基础信息
项目名称：Athou/commafeed
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1716097789426712576/1716097792689881088
此报告由Murphysec提供
漏洞列表
| 漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
|---|---|---|---|---|
| Eclipse Jetty 资源管理错误漏洞 | 拒绝服务 | MPS-0e59-bdsi | CVE-2023-36478 | 高危 |
| google-oauth-java-client | 授权检查错误 | MPS-2020-10000 | CVE-2020-7692 | 严重 |
| Google google-oauth-java-client 数据伪造问题漏洞 | 密码学签名的验证不恰当 | MPS-2021-19070 | CVE-2021-22573 | 高危 |
| Eclipse Jetty URI注入漏洞 | 注入 | MPS-2022-18060 | CVE-2022-2047 | 低危 |
| node-semver 安全漏洞 | ReDoS | MPS-2022-5166 | CVE-2022-25883 | 高危 |
| snakeYAML | 栈缓冲区溢出 | MPS-2022-56041 | CVE-2022-38752 | 低危 |
| SnakeYAML | 栈缓冲区溢出 | MPS-2022-58478 | CVE-2022-41854 | 中危 |
| FasterXML jackson-databind 小于2.14.0-rc1拒绝服务漏洞 | 拒绝服务 | MPS-2022-58653 | CVE-2022-42003 | 中危 |
| H2 数据库明文密码问题 | 未授权敏感信息泄露 | MPS-2022-65204 | CVE-2022-45868 | 高危 |
| snakeYAML | 反序列化 | MPS-2022-9425 | CVE-2022-1471 | 高危 |
| Eclipse Jetty 资源管理错误漏洞 | 拒绝服务 | MPS-2023-4997 | CVE-2023-26048 | 中危 |
| Eclipse Jetty 信息泄露漏洞 | XSS | MPS-2023-4998 | CVE-2023-26049 | 中危 |
| Eclipse Jetty 安全漏洞 | MPS-49ot-3w07 | CVE-2023-40167 | 中危 | |
| Eclipse Jetty 安全漏洞 | 引号语法转义处理不恰当 | MPS-9q53-gmbl | CVE-2023-36479 | 中危 |
| JSON-Java 安全漏洞 | 不加限制或调节的资源分配 | MPS-m4ex-dja2 | CVE-2023-5072 | 高危 |
| Guava | 创建拥有不安全权限的临时文件 | MPS-mfku-xzh3 | CVE-2023-2976 | 中危 |
| 【存在争议】FasterXML jackson-databind 代码问题漏洞 | 不加限制或调节的资源分配 | MPS-z1bx-p8y2 | CVE-2023-35116 | 中危 |
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| com.fasterxml.jackson.core:jackson-databind | 2.13.5 | 2.14.0-rc1 | 间接依赖 | 建议修复 |
| com.google.oauth-client:google-oauth-client | 1.25.0 | 1.33.3 | 间接依赖 | 建议修复 |
| org.eclipse.jetty:jetty-server | 9.4.51.v20230217 | 12.0.0.beta0 | 间接依赖 | 建议修复 |
| org.yaml:snakeyaml | 1.31 | 2.0 | 间接依赖 | 建议修复 |
| semver | 5.7.1 | 7.5.2 | 间接依赖 | 可选修复 |
| com.h2database:h2 | 2.1.214 | 直接依赖 | 可选修复 | |
| org.eclipse.jetty:jetty-http | 9.4.51.v20230217 | 12.0.1 | 间接依赖 | 可选修复 |
| org.eclipse.jetty:jetty-servlets | 9.4.51.v20230217 | 11.0.16 | 间接依赖 | 可选修复 |
| com.google.guava:guava | 31.1-jre | 32.0.0-jre | 间接依赖 | 可选修复 |
| org.json:json | 20230227 | 间接依赖 | 可选修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| Apache-2.0 | 136 | 低 |
| MIT | 292 | 低 |
| EPL-2.0 | 17 | 低 |
| 自定义许可证 | 34 | 低 |
| BSD-2-Clause | 9 | 低 |
| ISC | 14 | 低 |
| EPL-1.0 | 26 | 低 |
| BSD-3-Clause | 13 | 低 |
| 0BSD | 1 | 低 |
| LGPL-2.1-or-later | 4 | 低 |
| CDDL-1.1 | 2 | 低 |
| LGPL-2.1 | 2 | 中 |
| Python-2.0 | 1 | 低 |
| MPL-2.0 | 2 | 低 |
| GPL-2.0 | 1 | 中 |
| Unlicense | 1 | 低 |
| MPL-1.1 | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| com.google.code.gson:gson | 2.10.1 | 间接依赖 | maven |
| @messageformat/parser | 5.0.0 | 间接依赖 | npm |
| react-router | 6.11.2 | 间接依赖 | npm |
| com.fasterxml.jackson.core:jackson-core | 2.13.5 | 间接依赖 | maven |
| jakarta.ws.rs:jakarta.ws.rs-api | 2.1.6 | 间接依赖 | maven |
| commons-codec:commons-codec | 1.15 | 直接依赖 | maven |
| url | 0.11.0 | 间接依赖 | npm |
| com.fasterxml.jackson.datatype:jackson-datatype-hibernate5 | 2.13.5 | 间接依赖 | maven |
| react-copy-to-clipboard | 5.1.0 | 间接依赖 | npm |
| use-local-storage | 3.0.0 | 间接依赖 | npm |
| org.netpreserve:urlcanon | 0.4.0 | 直接依赖 | maven |
| is-core-module | 2.12.0 | 间接依赖 | npm |
| jiti | 1.18.2 | 间接依赖 | npm |
| error-ex | 1.3.2 | 间接依赖 | npm |
| universalify | 2.0.0 | 间接依赖 | npm |
| hast-util-parse-selector | 2.2.5 | 间接依赖 | npm |
| @floating-ui/core | 1.2.6 | 间接依赖 | npm |
| org.slf4j:jul-to-slf4j | 1.7.36 | 间接依赖 | maven |
| org.glassfish.jersey.media:jersey-media-multipart | 2.39.1 | 间接依赖 | maven |
| to-fast-properties | 2.0.0 | 间接依赖 | npm |
| node-domexception | 1.0.0 | 间接依赖 | npm |
| ci-info | 2.0.0 | 间接依赖 | npm |
| react-style-singleton | 2.2.1 | 间接依赖 | npm |
| org.apache.commons:commons-collections4 | 4.4 | 直接依赖 | maven |
| whatwg-url | 5.0.0 | 间接依赖 | npm |
| url-parse | 1.5.10 | 间接依赖 | npm |
| react-debounce-input | 3.3.0 | 间接依赖 | npm |
| semver | 5.7.1 | 间接依赖 | npm |
| supports-preserve-symlinks-flag | 1.0.0 | 间接依赖 | npm |
| org.jvnet.staxex:stax-ex | 1.8 | 间接依赖 | maven |
| org.eclipse.jetty:jetty-jndi | 9.4.51.v20230217 | 间接依赖 | maven |
| @jest/types | 29.5.0 | 间接依赖 | npm |
| io.dropwizard:dropwizard-jersey | 2.1.6 | 间接依赖 | maven |
| org.eclipse.jetty.websocket:javax-websocket-server-impl | 9.4.51.v20230217 | 间接依赖 | maven |
| is-docker | 2.2.1 | 间接依赖 | npm |
| @swagger-api/apidom-ns-openapi-3-0 | 0.69.3 | 间接依赖 | npm |
| net.sourceforge.argparse4j:argparse4j | 0.9.0 | 间接依赖 | maven |
| io.swagger:swagger-annotations | 1.5.22 | 直接依赖 | maven |
| org.glassfish.jersey.containers:jersey-container-servlet | 2.39.1 | 间接依赖 | maven |
| sha.js | 2.4.11 | 间接依赖 | npm |
| stampit | 4.3.2 | 间接依赖 | npm |
| io.dropwizard:dropwizard-metrics | 2.1.6 | 间接依赖 | maven |
| import-fresh | 3.3.0 | 间接依赖 | npm |
| io.dropwizard:dropwizard-core | 2.1.6 | 直接依赖 | maven |
| @types/unist | 2.0.6 | 间接依赖 | npm |
| org.glassfish.jersey.core:jersey-server | 2.39.1 | 间接依赖 | maven |
| klaw-sync | 6.0.0 | 间接依赖 | npm |
| org.glassfish.hk2.external:aopalliance-repackaged | 2.6.1 | 间接依赖 | maven |
| org.ow2.asm:asm | 9.4 | 间接依赖 | maven |
| io.dropwizard:dropwizard-jackson | 2.1.6 | 间接依赖 | maven |
| org.eclipse.jetty:jetty-util-ajax | 9.4.51.v20230217 | 间接依赖 | maven |
| jakarta.annotation:jakarta.annotation-api | 1.3.5 | 间接依赖 | maven |
| react-async-hook | 4.0.0 | 间接依赖 | npm |
| com.helger:profiler | 1.1.1 | 间接依赖 | maven |
| at-least-node | 1.0.0 | 间接依赖 | npm |
| function-bind | 1.1.1 | 间接依赖 | npm |
| dayjs | 1.11.7 | 间接依赖 | npm |
| redux | 4.2.1 | 间接依赖 | npm |
| object-assign | 4.1.1 | 间接依赖 | npm |
| tr46 | 0.0.3 | 间接依赖 | npm |
| tslib | 2.5.0 | 间接依赖 | npm |
| com.sun.xml.fastinfoset:FastInfoset | 1.2.15 | 间接依赖 | maven |
| org.hibernate.common:hibernate-commons-annotations | 5.1.2.Final | 间接依赖 | maven |
| axios | 1.4.0 | 间接依赖 | npm |
| use-sidecar | 1.1.2 | 间接依赖 | npm |
| proxy-from-env | 1.1.0 | 间接依赖 | npm |
| node-fetch | 2.6.7 | 间接依赖 | npm |
| @types/prop-types | 15.7.5 | 间接依赖 | npm |
| @types/istanbul-lib-report | 3.0.0 | 间接依赖 | npm |
| @types/istanbul-reports | 3.0.1 | 间接依赖 | npm |
| com.github.ben-manes.caffeine:caffeine | 2.9.3 | 间接依赖 | maven |
| react-inspector | 6.0.1 | 间接依赖 | npm |
| com.mysql:mysql-connector-j | 8.0.33 | 直接依赖 | maven |
| has-flag | 4.0.0 | 间接依赖 | npm |
| org.jboss:jandex | 2.4.2.Final | 间接依赖 | maven |
| lowlight | 1.20.0 | 间接依赖 | npm |
| org.eclipse.jetty:jetty-security | 9.4.51.v20230217 | 间接依赖 | maven |
| find-root | 1.1.0 | 间接依赖 | npm |
| dom-helpers | 5.2.1 | 间接依赖 | npm |
| io.dropwizard.metrics:metrics-annotation | 4.2.18 | 间接依赖 | maven |
| swagger-ui-react | 4.18.3 | 间接依赖 | npm |
| io.dropwizard.metrics:metrics-jersey2 | 4.2.18 | 间接依赖 | maven |
| is-decimal | 1.0.4 | 间接依赖 | npm |
| com.infradna.tool:bridge-method-annotation | 1.13 | 间接依赖 | maven |
| commons-io:commons-io | 2.11.0 | 直接依赖 | maven |
| @emotion/use-insertion-effect-with-fallbacks | 1.0.1 | 间接依赖 | npm |
| ramda-adjunct | 4.0.0 | 间接依赖 | npm |
| toggle-selection | 1.0.6 | 间接依赖 | npm |
| org.w3c.css:sac | 1.3 | 间接依赖 | maven |
| com.fasterxml.jackson.module:jackson-module-blackbird | 2.13.5 | 间接依赖 | maven |
| qs | 6.11.1 | 间接依赖 | npm |
| com.querydsl:querydsl-core | 4.4.0 | 间接依赖 | maven |
| is-alphanumerical | 1.0.4 | 间接依赖 | npm |
| org.ow2.asm:asm-tree | 9.4 | 间接依赖 | maven |
| com.commafeed:commafeed-client | 3.10.0 | 直接依赖 | maven |
| webidl-conversions | 3.0.1 | 间接依赖 | npm |
| ch.qos.logback:logback-core | 1.2.12 | 间接依赖 | maven |
| ts-toolbelt | 9.6.0 | 间接依赖 | npm |
| @radix-ui/number | 1.0.0 | 间接依赖 | npm |
| combined-stream | 1.0.8 | 间接依赖 | npm |
| picomatch | 2.3.1 | 间接依赖 | npm |
| org.glassfish:jakarta.el | 3.0.4 | 间接依赖 | maven |
| org.jboss.spec.javax.transaction:jboss-transaction-api_1.2_spec | 1.1.1.Final | 间接依赖 | maven |
| react-transition-group | 4.4.2 | 间接依赖 | npm |
| org.glassfish.jersey.ext:jersey-metainf-services | 2.39.1 | 间接依赖 | maven |
| @mantine/spotlight | 6.0.11 | 间接依赖 | npm |
| org.liquibase:liquibase-core | 4.19.0 | 间接依赖 | maven |
| mousetrap | 1.6.5 | 间接依赖 | npm |
| balanced-match | 1.0.2 | 间接依赖 | npm |
| follow-redirects | 1.15.2 | 间接依赖 | npm |
| javax.inject:javax.inject | 1 | 间接依赖 | maven |
| io.github.hakky54:sslcontext-kickstart | 7.4.11 | 直接依赖 | maven |
| minimist | 1.2.8 | 间接依赖 | npm |
| jakarta.activation:jakarta.activation-api | 1.2.2 | 间接依赖 | maven |
| org.eclipse.jetty.websocket:websocket-common | 9.4.51.v20230217 | 间接依赖 | maven |
| micromatch | 4.0.2 | 间接依赖 | npm |
| @floating-ui/dom | 1.2.7 | 间接依赖 | npm |
| object-inspect | 1.12.3 | 间接依赖 | npm |
| io.dropwizard:dropwizard-jetty | 2.1.6 | 间接依赖 | maven |
| safe-buffer | 5.2.1 | 间接依赖 | npm |
| @lingui/message-utils | 4.1.2 | 间接依赖 | npm |
| com.rometools:rome-opml | 2.1.0 | 直接依赖 | maven |
| redux-thunk | 2.4.2 | 间接依赖 | npm |
| @braintree/sanitize-url | 6.0.2 | 间接依赖 | npm |
| com.rometools:rome-utils | 2.1.0 | 间接依赖 | maven |
| com.fasterxml.jackson.module:jackson-module-afterburner | 2.13.5 | 直接依赖 | maven |
| @mantine/hooks | 6.0.11 | 间接依赖 | npm |
| side-channel | 1.0.4 | 间接依赖 | npm |
| immer | 9.0.21 | 间接依赖 | npm |
| com.google.oauth-client:google-oauth-client | 1.25.0 | 间接依赖 | maven |
| dompurify | 3.0.2 | 间接依赖 | npm |
| slash | 2.0.0 | 间接依赖 | npm |
| org.glassfish.hk2:osgi-resource-locator | 1.0.3 | 间接依赖 | maven |
| @babel/highlight | 7.18.6 | 间接依赖 | npm |
| prismjs | 1.29.0 | 间接依赖 | npm |
| babel-plugin-macros | 3.1.0 | 间接依赖 | npm |
| org.yaml:snakeyaml | 1.31 | 间接依赖 | maven |
| yaml | 1.10.2 | 间接依赖 | npm |
| @radix-ui/react-direction | 1.0.0 | 间接依赖 | npm |
| org.eclipse.jetty:jetty-client | 9.4.51.v20230217 | 间接依赖 | maven |
| is-wsl | 2.2.0 | 间接依赖 | npm |
| resolve | 1.22.2 | 间接依赖 | npm |
| org.postgresql:postgresql | 42.6.0 | 直接依赖 | maven |
| io.dropwizard.metrics:metrics-jetty9 | 4.2.18 | 间接依赖 | maven |
| @types/parse-json | 4.0.0 | 间接依赖 | npm |
| callsites | 3.1.0 | 间接依赖 | npm |
| @swagger-api/apidom-json-pointer | 0.69.3 | 间接依赖 | npm |
| javax.xml.bind:jaxb-api | 2.3.0 | 直接依赖 | maven |
| is-ci | 2.0.0 | 间接依赖 | npm |
| is-plain-object | 5.0.0 | 间接依赖 | npm |
| @monaco-editor/loader | 1.3.3 | 间接依赖 | npm |
| to-regex-range | 5.0.1 | 间接依赖 | npm |
| io.dropwizard:dropwizard-configuration | 2.1.6 | 间接依赖 | maven |
| org.mariadb.jdbc:mariadb-java-client | 3.1.4 | 直接依赖 | maven |
| react-swipeable | 7.0.0 | 间接依赖 | npm |
| xml-but-prettier | 1.0.1 | 间接依赖 | npm |
| org.apache.commons:commons-lang3 | 3.12.0 | 间接依赖 | maven |
| punycode | 1.3.2 | 间接依赖 | npm |
| use-callback-ref | 1.3.0 | 间接依赖 | npm |
| leven | 3.1.0 | 间接依赖 | npm |
| find-yarn-workspace-root | 2.0.0 | 间接依赖 | npm |
| org.slf4j:slf4j-api | 1.7.36 | 直接依赖 | maven |
| @types/ramda | 0.29.0 | 间接依赖 | npm |
| @swagger-api/apidom-ast | 0.69.3 | 间接依赖 | npm |
| org.hibernate:hibernate-core | 5.6.15.Final | 间接依赖 | maven |
| be.tomcools:dropwizard-websocket-jee7-bundle | 2.1.6 | 直接依赖 | maven |
| io.whitfin:dottie | 1.0.0 | 间接依赖 | maven |
| @radix-ui/react-compose-refs | 1.0.0 | 间接依赖 | npm |
| @radix-ui/react-scroll-area | 1.0.2 | 间接依赖 | npm |
| javax.persistence:javax.persistence-api | 2.2 | 间接依赖 | maven |
| org.glassfish.jersey.core:jersey-common | 2.39.1 | 间接依赖 | maven |
| io.dropwizard:dropwizard-util | 2.1.6 | 间接依赖 | maven |
| @types/istanbul-lib-coverage | 2.0.4 | 间接依赖 | npm |
| org.jdom:jdom2 | 2.0.6.1 | 间接依赖 | maven |
| org.eclipse.jetty:jetty-annotations | 9.4.51.v20230217 | 间接依赖 | maven |
| react-dom | 18.2.0 | 间接依赖 | npm |
| deepmerge | 4.3.1 | 间接依赖 | npm |
| @radix-ui/react-presence | 1.0.0 | 间接依赖 | npm |
| get-intrinsic | 1.2.0 | 间接依赖 | npm |
| org.apache.commons:commons-jexl | 2.1.1 | 直接依赖 | maven |
| org.hibernate.validator:hibernate-validator | 6.2.5.Final | 间接依赖 | maven |
| org.eclipse.jetty:jetty-continuation | 9.4.51.v20230217 | 间接依赖 | maven |
| escape-string-regexp | 4.0.0 | 间接依赖 | npm |
| stylis | 4.2.0 | 间接依赖 | npm |
| org.eclipse.jetty:jetty-servlets | 9.4.51.v20230217 | 间接依赖 | maven |
| antlr:antlr | 2.7.7 | 间接依赖 | maven |
| org.eclipse.jetty:jetty-http | 9.4.51.v20230217 | 间接依赖 | maven |
| cross-spawn | 6.0.5 | 间接依赖 | npm |
| property-information | 5.6.0 | 间接依赖 | npm |
| character-reference-invalid | 1.1.4 | 间接依赖 | npm |
| io.dropwizard.logback:logback-throttling-appender | 1.1.9 | 间接依赖 | maven |
| css.escape | 1.5.1 | 间接依赖 | npm |
| org.glassfish.jersey.ext:jersey-bean-validation | 2.39.1 | 间接依赖 | maven |
| org.gwtproject:gwt-servlet | 2.10.0 | 直接依赖 | maven |
| cookie | 0.5.0 | 间接依赖 | npm |
| ansi-styles | 5.2.0 | 间接依赖 | npm |
| mime-types | 2.1.35 | 间接依赖 | npm |
| react-immutable-proptypes | 2.2.0 | 间接依赖 | npm |
| call-bind | 1.0.2 | 间接依赖 | npm |
| base64-js | 1.5.1 | 间接依赖 | npm |
| @mantine/styles | 6.0.11 | 间接依赖 | npm |
| com.fasterxml:classmate | 1.5.1 | 间接依赖 | maven |
| rimraf | 2.7.1 | 间接依赖 | npm |
| net.sourceforge.jtds:jtds | 1.3.1 | 直接依赖 | maven |
| form-data | 4.0.0 | 间接依赖 | npm |
| refractor | 3.6.0 | 间接依赖 | npm |
| com.google.inject:guice | 5.1.0 | 直接依赖 | maven |
| org.glassfish.jaxb:txw2 | 2.3.1 | 间接依赖 | maven |
| argparse | 2.0.1 | 间接依赖 | npm |
| scheduler | 0.23.0 | 间接依赖 | npm |
| @babel/code-frame | 7.21.4 | 间接依赖 | npm |
| invariant | 2.2.4 | 间接依赖 | npm |
| io.dropwizard.metrics:metrics-healthchecks | 4.2.18 | 间接依赖 | maven |
| javax.websocket:javax.websocket-client-api | 1.0 | 间接依赖 | maven |
| io.dropwizard.metrics:metrics-core | 4.2.18 | 间接依赖 | maven |
| react-ga4 | 2.1.0 | 间接依赖 | npm |
| com.google.code.findbugs:jsr305 | 3.0.2 | 间接依赖 | maven |
| io.dropwizard:dropwizard-forms | 2.1.6 | 直接依赖 | maven |
| ansi-styles | 4.3.0 | 间接依赖 | npm |
| aria-hidden | 1.2.3 | 间接依赖 | npm |
| @types/hast | 2.3.4 | 间接依赖 | npm |
| @mantine/core | 6.0.11 | 间接依赖 | npm |
| com.google.protobuf:protobuf-java | 3.21.9 | 间接依赖 | maven |
| graceful-fs | 4.2.11 | 间接依赖 | npm |
| react-infinite-scroller | 1.2.6 | 间接依赖 | npm |
| xtend | 4.0.2 | 间接依赖 | npm |
| serialize-error | 8.1.0 | 间接依赖 | npm |
| @emotion/react | 11.11.0 | 间接依赖 | npm |
| org.eclipse.jetty:jetty-servlet | 9.4.51.v20230217 | 间接依赖 | maven |
| net.bytebuddy:byte-buddy | 1.14.3 | 间接依赖 | maven |
| tmp | 0.0.33 | 间接依赖 | npm |
| @radix-ui/react-use-layout-effect | 1.0.0 | 间接依赖 | npm |
| org.jadira.usertype:usertype.core | 7.0.0.CR1 | 间接依赖 | maven |
| jakarta.servlet:jakarta.servlet-api | 4.0.4 | 间接依赖 | maven |
| org.passay:passay | 1.6.1 | 直接依赖 | maven |
| has-symbols | 1.0.3 | 间接依赖 | npm |
| org.eclipse.jetty.websocket:websocket-server | 9.4.51.v20230217 | 间接依赖 | maven |
| com.fasterxml.jackson.module:jackson-module-parameter-names | 2.13.5 | 间接依赖 | maven |
| org.glassfish.hk2:hk2-api | 2.6.1 | 间接依赖 | maven |
| @types/react | 18.2.6 | 间接依赖 | npm |
| org.eclipse.jetty.websocket:javax-websocket-client-impl | 9.4.51.v20230217 | 间接依赖 | maven |
| javax.activation:activation | 1.1 | 间接依赖 | maven |
| react-contexify | 6.0.0 | 间接依赖 | npm |
| aopalliance:aopalliance | 1.0 | 间接依赖 | maven |
| @babel/types | 7.21.5 | 间接依赖 | npm |
| repeat-string | 1.6.1 | 间接依赖 | npm |
| org.eclipse.jetty.websocket:websocket-servlet | 9.4.51.v20230217 | 间接依赖 | maven |
| @emotion/babel-plugin | 11.11.0 | 间接依赖 | npm |
| open | 7.4.2 | 间接依赖 | npm |
| com.fasterxml.jackson.datatype:jackson-datatype-joda | 2.13.5 | 间接依赖 | maven |
| io.dropwizard:dropwizard-servlets | 2.1.6 | 间接依赖 | maven |
| @emotion/cache | 11.11.0 | 间接依赖 | npm |
| com.google.errorprone:error_prone_annotations | 2.10.0 | 间接依赖 | maven |
| org.eclipse.jetty:jetty-xml | 9.4.51.v20230217 | 间接依赖 | maven |
| @mantine/utils | 6.0.11 | 间接依赖 | npm |
| glob | 7.2.3 | 间接依赖 | npm |
| detect-node-es | 1.1.0 | 间接依赖 | npm |
| use-composed-ref | 1.3.0 | 间接依赖 | npm |
| io.dropwizard:dropwizard-validation | 2.1.6 | 间接依赖 | maven |
| ieee754 | 1.2.1 | 间接依赖 | npm |
| @swagger-api/apidom-ns-openapi-3-1 | 0.69.3 | 间接依赖 | npm |
| com.fasterxml.jackson.core:jackson-databind | 2.13.5 | 间接依赖 | maven |
| use-latest | 1.2.1 | 间接依赖 | npm |
| format | 0.2.2 | 间接依赖 | npm |
| asynckit | 0.4.0 | 间接依赖 | npm |
| com.h2database:h2 | 2.1.214 | 直接依赖 | maven |
| @types/yargs-parser | 21.0.0 | 间接依赖 | npm |
| prop-types | 15.8.1 | 间接依赖 | npm |
| org.eclipse.jetty:jetty-webapp | 9.4.51.v20230217 | 间接依赖 | maven |
| react-syntax-highlighter | 15.5.0 | 间接依赖 | npm |
| react-remove-scroll | 2.5.6 | 间接依赖 | npm |
| requires-port | 1.0.0 | 间接依赖 | npm |
| @emotion/weak-memoize | 0.3.1 | 间接依赖 | npm |
| javax.annotation:javax.annotation-api | 1.3.2 | 间接依赖 | maven |
| path-is-absolute | 1.0.1 | 间接依赖 | npm |
| highlight.js | 10.7.3 | 间接依赖 | npm |
| lines-and-columns | 1.2.4 | 间接依赖 | npm |
| patch-package | 6.5.1 | 间接依赖 | npm |
| types-ramda | 0.29.2 | 间接依赖 | npm |
| com.github.waffle:waffle-jna | 3.2.0 | 间接依赖 | maven |
| is-hexadecimal | 1.0.4 | 间接依赖 | npm |
| ch.qos.logback:logback-classic | 1.2.12 | 间接依赖 | maven |
| io.dropwizard:dropwizard-hibernate | 2.1.6 | 直接依赖 | maven |
| cosmiconfig | 7.1.0 | 间接依赖 | npm |
| @radix-ui/primitive | 1.0.0 | 间接依赖 | npm |
| org.jadira.usertype:usertype.spi | 7.0.0.CR1 | 间接依赖 | maven |
| io.dropwizard.metrics:metrics-graphite | 4.2.18 | 直接依赖 | maven |
| js-tokens | 4.0.0 | 间接依赖 | npm |
| @radix-ui/react-primitive | 1.0.1 | 间接依赖 | npm |
| com.fasterxml.jackson.datatype:jackson-datatype-jdk8 | 2.13.5 | 间接依赖 | maven |
| concat-map | 0.0.1 | 间接依赖 | npm |
| io.dropwizard.metrics:metrics-jmx | 4.2.18 | 间接依赖 | maven |
| org.eclipse.jetty:jetty-plus | 9.4.51.v20230217 | 间接依赖 | maven |
| com.querydsl:querydsl-jpa | 4.4.0 | 直接依赖 | maven |
| parse-entities | 2.0.0 | 间接依赖 | npm |
| camelcase | 6.3.0 | 间接依赖 | npm |
| deep-extend | 0.6.0 | 间接依赖 | npm |
| redis.clients:jedis | 4.4.1 | 直接依赖 | maven |
| color-name | 1.1.4 | 间接依赖 | npm |
| get-nonce | 1.0.1 | 间接依赖 | npm |
| source-map | 0.5.7 | 间接依赖 | npm |
| pretty-format | 29.5.0 | 间接依赖 | npm |
| brace-expansion | 1.1.11 | 间接依赖 | npm |
| minimatch | 3.1.2 | 间接依赖 | npm |
| escape-html | 1.0.3 | 间接依赖 | npm |
| @emotion/hash | 0.9.1 | 间接依赖 | npm |
| path-parse | 1.0.7 | 间接依赖 | npm |
| com.mattbertolini:liquibase-slf4j | 5.0.0 | 间接依赖 | maven |
| space-separated-tokens | 1.1.5 | 间接依赖 | npm |
| ch.qos.logback:logback-access | 1.2.12 | 间接依赖 | maven |
| lodash | 4.17.21 | 间接依赖 | npm |
| core-js-pure | 3.30.2 | 间接依赖 | npm |
| re-resizable | 6.9.9 | 间接依赖 | npm |
| org.glassfish.jaxb:jaxb-runtime | 2.3.1 | 间接依赖 | maven |
| @emotion/memoize | 0.8.1 | 间接依赖 | npm |
| io.dropwizard:dropwizard-migrations | 2.1.6 | 直接依赖 | maven |
| org.glassfish.jersey.inject:jersey-hk2 | 2.39.1 | 间接依赖 | maven |
| @lingui/react | 4.1.2 | 间接依赖 | npm |
| @types/scheduler | 0.16.3 | 间接依赖 | npm |
| chalk | 2.4.2 | 间接依赖 | npm |
| org.eclipse.jetty.websocket:websocket-api | 9.4.51.v20230217 | 间接依赖 | maven |
| fs-extra | 9.1.0 | 间接依赖 | npm |
| character-entities | 1.2.4 | 间接依赖 | npm |
| traverse | 0.6.7 | 间接依赖 | npm |
| form-data-encoder | 1.9.0 | 间接依赖 | npm |
| @swagger-api/apidom-core | 0.69.3 | 间接依赖 | npm |
| supports-color | 7.2.0 | 间接依赖 | npm |
| redux-immutable | 4.0.0 | 间接依赖 | npm |
| com.rometools:rome-modules | 2.1.0 | 直接依赖 | maven |
| org.apache.tomcat:tomcat-juli | 9.0.73 | 间接依赖 | maven |
| jest-validate | 29.5.0 | 间接依赖 | npm |
| chalk | 4.1.2 | 间接依赖 | npm |
| org.json:json | 20230227 | 间接依赖 | maven |
| io.dropwizard:dropwizard-health | 2.1.6 | 间接依赖 | maven |
| fs.realpath | 1.0.0 | 间接依赖 | npm |
| delayed-stream | 1.0.0 | 间接依赖 | npm |
| ret | 0.2.2 | 间接依赖 | npm |
| tabbable | 6.1.2 | 间接依赖 | npm |
| io.dropwizard.metrics:metrics-json | 4.2.18 | 直接依赖 | maven |
| org.ahocorasick:ahocorasick | 0.6.3 | 直接依赖 | maven |
| io.dropwizard:dropwizard-assets | 2.1.6 | 直接依赖 | maven |
| minim | 0.23.8 | 间接依赖 | npm |
| react | 18.2.0 | 间接依赖 | npm |
| react-redux | 8.0.5 | 间接依赖 | npm |
| com.rabbitmq:amqp-client | 5.16.0 | 间接依赖 | maven |
| org.jsoup:jsoup | 1.15.4 | 直接依赖 | maven |
| io.dropwizard:dropwizard-request-logging | 2.1.6 | 间接依赖 | maven |
| jest-get-type | 29.4.3 | 间接依赖 | npm |
| has | 1.0.3 | 间接依赖 | npm |
| argparse | 1.0.10 | 间接依赖 | npm |
| inflight | 1.0.6 | 间接依赖 | npm |
| process | 0.11.10 | 间接依赖 | npm |
| org.apache.commons:commons-text | 1.10.0 | 间接依赖 | maven |
| io.dropwizard.metrics:metrics-jvm | 4.2.18 | 间接依赖 | maven |
| io.dropwizard:dropwizard-logging | 2.1.6 | 间接依赖 | maven |
| net.sourceforge.cssparser:cssparser | 0.9.30 | 直接依赖 | maven |
| org.eclipse.jetty:jetty-util | 9.4.51.v20230217 | 间接依赖 | maven |
| org.glassfish.jersey.core:jersey-client | 2.39.1 | 间接依赖 | maven |
| @emotion/utils | 1.2.1 | 间接依赖 | npm |
| @babel/helper-string-parser | 7.21.5 | 间接依赖 | npm |
| csstype | 3.0.9 | 间接依赖 | npm |
| @lingui/conf | 4.1.2 | 间接依赖 | npm |
| cross-fetch | 3.1.5 | 间接依赖 | npm |
| react-remove-scroll-bar | 2.3.4 | 间接依赖 | npm |
| character-entities-legacy | 1.1.4 | 间接依赖 | npm |
| loose-envify | 1.4.0 | 间接依赖 | npm |
| cosmiconfig | 8.1.3 | 间接依赖 | npm |
| com.google.api-client:google-api-client | 1.25.0 | 间接依赖 | maven |
| sprintf-js | 1.0.3 | 间接依赖 | npm |
| javax.websocket:javax.websocket-api | 1.1 | 间接依赖 | maven |
| org.ow2.asm:asm-commons | 9.4 | 间接依赖 | maven |
| @reduxjs/toolkit | 1.9.5 | 间接依赖 | npm |
| js-yaml | 4.1.0 | 间接依赖 | npm |
| @floating-ui/react-dom | 1.3.0 | 间接依赖 | npm |
| regenerator-runtime | 0.13.11 | 间接依赖 | npm |
| websocket-heartbeat-js | 1.1.2 | 间接依赖 | npm |
| com.google.guava:guava | 31.1-jre | 间接依赖 | maven |
| prismjs | 1.27.0 | 间接依赖 | npm |
| org.checkerframework:checker-qual | 3.32.0 | 间接依赖 | maven |
| classnames | 2.3.2 | 间接依赖 | npm |
| csstype | 3.1.2 | 间接依赖 | npm |
| is-number | 7.0.0 | 间接依赖 | npm |
| jakarta.xml.bind:jakarta.xml.bind-api | 2.3.3 | 间接依赖 | maven |
| io.dropwizard.metrics:metrics-servlets | 4.2.18 | 间接依赖 | maven |
| react-router-dom | 6.11.2 | 间接依赖 | npm |
| braces | 3.0.2 | 间接依赖 | npm |
| jakarta.validation:jakarta.validation-api | 2.0.2 | 间接依赖 | maven |
| @yarnpkg/lockfile | 1.1.0 | 间接依赖 | npm |
| type-fest | 0.20.2 | 间接依赖 | npm |
| org.jvnet.mimepull:mimepull | 1.9.15 | 间接依赖 | maven |
| react-is | 18.2.0 | 间接依赖 | npm |
| @swagger-api/apidom-reference | 0.69.3 | 间接依赖 | npm |
| js-file-download | 0.4.12 | 间接依赖 | npm |
| @mantine/form | 6.0.11 | 间接依赖 | npm |
| react-immutable-pure-component | 2.2.2 | 间接依赖 | npm |
| resolve-from | 4.0.0 | 间接依赖 | npm |
| org.glassfish.hk2:hk2-utils | 2.6.1 | 间接依赖 | maven |
| com.opencsv:opencsv | 5.7.1 | 间接依赖 | maven |
| @swagger-api/apidom-ns-json-schema-draft-4 | 0.69.3 | 间接依赖 | npm |
| org.apache.tomcat:tomcat-jdbc | 9.0.73 | 间接依赖 | maven |
| @mantine/modals | 6.0.11 | 间接依赖 | npm |
| @jest/schemas | 29.4.3 | 间接依赖 | npm |
| react-textarea-autosize | 8.3.4 | 间接依赖 | npm |
| fast-deep-equal | 3.1.3 | 间接依赖 | npm |
| clsx | 1.1.1 | 间接依赖 | npm |
| @radix-ui/react-use-callback-ref | 1.0.0 | 间接依赖 | npm |
| is-alphabetical | 1.0.4 | 间接依赖 | npm |
| klona | 2.0.6 | 间接依赖 | npm |
| lodash.get | 4.4.2 | 间接依赖 | npm |
| inherits | 2.0.4 | 间接依赖 | npm |
| com.google.http-client:google-http-client-jackson2 | 1.25.0 | 间接依赖 | maven |
| minimatch | 7.4.3 | 间接依赖 | npm |
| reselect | 4.1.8 | 间接依赖 | npm |
| com.sun.mail:javax.mail | 1.5.3 | 直接依赖 | maven |
| unraw | 2.0.1 | 间接依赖 | npm |
| state-local | 1.0.7 | 间接依赖 | npm |
| @emotion/unitless | 0.8.1 | 间接依赖 | npm |
| @monaco-editor/react | 4.5.1 | 间接依赖 | npm |
| org.apache.httpcomponents:httpcore | 4.4.16 | 间接依赖 | maven |
| com.google.http-client:google-http-client | 1.25.0 | 间接依赖 | maven |
| @babel/helper-validator-identifier | 7.19.1 | 间接依赖 | npm |
| mime-db | 1.52.0 | 间接依赖 | npm |
| org.eclipse.jetty:jetty-server | 9.4.51.v20230217 | 间接依赖 | maven |
| monaco-editor | 0.38.0 | 间接依赖 | npm |
| wrappy | 1.0.2 | 间接依赖 | npm |
| immutable | 3.8.2 | 间接依赖 | npm |
| @fontsource/open-sans | 5.0.1 | 间接依赖 | npm |
| @radix-ui/react-slot | 1.0.1 | 间接依赖 | npm |
| randexp | 0.5.3 | 间接依赖 | npm |
| @lingui/macro | 4.1.2 | 间接依赖 | npm |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | 2.13.5 | 间接依赖 | maven |
| xml | 1.0.1 | 间接依赖 | npm |
| net.java.dev.jna:jna-platform | 5.12.1 | 间接依赖 | maven |
| once | 1.4.0 | 间接依赖 | npm |
| io.dropwizard:dropwizard-lifecycle | 2.1.6 | 间接依赖 | maven |
| joda-time:joda-time | 2.12.4 | 间接依赖 | maven |
| ramda | 0.29.0 | 间接依赖 | npm |
| io.dropwizard:dropwizard-db | 2.1.6 | 间接依赖 | maven |
| parse-json | 5.2.0 | 间接依赖 | npm |
| @types/node | 20.1.0 | 间接依赖 | npm |
| use-isomorphic-layout-effect | 1.1.2 | 间接依赖 | npm |
| @radix-ui/react-context | 1.0.0 | 间接依赖 | npm |
| escape-string-regexp | 5.0.0 | 间接依赖 | npm |
| com.fasterxml.jackson.core:jackson-annotations | 2.13.5 | 间接依赖 | maven |
| comma-separated-tokens | 1.0.8 | 间接依赖 | npm |
| json-parse-even-better-errors | 2.3.1 | 间接依赖 | npm |
| remarkable | 2.0.1 | 间接依赖 | npm |
| @babel/helper-module-imports | 7.21.4 | 间接依赖 | npm |
| org.eclipse.jetty.websocket:websocket-client | 9.4.51.v20230217 | 间接依赖 | maven |
| clsx | 1.2.1 | 间接依赖 | npm |
| com.google.guava:listenablefuture | 9999.0-empty-to-avoid-conflict-with-guava | 间接依赖 | maven |
| @babel/runtime-corejs3 | 7.21.5 | 间接依赖 | npm |
| @types/hoist-non-react-statics | 3.3.1 | 间接依赖 | npm |
| @types/use-sync-external-store | 0.0.3 | 间接依赖 | npm |
| zenscroll | 4.0.2 | 间接依赖 | npm |
| moo | 0.5.2 | 间接依赖 | npm |
| io.whitfin:dropwizard-environment-substitutor | 1.1.1 | 直接依赖 | maven |
| io.whitfin:dot-notes | 3.1.3 | 间接依赖 | maven |
| org.apache.httpcomponents:httpclient | 4.5.14 | 直接依赖 | maven |
| com.mysema.commons:mysema-commons-lang | 0.2.4 | 间接依赖 | maven |
| use-sync-external-store | 1.2.0 | 间接依赖 | npm |
| parent-module | 1.0.1 | 间接依赖 | npm |
| io.dropwizard.metrics:metrics-logback | 4.2.18 | 间接依赖 | maven |
| net.java.dev.jna:jna | 5.12.1 | 间接依赖 | maven |
| axios | 1.3.6 | 间接依赖 | npm |
| os-tmpdir | 1.0.2 | 间接依赖 | npm |
| jsonfile | 6.1.0 | 间接依赖 | npm |
| drange | 1.1.1 | 间接依赖 | npm |
| @mantine/notifications | 6.0.11 | 间接依赖 | npm |
| fault | 1.0.4 | 间接依赖 | npm |
| randombytes | 2.1.0 | 间接依赖 | npm |
| autolinker | 3.16.2 | 间接依赖 | npm |
| short-unique-id | 4.4.4 | 间接依赖 | npm |
| color-convert | 2.0.1 | 间接依赖 | npm |
| com.google.guava:failureaccess | 1.0.1 | 间接依赖 | maven |
| org.glassfish.hk2:hk2-locator | 2.6.1 | 间接依赖 | maven |
| tinycon | 0.6.8 | 间接依赖 | npm |
| @emotion/serialize | 1.1.2 | 间接依赖 | npm |
| hoist-non-react-statics | 3.3.2 | 间接依赖 | npm |
| fast-json-patch | 3.1.1 | 间接依赖 | npm |
| formdata-node | 4.4.1 | 间接依赖 | npm |
| com.google.apis:google-api-services-youtube | v3-rev222-1.25.0 | 直接依赖 | maven |
| @lingui/core | 4.1.2 | 间接依赖 | npm |
| interweave | 13.1.0 | 间接依赖 | npm |
| lodash.debounce | 4.0.8 | 间接依赖 | npm |
| fill-range | 7.0.1 | 间接依赖 | npm |
| @emotion/sheet | 1.2.2 | 间接依赖 | npm |
| web-streams-polyfill | 4.0.0-beta.3 | 间接依赖 | npm |
| path-type | 4.0.0 | 间接依赖 | npm |
| org.apache.commons:commons-math3 | 3.6.1 | 直接依赖 | maven |
| org.jboss.logging:jboss-logging | 3.4.1.Final | 间接依赖 | maven |
| @babel/runtime | 7.21.5 | 间接依赖 | npm |
| com.ibm.icu:icu4j | 73.1 | 直接依赖 | maven |
| is-arrayish | 0.2.1 | 间接依赖 | npm |
| @types/yargs | 17.0.24 | 间接依赖 | npm |
| hastscript | 6.0.0 | 间接依赖 | npm |
| @remix-run/router | 1.6.2 | 间接依赖 | npm |
| @sinclair/typebox | 0.25.24 | 间接依赖 | npm |
| swagger-client | 3.19.7 | 间接依赖 | npm |
| com.fasterxml.jackson.dataformat:jackson-dataformat-yaml | 2.13.5 | 间接依赖 | maven |
| org.eclipse.jetty.toolchain.setuid:jetty-setuid-java | 1.0.4 | 间接依赖 | maven |
| org.apache.commons:commons-pool2 | 2.11.1 | 间接依赖 | maven |
| org.javassist:javassist | 3.29.2-GA | 间接依赖 | maven |
| convert-source-map | 1.9.0 | 间接依赖 | npm |
| copy-to-clipboard | 3.3.3 | 间接依赖 | npm |
| querystringify | 2.2.0 | 间接依赖 | npm |
| react-is | 16.13.1 | 间接依赖 | npm |
| react-icons | 4.8.0 | 间接依赖 | npm |
| com.sun.istack:istack-commons-runtime | 3.0.7 | 间接依赖 | maven |
| @floating-ui/react | 0.19.2 | 间接依赖 | npm |
| org.slf4j:jcl-over-slf4j | 1.7.36 | 直接依赖 | maven |
| org.slf4j:log4j-over-slf4j | 1.7.36 | 间接依赖 | maven |
| jakarta.inject:jakarta.inject-api | 1.0.5 | 间接依赖 | maven |
| com.rometools:rome | 2.1.0 | 直接依赖 | maven |
| nice-try | 1.0.5 | 间接依赖 | npm |
| com.google.j2objc:j2objc-annotations | 1.3 | 间接依赖 | maven |
| throttle-debounce | 5.0.0 | 间接依赖 | npm |
| querystring | 0.2.0 | 间接依赖 | npm |