bobintetley/asm3 软件分析报告

基础信息

项目名称:bobintetley/asm3

项目徽章:

Security Status

仓库地址:https://github.com/pterodactyl/panel

检测报告地址:https://www.murphysec.com/console/report/1716404049989468160/1716404078372323328

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
node-semver 安全漏洞 ReDoS MPS-2022-5166 CVE-2022-25883 高危
Tauri 原型污染漏洞 原型污染 MPS-2022-65568 CVE-2022-46175 高危
Babel 插件任意代码执行漏洞漏洞【Poc公开】 不完整的黑名单 MPS-avb9-j50z CVE-2023-45133 严重

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
json5 2.2.1 2.2.2 间接依赖 建议修复
@babel/traverse 7.20.1 8.0.0-alpha.4 间接依赖 建议修复
semver 6.3.0 7.5.2 间接依赖 可选修复

许可证风险

许可证类型 相关组件 许可证风险
MIT 179
BSD-2-Clause 5
ISC 12
Apache-2.0 1
自定义许可证 1
CC-BY-4.0 1
BSD-like 1

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
@babel/plugin-transform-regenerator 7.18.6 间接依赖 npm
readdirp 3.6.0 间接依赖 npm
make-dir 2.1.0 间接依赖 npm
core-util-is 1.0.3 间接依赖 npm
esutils 2.0.3 间接依赖 npm
@babel/helpers 7.20.1 间接依赖 npm
@nicolo-ribaudo/chokidar-2 2.1.8-no-fsevents.3 间接依赖 npm
gensync 1.0.0-beta.2 间接依赖 npm
@babel/plugin-transform-arrow-functions 7.18.6 间接依赖 npm
MADDIES_FUND_UPLOAD_URL 间接依赖 pip
@babel/helper-create-class-features-plugin 7.20.2 间接依赖 npm
inherits 2.0.4 间接依赖 npm
Any 间接依赖 pip
babel-plugin-polyfill-corejs2 0.3.3 间接依赖 npm
fs-readdir-recursive 1.1.0 间接依赖 npm
@babel/code-frame 7.18.6 间接依赖 npm
is-binary-path 2.1.0 间接依赖 npm
@babel/plugin-syntax-optional-chaining 7.8.3 间接依赖 npm
SAC_METRICS_URL 间接依赖 pip
balanced-match 1.0.2 间接依赖 npm
readable-stream 1.1.14 间接依赖 npm
@babel/plugin-syntax-class-properties 7.12.13 间接依赖 npm
color-convert 1.9.3 间接依赖 npm
chokidar 3.5.3 间接依赖 npm
@babel/plugin-transform-modules-systemjs 7.19.6 间接依赖 npm
@babel/plugin-transform-property-literals 7.18.6 间接依赖 npm
glob 7.2.3 间接依赖 npm
PaymentProcessor 间接依赖 pip
FTP_CONNECTION_TIMEOUT 间接依赖 pip
@babel/plugin-transform-function-name 7.18.9 间接依赖 npm
@babel/plugin-proposal-json-strings 7.18.6 间接依赖 npm
once 1.4.0 间接依赖 npm
supports-color 5.5.0 间接依赖 npm
@jridgewell/sourcemap-codec 1.4.14 间接依赖 npm
PETFINDER_FTP_HOST 间接依赖 pip
picomatch 2.3.1 间接依赖 npm
escalade 3.1.1 间接依赖 npm
@babel/plugin-syntax-class-static-block 7.14.5 间接依赖 npm
QR_IMG_SRC 间接依赖 pip
@babel/plugin-proposal-object-rest-spread 7.20.2 间接依赖 npm
core-js-compat 3.26.0 间接依赖 npm
@babel/template 7.18.10 间接依赖 npm
string_decoder 0.10.31 间接依赖 npm
@babel/plugin-syntax-nullish-coalescing-operator 7.8.3 间接依赖 npm
fill-range 7.0.1 间接依赖 npm
MULTIPLE_DATABASES_TYPE 间接依赖 pip
inflight 1.0.6 间接依赖 npm
@babel/helper-optimise-call-expression 7.18.6 间接依赖 npm
translate 间接依赖 pip
@babel/helper-builder-binary-assignment-operator-visitor 7.18.9 间接依赖 npm
node-releases 2.0.6 间接依赖 npm
SERVICE_URL 间接依赖 pip
@babel/helper-wrap-function 7.19.0 间接依赖 npm
@babel/plugin-proposal-class-properties 7.18.6 间接依赖 npm
@babel/core 7.20.2 直接依赖 npm
@babel/runtime 7.20.1 间接依赖 npm
@babel/plugin-transform-async-to-generator 7.18.6 间接依赖 npm
date_diff_days 间接依赖 pip
date_diff 间接依赖 pip
@babel/plugin-proposal-async-generator-functions 7.20.1 间接依赖 npm
convert-source-map 1.9.0 间接依赖 npm
is-number 7.0.0 间接依赖 npm
pify 4.0.1 间接依赖 npm
FTPPublisher 间接依赖 pip
get_microchip_data 间接依赖 pip
RESIZE_IMAGES_DURING_ATTACH 间接依赖 pip
@babel/plugin-syntax-import-assertions 7.20.0 间接依赖 npm
BASE_URL 间接依赖 pip
@ampproject/remapping 2.2.0 间接依赖 npm
@jridgewell/gen-mapping 0.1.1 间接依赖 npm
electron-to-chromium 1.4.284 间接依赖 npm
_ 间接依赖 pip
DBFS_FILESTORAGE_FOLDER 间接依赖 pip
PublishCriteria 间接依赖 pip
@babel/plugin-transform-block-scoping 7.20.2 间接依赖 npm
@babel/cli 7.19.3 直接依赖 npm
@babel/highlight 7.18.6 间接依赖 npm
semver 6.3.0 间接依赖 npm
PostedData 间接依赖 pip
@babel/helper-define-polyfill-provider 0.3.3 间接依赖 npm
@babel/plugin-transform-for-of 7.18.8 间接依赖 npm
@babel/plugin-transform-spread 7.19.0 间接依赖 npm
json5 2.2.1 间接依赖 npm
promise-polyfill 8.2.3 直接依赖 npm
regenerate 1.4.2 间接依赖 npm
LOCALE 间接依赖 pip
has-flag 3.0.0 间接依赖 npm
@babel/plugin-transform-template-literals 7.18.9 间接依赖 npm
@babel/helper-validator-option 7.18.6 间接依赖 npm
jsmin 1.0.1 直接依赖 npm
@babel/plugin-transform-computed-properties 7.18.9 间接依赖 npm
@babel/helper-hoist-variables 7.18.6 间接依赖 npm
commander 4.1.1 间接依赖 npm
@babel/helper-explode-assignable-expression 7.18.6 间接依赖 npm
anymatch 3.1.2 间接依赖 npm
@jridgewell/set-array 1.1.2 间接依赖 npm
path-is-absolute 1.0.1 间接依赖 npm
jsesc 2.5.2 间接依赖 npm
binary-extensions 2.2.0 间接依赖 npm
is-core-module 2.11.0 间接依赖 npm
picocolors 1.0.0 间接依赖 npm
PETSLOCATED_FTP_HOST 间接依赖 pip
@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining 7.18.9 间接依赖 npm
@babel/plugin-syntax-optional-catch-binding 7.8.3 间接依赖 npm
@babel/compat-data 7.20.1 间接依赖 npm
@babel/traverse 7.20.1 间接依赖 npm
ProcessorError 间接依赖 pip
normalize-path 3.0.0 间接依赖 npm
@babel/plugin-proposal-private-methods 7.18.6 间接依赖 npm
@babel/plugin-proposal-private-property-in-object 7.18.6 间接依赖 npm
date-now 0.1.4 间接依赖 npm
@babel/plugin-transform-classes 7.20.2 间接依赖 npm
@babel/helper-validator-identifier 7.19.1 间接依赖 npm
@babel/plugin-transform-dotall-regex 7.18.6 间接依赖 npm
slash 2.0.0 间接依赖 npm
fsevents 2.3.2 间接依赖 npm
timedelta 间接依赖 pip
now 间接依赖 pip
domelementtype 1.3.1 间接依赖 npm
dom-serializer 0.2.2 间接依赖 npm
lodash.debounce 4.0.8 间接依赖 npm
update-browserslist-db 1.0.10 间接依赖 npm
domutils 1.5.1 间接依赖 npm
@babel/plugin-syntax-private-property-in-object 7.14.5 间接依赖 npm
browserslist 4.21.4 间接依赖 npm
@babel/plugin-proposal-optional-chaining 7.18.9 间接依赖 npm
lodash 4.17.21 间接依赖 npm
@babel/plugin-transform-typeof-symbol 7.18.9 间接依赖 npm
to-fast-properties 2.0.0 间接依赖 npm
python2display 间接依赖 pip
@babel/plugin-transform-unicode-regex 7.18.6 间接依赖 npm
@babel/generator 7.20.4 间接依赖 npm
@babel/plugin-transform-literals 7.18.9 间接依赖 npm
@babel/plugin-syntax-logical-assignment-operators 7.10.4 间接依赖 npm
domhandler 2.3.0 间接依赖 npm
@babel/plugin-transform-reserved-words 7.18.6 间接依赖 npm
chalk 2.4.2 间接依赖 npm
has 1.0.3 间接依赖 npm
DBFS_STORE 间接依赖 pip
@babel/plugin-syntax-dynamic-import 7.8.3 间接依赖 npm
supports-preserve-symlinks-flag 1.0.0 间接依赖 npm
babel-plugin-polyfill-corejs3 0.6.0 间接依赖 npm
escape-string-regexp 1.0.5 间接依赖 npm
fs.realpath 1.0.0 间接依赖 npm
cli 1.0.1 间接依赖 npm
Dict 间接依赖 pip
@babel/plugin-transform-destructuring 7.20.2 间接依赖 npm
@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression 7.18.6 间接依赖 npm
braces 3.0.2 间接依赖 npm
@babel/plugin-transform-named-capturing-groups-regex 7.19.1 间接依赖 npm
console-browserify 1.1.0 间接依赖 npm
@babel/helper-module-transforms 7.20.2 间接依赖 npm
MADDIES_FUND_TOKEN_URL 间接依赖 pip
PETFINDER_SEND_PHOTOS_BY_FTP 间接依赖 pip
@babel/helper-split-export-declaration 7.18.6 间接依赖 npm
@babel/helper-replace-supers 7.19.1 间接依赖 npm
brace-expansion 1.1.11 间接依赖 npm
@babel/helper-compilation-targets 7.20.0 间接依赖 npm
PETSLOCATED_FTP_USER 间接依赖 pip
List 间接依赖 pip
DB_HOST 间接依赖 pip
@babel/plugin-proposal-logical-assignment-operators 7.18.9 间接依赖 npm
unicode-canonical-property-names-ecmascript 2.0.0 间接依赖 npm
DB_TYPE 间接依赖 pip
MULTIPLE_DATABASES 间接依赖 pip
regenerator-transform 0.15.0 间接依赖 npm
@babel/plugin-proposal-class-static-block 7.18.6 间接依赖 npm
js-tokens 4.0.0 间接依赖 npm
@babel/plugin-proposal-optional-catch-binding 7.18.6 间接依赖 npm
minimatch 3.1.2 间接依赖 npm
@babel/plugin-transform-modules-umd 7.18.6 间接依赖 npm
htmlparser2 3.8.3 间接依赖 npm
is-glob 4.0.3 间接依赖 npm
@babel/helper-plugin-utils 7.20.2 间接依赖 npm
@babel/preset-env 7.20.2 直接依赖 npm
@babel/plugin-transform-unicode-escapes 7.18.10 间接依赖 npm
unicode-match-property-ecmascript 2.0.0 间接依赖 npm
wrappy 1.0.2 间接依赖 npm
@babel/helper-string-parser 7.19.4 间接依赖 npm
@babel/plugin-syntax-object-rest-spread 7.8.3 间接依赖 npm
base 间接依赖 pip
caniuse-lite 1.0.30001431 间接依赖 npm
@babel/helper-create-regexp-features-plugin 7.19.0 间接依赖 npm
regenerate-unicode-properties 10.1.0 间接依赖 npm
@babel/plugin-transform-duplicate-keys 7.18.9 间接依赖 npm
SimpleHTTPRequestHandler 间接依赖 pip
@babel/types 7.20.2 间接依赖 npm
@babel/plugin-syntax-numeric-separator 7.10.4 间接依赖 npm
Python 间接依赖 pip
@babel/helper-skip-transparent-expression-wrappers 7.20.0 间接依赖 npm
@babel/plugin-syntax-json-strings 7.8.3 间接依赖 npm
Tuple 间接依赖 pip
strip-json-comments 1.0.4 间接依赖 npm
SAC_METRICS_API_KEY 间接依赖 pip
is-extglob 2.1.1 间接依赖 npm
@babel/helper-module-imports 7.18.6 间接依赖 npm
PETCADEMY_FTP_USER 间接依赖 pip
@babel/plugin-transform-object-super 7.18.6 间接依赖 npm
TIMEZONE 间接依赖 pip
ms 2.1.2 间接依赖 npm
glob-parent 5.1.2 间接依赖 npm
@babel/helper-member-expression-to-functions 7.18.9 间接依赖 npm
resolve 1.22.1 间接依赖 npm
regenerator-runtime 0.13.10 间接依赖 npm
path-parse 1.0.7 间接依赖 npm
@babel/helper-environment-visitor 7.18.9 间接依赖 npm
@babel/plugin-transform-shorthand-properties 7.18.6 间接依赖 npm
@babel/plugin-syntax-export-namespace-from 7.8.3 间接依赖 npm
@babel/plugin-proposal-export-namespace-from 7.18.9 间接依赖 npm
@babel/plugin-syntax-top-level-await 7.14.5 间接依赖 npm
unicode-property-aliases-ecmascript 2.1.0 间接依赖 npm
debug 4.3.4 间接依赖 npm
regjsgen 0.7.1 间接依赖 npm
AbstractPublisher 间接依赖 pip
@babel/plugin-transform-sticky-regex 7.18.6 间接依赖 npm
@babel/preset-modules 0.1.5 间接依赖 npm
@babel/helper-remap-async-to-generator 7.18.9 间接依赖 npm
ansi-styles 3.2.1 间接依赖 npm
exit 0.1.2 间接依赖 npm
unicode-match-property-value-ecmascript 2.0.0 间接依赖 npm
asm3 间接依赖 pip
Results 间接依赖 pip
to-regex-range 5.0.1 间接依赖 npm
ADMIN_EMAIL 间接依赖 pip
@babel/plugin-transform-member-expression-literals 7.18.6 间接依赖 npm
regjsparser 0.9.1 间接依赖 npm
babel-plugin-polyfill-regenerator 0.4.1 间接依赖 npm
regexpu-core 5.2.1 间接依赖 npm
@babel/plugin-proposal-numeric-separator 7.18.6 间接依赖 npm
@babel/plugin-transform-parameters 7.20.3 间接依赖 npm
@babel/plugin-syntax-async-generators 7.8.4 间接依赖 npm
@babel/plugin-transform-block-scoped-functions 7.18.6 间接依赖 npm
@babel/plugin-proposal-dynamic-import 7.18.6 间接依赖 npm
@babel/plugin-transform-modules-commonjs 7.19.6 间接依赖 npm
@babel/parser 7.20.3 间接依赖 npm
@babel/helper-simple-access 7.20.2 间接依赖 npm
@babel/plugin-transform-new-target 7.18.6 间接依赖 npm
@babel/plugin-proposal-nullish-coalescing-operator 7.18.6 间接依赖 npm
@babel/plugin-transform-exponentiation-operator 7.18.6 间接依赖 npm
add_days 间接依赖 pip
after 间接依赖 pip
@babel/helper-function-name 7.19.0 间接依赖 npm
RESIZE_IMAGES_SPEC 间接依赖 pip
Database 间接依赖 pip
ASMSELECT_CSS 间接依赖 pip
@jridgewell/resolve-uri 3.1.0 间接依赖 npm
jshint 2.13.5 直接依赖 npm
@babel/plugin-proposal-unicode-property-regex 7.18.6 间接依赖 npm
@babel/helper-annotate-as-pure 7.18.6 间接依赖 npm
concat-map 0.0.1 间接依赖 npm
@jridgewell/trace-mapping 0.3.17 间接依赖 npm
isarray 0.0.1 间接依赖 npm
globals 11.12.0 间接依赖 npm
entities 1.0.0 间接依赖 npm
HTTPServer 间接依赖 pip
PETCADEMY_FTP_HOST 间接依赖 pip
@babel/plugin-transform-modules-amd 7.19.6 间接依赖 npm
(0)
上一篇 2023年10月23日
下一篇 2023年10月23日

相关推荐

  • AlphaPig404/Fclub 软件分析报告

    基础信息 项目名称:AlphaPig404/Fclub 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1720549311808716800/1720549311846465536 此报告由Murphysec提供 …

    软件分析 2023年11月4日
    0
  • jrgenerative/fixed-wing-sim 软件分析报告

    基础信息 项目名称:jrgenerative/fixed-wing-sim 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721322270570872832/1731731946211332096 此报告由Mu…

    软件分析 2023年12月5日
    0
  • hawkeyesec/scanner-cli 软件分析报告

    基础信息 项目名称:hawkeyesec/scanner-cli 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1718509968361652224/1718509968470704128 此报告由Murphys…

    软件分析 2023年10月29日
    0
  • iWeslie/PokerCard 软件分析报告

    基础信息 项目名称:iWeslie/PokerCard 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1718924570857701376/1718924571323269120 此报告由Murphysec提供 …

    软件分析 2023年10月30日
    0
  • google/jimfs 软件分析报告

    基础信息 项目名称:google/jimfs 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721237252260040704/1723615356838699008 此报告由Murphysec提供 漏洞列表 …

    软件分析 2023年11月12日
    0