2026-05-10 - 2026-08-10

Overview

0 Active Pull Requests
14 Active Issues
Excluding merges, 1 author has pushed 1 commit to main and 1 commit to all branches. On main, 1298 files have changed and there have been 130805 additions and 0 deletions.

14 Issues created by 1 user

Opened #1 [CRITICAL] 安全:所有环境配置文件存在硬编码密码 2026-06-13 20:23:27 +08:00

Opened #2 [CRITICAL] 安全:所有 JDBC URL 启用 allowMultiQueries=true 2026-06-13 20:23:40 +08:00

Opened #3 [HIGH] 安全:ComponentController.getMapLocation 存在 SSRF 风险 2026-06-13 20:23:40 +08:00

Opened #4 [CRITICAL] 安全:加密秘钥 jugg.secret.key 硬编码 2026-06-13 20:23:40 +08:00

Opened #5 [HIGH] 安全:MyBatis ${} 动态表名存在 SQL 注入风险 2026-06-13 20:23:40 +08:00

Opened #6 [HIGH] 安全:多个 Selector 控制器端点缺少 @HasPermission 2026-06-13 20:23:40 +08:00

Opened #7 [MEDIUM] 安全:文件上传仅校验扩展名,无内容类型/魔数验证 2026-06-13 20:23:58 +08:00

Opened #8 [HIGH] 安全:所有环境 useSSL=false 数据库通信明文传输 2026-06-13 20:23:58 +08:00

Opened #9 [HIGH] 性能:3 个 SelectorController 中存在 14 处 N+1 查询 2026-06-13 20:23:58 +08:00

Opened #10 [HIGH] BUG:OrderDataToChartListener.convertBizType 未知订单类型导致 NPE 2026-06-13 20:23:58 +08:00

Opened #11 [HIGH] 开源合规:README 附加限制条款违反 Apache 2.0 许可证 2026-06-13 20:23:58 +08:00

Opened #12 [HIGH] 安全:remove-fixed-permissions=false 导致 admin 拥有通配符权限 2026-06-13 20:23:58 +08:00

Opened #13 [HIGH] 开源合规:全部 1,136 个 Java 文件缺少 Apache 2.0 版权声明头 2026-06-13 20:23:58 +08:00

Opened #14 [HIGH] BUG:MQ 监听器 catch Exception 后消息被 AUTO ACK 静默丢弃 2026-06-13 20:23:58 +08:00