Giter Club home page Giter Club logo

orion-kit's Introduction

Hi there 👋

🎉 Welcome to my GitHub profile, it's great to meet you here!

👨🏻‍💻 I'm Jiahang Li - a Java developer, orion-visororion-ops and orion-kit contributor.

💬 You can contact me on Email.

⭐ Welcome to my Site

✨ The orion-visor project has now contributed to the dromara community.

lijiahangmax

GitHub Snake Light

😎 View my contributions in 3D

GitHub Green Light

orion-kit's People

Contributors

lijiahangmax avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar

orion-kit's Issues

项目引用了org.jyaml:jyaml等243个开源组件,存在57个漏洞,建议升级

大佬,你好,我是@abbykimi,我IDE运行您这个项目的时候,提示有几个漏洞,项目调用了org.jyaml:jyaml等243个开源组件,存在57个安全漏洞,建议你升级下。

漏洞标题:JYaml 代码问题漏洞
漏洞编号:CVE-2020-8441
漏洞描述:
JYaml是一款用于使用Yaml文件格式的Java库。
JYaml 1.3及之前版本中存在安全漏洞。攻击者可借助恶意的payload利用该漏洞执行代码。
国家漏洞库信息:https://www.cnvd.org.cn/flaw/show/CNVD-2020-16494
影响范围:[0, ∞)
最小修复版本:
引入路径:
com.orion.kit:[email protected]>org.jyaml:[email protected]

另外56个漏洞 ,信息有点多我就不贴了,你自己看下完整报告:https://www.mfsec.cn/jr?p=a8ef3f

如果你对这个issues有任何疑问可以回复我哈( @abbykimi ),我会及时回复你的。

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.