基础信息
项目名称：encode/uvicorn
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1717451798452420608/1717451798653747200
此报告由Murphysec提供
漏洞列表
| 漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
|---|---|---|---|---|
| httpx 存在输入验证不恰当漏洞 | 输入验证不恰当 | MPS-2022-14944 | 中危 |
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| httpx | 0.24.1 | 间接依赖 | 可选修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| MIT | 10 | 低 |
| Apache-2.0 | 3 | 低 |
| BSD-3-Clause | 1 | 低 |
| 自定义许可证 | 1 | 低 |
| Apache-2.0 OR MIT | 1 | 低 |
| Apache-2.0 OR BSD-3-Clause | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| Callable | 间接依赖 | pip | |
| events | 间接依赖 | pip | |
| coverage-conditional-plugin | 0.9.0 | 间接依赖 | pip |
| wsproto | 1.2.0 | 间接依赖 | pip |
| mypy | 1.5.1 | 间接依赖 | pip |
| contextmanager | 间接依赖 | pip | |
| build | 1.0.3 | 间接依赖 | pip |
| coverage | 7.3.1 | 间接依赖 | pip |
| mkdocs-material | 9.4.2 | 间接依赖 | pip |
| ruff | 0.0.286 | 间接依赖 | pip |
| Tuple | 间接依赖 | pip | |
| get_local_addr | 间接依赖 | pip | |
| TYPE_CHECKING | 间接依赖 | pip | |
| import_from_string | 间接依赖 | pip | |
| get_client_addr | 间接依赖 | pip | |
| ImportFromStringError | 间接依赖 | pip | |
| mkdocs | 1.5.3 | 间接依赖 | pip |
| types-pyyaml | 6.0.12.11 | 间接依赖 | pip |
| pytest | 7.4.2 | 间接依赖 | pip |
| a2wsgi | 1.7.0 | 间接依赖 | pip |
| ChangeReload | 间接依赖 | pip | |
| Server | 间接依赖 | pip | |
| Any | 间接依赖 | pip | |
| websockets | 11.0.3 | 间接依赖 | pip |
| Deque | 间接依赖 | pip | |
| twine | 4.0.2 | 间接依赖 | pip |
| AsyncGenerator | 间接依赖 | pip | |
| List | 间接依赖 | pip | |
| asynccontextmanager | 间接依赖 | pip | |
| Multiprocess | 间接依赖 | pip | |
| watchgod | 0.8.2 | 间接依赖 | pip |
| black | 23.7.0 | 间接依赖 | pip |
| Literal | 间接依赖 | pip | |
| Optional | 间接依赖 | pip | |
| ServerState | 间接依赖 | pip | |
| types-click | 7.1.8 | 间接依赖 | pip |
| trustme | 1.1.0 | 间接依赖 | pip |
| Iterator | 间接依赖 | pip | |
| Iterable | 间接依赖 | pip | |
| pytest-mock | 3.11.1 | 间接依赖 | pip |
| httpx | 0.24.1 | 间接依赖 | pip |
| SpawnProcess | 间接依赖 | pip | |
| uvicorn | 间接依赖 | pip | |
| cryptography | 41.0.4 | 间接依赖 | pip |
| Dict | 间接依赖 | pip | |
| get_subprocess | 间接依赖 | pip | |
| ConnectionType | 间接依赖 | pip |