基础信息
项目名称：ekzhang/percival
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1717416150329589760/1717416150535110656
此报告由Murphysec提供
漏洞列表
| 漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
|---|---|---|---|---|
| 低危 | ||||
| Google Golang 资源管理错误漏洞 | MPS-2022-58307 | CVE-2022-41723 | 高危 |
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| golang.org/x/net | v0.0.0-20210226172049-e18ecbb05110 | 0.17.0 | 间接依赖 | 建议修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| MIT | 125 | 低 |
| Apache-2.0 | 1 | 低 |
| Unlicense | 1 | 低 |
| ISC | 33 | 低 |
| BSD-3-Clause | 11 | 低 |
| BSD-2-Clause | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| mdast-util-phrasing | 3.0.1 | 间接依赖 | npm |
| hast-util-whitespace | 2.0.1 | 间接依赖 | npm |
| @lezer/css | 1.1.1 | 间接依赖 | npm |
| @lezer/lr | 1.3.3 | 间接依赖 | npm |
| trough | 2.1.0 | 间接依赖 | npm |
| micromark-util-encode | 1.0.1 | 间接依赖 | npm |
| google.golang.org/appengine | v1.6.7 | 间接依赖 | go |
| @types/unist | 2.0.6 | 间接依赖 | npm |
| commander | 7.2.0 | 间接依赖 | npm |
| robust-predicates | 3.0.1 | 间接依赖 | npm |
| d3-timer | 3.0.1 | 间接依赖 | npm |
| zwitch | 2.0.4 | 间接依赖 | npm |
| golang.org/x/oauth2 | v0.0.0-20211104180415-d3ed0bb246c8 | 直接依赖 | go |
| d3 | 7.8.2 | 间接依赖 | npm |
| hast-util-to-text | 3.1.2 | 间接依赖 | npm |
| d3-dsv | 3.0.1 | 间接依赖 | npm |
| unist-util-generated | 2.0.1 | 间接依赖 | npm |
| mdast-util-definitions | 5.1.2 | 间接依赖 | npm |
| micromark-util-types | 1.0.2 | 间接依赖 | npm |
| isoformat | 0.2.1 | 间接依赖 | npm |
| mdast-util-from-markdown | 1.3.0 | 间接依赖 | npm |
| micromark-util-decode-numeric-character-reference | 1.0.0 | 间接依赖 | npm |
| d3-color | 3.1.0 | 间接依赖 | npm |
| interval-tree-1d | 1.0.4 | 间接依赖 | npm |
| @types/parse5 | 6.0.3 | 间接依赖 | npm |
| hast-util-parse-selector | 3.1.1 | 间接依赖 | npm |
| property-information | 6.2.0 | 间接依赖 | npm |
| hast-util-to-parse5 | 7.1.0 | 间接依赖 | npm |
| nanoid | 4.0.1 | 间接依赖 | npm |
| w3c-keyname | 2.2.6 | 间接依赖 | npm |
| d3-time-format | 4.1.0 | 间接依赖 | npm |
| micromark-factory-whitespace | 1.0.0 | 间接依赖 | npm |
| comma-separated-tokens | 2.0.3 | 间接依赖 | npm |
| binary-search-bounds | 2.0.5 | 间接依赖 | npm |
| d3-fetch | 3.0.1 | 间接依赖 | npm |
| mri | 1.2.0 | 间接依赖 | npm |
| d3-shape | 3.2.0 | 间接依赖 | npm |
| d3-polygon | 3.0.1 | 间接依赖 | npm |
| @lezer/html | 1.3.2 | 间接依赖 | npm |
| d3-random | 3.0.1 | 间接依赖 | npm |
| micromark-util-classify-character | 1.0.0 | 间接依赖 | npm |
| ms | 2.1.2 | 间接依赖 | npm |
| @codemirror/lang-html | 6.4.2 | 间接依赖 | npm |
| @codemirror/commands | 6.2.1 | 间接依赖 | npm |
| micromark-factory-space | 1.0.0 | 间接依赖 | npm |
| hastscript | 7.2.0 | 间接依赖 | npm |
| katex | 0.16.4 | 间接依赖 | npm |
| d3-interpolate | 3.0.1 | 间接依赖 | npm |
| @codemirror/lint | 6.1.1 | 间接依赖 | npm |
| hast-util-from-parse5 | 7.1.2 | 间接依赖 | npm |
| @codemirror/lang-javascript | 6.1.4 | 间接依赖 | npm |
| @codemirror/lang-markdown | 6.0.5 | 间接依赖 | npm |
| @codemirror/view | 6.9.0 | 间接依赖 | npm |
| d3-transition | 3.0.1 | 间接依赖 | npm |
| @codemirror/lang-css | 6.0.2 | 间接依赖 | npm |
| hast-util-is-element | 2.1.3 | 间接依赖 | npm |
| micromark-factory-label | 1.0.2 | 间接依赖 | npm |
| svelte | 3.55.1 | 间接依赖 | npm |
| @observablehq/plot | 0.6.3 | 间接依赖 | npm |
| vfile | 5.3.7 | 间接依赖 | npm |
| d3-array | 3.2.2 | 间接依赖 | npm |
| micromark-factory-destination | 1.0.0 | 间接依赖 | npm |
| @types/debug | 4.1.7 | 间接依赖 | npm |
| @codemirror/search | 6.2.3 | 间接依赖 | npm |
| golang.org/x/crypto | v0.0.0-20210817164053-32db794688a5 | 间接依赖 | go |
| remark-math | 5.1.1 | 间接依赖 | npm |
| is-buffer | 2.0.5 | 间接依赖 | npm |
| github.com/google/go-querystring | v1.1.0 | 间接依赖 | go |
| d3-format | 3.1.0 | 间接依赖 | npm |
| micromark-util-decode-string | 1.0.2 | 间接依赖 | npm |
| safer-buffer | 2.1.2 | 间接依赖 | npm |
| micromark-core-commonmark | 1.0.6 | 间接依赖 | npm |
| d3-chord | 3.0.1 | 间接依赖 | npm |
| dequal | 2.0.3 | 间接依赖 | npm |
| @types/mdast | 3.0.10 | 间接依赖 | npm |
| d3-ease | 3.0.1 | 间接依赖 | npm |
| katex | 0.15.6 | 间接依赖 | npm |
| longest-streak | 3.1.0 | 间接依赖 | npm |
| codemirror | 6.0.1 | 间接依赖 | npm |
| remark-parse | 10.0.1 | 间接依赖 | npm |
| space-separated-tokens | 2.0.2 | 间接依赖 | npm |
| @fontsource/source-serif-pro | 4.5.9 | 间接依赖 | npm |
| rehype-stringify | 9.0.3 | 间接依赖 | npm |
| micromark-util-normalize-identifier | 1.0.0 | 间接依赖 | npm |
| decode-named-character-reference | 1.0.2 | 间接依赖 | npm |
| @codemirror/autocomplete | 6.4.1 | 间接依赖 | npm |
| debug | 4.3.4 | 间接依赖 | npm |
| d3-scale-chromatic | 3.0.0 | 间接依赖 | npm |
| html-void-elements | 2.0.1 | 间接依赖 | npm |
| uvu | 0.5.6 | 间接依赖 | npm |
| unist-util-visit-parents | 5.1.3 | 间接依赖 | npm |
| rehype-parse | 8.0.4 | 间接依赖 | npm |
| d3-scale | 4.0.2 | 间接依赖 | npm |
| @lezer/common | 1.0.2 | 间接依赖 | npm |
| mdast-util-to-markdown | 1.5.0 | 间接依赖 | npm |
| micromark-extension-math | 2.0.2 | 间接依赖 | npm |
| svelte-icons | 2.1.0 | 间接依赖 | npm |
| d3-path | 3.1.0 | 间接依赖 | npm |
| d3-dispatch | 3.0.1 | 间接依赖 | npm |
| mdast-util-to-hast | 12.3.0 | 间接依赖 | npm |
| @lezer/highlight | 1.1.3 | 间接依赖 | npm |
| mdast-util-to-string | 3.1.1 | 间接依赖 | npm |
| unist-util-stringify-position | 3.0.3 | 间接依赖 | npm |
| kleur | 4.1.5 | 间接依赖 | npm |
| vfile-location | 4.1.0 | 间接依赖 | npm |
| google.golang.org/protobuf | v1.25.0 | 间接依赖 | go |
| @types/katex | 0.11.1 | 间接依赖 | npm |
| d3-contour | 4.0.2 | 间接依赖 | npm |
| is-plain-obj | 4.1.0 | 间接依赖 | npm |
| micromark-util-chunked | 1.0.0 | 间接依赖 | npm |
| rehype-katex | 6.0.2 | 间接依赖 | npm |
| unist-util-visit | 4.1.2 | 间接依赖 | npm |
| crelt | 1.0.5 | 间接依赖 | npm |
| @codemirror/language | 6.6.0 | 间接依赖 | npm |
| micromark-factory-title | 1.0.2 | 间接依赖 | npm |
| ccount | 2.0.1 | 间接依赖 | npm |
| mdast-util-math | 2.0.2 | 间接依赖 | npm |
| vfile-message | 3.1.4 | 间接依赖 | npm |
| @codemirror/state | 6.2.0 | 间接依赖 | npm |
| micromark-util-sanitize-uri | 1.1.0 | 间接依赖 | npm |
| hast-util-to-html | 8.0.4 | 间接依赖 | npm |
| unist-util-remove-position | 4.0.2 | 间接依赖 | npm |
| d3-time | 3.1.0 | 间接依赖 | npm |
| stringify-entities | 4.0.3 | 间接依赖 | npm |
| @types/hast | 2.3.4 | 间接依赖 | npm |
| domino | 2.1.6 | 间接依赖 | npm |
| sade | 1.8.1 | 间接依赖 | npm |
| unist-util-position | 4.0.4 | 间接依赖 | npm |
| trim-lines | 3.0.1 | 间接依赖 | npm |
| d3-selection | 3.0.0 | 间接依赖 | npm |
| percival-wasm | 0.1.0 | 间接依赖 | npm |
| extend | 3.0.2 | 间接依赖 | npm |
| d3-quadtree | 3.0.1 | 间接依赖 | npm |
| character-entities-html4 | 2.1.0 | 间接依赖 | npm |
| d3-force | 3.0.0 | 间接依赖 | npm |
| golang.org/x/net | v0.0.0-20210226172049-e18ecbb05110 | 间接依赖 | go |
| diff | 5.0.0 | 间接依赖 | npm |
| iconv-lite | 0.6.3 | 间接依赖 | npm |
| character-entities | 2.0.2 | 间接依赖 | npm |
| remark-rehype | 10.1.0 | 间接依赖 | npm |
| micromark-util-html-tag-name | 1.1.0 | 间接依赖 | npm |
| unist-util-is | 5.2.0 | 间接依赖 | npm |
| d3-axis | 3.0.0 | 间接依赖 | npm |
| hast-util-raw | 7.2.3 | 间接依赖 | npm |
| micromark-util-resolve-all | 1.0.0 | 间接依赖 | npm |
| internmap | 2.0.3 | 间接依赖 | npm |
| web-namespaces | 2.0.1 | 间接依赖 | npm |
| micromark-util-combine-extensions | 1.0.0 | 间接依赖 | npm |
| d3-drag | 3.0.0 | 间接依赖 | npm |
| ansi_up | 5.1.0 | 间接依赖 | npm |
| micromark-util-subtokenize | 1.0.2 | 间接依赖 | npm |
| d3-delaunay | 6.0.2 | 间接依赖 | npm |
| d3-zoom | 3.0.0 | 间接依赖 | npm |
| bail | 2.0.2 | 间接依赖 | npm |
| d3-geo | 3.1.0 | 间接依赖 | npm |
| unist-util-find-after | 4.0.1 | 间接依赖 | npm |
| d3-hierarchy | 3.1.2 | 间接依赖 | npm |
| @types/ms | 0.7.31 | 间接依赖 | npm |
| immutable | 4.2.4 | 间接依赖 | npm |
| rw | 1.3.3 | 间接依赖 | npm |
| micromark | 3.1.0 | 间接依赖 | npm |
| @lezer/javascript | 1.4.1 | 间接依赖 | npm |
| katex | 0.13.24 | 间接依赖 | npm |
| micromark-util-character | 1.1.0 | 间接依赖 | npm |
| style-mod | 4.0.0 | 间接依赖 | npm |
| micromark-util-symbol | 1.0.1 | 间接依赖 | npm |
| parse5 | 6.0.1 | 间接依赖 | npm |
| github.com/golang/protobuf | v1.4.2 | 间接依赖 | go |
| character-entities-legacy | 3.0.0 | 间接依赖 | npm |
| delaunator | 5.0.0 | 间接依赖 | npm |
| commander | 8.3.0 | 间接依赖 | npm |
| github.com/google/go-github/v40 | v40.0.0 | 直接依赖 | go |
| unified | 10.1.2 | 间接依赖 | npm |
| d3-brush | 3.0.0 | 间接依赖 | npm |
| @lezer/markdown | 1.0.2 | 间接依赖 | npm |