1. 墨知首页
  2. 软件分析

bridgetownrb/bridgetown 软件分析报告

• 软件分析
目录 隐藏
1 基础信息
2 漏洞列表
3 缺陷组件
4 许可证风险
5 SBOM清单

基础信息

项目名称：bridgetownrb/bridgetown

项目徽章：

Security Status

仓库地址：https://github.com/pterodactyl/panel

检测报告地址：https://www.murphysec.com/console/report/1716467941955649536/1716467941993398272

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
node-semver 安全漏洞 ReDoS MPS-2022-5166 CVE-2022-25883 高危

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
semver 5.7.2 7.5.2 间接依赖 可选修复

许可证风险

许可证类型 相关组件 许可证风险
MIT 194 低
CC0-1.0 34 低
ISC 25 低
自定义许可证 4 低
BSD-3-Clause 8 低
BSD-2-Clause 7 低
Apache-2.0 3 低
CC-BY-4.0 1 低
GPL-3.0 1 中
CC-BY-3.0 1 低
0BSD 1 低

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
@esbuild/linux-loong64 0.19.2 直接依赖 npm
strip-ansi 6.0.1 间接依赖 npm
erubi 1.12.0 间接依赖 bundler
@nodelib/fs.walk 1.2.8 间接依赖 npm
@shoelace-style/animations 1.1.0 间接依赖 npm
@esbuild/linux-ppc64 0.19.2 直接依赖 npm
@esbuild/darwin-x64 0.19.2 直接依赖 npm
escape-string-regexp 1.0.5 间接依赖 npm
postcss-value-parser 4.2.0 间接依赖 npm
@shoelace-style/shoelace 2.0.0-beta.82 直接依赖 npm
mimic-fn 2.1.0 间接依赖 npm
esbuild 0.19.2 直接依赖 npm
ansi 1.5.0 间接依赖 bundler
@ruby2js/ruby2js 5.0.1 直接依赖 npm
through 2.3.8 间接依赖 npm
is-interactive 1.0.0 间接依赖 npm
readable-stream 3.6.0 间接依赖 npm
is-arrayish 0.3.2 间接依赖 npm
lodash 4.17.21 间接依赖 npm
string-width 4.2.3 间接依赖 npm
postcss-dir-pseudo-class 6.0.5 间接依赖 npm
@babel/highlight 7.18.6 间接依赖 npm
postcss-custom-selectors 6.0.3 间接依赖 npm
picocolors 1.0.0 间接依赖 npm
faraday 2.7.10 间接依赖 bundler
cli-width 3.0.0 间接依赖 npm
@esbuild/netbsd-x64 0.19.2 直接依赖 npm
read-pkg-up 7.0.1 间接依赖 npm
minitest 5.19.0 间接依赖 bundler
spdx-expression-parse 3.0.1 间接依赖 npm
postcss-selector-parser 6.0.10 间接依赖 npm
css-prefers-color-scheme 6.0.3 间接依赖 npm
rbs 2.8.4 间接依赖 bundler
chalk 4.1.2 间接依赖 npm
mute-stream 0.0.8 间接依赖 npm
yard 0.9.34 间接依赖 bundler
lilconfig 2.0.6 间接依赖 npm
postcss-preset-env 7.8.0 直接依赖 npm
builder 3.2.4 间接依赖 bundler
autoprefixer 10.4.8 间接依赖 npm
ruby2_keywords 0.0.5 间接依赖 bundler
arrify 1.0.1 间接依赖 npm
@csstools/selector-specificity 2.0.2 间接依赖 npm
signal-exit 3.0.7 间接依赖 npm
faraday-follow_redirects 0.3.0 间接依赖 bundler
deep-extend 0.6.0 间接依赖 npm
postcss-nesting 10.1.10 间接依赖 npm
@csstools/postcss-is-pseudo-class 2.0.7 间接依赖 npm
hosted-git-info 2.8.9 间接依赖 npm
rubocop-ast 1.29.0 间接依赖 bundler
qr-creator 1.0.0 间接依赖 npm
minitest-reporters 1.6.1 间接依赖 bundler
rubocop-bridgetown 0.3.2 间接依赖 bundler
cucumber-gherkin 23.0.1 间接依赖 bundler
rb-fsevent 0.11.2 间接依赖 bundler
camelcase 5.3.1 间接依赖 npm
@csstools/postcss-progressive-custom-properties 1.3.0 间接依赖 npm
shoulda 4.0.0 间接依赖 bundler
fill-range 7.0.1 间接依赖 npm
public_suffix 5.0.3 间接依赖 bundler
indent-string 4.0.0 间接依赖 npm
postcss-opacity-percentage 1.1.2 间接依赖 npm
@csstools/postcss-text-decoration-shorthand 1.0.0 间接依赖 npm
array-union 2.1.0 间接依赖 npm
regexp_parser 2.8.1 间接依赖 bundler
@csstools/postcss-font-format-keywords 1.0.1 间接依赖 npm
parent-module 1.0.1 间接依赖 npm
semver 5.7.2 间接依赖 npm
cucumber-cucumber-expressions 15.2.0 间接依赖 bundler
is-arrayish 0.2.1 间接依赖 npm
color-name 1.1.4 间接依赖 npm
decamelize 1.2.0 间接依赖 npm
is-plain-obj 1.1.0 间接依赖 npm
util-deprecate 1.0.2 间接依赖 npm
@hotwired/turbo 7.1.0 直接依赖 npm
@csstools/postcss-ic-unit 1.0.1 间接依赖 npm
js-yaml 3.14.1 间接依赖 npm
typical 5.2.0 间接依赖 npm
mime-types 3.5.1 间接依赖 bundler
path-exists 4.0.0 间接依赖 npm
electron-to-chromium 1.4.241 间接依赖 npm
chardet 0.7.0 间接依赖 npm
@babel/code-frame 7.18.6 间接依赖 npm
postcss-load-config 3.1.4 直接依赖 npm
jaro_winkler 1.5.6 间接依赖 bundler
postcss-selector-not 6.0.1 间接依赖 npm
simplecov 0.22.0 间接依赖 bundler
simple-swizzle 0.2.2 间接依赖 npm
yaml 1.10.2 间接依赖 npm
resolve 1.22.1 间接依赖 npm
convert-source-map 1.8.0 间接依赖 npm
bundler 间接依赖 bundler
parser 3.2.2.3 间接依赖 bundler
hotkeys-js 3.9.5 直接依赖 npm
@esbuild/android-arm 0.19.2 直接依赖 npm
postcss-focus-within 5.0.4 间接依赖 npm
has 1.0.3 间接依赖 npm
kind-of 6.0.3 间接依赖 npm
simplecov-html 0.12.3 间接依赖 bundler
@nodelib/fs.scandir 2.1.5 间接依赖 npm
postcss-replace-overflow-wrap 4.0.0 间接依赖 npm
json 2.6.3 间接依赖 bundler
picomatch 2.3.1 间接依赖 npm
cucumber-html-formatter 19.2.0 间接依赖 bundler
postcss-initial 4.0.1 间接依赖 npm
postcss-env-function 4.0.6 间接依赖 npm
@csstools/postcss-trigonometric-functions 1.0.2 间接依赖 npm
@esbuild/darwin-arm64 0.19.2 直接依赖 npm
rubocop-performance 1.19.0 间接依赖 bundler
inflight 1.0.6 间接依赖 npm
nokogiri 1.15.4-x86_64-linux 间接依赖 bundler
cucumber-messages 18.0.0 间接依赖 bundler
@esbuild/android-arm64 0.19.2 直接依赖 npm
addressable 2.8.5 间接依赖 bundler
clone 1.0.4 间接依赖 npm
supports-color 7.2.0 间接依赖 npm
dom-serializer 1.4.1 间接依赖 npm
is-core-module 2.10.0 间接依赖 npm
meow 9.0.0 间接依赖 npm
lru-cache 6.0.0 间接依赖 npm
@shoelace-style/localize 3.0.1 间接依赖 npm
quick-lru 4.0.1 间接依赖 npm
i18n 1.14.1 间接依赖 bundler
figures 3.2.0 间接依赖 npm
regenerator-runtime 0.13.9 间接依赖 npm
sprintf-js 1.0.3 间接依赖 npm
bridgetown-quick-search 1.1.3 直接依赖 npm
spdx-license-ids 3.0.12 间接依赖 npm
trim-newlines 3.0.1 间接依赖 npm
is-extglob 2.1.1 间接依赖 npm
tmp 0.0.33 间接依赖 npm
postcss-focus-visible 6.0.4 间接依赖 npm
postcss-clamp 4.1.0 间接依赖 npm
esprima 4.0.1 间接依赖 npm
hard-rejection 2.1.0 间接依赖 npm
lit-html 2.3.1 间接依赖 npm
map-obj 4.3.0 间接依赖 npm
import-fresh 3.3.0 间接依赖 npm
@types/trusted-types 2.0.2 间接依赖 npm
path-type 4.0.0 间接依赖 npm
shoulda-context 2.0.0 间接依赖 bundler
ora 5.4.1 间接依赖 npm
reusify 1.0.4 间接依赖 npm
color-convert 2.0.1 间接依赖 npm
fraction.js 4.2.0 间接依赖 npm
solargraph 0.49.0 间接依赖 bundler
is-fullwidth-code-point 3.0.0 间接依赖 npm
is-glob 4.0.3 间接依赖 npm
map-obj 1.0.1 间接依赖 npm
@types/minimist 1.2.2 间接依赖 npm
postcss-flexbugs-fixes 5.0.2 直接依赖 npm
@esbuild/win32-x64 0.19.2 直接依赖 npm
@floating-ui/core 1.0.1 间接依赖 npm
rubocop 1.56.2 间接依赖 bundler
@types/normalize-package-data 2.4.1 间接依赖 npm
type-fest 0.8.1 间接依赖 npm
argparse 1.0.10 间接依赖 npm
bl 4.1.0 间接依赖 npm
faraday-net_http 3.0.2 间接依赖 bundler
isexe 2.0.0 间接依赖 npm
brace-expansion 1.1.11 间接依赖 npm
escalade 3.1.1 间接依赖 npm
racc 1.7.1 间接依赖 bundler
reduce-flatten 2.0.0 间接依赖 npm
defaults 1.0.3 间接依赖 npm
global-modules 2.0.0 间接依赖 npm
type-fest 0.6.0 间接依赖 npm
rxjs 7.5.6 间接依赖 npm
@babel/helper-validator-identifier 7.18.6 间接依赖 npm
postcss-import 14.1.0 直接依赖 npm
validate-npm-package-license 3.0.4 间接依赖 npm
@esbuild/freebsd-arm64 0.19.2 直接依赖 npm
glob 7.2.3 直接依赖 npm
cli-cursor 3.1.0 间接依赖 npm
rack 3.0.8 间接依赖 bundler
function-bind 1.1.1 间接依赖 npm
read-pkg 5.2.0 间接依赖 npm
color 4.2.3 间接依赖 npm
activesupport 7.0.7.2 间接依赖 bundler
postcss-color-functional-notation 4.2.4 间接依赖 npm
fs.realpath 1.0.0 间接依赖 npm
kebabcase 1.0.1 间接依赖 npm
semver 7.5.4 间接依赖 npm
postcss-font-variant 5.0.0 间接依赖 npm
safe-buffer 5.2.1 间接依赖 npm
fastq 1.13.0 间接依赖 npm
ansi-regex 5.0.1 间接依赖 npm
@csstools/postcss-nested-calc 1.0.0 间接依赖 npm
base64 0.1.1 间接依赖 bundler
diff-lcs 1.5.0 间接依赖 bundler
e2mmap 0.1.0 间接依赖 bundler
htmlparser2 6.1.0 间接依赖 npm
postcss-double-position-gradients 3.1.2 间接依赖 npm
minimist-options 4.1.0 间接依赖 npm
postcss-custom-properties 12.1.8 间接依赖 npm
caniuse-lite 1.0.30001388 间接依赖 npm
merge2 1.4.1 间接依赖 npm
docile 1.4.0 间接依赖 bundler
@types/parse-json 4.0.0 间接依赖 npm
minimatch 3.1.2 间接依赖 npm
lodash.pull 4.1.0 间接依赖 npm
table-layout 1.0.1 间接依赖 npm
pify 2.3.0 间接依赖 npm
p-locate 4.1.0 间接依赖 npm
node-releases 2.0.6 间接依赖 npm
cli-spinners 2.7.0 间接依赖 npm
@esbuild/win32-ia32 0.19.2 直接依赖 npm
emoji-regex 8.0.0 间接依赖 npm
rainbow 3.1.1 间接依赖 bundler
cucumber-tag-expressions 4.1.0 间接依赖 bundler
path-parse 1.0.7 间接依赖 npm
css-blank-pseudo 3.0.3 间接依赖 npm
unicode-display_width 2.4.2 间接依赖 bundler
rspec-core 3.12.2 间接依赖 bundler
kramdown 2.4.0 间接依赖 bundler
inquirer 8.2.4 间接依赖 npm
rspec 3.12.0 间接依赖 bundler
find-up 4.1.0 间接依赖 npm
postcss-color-hex-alpha 8.0.4 间接依赖 npm
@esbuild/sunos-x64 0.19.2 直接依赖 npm
iconv-lite 0.4.24 间接依赖 npm
callsites 3.1.0 间接依赖 npm
postcss-pseudo-class-any-link 7.1.6 间接依赖 npm
@csstools/postcss-normalize-display-values 1.0.1 间接依赖 npm
fast-glob 3.2.11 间接依赖 npm
entities 2.2.0 间接依赖 npm
ignore 5.2.0 间接依赖 npm
wordwrapjs 4.0.1 间接依赖 npm
color-string 1.9.1 间接依赖 npm
safe-buffer 5.1.2 间接依赖 npm
postcss-media-minmax 5.0.0 间接依赖 npm
domutils 2.8.0 间接依赖 npm
ffi 1.15.5 间接依赖 bundler
decamelize-keys 1.1.0 间接依赖 npm
run-async 2.4.1 间接依赖 npm
@csstools/postcss-cascade-layers 1.0.5 间接依赖 npm
restore-cursor 3.1.0 间接依赖 npm
hosted-git-info 4.1.0 间接依赖 npm
type-fest 0.21.3 间接依赖 npm
postcss-attribute-case-insensitive 5.0.2 间接依赖 npm
@esbuild/android-x64 0.19.2 直接依赖 npm
mini_portile2 2.8.4 间接依赖 bundler
os-tmpdir 1.0.2 间接依赖 npm
log-symbols 4.1.0 间接依赖 npm
roda 3.71.0 间接依赖 bundler
read-cache 1.0.0 间接依赖 npm
ansi-escapes 4.3.2 间接依赖 npm
yallist 4.0.0 间接依赖 npm
spdx-correct 3.1.1 间接依赖 npm
domelementtype 2.3.0 间接依赖 npm
@esbuild/linux-s390x 0.19.2 直接依赖 npm
thor 1.2.2 间接依赖 bundler
string_decoder 1.3.0 间接依赖 npm
postcss-logical 5.0.4 间接依赖 npm
terminal-table 3.0.2 间接依赖 bundler
glob-parent 5.1.2 间接依赖 npm
resolve-from 5.0.0 间接依赖 npm
spdx-exceptions 2.3.0 间接依赖 npm
normalize-package-data 3.0.3 间接依赖 npm
ast 2.4.2 间接依赖 bundler
array-back 4.0.2 间接依赖 npm
bulk-require 1.0.1 间接依赖 npm
@lit/reactive-element 1.4.1 间接依赖 npm
lunr 2.3.9 间接依赖 npm
@csstools/postcss-hwb-function 1.0.2 间接依赖 npm
path-is-absolute 1.0.1 间接依赖 npm
ini 1.3.8 间接依赖 npm
hash_with_dot_access 1.2.0 间接依赖 bundler
concurrent-ruby 1.2.2 间接依赖 bundler
simplecov_json_formatter 0.1.4 间接依赖 bundler
postcss-gap-properties 3.0.5 间接依赖 npm
parallel 1.23.0 间接依赖 bundler
benchmark 0.2.1 间接依赖 bundler
@esbuild/linux-x64 0.19.2 直接依赖 npm
postcss-page-break 3.0.4 间接依赖 npm
type-fest 0.18.1 间接依赖 npm
@esbuild/linux-riscv64 0.19.2 直接依赖 npm
source-map-js 1.0.2 间接依赖 npm
serbea 1.0.1 间接依赖 bundler
chalk 2.4.2 间接依赖 npm
min-indent 1.0.1 间接依赖 npm
rack-test 2.1.0 间接依赖 bundler
@ruby2js/esbuild-plugin 1.0.0 直接依赖 npm
is-unicode-supported 0.1.0 间接依赖 npm
onetime 5.1.2 间接依赖 npm
has-flag 4.0.0 间接依赖 npm
postcss-image-set-function 4.0.7 间接依赖 npm
rspec-support 3.12.1 间接依赖 bundler
postcss-overflow-shorthand 3.0.4 间接依赖 npm
backport 1.2.0 间接依赖 bundler
dir-glob 3.0.1 间接依赖 npm
wcwidth 1.0.1 间接依赖 npm
@esbuild/win32-arm64 0.19.2 直接依赖 npm
@csstools/postcss-stepped-value-functions 1.0.1 间接依赖 npm
tslib 2.4.0 间接依赖 npm
base64-js 1.5.1 间接依赖 npm
lit-element 3.2.2 间接依赖 npm
micromatch 4.0.5 间接依赖 npm
rspec-mocks 3.12.6 间接依赖 bundler
globby 11.1.0 间接依赖 npm
mime-types-data 3.2023.0808 间接依赖 bundler
tilt 2.2.0 间接依赖 bundler
cosmiconfig 7.0.0 间接依赖 npm
@babel/runtime 7.18.9 间接依赖 npm
locate-path 5.0.0 间接依赖 npm
ansi-styles 4.3.0 间接依赖 npm
postcss 8.4.31 直接依赖 npm
external-editor 3.1.0 间接依赖 npm
css-has-pseudo 3.0.4 间接依赖 npm
language_server-protocol 3.17.0.3 间接依赖 bundler
@csstools/postcss-color-function 1.1.1 间接依赖 npm
cucumber 8.0.0 间接依赖 bundler
global-prefix 3.0.0 间接依赖 npm
postcss-custom-media 8.0.2 间接依赖 npm
shoulda-matchers 4.5.1 间接依赖 bundler
json-parse-even-better-errors 2.3.1 间接依赖 npm
@esbuild/linux-arm 0.19.2 直接依赖 npm
run-parallel 1.2.0 间接依赖 npm
js-tokens 4.0.0 间接依赖 npm
lit 2.3.1 间接依赖 npm
concat-map 0.0.1 间接依赖 npm
@csstools/postcss-oklab-function 1.1.1 间接依赖 npm
multi_test 1.1.0 间接依赖 bundler
@linthtml/linthtml 0.8.6 直接依赖 npm
browserslist 4.21.3 间接依赖 npm
nanoid 3.3.6 间接依赖 npm
redent 3.0.0 间接依赖 npm
which 1.3.1 间接依赖 npm
ieee754 1.2.1 间接依赖 npm
yargs-parser 20.2.9 间接依赖 npm
inherits 2.0.4 间接依赖 npm
supports-preserve-symlinks-flag 1.0.0 间接依赖 npm
domhandler 4.3.1 间接依赖 npm
sys-uname 1.2.3 间接依赖 bundler
once 1.4.0 间接依赖 npm
@esbuild/openbsd-x64 0.19.2 直接依赖 npm
cssesc 3.0.0 间接依赖 npm
wrappy 1.0.2 间接依赖 npm
slash 3.0.0 间接依赖 npm
@floating-ui/dom 1.0.1 间接依赖 npm
reverse_markdown 2.1.1 间接依赖 bundler
parse-json 5.2.0 间接依赖 npm
wrap-ansi 7.0.0 间接依赖 npm
braces 3.0.2 间接依赖 npm
@nodelib/fs.stat 2.0.5 间接依赖 npm
postcss-place 7.0.5 间接依赖 npm
postcss-color-rebeccapurple 7.1.1 间接依赖 npm
cucumber-core 11.0.0 间接依赖 bundler
activemodel 7.0.7.2 间接依赖 bundler
error-ex 1.3.2 间接依赖 npm
camelcase-keys 6.2.2 间接依赖 npm
tzinfo 2.0.6 间接依赖 bundler
lines-and-columns 1.2.4 间接依赖 npm
update-browserslist-db 1.0.7 间接依赖 npm
@esbuild/linux-arm64 0.19.2 直接依赖 npm
rspec-expectations 3.12.3 间接依赖 bundler
@lit-labs/react 1.0.8 间接依赖 npm
safer-buffer 2.1.2 间接依赖 npm
ruby-progressbar 1.13.0 间接依赖 bundler
resolve-from 4.0.0 间接依赖 npm
smoothscroll-polyfill 0.4.4 直接依赖 npm
@esbuild/linux-mips64el 0.19.2 直接依赖 npm
balanced-match 1.0.2 间接依赖 npm
buffer 5.7.1 间接依赖 npm
@csstools/postcss-unset-value 1.0.2 间接依赖 npm
strip-indent 3.0.0 间接依赖 npm
@esbuild/linux-ia32 0.19.2 直接依赖 npm
rexml 3.2.6 间接依赖 bundler
chalk 4.1.1 间接依赖 npm
kramdown-parser-gfm 1.1.0 间接依赖 bundler
listen 3.8.0 间接依赖 bundler
normalize-package-data 2.5.0 间接依赖 npm
normalize-range 0.1.2 间接依赖 npm
cssdb 7.0.1 间接依赖 npm
rb-inotify 0.10.1 间接依赖 bundler
cucumber-ci-environment 9.2.0 间接依赖 bundler
postcss-lab-function 4.2.1 间接依赖 npm
@esbuild/freebsd-x64 0.19.2 直接依赖 npm
赞 (0)
上一篇 2023年10月23日
下一篇 2023年10月23日

相关推荐

  • Evizero/Augmentor.jl 软件分析报告

    基础信息 项目名称：Evizero/Augmentor.jl 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1717584117163147264/1717584117234450432 此报告由Murphysec…

    软件分析 2023年10月27日
    0

  • bo-blog/bw 软件分析报告

    基础信息 项目名称：bo-blog/bw 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1716402433017298944/1716402461618257920 此报告由Murphysec提供 漏洞列表 暂无…

    软件分析 2023年10月23日
    0

  • JARinteractive/ESCObservable 软件分析报告

    基础信息 项目名称：JARinteractive/ESCObservable 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1721293625781420032/1728404204770250752 此报告由M…

    软件分析 2023年11月25日
    0

  • bellots/usefulExtensions 软件分析报告

    基础信息 项目名称：bellots/usefulExtensions 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1716286624404996096/1716286625201913856 此报告由Murph…

    软件分析 2023年10月23日
    0

  • JohnSully/KeyDB 软件分析报告

    基础信息 项目名称：JohnSully/KeyDB 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1721316802251227136/1728532798628646912 此报告由Murphysec提供 漏洞…

    软件分析 2023年11月26日
    0