基础信息
项目名称：yafoo/melog
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1728713308695388161/1728713308754108416
此报告由Murphysec提供
漏洞列表
| 漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
|---|---|---|---|---|
| uglify-js | ReDoS | MPS-2022-14112 | 中危 | |
| word-wrap 安全漏洞 | ReDoS | MPS-2023-5109 | CVE-2023-26115 | 高危 |
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| word-wrap | 1.2.3 | 1.2.4 | 间接依赖 | 建议修复 |
| uglify-js | 3.4.10 | 3.14.3 | 间接依赖 | 可选修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| MIT | 100 | 低 |
| BSD-3-Clause | 2 | 低 |
| BSD-2-Clause | 6 | 低 |
| ISC | 5 | 低 |
| Python-2.0 | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| fresh | 0.5.2 | 间接依赖 | npm |
| bignumber.js | 9.0.0 | 间接依赖 | npm |
| qs | 6.11.0 | 间接依赖 | npm |
| koa-body | 5.0.0 | 间接依赖 | npm |
| type-check | 0.3.2 | 间接依赖 | npm |
| statuses | 1.5.0 | 间接依赖 | npm |
| negotiator | 0.6.3 | 间接依赖 | npm |
| core-util-is | 1.0.3 | 间接依赖 | npm |
| mime-types | 2.1.35 | 间接依赖 | npm |
| safer-buffer | 2.1.2 | 间接依赖 | npm |
| esprima | 4.0.1 | 间接依赖 | npm |
| delegates | 1.0.0 | 间接依赖 | npm |
| asap | 2.0.6 | 间接依赖 | npm |
| object-inspect | 1.12.2 | 间接依赖 | npm |
| koa | 2.13.4 | 间接依赖 | npm |
| vary | 1.1.2 | 间接依赖 | npm |
| raw-body | 2.5.1 | 间接依赖 | npm |
| linkify-it | 4.0.1 | 间接依赖 | npm |
| acorn | 5.7.4 | 间接依赖 | npm |
| upper-case | 1.1.3 | 间接依赖 | npm |
| isarray | 1.0.0 | 间接依赖 | npm |
| has-tostringtag | 1.0.0 | 间接依赖 | npm |
| markdown-it | 13.0.1 | 直接依赖 | npm |
| toidentifier | 1.0.1 | 间接依赖 | npm |
| encodeurl | 1.0.2 | 间接依赖 | npm |
| wrappy | 1.0.2 | 间接依赖 | npm |
| iconv-lite | 0.4.24 | 间接依赖 | npm |
| keygrip | 1.1.0 | 间接依赖 | npm |
| entities | 3.0.1 | 间接依赖 | npm |
| debug | 4.3.4 | 间接依赖 | npm |
| levn | 0.3.0 | 间接依赖 | npm |
| path-to-regexp | 6.2.1 | 间接依赖 | npm |
| destroy | 1.2.0 | 间接依赖 | npm |
| mime-db | 1.52.0 | 间接依赖 | npm |
| escape-html | 1.0.3 | 间接依赖 | npm |
| estraverse | 4.3.0 | 间接依赖 | npm |
| co | 4.6.0 | 间接依赖 | npm |
| cookies | 0.8.0 | 间接依赖 | npm |
| accepts | 1.3.8 | 间接依赖 | npm |
| path-is-absolute | 1.0.1 | 间接依赖 | npm |
| inflation | 2.0.0 | 间接依赖 | npm |
| html-minifier | 3.5.21 | 间接依赖 | npm |
| type-is | 1.6.18 | 间接依赖 | npm |
| js-tokens | 3.0.2 | 间接依赖 | npm |
| jj.js | 0.8.8 | 直接依赖 | npm |
| koa-compose | 4.1.0 | 间接依赖 | npm |
| only | 0.0.2 | 间接依赖 | npm |
| on-finished | 2.4.1 | 间接依赖 | npm |
| optionator | 0.8.3 | 间接依赖 | npm |
| dezalgo | 1.0.3 | 间接依赖 | npm |
| bytes | 3.1.2 | 间接依赖 | npm |
| http-assert | 1.5.0 | 间接依赖 | npm |
| jimp-compact | 0.16.1-2 | 直接依赖 | npm |
| has-symbols | 1.0.3 | 间接依赖 | npm |
| parseurl | 1.3.3 | 间接依赖 | npm |
| argparse | 2.0.1 | 间接依赖 | npm |
| source-map | 0.5.7 | 间接依赖 | npm |
| deep-is | 0.1.4 | 间接依赖 | npm |
| string_decoder | 1.1.1 | 间接依赖 | npm |
| readable-stream | 2.3.7 | 间接依赖 | npm |
| setprototypeof | 1.2.0 | 间接依赖 | npm |
| side-channel | 1.0.4 | 间接依赖 | npm |
| merge-source-map | 1.1.0 | 间接依赖 | npm |
| inherits | 2.0.4 | 间接依赖 | npm |
| fast-levenshtein | 2.0.6 | 间接依赖 | npm |
| lower-case | 1.1.4 | 间接依赖 | npm |
| safe-buffer | 5.2.1 | 间接依赖 | npm |
| sqlstring | 2.3.1 | 间接依赖 | npm |
| depd | 1.1.2 | 间接依赖 | npm |
| koa-send | 5.0.1 | 间接依赖 | npm |
| art-template | 4.13.2 | 间接依赖 | npm |
| uglify-js | 3.4.10 | 间接依赖 | npm |
| camel-case | 3.0.0 | 间接依赖 | npm |
| cache-content-type | 1.0.1 | 间接依赖 | npm |
| co-body | 5.2.0 | 间接依赖 | npm |
| he | 1.2.0 | 间接依赖 | npm |
| esutils | 2.0.3 | 间接依赖 | npm |
| commander | 2.17.1 | 间接依赖 | npm |
| http-errors | 1.8.1 | 间接依赖 | npm |
| koa-static | 5.0.0 | 间接依赖 | npm |
| @types/node | 18.7.15 | 间接依赖 | npm |
| once | 1.4.0 | 间接依赖 | npm |
| is-keyword-js | 1.0.3 | 间接依赖 | npm |
| get-intrinsic | 1.1.2 | 间接依赖 | npm |
| call-bind | 1.0.2 | 间接依赖 | npm |
| media-typer | 0.3.0 | 间接依赖 | npm |
| koa-convert | 2.0.0 | 间接依赖 | npm |
| content-type | 1.0.4 | 间接依赖 | npm |
| ee-first | 1.1.1 | 间接依赖 | npm |
| prelude-ls | 1.1.2 | 间接依赖 | npm |
| resolve-path | 1.4.0 | 间接依赖 | npm |
| mdurl | 1.0.1 | 间接依赖 | npm |
| deep-equal | 1.0.1 | 间接依赖 | npm |
| param-case | 2.1.1 | 间接依赖 | npm |
| is-class | 0.0.9 | 间接依赖 | npm |
| util-deprecate | 1.0.2 | 间接依赖 | npm |
| tsscmp | 1.0.6 | 间接依赖 | npm |
| relateurl | 0.2.7 | 间接依赖 | npm |
| @types/formidable | 2.0.5 | 间接依赖 | npm |
| no-case | 2.3.2 | 间接依赖 | npm |
| mysql | 2.18.1 | 间接依赖 | npm |
| ylru | 1.3.2 | 间接依赖 | npm |
| escodegen | 1.14.3 | 间接依赖 | npm |
| clean-css | 4.2.4 | 间接依赖 | npm |
| formidable | 2.0.1 | 间接依赖 | npm |
| methods | 1.1.2 | 间接依赖 | npm |
| uc.micro | 1.0.6 | 间接依赖 | npm |
| unpipe | 1.0.0 | 间接依赖 | npm |
| is-generator-function | 1.0.10 | 间接依赖 | npm |
| content-disposition | 0.5.4 | 间接依赖 | npm |
| @koa/router | 10.1.1 | 间接依赖 | npm |
| process-nextick-args | 2.0.1 | 间接依赖 | npm |
| ms | 2.1.2 | 间接依赖 | npm |
| word-wrap | 1.2.3 | 间接依赖 | npm |
| hexoid | 1.0.0 | 间接依赖 | npm |