基础信息
项目名称:darklang/dark
项目徽章:
仓库地址:https://github.com/pterodactyl/panel
检测报告地址:https://www.murphysec.com/console/report/1717045999058075648/1717046000177954816
此报告由Murphysec提供
漏洞列表
漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
---|---|---|---|---|
node-semver 安全漏洞 | ReDoS | MPS-2022-5166 | CVE-2022-25883 | 高危 |
缺陷组件
组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
---|---|---|---|---|
semver | 5.7.1 | 7.5.2 | 间接依赖 | 可选修复 |
许可证风险
许可证类型 | 相关组件 | 许可证风险 |
---|---|---|
MIT | 241 | 低 |
BSD-2-Clause | 8 | 低 |
ISC | 22 | 低 |
Python-2.0 | 1 | 低 |
Apache-2.0 | 9 | 低 |
BSD-3-Clause | 4 | 低 |
CC0-1.0 | 1 | 低 |
CC-BY-3.0 | 1 | 低 |
CC-BY-4.0 | 1 | 低 |
SBOM清单
组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
---|---|---|---|
lines-and-columns | 1.2.4 | 间接依赖 | npm |
normalize-package-data | 2.5.0 | 间接依赖 | npm |
is-glob | 4.0.3 | 间接依赖 | npm |
estree-walker | 2.0.2 | 间接依赖 | npm |
once | 1.4.0 | 间接依赖 | npm |
@eslint/eslintrc | 2.0.2 | 间接依赖 | npm |
is-number-object | 1.0.7 | 间接依赖 | npm |
json-schema-traverse | 0.4.1 | 间接依赖 | npm |
@vue/devtools-api | 6.5.0 | 间接依赖 | npm |
@types/codemirror | 5.60.7 | 直接依赖 | npm |
postcss-import | 14.1.0 | 间接依赖 | npm |
eslint | 8.39.0 | 直接依赖 | npm |
eslint-plugin-vue | 9.11.0 | 直接依赖 | npm |
path-is-absolute | 1.0.1 | 间接依赖 | npm |
chalk | 2.4.2 | 间接依赖 | npm |
json5 | 2.2.3 | 间接依赖 | npm |
sourcemap-codec | 1.4.8 | 间接依赖 | npm |
spdx-expression-parse | 3.0.1 | 间接依赖 | npm |
is-core-module | 2.12.0 | 间接依赖 | npm |
normalize-path | 3.0.0 | 间接依赖 | npm |
@esbuild/android-x64 | 0.17.19 | 间接依赖 | npm |
jiti | 1.18.2 | 间接依赖 | npm |
has-bigints | 1.0.2 | 间接依赖 | npm |
arg | 5.0.2 | 间接依赖 | npm |
argparse | 2.0.1 | 间接依赖 | npm |
path-type | 3.0.0 | 间接依赖 | npm |
p-locate | 5.0.0 | 间接依赖 | npm |
vue-eslint-parser | 9.1.1 | 间接依赖 | npm |
parent-module | 1.0.1 | 间接依赖 | npm |
path-parse | 1.0.7 | 间接依赖 | npm |
lodash | 4.17.21 | 间接依赖 | npm |
prelude-ls | 1.2.1 | 间接依赖 | npm |
typescript | 4.8.4 | 直接依赖 | npm |
lilconfig | 2.1.0 | 间接依赖 | npm |
@esbuild/linux-ppc64 | 0.17.19 | 间接依赖 | npm |
has-tostringtag | 1.0.0 | 间接依赖 | npm |
form-data | 4.0.0 | 间接依赖 | npm |
esquery | 1.5.0 | 间接依赖 | npm |
is-binary-path | 2.1.0 | 间接依赖 | npm |
@vue/reactivity | 3.2.47 | 间接依赖 | npm |
flatted | 3.2.7 | 间接依赖 | npm |
picocolors | 1.0.0 | 间接依赖 | npm |
postcss-js | 4.0.1 | 间接依赖 | npm |
emojis-list | 3.0.0 | 间接依赖 | npm |
@esbuild/freebsd-x64 | 0.17.19 | 间接依赖 | npm |
autoprefixer | 10.4.14 | 直接依赖 | npm |
esbuild | 0.17.19 | 间接依赖 | npm |
@esbuild/android-arm | 0.17.19 | 间接依赖 | npm |
@vitejs/plugin-vue | 4.1.0 | 直接依赖 | npm |
validate-npm-package-license | 3.0.4 | 间接依赖 | npm |
@esbuild/openbsd-x64 | 0.17.19 | 间接依赖 | npm |
@jridgewell/gen-mapping | 0.3.3 | 间接依赖 | npm |
he | 1.2.0 | 间接依赖 | npm |
minimatch | 3.1.2 | 间接依赖 | npm |
ms | 2.1.2 | 间接依赖 | npm |
available-typed-arrays | 1.0.5 | 间接依赖 | npm |
for-each | 0.3.3 | 间接依赖 | npm |
which-typed-array | 1.1.9 | 间接依赖 | npm |
word-wrap | 1.2.4 | 间接依赖 | npm |
lru-cache | 6.0.0 | 直接依赖 | npm |
is-typed-array | 1.1.10 | 间接依赖 | npm |
fast-levenshtein | 2.0.6 | 间接依赖 | npm |
@vue/runtime-dom | 3.2.47 | 间接依赖 | npm |
spdx-license-ids | 3.0.13 | 间接依赖 | npm |
has-property-descriptors | 1.0.0 | 间接依赖 | npm |
fast-deep-equal | 3.1.3 | 间接依赖 | npm |
parse-json | 4.0.0 | 间接依赖 | npm |
@esbuild/win32-x64 | 0.17.19 | 间接依赖 | npm |
@jridgewell/sourcemap-codec | 1.4.15 | 间接依赖 | npm |
commander | 4.1.1 | 间接依赖 | npm |
type-fest | 0.20.2 | 间接依赖 | npm |
chokidar | 3.5.3 | 间接依赖 | npm |
escape-string-regexp | 1.0.5 | 间接依赖 | npm |
nice-try | 1.0.5 | 间接依赖 | npm |
eslint-scope | 7.2.0 | 间接依赖 | npm |
@esbuild/darwin-x64 | 0.17.19 | 间接依赖 | npm |
@nodelib/fs.walk | 1.2.8 | 间接依赖 | npm |
object.assign | 4.1.4 | 间接依赖 | npm |
postcss-nested | 6.0.0 | 间接依赖 | npm |
is-bigint | 1.0.4 | 间接依赖 | npm |
globals | 13.20.0 | 间接依赖 | npm |
@esbuild/linux-mips64el | 0.17.19 | 间接依赖 | npm |
ansi-regex | 5.0.1 | 间接依赖 | npm |
any-promise | 1.3.0 | 间接依赖 | npm |
es-set-tostringtag | 2.0.1 | 间接依赖 | npm |
electron-to-chromium | 1.4.365 | 间接依赖 | npm |
json-parse-better-errors | 1.0.2 | 间接依赖 | npm |
micromatch | 4.0.5 | 间接依赖 | npm |
run-parallel | 1.2.0 | 间接依赖 | npm |
acorn | 8.8.2 | 间接依赖 | npm |
@volar/vue-language-core | 1.2.0 | 间接依赖 | npm |
is-callable | 1.2.7 | 间接依赖 | npm |
function-bind | 1.1.1 | 间接依赖 | npm |
natural-compare | 1.4.0 | 间接依赖 | npm |
get-intrinsic | 1.2.0 | 间接依赖 | npm |
source-map | 0.6.1 | 间接依赖 | npm |
@vue/compiler-ssr | 3.2.47 | 间接依赖 | npm |
is-array-buffer | 3.0.2 | 间接依赖 | npm |
xml-name-validator | 4.0.0 | 间接依赖 | npm |
magic-string | 0.25.9 | 间接依赖 | npm |
locate-path | 6.0.0 | 间接依赖 | npm |
flat-cache | 3.0.4 | 间接依赖 | npm |
spdx-exceptions | 2.3.0 | 间接依赖 | npm |
@vue/compiler-sfc | 3.2.47 | 间接依赖 | npm |
anymatch | 3.1.3 | 间接依赖 | npm |
@eslint-community/regexpp | 4.5.0 | 间接依赖 | npm |
define-properties | 1.2.0 | 间接依赖 | npm |
pidtree | 0.3.1 | 间接依赖 | npm |
reusify | 1.0.4 | 间接依赖 | npm |
caniuse-lite | 1.0.30001478 | 间接依赖 | npm |
@volar/typescript | 1.3.0-alpha.0 | 间接依赖 | npm |
spdx-correct | 3.2.0 | 间接依赖 | npm |
array-buffer-byte-length | 1.0.0 | 间接依赖 | npm |
pify | 3.0.0 | 间接依赖 | npm |
picomatch | 2.3.1 | 间接依赖 | npm |
de-indent | 1.0.2 | 间接依赖 | npm |
punycode | 2.3.0 | 间接依赖 | npm |
object-hash | 3.0.0 | 间接依赖 | npm |
@jridgewell/set-array | 1.1.2 | 间接依赖 | npm |
csstype | 2.6.21 | 间接依赖 | npm |
@nodelib/fs.stat | 2.0.5 | 间接依赖 | npm |
@types/estree | 1.0.1 | 间接依赖 | npm |
dlv | 1.1.3 | 间接依赖 | npm |
load-json-file | 4.0.0 | 间接依赖 | npm |
delayed-stream | 1.0.0 | 间接依赖 | npm |
call-bind | 1.0.2 | 间接依赖 | npm |
wrappy | 1.0.2 | 间接依赖 | npm |
yocto-queue | 0.1.0 | 间接依赖 | npm |
is-regex | 1.1.4 | 间接依赖 | npm |
@eslint/js | 8.39.0 | 间接依赖 | npm |
@esbuild/win32-ia32 | 0.17.19 | 间接依赖 | npm |
sucrase | 3.32.0 | 间接依赖 | npm |
gopd | 1.0.1 | 间接依赖 | npm |
uri-js | 4.4.1 | 间接依赖 | npm |
has | 1.0.3 | 间接依赖 | npm |
postcss-load-config | 3.1.4 | 间接依赖 | npm |
@humanwhocodes/object-schema | 1.2.1 | 间接依赖 | npm |
string.prototype.trim | 1.2.7 | 间接依赖 | npm |
codemirror | 5.65.13 | 直接依赖 | npm |
shebang-command | 1.2.0 | 间接依赖 | npm |
lodash.merge | 4.6.2 | 间接依赖 | npm |
@types/json-schema | 7.0.11 | 间接依赖 | npm |
semver | 5.7.1 | 间接依赖 | npm |
@vue/runtime-core | 3.2.47 | 间接依赖 | npm |
error-ex | 1.3.2 | 间接依赖 | npm |
@esbuild/netbsd-x64 | 0.17.19 | 间接依赖 | npm |
camelcase-css | 2.0.1 | 间接依赖 | npm |
postcss-value-parser | 4.2.0 | 间接依赖 | npm |
path-exists | 4.0.0 | 间接依赖 | npm |
util-deprecate | 1.0.2 | 间接依赖 | npm |
escalade | 3.1.1 | 间接依赖 | npm |
import-fresh | 3.3.0 | 间接依赖 | npm |
fs.realpath | 1.0.0 | 间接依赖 | npm |
color-convert | 1.9.3 | 间接依赖 | npm |
es-abstract | 1.21.2 | 间接依赖 | npm |
merge2 | 1.4.1 | 间接依赖 | npm |
schema-utils | 3.1.2 | 间接依赖 | npm |
is-boolean-object | 1.1.2 | 间接依赖 | npm |
functions-have-names | 1.2.3 | 间接依赖 | npm |
ignore | 5.2.4 | 间接依赖 | npm |
@nodelib/fs.scandir | 2.1.5 | 间接依赖 | npm |
asynckit | 0.4.0 | 间接依赖 | npm |
ajv | 6.12.6 | 间接依赖 | npm |
side-channel | 1.0.4 | 间接依赖 | npm |
browserslist | 4.21.5 | 间接依赖 | npm |
typed-array-length | 1.0.4 | 间接依赖 | npm |
glob-parent | 6.0.2 | 间接依赖 | npm |
which-boxed-primitive | 1.0.2 | 间接依赖 | npm |
rollup | 3.23.1 | 间接依赖 | npm |
@humanwhocodes/module-importer | 1.0.1 | 间接依赖 | npm |
espree | 9.5.1 | 间接依赖 | npm |
fraction.js | 4.2.0 | 间接依赖 | npm |
json-stable-stringify-without-jsonify | 1.0.1 | 间接依赖 | npm |
prettier | 2.8.8 | 直接依赖 | npm |
inflight | 1.0.6 | 间接依赖 | npm |
quick-lru | 5.1.1 | 间接依赖 | npm |
resolve | 1.22.3 | 间接依赖 | npm |
mime-db | 1.52.0 | 间接依赖 | npm |
p-limit | 3.1.0 | 间接依赖 | npm |
fast-json-stable-stringify | 2.1.0 | 间接依赖 | npm |
find-up | 5.0.0 | 间接依赖 | npm |
strip-bom | 3.0.0 | 间接依赖 | npm |
is-number | 7.0.0 | 间接依赖 | npm |
read-pkg | 3.0.0 | 间接依赖 | npm |
npm-run-all | 4.1.5 | 直接依赖 | npm |
balanced-match | 1.0.2 | 间接依赖 | npm |
vue-tsc | 1.2.0 | 直接依赖 | npm |
thenify-all | 1.6.0 | 间接依赖 | npm |
graceful-fs | 4.2.11 | 间接依赖 | npm |
node-releases | 2.0.10 | 间接依赖 | npm |
js-sdsl | 4.4.0 | 间接依赖 | npm |
@vue/tsconfig | 0.1.3 | 直接依赖 | npm |
string.prototype.trimend | 1.0.6 | 间接依赖 | npm |
@esbuild/darwin-arm64 | 0.17.19 | 间接依赖 | npm |
get-symbol-description | 1.0.0 | 间接依赖 | npm |
autosize | 6.0.1 | 直接依赖 | npm |
brace-expansion | 1.1.11 | 间接依赖 | npm |
fsevents | 2.3.2 | 间接依赖 | npm |
is-extglob | 2.1.1 | 间接依赖 | npm |
@esbuild/sunos-x64 | 0.17.19 | 间接依赖 | npm |
@fortawesome/fontawesome-common-types | 6.4.0 | 间接依赖 | npm |
@esbuild/linux-ia32 | 0.17.19 | 间接依赖 | npm |
@vue/compiler-dom | 3.2.47 | 间接依赖 | npm |
grapheme-splitter | 1.0.4 | 间接依赖 | npm |
@babel/parser | 7.21.4 | 间接依赖 | npm |
file-entry-cache | 6.0.1 | 间接依赖 | npm |
doctrine | 3.0.0 | 间接依赖 | npm |
eslint-visitor-keys | 3.4.0 | 间接依赖 | npm |
isexe | 2.0.0 | 间接依赖 | npm |
fill-range | 7.0.1 | 间接依赖 | npm |
nan | 2.17.0 | 间接依赖 | npm |
combined-stream | 1.0.8 | 间接依赖 | npm |
@fortawesome/free-brands-svg-icons | 6.4.0 | 直接依赖 | npm |
@esbuild/android-arm64 | 0.17.19 | 间接依赖 | npm |
@esbuild/linux-arm64 | 0.17.19 | 间接依赖 | npm |
ansi-styles | 3.2.1 | 间接依赖 | npm |
text-table | 0.2.0 | 间接依赖 | npm |
@esbuild/linux-riscv64 | 0.17.19 | 间接依赖 | npm |
is-negative-zero | 2.0.2 | 间接依赖 | npm |
is-path-inside | 3.0.3 | 间接依赖 | npm |
worker-loader | 3.0.8 | 直接依赖 | npm |
binary-extensions | 2.2.0 | 间接依赖 | npm |
normalize-range | 0.1.2 | 间接依赖 | npm |
queue-microtask | 1.2.3 | 间接依赖 | npm |
acorn-jsx | 5.3.2 | 间接依赖 | npm |
object-keys | 1.1.1 | 间接依赖 | npm |
supports-preserve-symlinks-flag | 1.0.0 | 间接依赖 | npm |
es-to-primitive | 1.2.1 | 间接依赖 | npm |
is-date-object | 1.0.5 | 间接依赖 | npm |
@types/node | 18.15.11 | 直接依赖 | npm |
callsites | 3.1.0 | 间接依赖 | npm |
@types/autosize | 4.0.1 | 直接依赖 | npm |
is-arrayish | 0.2.1 | 间接依赖 | npm |
deep-is | 0.1.4 | 间接依赖 | npm |
object-assign | 4.1.1 | 间接依赖 | npm |
yaml | 1.10.2 | 间接依赖 | npm |
readdirp | 3.6.0 | 间接依赖 | npm |
@esbuild/win32-arm64 | 0.17.19 | 间接依赖 | npm |
vue | 3.2.47 | 直接依赖 | npm |
is-string | 1.0.7 | 间接依赖 | npm |
rimraf | 3.0.2 | 间接依赖 | npm |
resolve-from | 4.0.0 | 间接依赖 | npm |
@fortawesome/fontawesome-svg-core | 6.4.0 | 直接依赖 | npm |
esutils | 2.0.3 | 间接依赖 | npm |
mz | 2.7.0 | 间接依赖 | npm |
@volar/vue-typescript | 1.2.0 | 间接依赖 | npm |
read-cache | 1.0.0 | 间接依赖 | npm |
@jridgewell/resolve-uri | 3.1.0 | 间接依赖 | npm |
tailwindcss | 3.3.1 | 直接依赖 | npm |
vue-template-compiler | 2.7.14 | 间接依赖 | npm |
nth-check | 2.1.1 | 间接依赖 | npm |
@humanwhocodes/config-array | 0.11.8 | 间接依赖 | npm |
which | 1.3.1 | 间接依赖 | npm |
optionator | 0.9.1 | 间接依赖 | npm |
@volar/source-map | 1.3.0-alpha.0 | 间接依赖 | npm |
cross-spawn | 6.0.5 | 间接依赖 | npm |
has-symbols | 1.0.3 | 间接依赖 | npm |
hosted-git-info | 2.8.9 | 间接依赖 | npm |
strip-json-comments | 3.1.1 | 间接依赖 | npm |
@esbuild/linux-loong64 | 0.17.19 | 间接依赖 | npm |
@fortawesome/vue-fontawesome | 3.0.3 | 直接依赖 | npm |
unbox-primitive | 1.0.2 | 间接依赖 | npm |
follow-redirects | 1.15.2 | 间接依赖 | npm |
proxy-from-env | 1.1.0 | 间接依赖 | npm |
@esbuild/freebsd-arm64 | 0.17.19 | 间接依赖 | npm |
strip-ansi | 6.0.1 | 间接依赖 | npm |
type-check | 0.4.0 | 间接依赖 | npm |
has-proto | 1.0.1 | 间接依赖 | npm |
braces | 3.0.2 | 间接依赖 | npm |
estraverse | 5.3.0 | 间接依赖 | npm |
ts-interface-checker | 0.1.13 | 间接依赖 | npm |
safe-regex-test | 1.0.0 | 间接依赖 | npm |
@vue/reactivity-transform | 3.2.47 | 间接依赖 | npm |
@fortawesome/free-regular-svg-icons | 6.4.0 | 直接依赖 | npm |
@eslint-community/eslint-utils | 4.4.0 | 间接依赖 | npm |
cssesc | 3.0.0 | 间接依赖 | npm |
boolbase | 1.0.0 | 间接依赖 | npm |
pirates | 4.0.5 | 间接依赖 | npm |
yallist | 4.0.0 | 间接依赖 | npm |
@fortawesome/free-solid-svg-icons | 6.4.0 | 直接依赖 | npm |
didyoumean | 1.2.2 | 间接依赖 | npm |
is-symbol | 1.0.4 | 间接依赖 | npm |
@vue/shared | 3.2.47 | 间接依赖 | npm |
memorystream | 0.3.1 | 间接依赖 | npm |
postcss | 8.4.31 | 间接依赖 | npm |
globalthis | 1.0.3 | 间接依赖 | npm |
regexp.prototype.flags | 1.4.3 | 间接依赖 | npm |
fast-glob | 3.2.12 | 间接依赖 | npm |
@types/tern | 0.23.4 | 间接依赖 | npm |
color-name | 1.1.3 | 间接依赖 | npm |
levn | 0.4.1 | 间接依赖 | npm |
@esbuild/linux-x64 | 0.17.19 | 间接依赖 | npm |
vite | 4.2.3 | 直接依赖 | npm |
thenify | 3.3.1 | 间接依赖 | npm |
string.prototype.padend | 3.1.4 | 间接依赖 | npm |
loader-utils | 2.0.4 | 间接依赖 | npm |
js-yaml | 4.1.0 | 间接依赖 | npm |
is-shared-array-buffer | 1.0.2 | 间接依赖 | npm |
@volar/language-core | 1.3.0-alpha.0 | 间接依赖 | npm |
update-browserslist-db | 1.0.11 | 间接依赖 | npm |
axios | 1.3.5 | 直接依赖 | npm |
to-regex-range | 5.0.1 | 间接依赖 | npm |
string.prototype.trimstart | 1.0.6 | 间接依赖 | npm |
internal-slot | 1.0.5 | 间接依赖 | npm |
vue-router | 4.1.6 | 直接依赖 | npm |
@esbuild/linux-arm | 0.17.19 | 间接依赖 | npm |
ajv-keywords | 3.5.2 | 间接依赖 | npm |
@jridgewell/trace-mapping | 0.3.18 | 间接依赖 | npm |
nanoid | 3.3.6 | 间接依赖 | npm |
shell-quote | 1.8.1 | 间接依赖 | npm |
has-flag | 3.0.0 | 间接依赖 | npm |
is-weakref | 1.0.2 | 间接依赖 | npm |
mime-types | 2.1.35 | 间接依赖 | npm |
muggle-string | 0.2.2 | 间接依赖 | npm |
big.js | 5.2.2 | 间接依赖 | npm |
postcss-selector-parser | 6.0.11 | 间接依赖 | npm |
supports-color | 5.5.0 | 间接依赖 | npm |
glob | 7.1.6 | 间接依赖 | npm |
object-inspect | 1.12.3 | 间接依赖 | npm |
path-key | 2.0.1 | 间接依赖 | npm |
function.prototype.name | 1.1.5 | 间接依赖 | npm |
esrecurse | 4.3.0 | 间接依赖 | npm |
fastq | 1.15.0 | 间接依赖 | npm |
@esbuild/linux-s390x | 0.17.19 | 间接依赖 | npm |
concat-map | 0.0.1 | 间接依赖 | npm |
debug | 4.3.4 | 间接依赖 | npm |
imurmurhash | 0.1.4 | 间接依赖 | npm |
shebang-regex | 1.0.0 | 间接依赖 | npm |
inherits | 2.0.4 | 间接依赖 | npm |
source-map-js | 1.0.2 | 间接依赖 | npm |
@vue/compiler-core | 3.2.47 | 间接依赖 | npm |
@vue/server-renderer | 3.2.47 | 间接依赖 | npm |