docs(security): 최신 의존성 권고와 NVD 실시간 대조 결과 기록
WAR 43개 JAR의 81개 좌표 조회와 NVD 28 CVE 대조. 실제 악용 조건과 영향 버전을 구분하고 캐시 0건을 출시 근거에서 제외. Co-Authored-By: Codex <noreply@openai.com>
This commit is contained in:
parent
16ccad7867
commit
da82edf6ec
|
|
@ -0,0 +1,80 @@
|
|||
|
||||
The following files have been resolved:
|
||||
org.springframework.boot:spring-boot-starter-web:jar:3.5.16:compile -- module spring.boot.starter.web [auto]
|
||||
org.springframework.boot:spring-boot-starter:jar:3.5.16:compile -- module spring.boot.starter [auto]
|
||||
org.springframework.boot:spring-boot:jar:3.5.16:compile -- module spring.boot [auto]
|
||||
org.springframework.boot:spring-boot-autoconfigure:jar:3.5.16:compile -- module spring.boot.autoconfigure [auto]
|
||||
org.springframework.boot:spring-boot-starter-logging:jar:3.5.16:compile -- module spring.boot.starter.logging [auto]
|
||||
ch.qos.logback:logback-classic:jar:1.5.34:compile -- module ch.qos.logback.classic
|
||||
ch.qos.logback:logback-core:jar:1.5.34:compile -- module ch.qos.logback.core
|
||||
org.apache.logging.log4j:log4j-to-slf4j:jar:2.24.3:compile -- module org.apache.logging.log4j.to.slf4j
|
||||
org.apache.logging.log4j:log4j-api:jar:2.24.3:compile -- module org.apache.logging.log4j
|
||||
org.slf4j:jul-to-slf4j:jar:2.0.18:compile -- module jul.to.slf4j
|
||||
org.yaml:snakeyaml:jar:2.4:compile -- module org.yaml.snakeyaml
|
||||
org.springframework.boot:spring-boot-starter-json:jar:3.5.16:compile -- module spring.boot.starter.json [auto]
|
||||
com.fasterxml.jackson.core:jackson-databind:jar:2.21.4:compile -- module com.fasterxml.jackson.databind
|
||||
com.fasterxml.jackson.core:jackson-annotations:jar:2.21:compile -- module com.fasterxml.jackson.annotation
|
||||
com.fasterxml.jackson.core:jackson-core:jar:2.21.4:compile -- module com.fasterxml.jackson.core
|
||||
com.fasterxml.jackson.datatype:jackson-datatype-jdk8:jar:2.21.4:compile -- module com.fasterxml.jackson.datatype.jdk8
|
||||
com.fasterxml.jackson.datatype:jackson-datatype-jsr310:jar:2.21.4:compile -- module com.fasterxml.jackson.datatype.jsr310
|
||||
com.fasterxml.jackson.module:jackson-module-parameter-names:jar:2.21.4:compile -- module com.fasterxml.jackson.module.paramnames
|
||||
org.springframework:spring-web:jar:6.2.19:compile -- module spring.web [auto]
|
||||
org.springframework:spring-beans:jar:6.2.19:compile -- module spring.beans [auto]
|
||||
io.micrometer:micrometer-observation:jar:1.15.12:compile -- module micrometer.observation [auto]
|
||||
io.micrometer:micrometer-commons:jar:1.15.12:compile -- module micrometer.commons [auto]
|
||||
org.springframework:spring-webmvc:jar:6.2.19:compile -- module spring.webmvc [auto]
|
||||
org.springframework:spring-aop:jar:6.2.19:compile -- module spring.aop [auto]
|
||||
org.springframework:spring-context:jar:6.2.19:compile -- module spring.context [auto]
|
||||
org.springframework:spring-expression:jar:6.2.19:compile -- module spring.expression [auto]
|
||||
org.mybatis.spring.boot:mybatis-spring-boot-starter:jar:3.0.5:compile -- module org.mybatis.spring.boot.starter [auto]
|
||||
org.springframework.boot:spring-boot-starter-jdbc:jar:3.5.16:compile -- module spring.boot.starter.jdbc [auto]
|
||||
com.zaxxer:HikariCP:jar:6.3.3:compile -- module com.zaxxer.hikari
|
||||
org.springframework:spring-jdbc:jar:6.2.19:compile -- module spring.jdbc [auto]
|
||||
org.springframework:spring-tx:jar:6.2.19:compile -- module spring.tx [auto]
|
||||
org.mybatis.spring.boot:mybatis-spring-boot-autoconfigure:jar:3.0.5:compile -- module org.mybatis.spring.boot.autoconfigure [auto]
|
||||
org.mybatis:mybatis:jar:3.5.19:compile -- module org.mybatis [auto]
|
||||
org.mybatis:mybatis-spring:jar:3.0.5:compile -- module org.mybatis.spring [auto]
|
||||
org.postgresql:postgresql:jar:42.7.11:runtime -- module org.postgresql.jdbc [auto]
|
||||
org.apache.tomcat.embed:tomcat-embed-jasper:jar:10.1.55:compile -- module org.apache.tomcat.embed.jasper
|
||||
org.apache.tomcat.embed:tomcat-embed-core:jar:10.1.55:compile -- module org.apache.tomcat.embed.core
|
||||
org.apache.tomcat:tomcat-annotations-api:jar:10.1.55:compile -- module jakarta.annotation
|
||||
org.apache.tomcat.embed:tomcat-embed-el:jar:10.1.55:compile -- module org.apache.tomcat.embed.el
|
||||
org.eclipse.jdt:ecj:jar:3.33.0:compile -- module org.eclipse.jdt.core.compiler.batch [auto]
|
||||
org.projectlombok:lombok:jar:1.18.46:compile (optional) -- module lombok
|
||||
org.springframework.boot:spring-boot-starter-tomcat:jar:3.5.16:provided -- module spring.boot.starter.tomcat [auto]
|
||||
jakarta.annotation:jakarta.annotation-api:jar:2.1.1:compile -- module jakarta.annotation
|
||||
org.apache.tomcat.embed:tomcat-embed-websocket:jar:10.1.55:provided -- module org.apache.tomcat.embed.websocket
|
||||
org.springframework.boot:spring-boot-starter-test:jar:3.5.16:test -- module spring.boot.starter.test [auto]
|
||||
org.springframework.boot:spring-boot-test:jar:3.5.16:test -- module spring.boot.test [auto]
|
||||
org.springframework.boot:spring-boot-test-autoconfigure:jar:3.5.16:test -- module spring.boot.test.autoconfigure [auto]
|
||||
com.jayway.jsonpath:json-path:jar:2.9.0:test -- module json.path [auto]
|
||||
org.slf4j:slf4j-api:jar:2.0.18:compile -- module org.slf4j
|
||||
jakarta.xml.bind:jakarta.xml.bind-api:jar:4.0.5:test -- module jakarta.xml.bind
|
||||
jakarta.activation:jakarta.activation-api:jar:2.1.4:test -- module jakarta.activation
|
||||
net.minidev:json-smart:jar:2.5.2:test -- module json.smart (auto)
|
||||
net.minidev:accessors-smart:jar:2.5.2:test -- module accessors.smart (auto)
|
||||
org.ow2.asm:asm:jar:9.7.1:test -- module org.objectweb.asm
|
||||
org.assertj:assertj-core:jar:3.27.7:test -- module org.assertj.core
|
||||
net.bytebuddy:byte-buddy:jar:1.17.8:test -- module net.bytebuddy
|
||||
org.awaitility:awaitility:jar:4.2.2:test -- module awaitility (auto)
|
||||
org.hamcrest:hamcrest:jar:3.0:test -- module org.hamcrest [auto]
|
||||
org.junit.jupiter:junit-jupiter:jar:5.12.2:test -- module org.junit.jupiter
|
||||
org.junit.jupiter:junit-jupiter-api:jar:5.12.2:test -- module org.junit.jupiter.api
|
||||
org.opentest4j:opentest4j:jar:1.3.0:test -- module org.opentest4j
|
||||
org.junit.platform:junit-platform-commons:jar:1.12.2:test -- module org.junit.platform.commons
|
||||
org.apiguardian:apiguardian-api:jar:1.1.2:test -- module org.apiguardian.api
|
||||
org.junit.jupiter:junit-jupiter-params:jar:5.12.2:test -- module org.junit.jupiter.params
|
||||
org.junit.jupiter:junit-jupiter-engine:jar:5.12.2:test -- module org.junit.jupiter.engine
|
||||
org.junit.platform:junit-platform-engine:jar:1.12.2:test -- module org.junit.platform.engine
|
||||
org.mockito:mockito-core:jar:5.17.0:test -- module org.mockito
|
||||
net.bytebuddy:byte-buddy-agent:jar:1.17.8:test -- module net.bytebuddy.agent
|
||||
org.objenesis:objenesis:jar:3.3:test -- module org.objenesis [auto]
|
||||
org.mockito:mockito-junit-jupiter:jar:5.17.0:test -- module org.mockito.junit.jupiter
|
||||
org.skyscreamer:jsonassert:jar:1.5.3:test -- module jsonassert (auto)
|
||||
com.vaadin.external.google:android-json:jar:0.0.20131108.vaadin1:test -- module android.json (auto)
|
||||
org.springframework:spring-core:jar:6.2.19:compile -- module spring.core [auto]
|
||||
org.springframework:spring-jcl:jar:6.2.19:compile -- module spring.jcl [auto]
|
||||
org.springframework:spring-test:jar:6.2.19:test -- module spring.test [auto]
|
||||
org.xmlunit:xmlunit-core:jar:2.10.4:test -- module org.xmlunit [auto]
|
||||
org.commonmark:commonmark:jar:0.22.0:compile -- module org.commonmark
|
||||
org.jsoup:jsoup:jar:1.17.2:compile -- module org.jsoup
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because one or more lines are too long
|
|
@ -0,0 +1,624 @@
|
|||
{
|
||||
"checked_at": "2026-09-22T02:53:22.121058+00:00",
|
||||
"source": "https://api.osv.dev/v1/querybatch",
|
||||
"packages": [
|
||||
{
|
||||
"name": "org.springframework.boot:spring-boot-starter-web",
|
||||
"version": "3.5.16",
|
||||
"scope": "compile",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework.boot:spring-boot-starter",
|
||||
"version": "3.5.16",
|
||||
"scope": "compile",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework.boot:spring-boot",
|
||||
"version": "3.5.16",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework.boot:spring-boot-autoconfigure",
|
||||
"version": "3.5.16",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework.boot:spring-boot-starter-logging",
|
||||
"version": "3.5.16",
|
||||
"scope": "compile",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "ch.qos.logback:logback-classic",
|
||||
"version": "1.5.34",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "ch.qos.logback:logback-core",
|
||||
"version": "1.5.34",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.apache.logging.log4j:log4j-to-slf4j",
|
||||
"version": "2.24.3",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.apache.logging.log4j:log4j-api",
|
||||
"version": "2.24.3",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {
|
||||
"vulns": [
|
||||
{
|
||||
"id": "GHSA-qv9r-c865-cp47",
|
||||
"modified": "2026-09-10T03:50:52.972700Z"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "org.slf4j:jul-to-slf4j",
|
||||
"version": "2.0.18",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.yaml:snakeyaml",
|
||||
"version": "2.4",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework.boot:spring-boot-starter-json",
|
||||
"version": "3.5.16",
|
||||
"scope": "compile",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "com.fasterxml.jackson.core:jackson-databind",
|
||||
"version": "2.21.4",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {
|
||||
"vulns": [
|
||||
{
|
||||
"id": "GHSA-5gvw-p9qm-jgwh",
|
||||
"modified": "2026-09-10T03:51:10.658074Z"
|
||||
},
|
||||
{
|
||||
"id": "GHSA-5jmj-h7xm-6q6v",
|
||||
"modified": "2026-09-10T03:51:08.069993Z"
|
||||
},
|
||||
{
|
||||
"id": "GHSA-mhm7-754m-9p8w",
|
||||
"modified": "2026-09-10T03:50:52.852212Z"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "com.fasterxml.jackson.core:jackson-annotations",
|
||||
"version": "2.21",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "com.fasterxml.jackson.core:jackson-core",
|
||||
"version": "2.21.4",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "com.fasterxml.jackson.datatype:jackson-datatype-jdk8",
|
||||
"version": "2.21.4",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "com.fasterxml.jackson.datatype:jackson-datatype-jsr310",
|
||||
"version": "2.21.4",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "com.fasterxml.jackson.module:jackson-module-parameter-names",
|
||||
"version": "2.21.4",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework:spring-web",
|
||||
"version": "6.2.19",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework:spring-beans",
|
||||
"version": "6.2.19",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "io.micrometer:micrometer-observation",
|
||||
"version": "1.15.12",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "io.micrometer:micrometer-commons",
|
||||
"version": "1.15.12",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework:spring-webmvc",
|
||||
"version": "6.2.19",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework:spring-aop",
|
||||
"version": "6.2.19",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework:spring-context",
|
||||
"version": "6.2.19",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework:spring-expression",
|
||||
"version": "6.2.19",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.mybatis.spring.boot:mybatis-spring-boot-starter",
|
||||
"version": "3.0.5",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework.boot:spring-boot-starter-jdbc",
|
||||
"version": "3.5.16",
|
||||
"scope": "compile",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "com.zaxxer:HikariCP",
|
||||
"version": "6.3.3",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework:spring-jdbc",
|
||||
"version": "6.2.19",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework:spring-tx",
|
||||
"version": "6.2.19",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.mybatis.spring.boot:mybatis-spring-boot-autoconfigure",
|
||||
"version": "3.0.5",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.mybatis:mybatis",
|
||||
"version": "3.5.19",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.mybatis:mybatis-spring",
|
||||
"version": "3.0.5",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.postgresql:postgresql",
|
||||
"version": "42.7.11",
|
||||
"scope": "runtime",
|
||||
"in_war": true,
|
||||
"result": {
|
||||
"vulns": [
|
||||
{
|
||||
"id": "GHSA-j92g-9f8w-j867",
|
||||
"modified": "2026-09-10T03:50:12.377062Z"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "org.apache.tomcat.embed:tomcat-embed-jasper",
|
||||
"version": "10.1.55",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.apache.tomcat.embed:tomcat-embed-core",
|
||||
"version": "10.1.55",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {
|
||||
"vulns": [
|
||||
{
|
||||
"id": "GHSA-9xv2-5v5q-p794",
|
||||
"modified": "2026-09-11T08:25:52.825871Z"
|
||||
},
|
||||
{
|
||||
"id": "GHSA-gcx9-497g-6cp6",
|
||||
"modified": "2026-09-11T08:25:41.300012Z"
|
||||
},
|
||||
{
|
||||
"id": "GHSA-h3x4-894j-xpx5",
|
||||
"modified": "2026-09-11T08:25:40.118635Z"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "org.apache.tomcat:tomcat-annotations-api",
|
||||
"version": "10.1.55",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.apache.tomcat.embed:tomcat-embed-el",
|
||||
"version": "10.1.55",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.eclipse.jdt:ecj",
|
||||
"version": "3.33.0",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.projectlombok:lombok",
|
||||
"version": "1.18.46",
|
||||
"scope": "compile",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework.boot:spring-boot-starter-tomcat",
|
||||
"version": "3.5.16",
|
||||
"scope": "provided",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "jakarta.annotation:jakarta.annotation-api",
|
||||
"version": "2.1.1",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.apache.tomcat.embed:tomcat-embed-websocket",
|
||||
"version": "10.1.55",
|
||||
"scope": "provided",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework.boot:spring-boot-starter-test",
|
||||
"version": "3.5.16",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework.boot:spring-boot-test",
|
||||
"version": "3.5.16",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework.boot:spring-boot-test-autoconfigure",
|
||||
"version": "3.5.16",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "com.jayway.jsonpath:json-path",
|
||||
"version": "2.9.0",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.slf4j:slf4j-api",
|
||||
"version": "2.0.18",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "jakarta.xml.bind:jakarta.xml.bind-api",
|
||||
"version": "4.0.5",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "jakarta.activation:jakarta.activation-api",
|
||||
"version": "2.1.4",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "net.minidev:json-smart",
|
||||
"version": "2.5.2",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "net.minidev:accessors-smart",
|
||||
"version": "2.5.2",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.ow2.asm:asm",
|
||||
"version": "9.7.1",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.assertj:assertj-core",
|
||||
"version": "3.27.7",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "net.bytebuddy:byte-buddy",
|
||||
"version": "1.17.8",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.awaitility:awaitility",
|
||||
"version": "4.2.2",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.hamcrest:hamcrest",
|
||||
"version": "3.0",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.junit.jupiter:junit-jupiter",
|
||||
"version": "5.12.2",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.junit.jupiter:junit-jupiter-api",
|
||||
"version": "5.12.2",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.opentest4j:opentest4j",
|
||||
"version": "1.3.0",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.junit.platform:junit-platform-commons",
|
||||
"version": "1.12.2",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.apiguardian:apiguardian-api",
|
||||
"version": "1.1.2",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.junit.jupiter:junit-jupiter-params",
|
||||
"version": "5.12.2",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.junit.jupiter:junit-jupiter-engine",
|
||||
"version": "5.12.2",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.junit.platform:junit-platform-engine",
|
||||
"version": "1.12.2",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.mockito:mockito-core",
|
||||
"version": "5.17.0",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "net.bytebuddy:byte-buddy-agent",
|
||||
"version": "1.17.8",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.objenesis:objenesis",
|
||||
"version": "3.3",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.mockito:mockito-junit-jupiter",
|
||||
"version": "5.17.0",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.skyscreamer:jsonassert",
|
||||
"version": "1.5.3",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "com.vaadin.external.google:android-json",
|
||||
"version": "0.0.20131108.vaadin1",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework:spring-core",
|
||||
"version": "6.2.19",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework:spring-jcl",
|
||||
"version": "6.2.19",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework:spring-test",
|
||||
"version": "6.2.19",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.xmlunit:xmlunit-core",
|
||||
"version": "2.10.4",
|
||||
"scope": "test",
|
||||
"in_war": false,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.commonmark:commonmark",
|
||||
"version": "0.22.0",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.jsoup:jsoup",
|
||||
"version": "1.17.2",
|
||||
"scope": "compile",
|
||||
"in_war": true,
|
||||
"result": {
|
||||
"vulns": [
|
||||
{
|
||||
"id": "GHSA-pmhh-3w7g-xqp8",
|
||||
"modified": "2026-09-10T03:50:53.809983Z"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "ognl:ognl",
|
||||
"version": "3.4.4",
|
||||
"scope": "shaded",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.javassist:javassist",
|
||||
"version": "3.30.2-GA",
|
||||
"scope": "shaded",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
},
|
||||
{
|
||||
"name": "org.springframework.boot:spring-boot-jarmode-tools",
|
||||
"version": "3.5.16",
|
||||
"scope": "packaged-tool",
|
||||
"in_war": true,
|
||||
"result": {}
|
||||
}
|
||||
]
|
||||
}
|
||||
|
|
@ -0,0 +1,503 @@
|
|||
[INFO] Scanning for projects...
|
||||
[INFO]
|
||||
[INFO] ----------------------< com.pandoli365:bibimbap >-----------------------
|
||||
[INFO] Building bibimbap 0.0.1-SNAPSHOT
|
||||
[INFO] from pom.xml
|
||||
[INFO] --------------------------------[ war ]---------------------------------
|
||||
[INFO]
|
||||
[INFO] --- dependency-check:12.2.2:check (default-cli) @ bibimbap ---
|
||||
[INFO] Checking for updates
|
||||
[WARNING] An NVD API Key was not provided - it is highly recommended to use an NVD API key as the update can take a VERY long time without an API Key
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 2nd time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 3rd time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 4th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 5th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 6th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 7th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 8th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 9th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 10th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 11th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 12th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 13th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 14th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 15th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 16th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 17th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 18th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 19th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 20th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 21st time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 22nd time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 23rd time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 24th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 25th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 26th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 27th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 28th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 29th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 30th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 31st time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 2nd time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 3rd time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 4th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 5th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 6th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 7th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 8th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 9th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 10th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 11th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 12th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 13th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 14th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 15th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 16th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 17th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 18th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 19th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 20th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 21st time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 22nd time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 23rd time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 24th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 25th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 26th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 27th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 28th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 29th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 30th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 31st time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 2nd time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 3rd time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 4th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 5th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 6th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 7th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 8th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 9th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 10th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 11th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 12th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 13th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 14th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 15th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 16th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 17th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 18th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 19th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 20th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 21st time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 22nd time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 23rd time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 24th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 25th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 26th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 27th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 28th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 29th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 30th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 31st time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 2nd time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 3rd time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 4th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 5th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 6th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 7th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 8th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 9th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 10th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 11th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 12th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 13th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 14th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 15th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 16th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 17th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 18th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 19th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 20th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 21st time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 22nd time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 23rd time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 24th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 25th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 26th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 27th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 28th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 29th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 30th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 31st time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 2nd time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 3rd time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 4th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 5th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 6th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 7th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 8th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 9th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 10th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 11th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 12th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 13th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 14th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 15th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 16th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 17th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 18th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 19th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 20th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 21st time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 22nd time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 23rd time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 24th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 25th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 26th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 27th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 28th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 29th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 30th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 31st time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 2nd time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 3rd time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 4th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 5th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 6th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 7th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 8th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 9th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 10th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 11th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 12th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 13th time
|
||||
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=0 : 14th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 15th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 16th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 17th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 18th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 19th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 20th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 21st time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 22nd time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 23rd time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 24th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 25th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 26th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 27th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 28th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 29th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 30th time
|
||||
[WARNING] NVD API request failures are occurring; retrying request for the 31st time
|
||||
[ERROR] Error updating the NVD Data
|
||||
org.owasp.dependencycheck.data.update.exception.UpdateException: Error updating the NVD Data
|
||||
at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi (NvdApiDataSource.java:387)
|
||||
at org.owasp.dependencycheck.data.update.NvdApiDataSource.update (NvdApiDataSource.java:128)
|
||||
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:887)
|
||||
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:692)
|
||||
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:619)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:2093)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1291)
|
||||
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162)
|
||||
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73)
|
||||
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
|
||||
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
|
||||
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:919)
|
||||
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:285)
|
||||
at org.apache.maven.cli.MavenCli.main (MavenCli.java:207)
|
||||
at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103)
|
||||
at java.lang.reflect.Method.invoke (Method.java:580)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:362)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314)
|
||||
Caused by: io.github.jeremylong.openvulnerability.client.nvd.NvdApiRetryExceededException: NVD Update Failed: attempted to retrieve data from the NVD unsuccessfully five times.
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:361)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:456)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:456)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:456)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:456)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:456)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:456)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next (NvdCveClient.java:356)
|
||||
at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi (NvdApiDataSource.java:343)
|
||||
at org.owasp.dependencycheck.data.update.NvdApiDataSource.update (NvdApiDataSource.java:128)
|
||||
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:887)
|
||||
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:692)
|
||||
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:619)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:2093)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1291)
|
||||
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162)
|
||||
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73)
|
||||
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
|
||||
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
|
||||
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:919)
|
||||
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:285)
|
||||
at org.apache.maven.cli.MavenCli.main (MavenCli.java:207)
|
||||
at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103)
|
||||
at java.lang.reflect.Method.invoke (Method.java:580)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:362)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314)
|
||||
[WARNING] Failed to update hosted suppressions file, results may contain false positives already resolved by the DependencyCheck project
|
||||
org.owasp.dependencycheck.data.update.exception.UpdateException: Failed to update the hosted suppressions file
|
||||
at org.owasp.dependencycheck.data.update.HostedSuppressionsDataSource.fetchHostedSuppressions (HostedSuppressionsDataSource.java:137)
|
||||
at org.owasp.dependencycheck.data.update.HostedSuppressionsDataSource.update (HostedSuppressionsDataSource.java:78)
|
||||
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:887)
|
||||
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:692)
|
||||
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:619)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:2093)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1291)
|
||||
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162)
|
||||
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73)
|
||||
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
|
||||
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
|
||||
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:919)
|
||||
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:285)
|
||||
at org.apache.maven.cli.MavenCli.main (MavenCli.java:207)
|
||||
at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103)
|
||||
at java.lang.reflect.Method.invoke (Method.java:580)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:362)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314)
|
||||
Caused by: org.owasp.dependencycheck.utils.DownloadFailedException: Download failed, unable to copy 'https://dependency-check.github.io/DependencyCheck/suppressions/publishedSuppressions.xml' to '/root/.m2/repository/org/owasp/dependency-check-utils/12.2.2/../../dependency-check-data/11.0/publishedSuppressions.xml'; Network is unreachable
|
||||
at org.owasp.dependencycheck.utils.Downloader.fetchFile (Downloader.java:425)
|
||||
at org.owasp.dependencycheck.utils.Downloader.fetchFile (Downloader.java:384)
|
||||
at org.owasp.dependencycheck.data.update.HostedSuppressionsDataSource.fetchHostedSuppressions (HostedSuppressionsDataSource.java:135)
|
||||
at org.owasp.dependencycheck.data.update.HostedSuppressionsDataSource.update (HostedSuppressionsDataSource.java:78)
|
||||
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:887)
|
||||
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:692)
|
||||
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:619)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:2093)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1291)
|
||||
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162)
|
||||
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73)
|
||||
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
|
||||
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
|
||||
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:919)
|
||||
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:285)
|
||||
at org.apache.maven.cli.MavenCli.main (MavenCli.java:207)
|
||||
at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103)
|
||||
at java.lang.reflect.Method.invoke (Method.java:580)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:362)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314)
|
||||
Caused by: java.net.SocketException: Network is unreachable
|
||||
at sun.nio.ch.Net.connect0 (Native Method)
|
||||
at sun.nio.ch.Net.connect (Net.java:601)
|
||||
at sun.nio.ch.Net.connect (Net.java:590)
|
||||
at sun.nio.ch.NioSocketImpl.connect (NioSocketImpl.java:583)
|
||||
at java.net.SocksSocketImpl.connect (SocksSocketImpl.java:327)
|
||||
at java.net.Socket.connect (Socket.java:751)
|
||||
at org.apache.hc.client5.http.impl.io.DefaultHttpClientConnectionOperator.connect (DefaultHttpClientConnectionOperator.java:219)
|
||||
at org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager.connect (PoolingHttpClientConnectionManager.java:547)
|
||||
at org.apache.hc.client5.http.impl.classic.InternalExecRuntime.connectEndpoint (InternalExecRuntime.java:164)
|
||||
at org.apache.hc.client5.http.impl.classic.InternalExecRuntime.connectEndpoint (InternalExecRuntime.java:174)
|
||||
at org.apache.hc.client5.http.impl.classic.ConnectExec.execute (ConnectExec.java:144)
|
||||
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute (ExecChainElement.java:51)
|
||||
at org.apache.hc.client5.http.impl.classic.ProtocolExec.execute (ProtocolExec.java:192)
|
||||
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute (ExecChainElement.java:51)
|
||||
at org.apache.hc.client5.http.impl.classic.ContentCompressionExec.execute (ContentCompressionExec.java:138)
|
||||
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute (ExecChainElement.java:51)
|
||||
at org.apache.hc.client5.http.impl.classic.HttpRequestRetryExec.execute (HttpRequestRetryExec.java:112)
|
||||
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute (ExecChainElement.java:51)
|
||||
at org.apache.hc.client5.http.impl.classic.RedirectExec.execute (RedirectExec.java:110)
|
||||
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute (ExecChainElement.java:51)
|
||||
at org.apache.hc.client5.http.impl.classic.InternalHttpClient.doExecute (InternalHttpClient.java:185)
|
||||
at org.apache.hc.client5.http.impl.classic.CloseableHttpClient.execute (CloseableHttpClient.java:245)
|
||||
at org.apache.hc.client5.http.impl.classic.CloseableHttpClient.execute (CloseableHttpClient.java:188)
|
||||
at org.owasp.dependencycheck.utils.Downloader.fetchFile (Downloader.java:410)
|
||||
at org.owasp.dependencycheck.utils.Downloader.fetchFile (Downloader.java:384)
|
||||
at org.owasp.dependencycheck.data.update.HostedSuppressionsDataSource.fetchHostedSuppressions (HostedSuppressionsDataSource.java:135)
|
||||
at org.owasp.dependencycheck.data.update.HostedSuppressionsDataSource.update (HostedSuppressionsDataSource.java:78)
|
||||
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:887)
|
||||
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:692)
|
||||
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:619)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:2093)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1291)
|
||||
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162)
|
||||
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73)
|
||||
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
|
||||
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
|
||||
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:919)
|
||||
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:285)
|
||||
at org.apache.maven.cli.MavenCli.main (MavenCli.java:207)
|
||||
at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103)
|
||||
at java.lang.reflect.Method.invoke (Method.java:580)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:362)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314)
|
||||
[INFO] Updating CISA Known Exploited Vulnerability list: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
|
||||
[ERROR] java.net.SocketException: Network is unreachable
|
||||
org.owasp.dependencycheck.data.update.exception.UpdateException: java.net.SocketException: Network is unreachable
|
||||
at org.owasp.dependencycheck.data.update.KnownExploitedDataSource.update (KnownExploitedDataSource.java:106)
|
||||
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:887)
|
||||
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:692)
|
||||
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:619)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:2093)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1291)
|
||||
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162)
|
||||
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73)
|
||||
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
|
||||
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
|
||||
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:919)
|
||||
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:285)
|
||||
at org.apache.maven.cli.MavenCli.main (MavenCli.java:207)
|
||||
at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103)
|
||||
at java.lang.reflect.Method.invoke (Method.java:580)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:362)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314)
|
||||
Caused by: java.net.SocketException: Network is unreachable
|
||||
at sun.nio.ch.Net.connect0 (Native Method)
|
||||
at sun.nio.ch.Net.connect (Net.java:601)
|
||||
at sun.nio.ch.Net.connect (Net.java:590)
|
||||
at sun.nio.ch.NioSocketImpl.connect (NioSocketImpl.java:583)
|
||||
at java.net.SocksSocketImpl.connect (SocksSocketImpl.java:327)
|
||||
at java.net.Socket.connect (Socket.java:751)
|
||||
at org.apache.hc.client5.http.impl.io.DefaultHttpClientConnectionOperator.connect (DefaultHttpClientConnectionOperator.java:219)
|
||||
at org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager.connect (PoolingHttpClientConnectionManager.java:547)
|
||||
at org.apache.hc.client5.http.impl.classic.InternalExecRuntime.connectEndpoint (InternalExecRuntime.java:164)
|
||||
at org.apache.hc.client5.http.impl.classic.InternalExecRuntime.connectEndpoint (InternalExecRuntime.java:174)
|
||||
at org.apache.hc.client5.http.impl.classic.ConnectExec.execute (ConnectExec.java:144)
|
||||
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute (ExecChainElement.java:51)
|
||||
at org.apache.hc.client5.http.impl.classic.ProtocolExec.execute (ProtocolExec.java:192)
|
||||
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute (ExecChainElement.java:51)
|
||||
at org.apache.hc.client5.http.impl.classic.ContentCompressionExec.execute (ContentCompressionExec.java:138)
|
||||
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute (ExecChainElement.java:51)
|
||||
at org.apache.hc.client5.http.impl.classic.HttpRequestRetryExec.execute (HttpRequestRetryExec.java:112)
|
||||
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute (ExecChainElement.java:51)
|
||||
at org.apache.hc.client5.http.impl.classic.RedirectExec.execute (RedirectExec.java:110)
|
||||
at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute (ExecChainElement.java:51)
|
||||
at org.apache.hc.client5.http.impl.classic.InternalHttpClient.doExecute (InternalHttpClient.java:185)
|
||||
at org.apache.hc.client5.http.impl.classic.CloseableHttpClient.execute (CloseableHttpClient.java:245)
|
||||
at org.apache.hc.client5.http.impl.classic.CloseableHttpClient.execute (CloseableHttpClient.java:188)
|
||||
at org.owasp.dependencycheck.utils.Downloader.fetchAndHandle (Downloader.java:732)
|
||||
at org.owasp.dependencycheck.utils.Downloader.fetchAndHandle (Downloader.java:701)
|
||||
at org.owasp.dependencycheck.utils.Downloader.fetchAndHandle (Downloader.java:653)
|
||||
at org.owasp.dependencycheck.data.update.KnownExploitedDataSource.update (KnownExploitedDataSource.java:96)
|
||||
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:887)
|
||||
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:692)
|
||||
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:619)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:2093)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1291)
|
||||
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162)
|
||||
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73)
|
||||
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
|
||||
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
|
||||
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:919)
|
||||
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:285)
|
||||
at org.apache.maven.cli.MavenCli.main (MavenCli.java:207)
|
||||
at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103)
|
||||
at java.lang.reflect.Method.invoke (Method.java:580)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:362)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314)
|
||||
[WARNING] Unable to update 1 or more Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
|
||||
[ERROR] Unable to continue dependency-check analysis.
|
||||
[INFO] ------------------------------------------------------------------------
|
||||
[INFO] BUILD FAILURE
|
||||
[INFO] ------------------------------------------------------------------------
|
||||
[INFO] Total time: 01:33 min
|
||||
[INFO] Finished at: 2026-09-22T02:53:12Z
|
||||
[INFO] ------------------------------------------------------------------------
|
||||
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:12.2.2:check (default-cli) on project bibimbap: Fatal exception(s) analyzing bibimbap: One or more exceptions occurred during analysis:
|
||||
[ERROR] UpdateException: java.net.SocketException: Network is unreachable
|
||||
[ERROR] caused by SocketException: Network is unreachable
|
||||
[ERROR] NoDataException: No documents exist
|
||||
[ERROR] -> [Help 1]
|
||||
[ERROR]
|
||||
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
|
||||
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
|
||||
[ERROR]
|
||||
[ERROR] For more information about the errors and possible solutions, please read the following articles:
|
||||
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
|
||||
|
|
@ -0,0 +1,99 @@
|
|||
[INFO] Scanning for projects...
|
||||
[INFO]
|
||||
[INFO] ----------------------< com.pandoli365:bibimbap >-----------------------
|
||||
[INFO] Building bibimbap 0.0.1-SNAPSHOT
|
||||
[INFO] from pom.xml
|
||||
[INFO] --------------------------------[ war ]---------------------------------
|
||||
[INFO]
|
||||
[INFO] --- dependency-check:12.2.2:check (default-cli) @ bibimbap ---
|
||||
[INFO] Checking for updates
|
||||
[WARNING] An NVD API Key was not provided - it is highly recommended to use an NVD API key as the update can take a VERY long time without an API Key
|
||||
[INFO] NVD API has 395,957 records in this update
|
||||
[ERROR] Error updating the NVD Data
|
||||
org.owasp.dependencycheck.data.update.exception.UpdateException: Error updating the NVD Data
|
||||
at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi (NvdApiDataSource.java:387)
|
||||
at org.owasp.dependencycheck.data.update.NvdApiDataSource.update (NvdApiDataSource.java:128)
|
||||
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:887)
|
||||
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:692)
|
||||
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:619)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:2093)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1291)
|
||||
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162)
|
||||
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73)
|
||||
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
|
||||
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
|
||||
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:919)
|
||||
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:285)
|
||||
at org.apache.maven.cli.MavenCli.main (MavenCli.java:207)
|
||||
at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103)
|
||||
at java.lang.reflect.Method.invoke (Method.java:580)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:362)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314)
|
||||
Caused by: io.github.jeremylong.openvulnerability.client.nvd.NvdApiRetryExceededException: NVD Update Failed: attempted to retrieve data from the NVD unsuccessfully five times.
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:361)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:456)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:456)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:456)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:456)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:456)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next (NvdCveClient.java:456)
|
||||
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next (NvdCveClient.java:356)
|
||||
at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi (NvdApiDataSource.java:343)
|
||||
at org.owasp.dependencycheck.data.update.NvdApiDataSource.update (NvdApiDataSource.java:128)
|
||||
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:887)
|
||||
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase (Engine.java:692)
|
||||
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:619)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck (BaseDependencyCheckMojo.java:2093)
|
||||
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute (BaseDependencyCheckMojo.java:1291)
|
||||
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:328)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:316)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:212)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:174)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:75)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:162)
|
||||
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39)
|
||||
at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:159)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73)
|
||||
at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53)
|
||||
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
|
||||
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
|
||||
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
|
||||
at org.apache.maven.cli.MavenCli.execute (MavenCli.java:919)
|
||||
at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:285)
|
||||
at org.apache.maven.cli.MavenCli.main (MavenCli.java:207)
|
||||
at jdk.internal.reflect.DirectMethodHandleAccessor.invoke (DirectMethodHandleAccessor.java:103)
|
||||
at java.lang.reflect.Method.invoke (Method.java:580)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:255)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:201)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:362)
|
||||
at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:314)
|
||||
[INFO] ------------------------------------------------------------------------
|
||||
[INFO] BUILD FAILURE
|
||||
[INFO] ------------------------------------------------------------------------
|
||||
[INFO] Total time: 02:46 min
|
||||
[INFO] Finished at: 2026-09-22T02:56:40Z
|
||||
[INFO] ------------------------------------------------------------------------
|
||||
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:12.2.2:check (default-cli) on project bibimbap: Execution default-cli of goal org.owasp:dependency-check-maven:12.2.2:check failed: Shutdown in progress -> [Help 1]
|
||||
[ERROR]
|
||||
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
|
||||
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
|
||||
[ERROR]
|
||||
[ERROR] For more information about the errors and possible solutions, please read the following articles:
|
||||
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/PluginExecutionException
|
||||
|
|
@ -0,0 +1,218 @@
|
|||
[
|
||||
{
|
||||
"jar": "WEB-INF/lib/commonmark-0.22.0.jar",
|
||||
"coordinates": [
|
||||
"org.commonmark:commonmark:0.22.0"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/micrometer-commons-1.15.12.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/log4j-to-slf4j-2.24.3.jar",
|
||||
"coordinates": [
|
||||
"org.apache.logging.log4j:log4j-to-slf4j:2.24.3"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/HikariCP-6.3.3.jar",
|
||||
"coordinates": [
|
||||
"com.zaxxer:HikariCP:6.3.3"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/log4j-api-2.24.3.jar",
|
||||
"coordinates": [
|
||||
"org.apache.logging.log4j:log4j-api:2.24.3"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/logback-core-1.5.34.jar",
|
||||
"coordinates": [
|
||||
"ch.qos.logback:logback-core:1.5.34"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-core-6.2.19.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-context-6.2.19.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-webmvc-6.2.19.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/jackson-databind-2.21.4.jar",
|
||||
"coordinates": [
|
||||
"com.fasterxml.jackson.core:jackson-databind:2.21.4"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-aop-6.2.19.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/logback-classic-1.5.34.jar",
|
||||
"coordinates": [
|
||||
"ch.qos.logback:logback-classic:1.5.34"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-boot-3.5.16.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/jackson-datatype-jsr310-2.21.4.jar",
|
||||
"coordinates": [
|
||||
"com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.4"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/tomcat-embed-jasper-10.1.55.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-expression-6.2.19.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/jackson-datatype-jdk8-2.21.4.jar",
|
||||
"coordinates": [
|
||||
"com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.21.4"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/jackson-core-2.21.4.jar",
|
||||
"coordinates": [
|
||||
"com.fasterxml.jackson.core:jackson-core:2.21.4"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/jakarta.annotation-api-2.1.1.jar",
|
||||
"coordinates": [
|
||||
"jakarta.annotation:jakarta.annotation-api:2.1.1"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-jdbc-6.2.19.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/jackson-module-parameter-names-2.21.4.jar",
|
||||
"coordinates": [
|
||||
"com.fasterxml.jackson.module:jackson-module-parameter-names:2.21.4"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/micrometer-observation-1.15.12.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-beans-6.2.19.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-tx-6.2.19.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/postgresql-42.7.11.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/jackson-annotations-2.21.jar",
|
||||
"coordinates": [
|
||||
"com.fasterxml.jackson.core:jackson-annotations:2.21"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/jsoup-1.17.2.jar",
|
||||
"coordinates": [
|
||||
"org.jsoup:jsoup:1.17.2"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/ecj-3.33.0.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/tomcat-annotations-api-10.1.55.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/mybatis-spring-boot-starter-3.0.5.jar",
|
||||
"coordinates": [
|
||||
"org.mybatis.spring.boot:mybatis-spring-boot-starter:3.0.5"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/slf4j-api-2.0.18.jar",
|
||||
"coordinates": [
|
||||
"org.slf4j:slf4j-api:2.0.18"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/mybatis-3.5.19.jar",
|
||||
"coordinates": [
|
||||
"org.mybatis:mybatis:3.5.19",
|
||||
"ognl:ognl:3.4.4",
|
||||
"org.javassist:javassist:3.30.2-GA"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/mybatis-spring-3.0.5.jar",
|
||||
"coordinates": [
|
||||
"org.mybatis:mybatis-spring:3.0.5"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-boot-autoconfigure-3.5.16.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/jul-to-slf4j-2.0.18.jar",
|
||||
"coordinates": [
|
||||
"org.slf4j:jul-to-slf4j:2.0.18"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/snakeyaml-2.4.jar",
|
||||
"coordinates": [
|
||||
"org.yaml:snakeyaml:2.4"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/tomcat-embed-core-10.1.55.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/tomcat-embed-el-10.1.55.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-web-6.2.19.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-jcl-6.2.19.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/mybatis-spring-boot-autoconfigure-3.0.5.jar",
|
||||
"coordinates": [
|
||||
"org.mybatis.spring.boot:mybatis-spring-boot-autoconfigure:3.0.5"
|
||||
]
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib-provided/tomcat-embed-websocket-10.1.55.jar",
|
||||
"coordinates": []
|
||||
},
|
||||
{
|
||||
"jar": "WEB-INF/lib/spring-boot-jarmode-tools-3.5.16.jar",
|
||||
"coordinates": []
|
||||
}
|
||||
]
|
||||
|
|
@ -3,7 +3,7 @@ schema_version: 2
|
|||
profile: research-lite
|
||||
session_id: 20260922-114058
|
||||
started_at: 2026-09-22T11:40:58.902204+09:00
|
||||
ended_at: 2026-09-22T11:50:01.878221+09:00
|
||||
ended_at: 2026-09-22T11:59:50.675179+09:00
|
||||
user_request: 지금까지 작업된 결과물들 검증과 라이브 출시 준비 상태 판정
|
||||
---
|
||||
# Summary
|
||||
|
|
@ -70,3 +70,30 @@ negative: []
|
|||
- 임시 app/db 컨테이너·해당 익명 볼륨·네트워크 정리 완료. WAR/전체 브라우저 캡처/의존성 HTML은 /tmp/bibimbap-readiness-*에 남김(검증 참고용).
|
||||
|
||||
- 저장한 로그는 줄끝 공백만 정규화했다. HTTP 관측의 세션 ID는 삭제했다.
|
||||
|
||||
## Phase 2 — 최신 의존성 취약점 검증
|
||||
|
||||
### Decisions
|
||||
- 사용자 후속 요청: 최신 취약점은 확실히 해야겠네. NVD 데이터 갱신 및 배포 WAR의 provided 의존성 포함 재검증. 제품 소스 수정 없이 기존 격리 복사본의 검증용 POM만 수정한다.
|
||||
- tier_b_sequential 유지; 독립 advisor 미사용.
|
||||
|
||||
### Invocations
|
||||
- orchestrator: 완료. OSV 온라인 81 좌표, WAR 43/43 JAR 대응, NVD 실시간 28/28 CVE 및 공급자 권고 대조. 제품 수정 없음.
|
||||
|
||||
### Summary
|
||||
최신 공개 권고의 영향 버전에 배포 구성요소 6종이 포함된다. 28개 CVE + 1개 GHSA는 버전/권고 검토 집합이며, 실제 악용 입증 건수가 아니다. jsoup/Jackson/Log4j/Spring 일부 조건은 현재 소스에 없고 Tomcat/DB 외부 운영 설정은 미확인이다. 이전 캐시 0건은 출시 근거에서 제외한다.
|
||||
|
||||
### verified_by_me
|
||||
- OSV: 온라인 응답 9 unique advisory, 5 runtime packages; pagination 없음. 모든 WAR JAR의 Maven 좌표 포함 확인.
|
||||
- 공급자 추가 대조: Tomcat 19 CVE, Spring 4 CVE; 총 28 CVE + 1 GHSA. NVD API 28 requested/28 returned, timestamp 2026-09-22T02:56:02.312 UTC.
|
||||
- NVD bulk: 최초 실패(exit 1); 실행 전용 CA truststore+IPv4 재시도 후 395,957건 전체 초기 복제 진입. 대상 실시간 조회 완료 뒤 이 세션의 PID 824에 TERM 전송, exit 143 확인. bulk scan PASS 아님.
|
||||
- TLS 검증 비활성화 0; 사용자 전역 truststore 변경 0; 코드 변경 0, 전체 L1 반복 불필요.
|
||||
- 문서 링크/JSON 대상 수/버전 목록·WAR 커버리지 일치 확인.
|
||||
|
||||
### needs_user_verification
|
||||
- 실제 운영 HTTP/2/Realm/Valve/TLS/DB channel binding 정책.
|
||||
- 지원 Boot 계열로 이전할지 상용 Spring 패치 경로를 사용할지 결정 후 구현·회귀검증.
|
||||
- NVD bulk cache 갱신 미완료; 향후 Dependency-Check는 갱신 완료 시각과 데이터 존재를 먼저 확인.
|
||||
|
||||
### Retrospective
|
||||
이전 scan 성공+0건은 최신성의 증거가 아니었다. 공급자 권고와 OSV에는 매핑/수록 차이가 있어 양쪽 대조가 필요하다. Tomcat fixed=10.1.58은 공개 릴리스가 아니므로 실제 배포 수정본 10.1.59로 구분했다. 실행 가이드의 autoUpdate=false에서도 온라인 갱신된다는 오해를 문서에서 정정했다. 독립 advisor 검토 아님.
|
||||
|
|
|
|||
|
|
@ -0,0 +1,66 @@
|
|||
# 2026-09-22 최신 의존성 보안 권고 대조
|
||||
|
||||
**판정: 최신 권고 기준 무취약점으로 승인할 수 없다.** 배포 라이브러리 6종이 보안 권고의 영향 버전에 해당한다. 이것은 앱에서 실제 악용이 입증된 취약점 6건이라는 뜻이 아니다. 현재 소스에서 전제 기능이 없는 항목과 운영 설정 확인이 필요한 항목을 분리했다. 앞선 캐시 검사 0건은 출시 근거에서 제외한다.
|
||||
|
||||
## 실제 조회 범위와 증거
|
||||
|
||||
- 대상: 제품 소스 `1848394`, 앞선 live WAR와 동일한 해시. 이후 커밋은 문서만 변경했다.
|
||||
- Maven 의존성 및 WAR 내부 메타데이터로 **81개 좌표/버전**을 OSV 온라인 API에 조회했다. test/provided/shaded/packaged-tool을 포함하며 WAR **43개 JAR 전부**가 조회 목록과 매칭됐다. 좌표 수와 JAR 수는 shaded 및 테스트 의존성 때문에 다르다.
|
||||
- OSV batch 응답 2026-09-22 02:53:22 UTC: 런타임 5종에서 **9개 고유 권고** 매칭. 추가 jarmode-tools 조회 0건. 페이지 토큰 없음.
|
||||
- 공식 공급자 권고를 추가 대조했다. Tomcat 19개 CVE와 Spring 4개 CVE가 현재 버전 범위에 해당한다. OSV와 합쳐 **28개 고유 CVE + CVE 미부여 GHSA 1개**를 검토 대상으로 정리했다. 모든 알려지지 않은 취약점을 포함하는 전수 보증은 아니다.
|
||||
- NVD 실시간 API의 `cveIds` 조회: **28개 요청/28개 응답**, 응답 시각 `2026-09-22T02:56:02.312` UTC. OSV의 CVE 없는 GHSA는 공급자 권고로 확인했다.
|
||||
- [온라인 OSV 응답](../../.atp/work-session/20260922-114058/artifacts/latest-osv-results.json), [권고 상세](../../.atp/work-session/20260922-114058/artifacts/latest-osv-advisories.json), [NVD 실시간 응답](../../.atp/work-session/20260922-114058/artifacts/latest-nvd-targeted.json), [WAR 목록](../../.atp/work-session/20260922-114058/artifacts/war-inventory.json).
|
||||
|
||||
## 버전별 판단
|
||||
|
||||
아래 수정 버전은 검토한 권고를 해소하는 기준이며, 현재 프로젝트에서 빌드·기능 호환성까지 검증한 업그레이드 결과는 아니다.
|
||||
|
||||
| 배포 구성요소 | 현재 | 권고 대응 버전/경로 | 앱 적용성 판단 |
|
||||
| --- | --- | --- | --- |
|
||||
| Tomcat | 10.1.55 | 공개 배포본 10.1.59 이상 | 19개 CVE 영향 범위. HTTP/2·Realm 인증·RewriteValve·WebSocket·UDS 등 조건별 확인 필요. 저장소에는 해당 설정/endpoint가 없지만 운영 WAS의 외부 설정은 미확인 |
|
||||
| Spring Framework | 6.2.19 | 6.2.20 상용 지원 또는 7.0.9 이상을 포함하는 호환 Boot 계열 | 아래 4건은 영향 버전이나 해당 SpEL/자동 생성 List/함수형 SSE 사용이 소스에서 발견되지 않음 |
|
||||
| Jackson databind | 2.21.4 | 같은 계열 2.21.5 이상, BOM 정합 유지 | 3개 권고 매칭. JsonView/JsonUnwrapped/JsonIgnoreProperties/외부 타입 속성 조합이 소스에 없음 |
|
||||
| PostgreSQL JDBC | 42.7.11 | 42.7.12 이상 | channelBinding=require + TLS 인증서 조건. 로컬 구성에 require 없음; 운영 DB 연결 정책은 미확인 |
|
||||
| jsoup | 1.17.2 | 1.23.1 이상 | 버전은 영향 범위지만 현재 sanitizer가 raw-text 태그를 허용하지 않아 이 권고의 전제는 불충족 |
|
||||
| Log4j API | 2.24.3 | 2.25.5 또는 2.26.1 이상 계열 | MapMessage JSON 직렬화가 전제. 현재 Logback 사용, 해당 호출/레이아웃 없음 |
|
||||
|
||||
### Tomcat: 버전 범위와 실제 사용 기능을 분리
|
||||
|
||||
검토 CVE: `CVE-2026-73180`, `68763`, `68569`, `68525`, `66422`, `66299`, `65927`, `65905`, `65637`, `65183`, `65182`, `59084`, `59083`, `55956`, `55955`, `55276`, `53434`, `53404`, `50229` (각 축약 번호의 접두사는 `CVE-2026-`).
|
||||
|
||||
대표적으로 HTTP/2 메모리 누수 DoS `CVE-2026-68763`은 HTTP/2 활성화 여부가 중요하다. DIGEST/FORM/Realm/서블릿 선언적 제약 관련 권고를 커스텀 `UserController` 로그인 취약점으로 단정하지 않는다. 예제 앱 관련 항목은 WAR에 Tomcat examples가 없어 배포 내용상 해당하지 않는다. 나머지는 각각 외부 WAS/TLS/클러스터 설정과 대조해야 한다.
|
||||
|
||||
공식 권고는 10.1.58 릴리스 투표가 통과하지 않았으므로 실제 배포 수정본으로 10.1.59를 사용하도록 명시한다. OSV의 `fixed=10.1.58`만 보고 배포 버전을 정하면 안 된다. [Apache 공식 권고](https://tomcat.apache.org/security-10.html).
|
||||
|
||||
### Spring: 공급자 공지로 OSV 조회 공백 보완
|
||||
|
||||
- [CVE-2026-59282](https://spring.io/security/cve-2026-59282/): 외부 property path를 self-populating List에 바인딩하는 조건. 해당 List/DataBinder 구성이 소스에 없다.
|
||||
- [CVE-2026-59283](https://spring.io/security/cve-2026-59283/): SimpleEvaluationContext와 활성 SpEL compiler 조합. 관련 사용이 없다.
|
||||
- [CVE-2026-47886](https://spring.io/security/cve-2026-47886/): 외부 SpEL 및 BigInteger/BigDecimal 거듭제곱 조건. 외부 표현식 평가 코드가 없다.
|
||||
- [CVE-2026-59313](https://spring.io/security/cve-2026-59313/): 함수형 MVC의 텍스트 SSE. RouterFunction/ServerResponse.sse 사용이 없다.
|
||||
|
||||
위 판단은 현재 저장소의 정적 대조이며 런타임에 외부로 주입되는 코드/설정까지 보증하지 않는다. [Boot 3.5.16 공식 발표](https://spring.io/blog/2026/06/25/spring-boot-3-5-16-available-now/)는 이를 3.5 계열의 마지막 OSS 릴리스로 명시한다. Spring jar 하나만 올리는 방식보다 지원되는 Boot 계열로의 이전 또는 상용 패치 경로를 결정해야 한다.
|
||||
|
||||
### 나머지 권고와 소스 근거
|
||||
|
||||
- Jackson: [CVE-2026-59889](https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh), [CVE-2026-54515](https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v), [GHSA-mhm7-754m-9p8w](https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-mhm7-754m-9p8w). `JamScoringController.java:73`은 `@RequestBody Map<String,Object>`이며 위 권고에 필요한 POJO annotation 조합은 현재 소스에서 검색되지 않았다.
|
||||
- PostgreSQL: [CVE-2026-54291 공급자 권고](https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-j92g-9f8w-j867). 영향 버전과 `channelBinding=require`의 실제 사용 여부는 별개다. 운영 설정 값/비밀번호는 수집하거나 보고서에 출력하지 않았다.
|
||||
- jsoup: [CVE-2026-71497 공급자 권고](https://github.com/jhy/jsoup/security/advisories/GHSA-pmhh-3w7g-xqp8). `PostMarkdownService.java:26`은 `basicWithImages()`에 `h1/h2/h3/hr`만 추가한다. style/script 등 raw-text 태그를 허용하지 않으므로 현재 sanitizer 설정에는 해당 조건이 없다. `OgPreviewService.java:52`는 HTML parsing 용도다.
|
||||
- Log4j API: [CVE-2026-49844 공급자 권고](https://logging.apache.org/security.html#CVE-2026-49844). WAR의 Logback/Log4j-to-SLF4J 구성과 소스 검색에서 MapMessage/JsonTemplateLayout 경로가 없다. Log4Shell 발견으로 표현하지 않는다.
|
||||
|
||||
## NVD 갱신 시도와 제한
|
||||
|
||||
검증용 POM에서만 `autoUpdate=true`, `skipProvidedScope=false`, JSON/HTML 출력을 설정했다. 원본 `pom.xml`은 수정하지 않았다. 첫 전체 동기화는 네트워크 오류와 `NoDataException`으로 실패했다. 회사 CA를 **이번 실행 전용 truststore**에 로드하고 IPv4를 지정한 재시도는 갱신 단계에 진입했으나 NVD 전체 395,957건 초기 복제를 요구했다.
|
||||
|
||||
필요한 28건의 NVD 실시간 조회와 WAR 전수 OSV 조회가 성공한 뒤 전체 복제 프로세스를 중단했다. 따라서 **최신 NVD DB 기반 Dependency-Check 전체 실행 PASS로 기록하지 않는다.** 그 실행의 캐시도 완전 갱신된 것으로 취급하면 안 된다. TLS 인증서 검증은 끄지 않았다. 최신 직접 조회 결과와 bulk sync 상태는 별개다.
|
||||
|
||||
OSS Index는 인증정보 미제공으로 사용하지 않았다. OS/JDK/컨테이너 이미지의 시스템 패키지, CDN 리소스, 앱 자체의 미공개 결함은 이번 Maven/WAR 의존성 대조 범위 밖이다.
|
||||
|
||||
## 다음 작업
|
||||
|
||||
1. 운영 HTTP/2·Realm/Valve·TLS·DB channel binding 설정을 확인하고 미확인 조건을 닫는다.
|
||||
2. 위 수정 버전 또는 이를 관리하는 지원 Boot BOM을 선택한다. Spring 6.2.20은 공식 권고상 상용 경로이므로 공개 Maven Central에 있다고 가정하지 않는다.
|
||||
3. 버전 변경 후 전체 테스트, WAR 내부 버전, DB 연결, JSP·WebGL·마크다운·JSON 경로를 재검증하고 동일 온라인 조회를 다시 수행한다.
|
||||
4. 재현 가능한 정기 검사에는 NVD 갱신 성공/데이터 시각/대상 개수/제외 범위를 종료 조건으로 두고, 갱신 실패 후 캐시 fallback을 출시 PASS로 쓰지 않는다.
|
||||
|
||||
제품 버전 변경이나 배포는 이번 검증에 포함하지 않았다. 현재 확인된 증거는 **업데이트 또는 근거 있는 적용성 예외 검토가 필요한 상태**이며, 즉시 악용 가능한 취약점이 재현됐다는 판정은 아니다.
|
||||
|
|
@ -2,6 +2,8 @@
|
|||
|
||||
**판정: 현재 산출물 그대로 라이브 출시 보류(NO-GO).** 기본 동작과 빌드는 통과했으나 운영 설정 패키징 결함이 재현됐고, 신규 DB 초기화·운영 환경 검증이 남아 있다. 검증 대상은 `feat/v2`의 `184839434c94d500cdf6e74ae77b4b4c658dcc4c`이다. 코드 수정·운영 배포·원격 push는 수행하지 않았다.
|
||||
|
||||
**후속 최신 취약점 확인:** [최신 의존성 권고 대조](./2026-09-22-current-dependency-advisories.md)에서 배포 구성요소 6종의 영향 버전 포함을 확인했다. 아래 캐시 기반 0건은 당시 실행 기록이며 현재 출시 승인 근거로 사용할 수 없다.
|
||||
|
||||
ATP Tier B 순차 self-check로 수행했다. 독립 advisor 검토 또는 전체 보안 감사 결과가 아니다. [세션과 증거](../../.atp/work-session/20260922-114058/report.md).
|
||||
|
||||
## 실행 결과
|
||||
|
|
|
|||
|
|
@ -4,6 +4,8 @@
|
|||
|
||||
## 목록
|
||||
|
||||
- [2026-09-22-current-dependency-advisories.md](./2026-09-22-current-dependency-advisories.md) — WAR 43 JAR/81 좌표 온라인 조회, NVD 28 CVE 실시간 대조. 6종 영향 버전과 앱의 악용 전제·지원 버전 경로 분리.
|
||||
|
||||
- [2026-09-22-release-readiness.md](./2026-09-22-release-readiness.md) — 362개 테스트·live WAR·실 DB 인증/모집글·공개 화면 16회 검증. 출시 보류: live 설정 패키징 누락, dev 고정 이미지 경로, 신규 DB 카테고리 시드 공백 및 운영 검증 미완료.
|
||||
|
||||
- [2026-06-16-project-analysis.md](./2026-06-16-project-analysis.md) — bibimbap 전면 코드 분석(D1 아키텍처/D2 보안/D3 품질·기술부채/D4 도메인). 보안 기초는 견고(SQLi 0·PBKDF2·CSRF 더블서밋)하나 프로토타입 잔재 dead code·미완성 기능·서비스 레이어 부재가 주요 부채. `perspective: neutral`, work-session 20260616-111711 distill.
|
||||
|
|
|
|||
|
|
@ -24,6 +24,8 @@
|
|||
|
||||
### 온라인 모드 (NVD 데이터 갱신 포함)
|
||||
|
||||
**2026-09-22 정정:** 아래 명령만으로는 이 프로젝트의 `<autoUpdate>false</autoUpdate>` 설정이 해제되지 않는다. 검증용 POM/명시적 Maven 프로필에서 `autoUpdate=true`를 적용하고, 실제 로그의 갱신 완료 및 데이터 시각을 확인해야 온라인 갱신으로 판정할 수 있다. 갱신 실패나 캐시 fallback을 출시 검증 PASS로 취급하지 않는다. 실행형 WAR에서는 `WEB-INF/lib-provided`도 로딩되므로 검증 구성에서 `skipProvidedScope=false`로 포함하고 실제 WAR 목록과 대조한다.
|
||||
|
||||
```bash
|
||||
mvn dependency-check:check
|
||||
```
|
||||
|
|
@ -39,7 +41,7 @@ mvn dependency-check:check
|
|||
```
|
||||
|
||||
캐시 위치: `~/.m2/repository/org/owasp/dependency-check-data/` (기본값).
|
||||
캐시가 없으면 온라인 다운로드가 강제된다.
|
||||
`autoUpdate=false`에서 캐시가 없거나 불완전하면 검사가 실패할 수 있다. 자동 다운로드나 최신성 보장을 가정하지 않는다.
|
||||
|
||||
캐시를 명시적으로 지정하려면:
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue