Issues - yueqian-erp - 跃迁

yueqian/yueqian-erp

Labels Milestones New Issue

[HIGH] BUG：MQ 监听器 catch Exception 后消息被 AUTO ACK 静默丢弃

#14 opened 2026-06-13 20:23:58 +08:00 by zdh

[HIGH] 开源合规：全部 1,136 个 Java 文件缺少 Apache 2.0 版权声明头

#13 opened 2026-06-13 20:23:58 +08:00 by zdh

[HIGH] 安全：remove-fixed-permissions=false 导致 admin 拥有通配符权限

#12 opened 2026-06-13 20:23:58 +08:00 by zdh

[HIGH] 开源合规：README 附加限制条款违反 Apache 2.0 许可证

#11 opened 2026-06-13 20:23:58 +08:00 by zdh

[HIGH] BUG：OrderDataToChartListener.convertBizType 未知订单类型导致 NPE

#10 opened 2026-06-13 20:23:58 +08:00 by zdh

[HIGH] 性能：3 个 SelectorController 中存在 14 处 N+1 查询

#9 opened 2026-06-13 20:23:58 +08:00 by zdh

[HIGH] 安全：所有环境 useSSL=false 数据库通信明文传输

#8 opened 2026-06-13 20:23:58 +08:00 by zdh

[MEDIUM] 安全：文件上传仅校验扩展名，无内容类型/魔数验证

#7 opened 2026-06-13 20:23:58 +08:00 by zdh

[HIGH] 安全：多个 Selector 控制器端点缺少 @HasPermission

#6 opened 2026-06-13 20:23:40 +08:00 by zdh

[HIGH] 安全：MyBatis ${} 动态表名存在 SQL 注入风险

#5 opened 2026-06-13 20:23:40 +08:00 by zdh

[CRITICAL] 安全：加密秘钥 jugg.secret.key 硬编码

#4 opened 2026-06-13 20:23:40 +08:00 by zdh

[HIGH] 安全：ComponentController.getMapLocation 存在 SSRF 风险

#3 opened 2026-06-13 20:23:40 +08:00 by zdh

[CRITICAL] 安全：所有 JDBC URL 启用 allowMultiQueries=true

#2 opened 2026-06-13 20:23:40 +08:00 by zdh

[CRITICAL] 安全：所有环境配置文件存在硬编码密码

#1 opened 2026-06-13 20:23:27 +08:00 by zdh