opendatafeign's Introduction

OpenDataFeign

OpenDataFeign provides Taiwan's OpenData OpenFeign integrations for Spring Boot apps through autoconfiguration.

Building

To build the source you will need to install JDK (>=11) and Maven (>=3.3.3).

This project uses Maven for most build-related activities, and you should be able to get off the ground quite quickly by cloning the project you are interested in and typing:

mvn install

Requirements

These projects compile with Spring Boot 2.5.10 and Spring Cloud 2020.0.5.

But when used it, you still provided your spring boot dependencies. Because we set Spring Boot and Spring Cloud dependencies scope is provided.

Implements OpenData

Feign client implements Taiwan's OpenData as below:

Module	API URL
WRA-FHY OpenData	https://fhy.wra.gov.tw/WraApi
CWB-Weather OpenData	https://opendata.cwb.gov.tw/index

Authors and Contributors

This project are developed by：

And maintained by @Vipcube

opendatafeign's People

Contributors

Watchers

opendatafeign's Issues

同学，您这个项目引入了84个开源组件，存在2个漏洞，辛苦升级一下

检测到 Vipcube/OpenDataFeign 一共引入了84个开源组件，存在2个漏洞

漏洞标题：Apache Commons IO路径遍历漏洞
缺陷组件：commons-io:[email protected]
漏洞编号：CVE-2021-29425
漏洞描述：Apache Commons IO是美国阿帕奇基金会（Apache）公司的一个应用程序。可以帮助开发IO功能。
Apache Commons IO 2.2版本至2.6版本存在路径遍历漏洞。该漏洞与FileNameUtils.normalize方法有关。攻击者可以利用该漏洞通过发送错误的输入字符串（例如“//../foo”或“\\..\foo”）获得对父目录中文件的访问权限。
国家漏洞库信息：https://www.cnvd.org.cn/flaw/show/CNVD-2021-30583
影响范围：[0, 2.7)
最小修复版本：2.7
缺陷组件引入路径：org.vipcube.openfeign:[email protected]>org.springframework.cloud:[email protected]>org.springframework.cloud:[email protected]>io.github.openfeign.form:[email protected]>commons-fileupload:[email protected]>commons-io:[email protected]

另外还有2个漏洞，详细报告：https://mofeisec.com/jr?p=a2e2ac

Recommend Projects