基础信息
项目名称:efcl/efcl
项目徽章:
仓库地址:https://github.com/pterodactyl/panel
检测报告地址:https://www.murphysec.com/console/report/1717408936125841408/1717408936163590144
此报告由Murphysec提供
漏洞列表
漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
---|---|---|---|---|
node-semver 安全漏洞 | ReDoS | MPS-2022-5166 | CVE-2022-25883 | 高危 |
word-wrap 安全漏洞 | ReDoS | MPS-2023-5109 | CVE-2023-26115 | 高危 |
缺陷组件
组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
---|---|---|---|---|
word-wrap | 1.2.3 | 1.2.4 | 间接依赖 | 建议修复 |
semver | 5.7.1 | 7.5.2 | 间接依赖 | 可选修复 |
许可证风险
许可证类型 | 相关组件 | 许可证风险 |
---|---|---|
MIT | 257 | 低 |
ISC | 18 | 低 |
Apache-2.0 | 3 | 低 |
BSD-3-Clause | 9 | 低 |
BSD-2-Clause | 4 | 低 |
WTFPL | 1 | 低 |
CC-BY-3.0 | 1 | 低 |
自定义许可证 | 3 | 低 |
Python-2.0 | 1 | 低 |
CC0-1.0 | 1 | 低 |
SBOM清单
组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
---|---|---|---|
to-regex-range | 5.0.1 | 间接依赖 | npm |
@types/unist | 2.0.6 | 间接依赖 | npm |
@types/node | 18.15.7 | 间接依赖 | npm |
typedarray | 0.0.6 | 间接依赖 | npm |
write | 1.0.3 | 间接依赖 | npm |
type-check | 0.4.0 | 间接依赖 | npm |
vfile-message | 2.0.4 | 间接依赖 | npm |
@textlint/ast-tester | 13.3.3 | 间接依赖 | npm |
hosted-git-info | 2.8.9 | 间接依赖 | npm |
@textlint/text-to-ast | 13.3.3 | 间接依赖 | npm |
mdast-util-find-and-replace | 1.1.1 | 间接依赖 | npm |
rexml | 3.2.5 | 间接依赖 | bundler |
extend | 3.0.2 | 间接依赖 | npm |
chalk | 4.1.2 | 间接依赖 | npm |
@types/mdast | 3.0.11 | 间接依赖 | npm |
object_values | 0.1.2 | 间接依赖 | npm |
unist-util-visit-parents | 3.1.1 | 间接依赖 | npm |
slice-ansi | 4.0.0 | 间接依赖 | npm |
get-intrinsic | 1.1.1 | 间接依赖 | npm |
google-protobuf | 3.22.3 | 间接依赖 | bundler |
textlint-rule-no-doubled-joshi | 4.1.0 | 直接依赖 | npm |
unified | 9.2.2 | 间接依赖 | npm |
parse-entities | 2.0.0 | 间接依赖 | npm |
concat-stream | 2.0.0 | 间接依赖 | npm |
tzinfo | 2.0.6 | 间接依赖 | bundler |
structured-source | 4.0.0 | 间接依赖 | npm |
MSVCR90.dll | 间接依赖 | ||
mini_portile2 | 2.8.1 | 间接依赖 | bundler |
readable-stream | 3.6.0 | 间接依赖 | npm |
micromark-extension-gfm | 0.3.3 | 间接依赖 | npm |
@textlint/textlint-plugin-markdown | 13.3.3 | 间接依赖 | npm |
path-type | 1.1.0 | 间接依赖 | npm |
inherits | 2.0.4 | 间接依赖 | npm |
path-parse | 1.0.7 | 间接依赖 | npm |
array-union | 2.1.0 | 间接依赖 | npm |
fault | 1.0.4 | 间接依赖 | npm |
forwardable-extended | 2.6.0 | 间接依赖 | bundler |
fastq | 1.15.0 | 间接依赖 | npm |
micromark-extension-gfm-strikethrough | 0.6.5 | 间接依赖 | npm |
path-exists | 3.0.0 | 间接依赖 | npm |
micromark-extension-footnote | 0.3.2 | 间接依赖 | npm |
brace-expansion | 1.1.11 | 间接依赖 | npm |
@kvs/indexeddb | 1.2.0 | 间接依赖 | npm |
concat-map | 0.0.1 | 间接依赖 | npm |
levn | 0.4.1 | 间接依赖 | npm |
mkdirp | 1.0.4 | 间接依赖 | npm |
ccount | 1.1.0 | 间接依赖 | npm |
wrappy | 1.0.2 | 间接依赖 | npm |
trough | 1.0.5 | 间接依赖 | npm |
spdx-correct | 3.1.1 | 间接依赖 | npm |
strip-bom | 3.0.0 | 间接依赖 | npm |
reusify | 1.0.4 | 间接依赖 | npm |
fast-deep-equal | 3.1.3 | 间接依赖 | npm |
run-parallel | 1.2.0 | 间接依赖 | npm |
commonmarker | 0.23.9 | 间接依赖 | bundler |
mdast-util-gfm | 0.1.2 | 间接依赖 | npm |
@nodelib/fs.walk | 1.2.8 | 间接依赖 | npm |
IMM32.dll | 间接依赖 | ||
read-pkg | 3.0.0 | 间接依赖 | npm |
prelude-ls | 1.2.1 | 间接依赖 | npm |
glob | 7.2.3 | 间接依赖 | npm |
glob-parent | 5.1.2 | 间接依赖 | npm |
json-parse-better-errors | 1.0.2 | 间接依赖 | npm |
globby | 10.0.2 | 间接依赖 | npm |
pify | 3.0.0 | 间接依赖 | npm |
addressable | 2.8.4 | 间接依赖 | bundler |
has-property-descriptors | 1.0.0 | 间接依赖 | npm |
path-to-glob-pattern | 1.0.2 | 间接依赖 | npm |
space-separated-tokens | 1.1.5 | 间接依赖 | npm |
whatwg-url | 5.0.0 | 间接依赖 | npm |
minimist | 1.2.6 | 间接依赖 | npm |
pinkie-promise | 2.0.1 | 间接依赖 | npm |
pathutil | 0.16.2 | 间接依赖 | bundler |
@textlint/utils | 1.2.5 | 间接依赖 | npm |
ansi-styles | 4.3.0 | 间接依赖 | npm |
@azu/format-text | 1.0.1 | 间接依赖 | npm |
string-width | 4.2.3 | 间接依赖 | npm |
readdirp | 3.6.0 | 间接依赖 | npm |
@kvs/types | 1.2.0 | 间接依赖 | npm |
read-pkg | 1.1.0 | 间接依赖 | npm |
table | 6.8.1 | 间接依赖 | npm |
fetch-ponyfill | 6.1.1 | 间接依赖 | npm |
@textlint/fixer-formatter | 13.3.3 | 间接依赖 | npm |
p-limit | 1.3.0 | 间接依赖 | npm |
file-entry-cache | 5.0.1 | 间接依赖 | npm |
graceful-fs | 4.2.10 | 间接依赖 | npm |
@proofdict/types | 3.1.0 | 间接依赖 | npm |
ignore | 5.2.4 | 间接依赖 | npm |
@proofdict/tester | 3.1.0 | 间接依赖 | npm |
map-like | 2.0.0 | 间接依赖 | npm |
emoji-regex | 8.0.0 | 间接依赖 | npm |
rake-jekyll | 1.1.0 | 间接依赖 | bundler |
micromark-extension-gfm-autolink-literal | 0.5.7 | 间接依赖 | npm |
app-root-path | 3.1.0 | 间接依赖 | npm |
safe-buffer | 5.2.1 | 间接依赖 | npm |
buffer-from | 1.1.2 | 间接依赖 | npm |
racc | 1.6.2 | 间接依赖 | bundler |
traverse | 0.6.7 | 间接依赖 | npm |
deep-is | 0.1.4 | 间接依赖 | npm |
kramdown-parser-gfm | 1.1.0 | 间接依赖 | bundler |
object-is | 1.1.5 | 间接依赖 | npm |
punycode | 2.3.0 | 间接依赖 | npm |
is-arrayish | 0.2.1 | 间接依赖 | npm |
@textlint/ast-traverse | 2.3.5 | 间接依赖 | npm |
jekyll-sitemap | 1.4.0 | 间接依赖 | bundler |
commandpost | 1.4.0 | 间接依赖 | npm |
parse-json | 2.2.0 | 间接依赖 | npm |
jekyll-sass-converter | 3.0.0 | 间接依赖 | bundler |
esprima | 4.0.1 | 间接依赖 | npm |
@textlint/ast-node-types | 13.3.1 | 间接依赖 | npm |
is-plain-obj | 2.1.0 | 间接依赖 | npm |
terminal-table | 3.0.2 | 间接依赖 | bundler |
functions-have-names | 1.2.2 | 间接依赖 | npm |
@textlint/kernel | 13.3.3 | 间接依赖 | npm |
@azu/style-format | 1.0.1 | 间接依赖 | npm |
@kvs/storage | 1.2.0 | 间接依赖 | npm |
md5 | 2.3.0 | 间接依赖 | npm |
mdast-util-to-markdown | 0.6.5 | 间接依赖 | npm |
spdx-exceptions | 2.3.0 | 间接依赖 | npm |
web-namespaces | 1.1.4 | 间接依赖 | npm |
@textlint/utils | 13.3.3 | 间接依赖 | npm |
@textlint/textlint-plugin-text | 13.3.3 | 间接依赖 | npm |
@textlint/linter-formatter | 13.3.3 | 间接依赖 | npm |
@textlint/kernel | 3.4.5 | 间接依赖 | npm |
kuromojin | 3.0.0 | 间接依赖 | npm |
node-localstorage | 2.2.1 | 间接依赖 | npm |
@kvs/env | 1.2.0 | 间接依赖 | npm |
ffi | 1.15.5 | 间接依赖 | bundler |
unicode-display_width | 2.4.2 | 间接依赖 | bundler |
async | 2.6.4 | 间接依赖 | npm |
pluralize | 2.0.0 | 间接依赖 | npm |
jekyll-commonmark | 1.4.0 | 间接依赖 | bundler |
js-yaml | 4.1.0 | 间接依赖 | npm |
hastscript | 5.1.2 | 间接依赖 | npm |
fast-glob | 3.2.12 | 间接依赖 | npm |
activesupport | 7.0.4.3 | 间接依赖 | bundler |
function-bind | 1.1.1 | 间接依赖 | npm |
mercenary | 0.4.0 | 间接依赖 | bundler |
remark-gfm | 1.0.0 | 间接依赖 | npm |
node-fetch | 2.6.7 | 间接依赖 | npm |
glob | 7.2.0 | 间接依赖 | npm |
mdast-util-footnote | 0.1.7 | 间接依赖 | npm |
@types/minimatch | 5.1.2 | 间接依赖 | npm |
lodash.truncate | 4.4.2 | 间接依赖 | npm |
webidl-conversions | 3.0.1 | 间接依赖 | npm |
kramdown | 2.4.0 | 间接依赖 | bundler |
micromark-extension-frontmatter | 0.2.2 | 间接依赖 | npm |
i18n | 1.13.0 | 间接依赖 | bundler |
sentence-splitter | 3.2.3 | 间接依赖 | npm |
jemoji | 0.13.0 | 间接依赖 | bundler |
resolve | 1.22.0 | 间接依赖 | npm |
has-symbols | 1.0.3 | 间接依赖 | npm |
merge2 | 1.4.1 | 间接依赖 | npm |
tr46 | 0.0.3 | 间接依赖 | npm |
textlint-rule-helper | 2.2.1 | 间接依赖 | npm |
picomatch | 2.3.1 | 间接依赖 | npm |
is-binary-path | 2.1.0 | 间接依赖 | npm |
strip-ansi | 6.0.1 | 间接依赖 | npm |
textlint-rule-no-start-duplicated-conjunction | 2.0.2 | 直接依赖 | npm |
kuromoji | 0.1.2 | 间接依赖 | npm |
@textlint/ast-node-types | 4.4.3 | 间接依赖 | npm |
rehype-parse | 6.0.2 | 间接依赖 | npm |
@kvs/node-localstorage | 1.2.0 | 间接依赖 | npm |
escape-string-regexp | 4.0.0 | 间接依赖 | npm |
@textlint/feature-flag | 13.3.3 | 间接依赖 | npm |
micromark-extension-gfm-task-list-item | 0.3.3 | 间接依赖 | npm |
anymatch | 3.1.2 | 间接依赖 | npm |
argparse | 2.0.1 | 间接依赖 | npm |
source-map-js | 1.0.2 | 间接依赖 | npm |
is-number | 7.0.0 | 间接依赖 | npm |
is-buffer | 1.1.6 | 间接依赖 | npm |
normalize-package-data | 2.5.0 | 间接依赖 | npm |
prh | 5.4.4 | 间接依赖 | npm |
boundary | 1.0.1 | 间接依赖 | npm |
safe_yaml | 1.0.5 | 间接依赖 | bundler |
structured-source | 3.0.2 | 间接依赖 | npm |
chokidar | 3.5.3 | 间接依赖 | npm |
rb-fsevent | 0.11.2 | 间接依赖 | bundler |
slash | 3.0.0 | 间接依赖 | npm |
unist-util-visit-parents | 4.1.1 | 间接依赖 | npm |
sprintf-js | 1.0.3 | 间接依赖 | npm |
strip-bom | 2.0.0 | 间接依赖 | npm |
nokogiri | 1.14.3 | 间接依赖 | bundler |
gemoji | 4.1.0 | 间接依赖 | bundler |
@textlint/ast-traverse | 13.3.3 | 间接依赖 | npm |
ansi-regex | 5.0.1 | 间接依赖 | npm |
http_parser.rb | 0.8.0 | 间接依赖 | bundler |
url-join | 4.0.1 | 间接依赖 | npm |
rake | 10.5.0 | 间接依赖 | bundler |
write-file-atomic | 1.3.4 | 间接依赖 | npm |
charenc | 0.0.2 | 间接依赖 | npm |
minitest | 5.18.0 | 间接依赖 | bundler |
micromark-extension-gfm-tagfilter | 0.3.0 | 间接依赖 | npm |
color-convert | 2.0.1 | 间接依赖 | npm |
has | 1.0.3 | 间接依赖 | npm |
micromatch | 4.0.5 | 间接依赖 | npm |
@textlint/markdown-to-ast | 13.3.3 | 间接依赖 | npm |
mdast-util-gfm-task-list-item | 0.1.6 | 间接依赖 | npm |
xtend | 4.0.2 | 间接依赖 | npm |
locate-path | 2.0.0 | 间接依赖 | npm |
unified | 8.4.2 | 间接依赖 | npm |
textlint-util-to-string | 3.3.2 | 间接依赖 | npm |
js-yaml | 3.14.1 | 间接依赖 | npm |
jekyll-watch | 2.2.1 | 间接依赖 | bundler |
find-up | 2.1.0 | 间接依赖 | npm |
argparse | 1.0.10 | 间接依赖 | npm |
jekyll | 4.3.2 | 间接依赖 | bundler |
ms | 2.1.2 | 间接依赖 | npm |
load-json-file | 1.1.0 | 间接依赖 | npm |
require-from-string | 2.0.2 | 间接依赖 | npm |
ajv | 8.12.0 | 间接依赖 | npm |
string_decoder | 1.3.0 | 间接依赖 | npm |
parse-json | 4.0.0 | 间接依赖 | npm |
json5 | 2.2.3 | 间接依赖 | npm |
@textlint/feature-flag | 3.3.5 | 间接依赖 | npm |
rc-config-loader | 4.1.3 | 间接依赖 | npm |
remark-footnotes | 3.0.0 | 间接依赖 | npm |
optionator | 0.9.1 | 间接依赖 | npm |
unist-util-visit | 2.0.3 | 间接依赖 | npm |
p-locate | 2.0.0 | 间接依赖 | npm |
sass-embedded | 1.62.1 | 间接依赖 | bundler |
spdx-license-ids | 3.0.11 | 间接依赖 | npm |
path-is-absolute | 1.0.1 | 间接依赖 | npm |
mdast-util-frontmatter | 0.2.0 | 间接依赖 | npm |
error-ex | 1.3.2 | 间接依赖 | npm |
is-core-module | 2.8.1 | 间接依赖 | npm |
bail | 1.0.5 | 间接依赖 | npm |
immutable | 4.0.0 | 间接依赖 | npm |
has-tostringtag | 1.0.0 | 间接依赖 | npm |
regexp.prototype.flags | 1.4.3 | 间接依赖 | npm |
unist-util-visit | 3.1.0 | 间接依赖 | npm |
micromark-extension-gfm-table | 0.4.3 | 间接依赖 | npm |
@types/glob | 7.2.0 | 间接依赖 | npm |
flat-cache | 2.0.1 | 间接依赖 | npm |
hast-util-parse-selector | 2.2.5 | 间接依赖 | npm |
uri-js | 4.4.1 | 间接依赖 | npm |
lodash | 4.17.21 | 间接依赖 | npm |
textlint-rule-helper | 2.3.0 | 间接依赖 | npm |
webrick | 1.8.1 | 间接依赖 | bundler |
eventmachine | 1.2.7 | 间接依赖 | bundler |
braces | 3.0.2 | 间接依赖 | npm |
fast-levenshtein | 2.0.6 | 间接依赖 | npm |
remark-parse | 9.0.0 | 间接依赖 | npm |
hast-util-from-parse5 | 5.0.3 | 间接依赖 | npm |
@nodelib/fs.scandir | 2.1.5 | 间接依赖 | npm |
rb-inotify | 0.10.1 | 间接依赖 | bundler |
remark-frontmatter | 3.0.0 | 间接依赖 | npm |
normalize-path | 3.0.0 | 间接依赖 | npm |
json-schema-traverse | 1.0.0 | 间接依赖 | npm |
is-extglob | 2.1.1 | 间接依赖 | npm |
flatted | 2.0.2 | 间接依赖 | npm |
comma-separated-tokens | 1.0.8 | 间接依赖 | npm |
rouge | 4.1.0 | 间接依赖 | bundler |
colorator | 1.1.0 | 间接依赖 | bundler |
crypt | 0.0.2 | 间接依赖 | npm |
fsevents | 2.3.2 | 直接依赖 | npm |
mdast-util-to-string | 2.0.0 | 间接依赖 | npm |
unist-util-is | 5.2.1 | 间接依赖 | npm |
textlint-rule-no-mix-dearu-desumasu | 5.0.0 | 直接依赖 | npm |
has-flag | 4.0.0 | 间接依赖 | npm |
load-json-file | 4.0.0 | 间接依赖 | npm |
binary-extensions | 2.2.0 | 间接依赖 | npm |
get-stdin | 5.0.1 | 间接依赖 | npm |
is-fullwidth-code-point | 3.0.0 | 间接依赖 | npm |
zlibjs | 0.3.1 | 间接依赖 | npm |
is-regex | 1.1.4 | 间接依赖 | npm |
@textlint/module-interop | 13.3.3 | 间接依赖 | npm |
is-utf8 | 0.2.1 | 间接依赖 | npm |
fill-range | 7.0.1 | 间接依赖 | npm |
mdast-util-gfm-table | 0.1.6 | 间接依赖 | npm |
fs.realpath | 1.0.0 | 间接依赖 | npm |
deep-equal | 1.1.1 | 间接依赖 | npm |
validate-npm-package-license | 3.0.4 | 间接依赖 | npm |
define-properties | 1.1.4 | 间接依赖 | npm |
once | 1.4.0 | 间接依赖 | npm |
@azu/format-text | 1.0.2 | 间接依赖 | npm |
@textlint/ast-tester | 2.3.5 | 间接依赖 | npm |
object-keys | 1.1.1 | 间接依赖 | npm |
supports-preserve-symlinks-flag | 1.0.0 | 间接依赖 | npm |
read-pkg-up | 3.0.0 | 间接依赖 | npm |
KERNEL32.dll | 间接依赖 | ||
concurrent-ruby | 1.2.2 | 间接依赖 | bundler |
call-bind | 1.0.2 | 间接依赖 | npm |
astral-regex | 2.0.0 | 间接依赖 | npm |
@textlint/source-code-fixer | 3.4.5 | 间接依赖 | npm |
sass | 1.60.0 | 直接依赖 | npm |
pify | 2.3.0 | 间接依赖 | npm |
parse5 | 5.1.1 | 间接依赖 | npm |
is-arguments | 1.1.1 | 间接依赖 | npm |
imurmurhash | 0.1.4 | 间接依赖 | npm |
@nodelib/fs.stat | 2.0.5 | 间接依赖 | npm |
unist-util-stringify-position | 2.0.3 | 间接依赖 | npm |
lru_map | 0.4.1 | 间接依赖 | npm |
listen | 3.8.0 | 间接依赖 | bundler |
inflight | 1.0.6 | 间接依赖 | npm |
mkdirp | 0.5.6 | 间接依赖 | npm |
@proofdict/textlint-rule-proofdict | 3.1.2 | 直接依赖 | npm |
doublearray | 0.0.2 | 间接依赖 | npm |
is-file | 1.0.0 | 间接依赖 | npm |
spdx-expression-parse | 3.0.1 | 间接依赖 | npm |
color-name | 1.1.4 | 间接依赖 | npm |
mdast-util-from-markdown | 0.8.5 | 间接依赖 | npm |
supports-color | 7.2.0 | 间接依赖 | npm |
path-type | 3.0.0 | 间接依赖 | npm |
balanced-match | 1.0.2 | 间接依赖 | npm |
unist-util-is | 4.1.0 | 间接依赖 | npm |
@textlint/types | 13.3.3 | 间接依赖 | npm |
html-pipeline | 2.14.3 | 间接依赖 | bundler |
diff | 4.0.2 | 间接依赖 | npm |
textlint | 13.3.3 | 直接依赖 | npm |
micromark | 2.11.4 | 间接依赖 | npm |
fast-equals | 4.0.3 | 间接依赖 | npm |
sentence-splitter | 3.2.2 | 间接依赖 | npm |
word-wrap | 1.2.3 | 间接依赖 | npm |
em-websocket | 0.5.3 | 间接依赖 | bundler |
debug | 4.3.4 | 间接依赖 | npm |
slide | 1.1.6 | 间接依赖 | npm |
USER32.dll | 间接依赖 | ||
util-deprecate | 1.0.2 | 间接依赖 | npm |
liquid | 4.0.4 | 间接依赖 | bundler |
@textlint/types | 1.5.5 | 间接依赖 | npm |
boundary | 2.0.0 | 间接依赖 | npm |
is-buffer | 2.0.5 | 间接依赖 | npm |
dir-glob | 3.0.1 | 间接依赖 | npm |
mdast-util-gfm-strikethrough | 0.2.3 | 间接依赖 | npm |
rimraf | 2.6.3 | 间接依赖 | npm |
public_suffix | 5.0.1 | 间接依赖 | bundler |
object-assign | 4.1.1 | 间接依赖 | npm |
analyze-desumasu-dearu | 5.0.1 | 间接依赖 | npm |
text-table | 0.2.0 | 间接依赖 | npm |
semver | 5.7.1 | 间接依赖 | npm |
@textlint/source-code-fixer | 13.3.3 | 间接依赖 | npm |
try-resolve | 1.0.1 | 间接依赖 | npm |
path-type | 4.0.0 | 间接依赖 | npm |
property-information | 5.6.0 | 间接依赖 | npm |
mdast-util-gfm-autolink-literal | 0.1.3 | 间接依赖 | npm |
is-glob | 4.0.3 | 间接依赖 | npm |
is-date-object | 1.0.5 | 间接依赖 | npm |
vfile | 4.2.1 | 间接依赖 | npm |
@textlint/config-loader | 13.3.3 | 间接依赖 | npm |
minimatch | 3.1.2 | 间接依赖 | npm |
@textlint/ast-node-types | 13.3.3 | 间接依赖 | npm |
unique-concat | 0.2.2 | 间接依赖 | npm |
mscoree.dll | 间接依赖 | ||
pinkie | 2.0.4 | 间接依赖 | npm |