Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

引用的开源组件存在2个安全风险 #33

Open
zycboss opened this issue May 26, 2022 · 0 comments
Open

引用的开源组件存在2个安全风险 #33

zycboss opened this issue May 26, 2022 · 0 comments

Comments

@zycboss
Copy link

zycboss commented May 26, 2022

目前我们发现该项目存在 2 个安全风险,因此提示您使用该开源项目前关注它的安全问题,避免对您开发的应用造成威胁

huisunan/epic4j 项目安全报告
项目地址:https://github.com/huisunan/epic4j
直接和间接引入的组件数量:28
存在安全缺陷的组件数量:2
涉及漏洞数量:2
风险组件列表:
组件 级别 版本 最小安全版本
org.springframework:spring-beans 高危 5.3.14 5.3.18
com.fasterxml.jackson.core:jackson-databind 中危 2.13.1 2.13.2.1
在线详细报告: https://www.oscs1024.com/cd/1525239149525733376?sign=e54b46d2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant