.1.90.Final 间接依赖 maven
com.alibaba.csp:sentinel-annotation-aspectj 1.8.6 间接依赖 maven
org.apache.shardingsphere:shardingsphere-shadow-spring-boot-starter 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-readwrite-splitting-core 5.1.1 间接依赖 maven
org.apache.tomcat.embed:tomcat-embed-el 10.1.7 间接依赖 maven
org.apache.shardingsphere:shardingsphere-jdbc-core 5.1.1 间接依赖 maven
com.fasterxml.jackson.core:jackson-annotations 2.14.2 间接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-api 3.0.1 间接依赖 maven
org.springframework.data:spring-data-commons 3.0.4 间接依赖 maven
io.netty:netty-transport-native-epoll 4.1.90.Final 间接依赖 maven
org.apache.shardingsphere:shardingsphere-single-table-core 5.1.1 间接依赖 maven
org.antlr:antlr4-runtime 4.9.2 间接依赖 maven
org.springframework.boot:spring-boot-starter-logging 3.0.5 间接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-tracing-rdb 3.0.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-cluster-mode-repository-zookeeper-curator 5.1.1 间接依赖 maven
org.apache.commons:commons-collections4 4.4 间接依赖 maven
org.apache.shardingsphere:shardingsphere-spi 5.1.1 间接依赖 maven
io.netty:netty-codec-http 4.1.90.Final 间接依赖 maven
com.alibaba.nacos:nacos-client 2.2.1-RC 间接依赖 maven
com.fasterxml.jackson.core:jackson-databind 2.14.2 直接依赖 maven
org.springframework:spring-core 6.0.7 间接依赖 maven
jakarta.xml.bind:jakarta.xml.bind-api 4.0.0 间接依赖 maven
com.sun.xml.bind:jaxb-impl 4.0.2 间接依赖 maven
org.apache.shardingsphere:shardingsphere-readwrite-splitting-api 5.1.1 间接依赖 maven
org.mybatis:mybatis-spring 2.0.7 间接依赖 maven
org.springframework.boot:spring-boot-starter-cache 3.0.5 直接依赖 maven
commons-logging:commons-logging 1.1.3 间接依赖 maven
io.github.xxyopen:novel-config 2.0.0-SNAPSHOT 直接依赖 maven
org.apache.shardingsphere:shardingsphere-infra-parser 5.1.1 间接依赖 maven
io.netty:netty-transport-sctp 4.1.90.Final 间接依赖 maven
com.sun.xml.bind:jaxb-core 4.0.2 间接依赖 maven
javax.cache:cache-api 1.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-db-discovery-distsql-handler 5.1.1 间接依赖 maven
org.springframework.boot:spring-boot-starter-aop 3.0.5 直接依赖 maven
io.netty:netty-codec-smtp 4.1.90.Final 间接依赖 maven
org.springframework.cloud:spring-cloud-starter 4.0.1 间接依赖 maven
com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-discovery 2022.0.0.0-RC1 直接依赖 maven
io.prometheus:simpleclient 0.16.0 间接依赖 maven
org.springframework:spring-aop 6.0.7 间接依赖 maven
org.apache.curator:curator-client 5.1.0 间接依赖 maven
org.springframework.boot:spring-boot-starter-amqp 3.0.5 直接依赖 maven
com.xuxueli:xxl-job-core 2.3.1 直接依赖 maven
org.springframework:spring-context-support 6.0.7 间接依赖 maven
io.netty:netty-codec-haproxy 4.1.90.Final 间接依赖 maven
io.netty:netty-transport-classes-epoll 4.1.90.Final 间接依赖 maven
org.springframework.boot:spring-boot-starter-webflux 3.0.5 间接依赖 maven
com.stoyanr:evictor 1.0.0 间接依赖 maven
org.reactivestreams:reactive-streams 1.0.4 间接依赖 maven
de.codecentric:spring-boot-admin-server-cloud 3.0.2 间接依赖 maven
io.github.openfeign.form:feign-form-spring 3.8.0 间接依赖 maven
org.apache.shardingsphere:shardingsphere-standalone-mode-repository-file 5.1.1 间接依赖 maven
me.ahoo.cosid:cosid-core 1.8.6 间接依赖 maven
org.apache.shardingsphere:shardingsphere-db-discovery-core 5.1.1 间接依赖 maven
io.prometheus:simpleclient_tracer_common 0.16.0 间接依赖 maven
com.yahoo.datasketches:memory 0.9.0 间接依赖 maven
org.springframework:spring-webmvc 6.0.7 间接依赖 maven
org.springframework:spring-jdbc 6.0.7 间接依赖 maven
org.springframework.security:spring-security-web 6.0.2 间接依赖 maven
org.apache.shardingsphere:shardingsphere-infra-executor 5.1.1 间接依赖 maven
org.wildfly.common:wildfly-common 1.5.4.Final 间接依赖 maven
com.baomidou:mybatis-plus-extension 3.5.3 间接依赖 maven
org.springframework:spring-context 6.0.7 间接依赖 maven
io.netty:netty-handler-ssl-ocsp 4.1.90.Final 间接依赖 maven
org.apache.shardingsphere:shardingsphere-readwrite-splitting-spring-boot-starter 5.1.1 间接依赖 maven
io.netty:netty-codec 4.1.90.Final 间接依赖 maven
io.netty:netty-transport 4.1.90.Final 间接依赖 maven
org.springframework.boot:spring-boot-actuator-autoconfigure 3.0.5 间接依赖 maven
org.codehaus.janino:commons-compiler 3.1.9 间接依赖 maven
org.apache.shardingsphere:shardingsphere-distsql-statement 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-infra-federation-optimizer 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-infra-context 5.1.1 间接依赖 maven
jakarta.websocket:jakarta.websocket-api 2.1.0 间接依赖 maven
io.netty:netty-common 4.1.90.Final 间接依赖 maven
io.vertx:vertx-sql-client 4.2.3 间接依赖 maven
org.apache.shardingsphere:shardingsphere-memory-mode-core 5.1.1 间接依赖 maven
com.github.ben-manes.caffeine:caffeine 3.1.5 直接依赖 maven
org.apache.shardingsphere:shardingsphere-infra-merge 5.1.1 间接依赖 maven
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.14.2 间接依赖 maven
org.codehaus.groovy:groovy 3.0.10 间接依赖 maven
io.netty:netty-codec-stomp 4.1.90.Final 间接依赖 maven
org.webjars:swagger-ui 4.15.5 间接依赖 maven
jakarta.servlet:jakarta.servlet-api 6.0.0 间接依赖 maven
org.apache.shardingsphere:shardingsphere-infra-rewrite 5.1.1 间接依赖 maven
org.redisson:redisson 3.19.1 间接依赖 maven
org.springframework.security:spring-security-core 6.0.2 间接依赖 maven
org.springframework.retry:spring-retry 2.0.1 间接依赖 maven
org.springframework.boot:spring-boot-starter-actuator 3.0.5 直接依赖 maven
io.prometheus:simpleclient_tracer_otel_agent 0.16.0 间接依赖 maven
org.apache.shardingsphere:shardingsphere-standalone-mode-repository-api 5.1.1 间接依赖 maven
org.jodd:jodd-core 5.1.6 间接依赖 maven
javax.activation:javax.activation-api 1.2.0 间接依赖 maven
org.springframework.boot:spring-boot-autoconfigure 3.0.5 间接依赖 maven
com.alibaba.nacos:nacos-encryption-plugin 2.2.1-RC 间接依赖 maven
org.apiguardian:apiguardian-api 1.1.0 间接依赖 maven
ch.qos.logback:logback-classic 1.4.6 间接依赖 maven
com.fasterxml.jackson.module:jackson-module-parameter-names 2.14.2 间接依赖 maven
org.apache.shardingsphere:shardingsphere-encrypt-distsql-handler 5.1.1 间接依赖 maven
net.bytebuddy:byte-buddy 1.12.23 间接依赖 maven
org.apache.groovy:groovy 4.0.10 间接依赖 maven
org.apache.shardingsphere:shardingsphere-encrypt-distsql-parser 5.1.1 间接依赖 maven
org.bouncycastle:bcprov-jdk15on 1.69 间接依赖 maven
com.baomidou:mybatis-plus-boot-starter 3.5.3 直接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-lite-core 3.0.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-db-discovery-opengauss 5.1.1 间接依赖 maven
org.bouncycastle:bcpkix-jdk15on 1.69 间接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-tracing-api 3.0.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sql-parser-postgresql 5.1.1 间接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-simple-executor 3.0.1 间接依赖 maven
de.codecentric:spring-boot-admin-server-ui 3.0.2 间接依赖 maven
org.apache.httpcomponents:httpcore-nio 4.4.16 间接依赖 maven
io.reactivex.rxjava3:rxjava 3.1.6 间接依赖 maven
org.springframework.boot:spring-boot-starter-thymeleaf 3.0.5 间接依赖 maven
org.bouncycastle:bcprov-jdk15on 1.70 间接依赖 maven
org.apache.shardingsphere:shardingsphere-shadow-core 5.1.1 间接依赖 maven
org.apache.tomcat.embed:tomcat-embed-websocket 10.1.7 间接依赖 maven
org.objenesis:objenesis 3.3 间接依赖 maven
io.github.openfeign:feign-core 12.1 间接依赖 maven
com.baomidou:mybatis-plus-core 3.5.3 间接依赖 maven
org.yaml:snakeyaml 1.33 间接依赖 maven
com.zaxxer:HikariCP 5.0.1 间接依赖 maven
io.projectreactor.addons:reactor-extra 3.5.1 间接依赖 maven
io.jsonwebtoken:jjwt-api 0.11.5 直接依赖 maven
com.alibaba.cloud:spring-cloud-alibaba-commons 2022.0.0.0-RC1 间接依赖 maven
net.minidev:accessors-smart 2.4.9 间接依赖 maven
io.netty:netty-codec-memcache 4.1.90.Final 间接依赖 maven
org.hibernate.validator:hibernate-validator 8.0.0.Final 直接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-error-handler-general 3.0.1 间接依赖 maven
org.redisson:redisson-spring-data-30 3.19.1 间接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-lite-lifecycle 3.0.1 间接依赖 maven
io.netty:netty-codec-redis 4.1.90.Final 间接依赖 maven
io.github.xxyopen:novel-news-api 2.0.0-SNAPSHOT 直接依赖 maven
org.apache.shardingsphere:shardingsphere-sql-parser-spi 5.1.1 间接依赖 maven
com.fasterxml.jackson.datatype:jackson-datatype-jdk8 2.14.2 间接依赖 maven
org.springframework:spring-beans 6.0.7 间接依赖 maven
org.webjars:webjars-locator-core 0.52 间接依赖 maven
com.google.uzaygezen:uzaygezen-core 0.2 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sharding-distsql-parser 5.1.1 间接依赖 maven
io.projectreactor.netty:reactor-netty-http 1.1.5 间接依赖 maven
org.aspectj:aspectjweaver 1.9.19 间接依赖 maven
jakarta.validation:jakarta.validation-api 3.0.2 间接依赖 maven
ch.qos.logback:logback-core 1.4.6 间接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-dataflow-executor 3.0.1 间接依赖 maven
com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config 2022.0.0.0-RC1 直接依赖 maven
com.mchange:mchange-commons-java 0.2.15 间接依赖 maven
commons-lang:commons-lang 2.4 间接依赖 maven
org.apache.shardingsphere:shardingsphere-shadow-distsql-statement 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-shadow-distsql-handler 5.1.1 间接依赖 maven
org.apache.calcite:calcite-linq4j 1.27.0 间接依赖 maven
org.apache.shardingsphere:shardingsphere-data-pipeline-core 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-readwrite-splitting-distsql-handler 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sharding-api 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-db-discovery-distsql-statement 5.1.1 间接依赖 maven
com.rabbitmq:amqp-client 5.16.0 间接依赖 maven
io.undertow:undertow-servlet 2.3.4.Final 间接依赖 maven
com.alibaba.csp:sentinel-core 1.8.6 间接依赖 maven
org.unbescape:unbescape 1.1.6.RELEASE 间接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-script-executor 3.0.1 间接依赖 maven
org.springframework.boot:spring-boot-actuator 3.0.5 间接依赖 maven
org.apache.shardingsphere:shardingsphere-jdbc-spring-boot-starter-infra 5.1.1 间接依赖 maven
org.codehaus.janino:janino 3.1.9 间接依赖 maven
org.apache.shardingsphere:shardingsphere-parser-spring-boot-starter 5.1.1 间接依赖 maven
org.springframework.data:spring-data-keyvalue 3.0.4 间接依赖 maven
org.jboss.xnio:xnio-nio 3.8.8.Final 间接依赖 maven
com.esotericsoftware:kryo 5.4.0 间接依赖 maven
com.google.guava:failureaccess 1.0.1 间接依赖 maven
com.jayway.jsonpath:json-path 2.7.0 间接依赖 maven
org.springframework.boot:spring-boot-starter-undertow 3.0.5 直接依赖 maven
org.slf4j:jul-to-slf4j 2.0.7 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sql-parser-opengauss 5.1.1 间接依赖 maven
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.14.2 间接依赖 maven
org.springframework:spring-jcl 6.0.7 间接依赖 maven
org.slf4j:jcl-over-slf4j 2.0.7 间接依赖 maven
com.alibaba:fastjson 1.2.83_noneautotype 间接依赖 maven
com.alibaba.cloud:spring-cloud-alibaba-sentinel-datasource 2022.0.0.0-RC1 间接依赖 maven
com.google.errorprone:error_prone_annotations 2.18.0 间接依赖 maven
org.springframework.cloud:spring-cloud-starter-loadbalancer 4.0.1 直接依赖 maven
org.apache.shardingsphere:shardingsphere-jdbc-core-spring-boot-starter 5.1.1 直接依赖 maven
org.springframework:spring-oxm 6.0.7 间接依赖 maven
org.apache.shardingsphere:shardingsphere-db-discovery-spring-boot-starter 5.1.1 间接依赖 maven
org.springframework:spring-expression 6.0.7 间接依赖 maven
com.fasterxml.jackson.core:jackson-core 2.14.2 间接依赖 maven
io.swagger.core.v3:swagger-models-jakarta 2.2.7 间接依赖 maven
org.apache.shardingsphere:shardingsphere-cluster-mode-repository-api 5.1.1 间接依赖 maven
org.jboss.marshalling:jboss-marshalling-river 2.0.11.Final 间接依赖 maven
io.swagger.core.v3:swagger-annotations-jakarta 2.2.7 间接依赖 maven
io.github.openfeign:feign-slf4j 12.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-db-discovery-api 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-traffic-core 5.1.1 间接依赖 maven
org.springframework.boot:spring-boot-starter-security 3.0.5 直接依赖 maven
org.apache.shardingsphere:shardingsphere-parser-core 5.1.1 间接依赖 maven
org.springframework.cloud:spring-cloud-starter-openfeign 4.0.1 直接依赖 maven
org.springdoc:springdoc-openapi-starter-webmvc-api 2.0.0 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sql-parser-statement 5.1.1 间接依赖 maven
javax.xml.bind:jaxb-api 2.3.0 间接依赖 maven
com.alibaba.csp:sentinel-reactor-adapter 1.8.6 间接依赖 maven
org.eclipse.angus:angus-activation 2.0.0 间接依赖 maven
io.undertow:undertow-websockets-jsr 2.3.4.Final 间接依赖 maven
com.google.guava:guava 30.0-jre 间接依赖 maven
co.elastic.clients:elasticsearch-java 8.2.0 直接依赖 maven
org.apache.shardingsphere.elasticjob:elasticjob-registry-center 3.0.1 间接依赖 maven
commons-codec:commons-codec 1.15 间接依赖 maven
io.undertow:undertow-core 2.3.4.Final 间接依赖 maven
org.apache.httpcomponents.core5:httpcore5 5.1.5 间接依赖 maven
org.redisson:redisson-spring-boot-starter 3.19.1 直接依赖 maven
com.alibaba.cloud:spring-cloud-starter-alibaba-sentinel 2022.0.0.0-RC1 直接依赖 maven
io.micrometer:micrometer-core 1.10.5 间接依赖 maven
org.springframework.boot:spring-boot-starter 3.0.5 间接依赖 maven
org.apache.shardingsphere:shardingsphere-infra-datetime-spi 5.1.1 间接依赖 maven
org.thymeleaf:thymeleaf 3.1.1.RELEASE 间接依赖 maven
org.apache.shardingsphere:shardingsphere-parser-api 5.1.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-system-datetime 5.1.1 间接依赖 maven
io.netty:netty-resolver 4.1.90.Final 间接依赖 maven
org.apache.shardingsphere:shardingsphere-authority-core 5.1.1 间接依赖 maven
org.apache.commons:commons-pool2 2.11.1 间接依赖 maven
org.apache.shardingsphere:shardingsphere-sql-parser-engine 5.1.1 间接依赖 maven
io.netty:netty-all 4.1.90.Final 间接依赖 maven
org.apache.shardingsphere:shardingsphere-db-discovery-mysql 5.1.1 间接依赖 maven
org.springframework.amqp:spring-rabbit 3.0.3 间接依赖 maven
com.alibaba.csp:sentinel-cluster-common-default 1.8.6 间接依赖 maven
org.apache.shardingsphere:shardingsphere-shadow-api 5.1.1 间接依赖 maven
io.vertx:vertx-mysql-client 4.2.3 间接依赖 maven
org.springframework.cloud:spring-cloud-starter-gateway 4.0.1 直接依赖 maven
org.apache.shardingsphere:shardingsphere-db-discovery-distsql-parser 5.1.1 间接依赖 maven
io.netty:netty-codec-http2 4.1.90.Final 间接依赖 maven
org.projectlombok:lombok 1.18.26 直接依赖 maven
org.springdoc:springdoc-openapi-starter-webmvc-ui 2.0.0 直接依赖 maven
io.netty:netty-handler 4.1.90.Final 间接依赖 maven
org.apache.shardingsphere:shardingsphere-traffic-api 5.1.1 间接依赖 maven
org.eclipse.parsson:parsson 1.0.0 间接依赖 maven
org.springframework.cloud:spring-cloud-commons 4.0.1 间接依赖 maven
net.minidev:json-smart 2.4.10 间接依赖 maven
javax.annotation:javax.annotation-api 1.3.2 间接依赖 maven
io.netty:netty-transport-udt 4.1.90.Final 间接依赖 maven
io.vertx:vertx-core 4.2.3 间接依赖 maven
org.apache.calcite:calcite-core 1.27.0 间接依赖 maven
org.apache.shardingsphere:shardingsphere-authority-api 5.1.1 间接依赖 maven
org.springframework.amqp:spring-amqp 3.0.3 间接依赖 maven
commons-io:commons-io 2.4 间接依赖 maven
(0)
上一篇 2023年10月23日
下一篇 2023年10月23日

相关推荐

  • xuejianxianzun/PixivBatchDownloader 软件分析报告

    基础信息 项目名称:xuejianxianzun/PixivBatchDownloader 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1720011173608947712/172001117414162432…

    软件分析 2023年11月2日
    0
  • pydata/xarray 软件分析报告

    基础信息 项目名称:pydata/xarray 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1756605738902810624/1756606046244630528 此报告由Murphysec提供 漏洞列表…

    软件分析 2024年2月11日
    0
  • floooh/oryol 软件分析报告

    基础信息 项目名称:floooh/oryol 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721201624566726656/1730335962075975680 此报告由Murphysec提供 漏洞列表 …

    软件分析 2023年12月1日
    0
  • hkbakke/bash-insulter 软件分析报告

    基础信息 项目名称:hkbakke/bash-insulter 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721258458421428224/1726487877474275328 此报告由Murphyse…

    软件分析 2023年11月20日
    0
  • FontCustom/fontcustom 软件分析报告

    基础信息 项目名称:FontCustom/fontcustom 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721205956196433920/1726251214788059136 此报告由Murphyse…

    软件分析 2023年11月19日
    0