ikubernetes / spring-boot-helloworld Goto Github PK

检测到 iKubernetes/spring-boot-helloWorld 一共引入了33个开源组件，存在70个漏洞

漏洞标题：FasterXML jackson-databind 代码问题漏洞
缺陷组件：com.fasterxml.jackson.core:[email protected]
漏洞编号：CVE-2019-16335
漏洞描述：FasterXML Jackson是美国FasterXML公司的一款适用于Java的数据处理工具。jackson-databind是其中的一个具有数据绑定功能的组件。
FasterXML jackson-databind 2.9.10之前版本中存在代码问题漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
国家漏洞库信息：https://www.cnvd.org.cn/flaw/show/CNVD-2019-37149
影响范围：[2.9.0, 2.9.10)
最小修复版本：2.9.10
缺陷组件引入路径：com.neo:[email protected]>org.springframework.boot:[email protected]>org.springframework.boot:[email protected]>com.fasterxml.jackson.core:[email protected]

另外还有70个漏洞，详细报告：https://mofeisec.com/jr?p=a69d64

[ERROR] Failures:
[ERROR] HelloTests.getHello:36 Response content
Expected: "Hello World"
but: was "Hello World from MageEdu.com"
[INFO]
[ERROR] Tests run: 3, Failures: 1, Errors: 0, Skipped: 0
[INFO]
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 20.945 s
[INFO] Finished at: 2022-10-25T16:35:44+08:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.apache.maven.plugins:maven-surefire-plugin:2.22.1:test (default-test) on project spring-boot-helloworld: There are test failures.
[ERROR]
[ERROR] Please refer to /var/lib/jenkins/workspace/pipeline-job1/target/surefire-reports for the individual test results.
[ERROR] Please refer to dump files (if any exist) [date].dump, [date]-jvmRun[N].dump and [date].dumpstream.
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles: