1. 墨知首页
  2. 软件分析

BloopAI/bloop 软件分析报告

• 软件分析
目录 隐藏
1 基础信息
2 漏洞列表
3 缺陷组件
4 许可证风险
5 SBOM清单

基础信息

项目名称：BloopAI/bloop

项目徽章：

Security Status

仓库地址：https://github.com/pterodactyl/panel

检测报告地址：https://www.murphysec.com/console/report/1730743677577814016/1730743677812695040

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
node-semver 安全漏洞 ReDoS MPS-2022-5166 CVE-2022-25883 高危
Axios XSRF-TOKEN CSRF漏洞 侵犯隐私 MPS-v3q7-sjd2 CVE-2023-45857 高危
PostCSS 安全漏洞 注入 MPS-y3tx-jzms CVE-2023-44270 中危

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
axios 1.4.0 1.6.0 间接依赖 建议修复
postcss 8.4.27 8.4.31 间接依赖 可选修复
semver 5.7.2 7.5.2 间接依赖 可选修复
semver 6.3.1 7.5.2 间接依赖 可选修复
tslib 1.14.1 间接依赖
tslib 2.5.0 间接依赖
i18next-http-backend 2.2.1 间接依赖

许可证风险

许可证类型 相关组件 许可证风险
MIT 301 低
BSD-3-Clause 14 低
BSD-2-Clause 11 低
Apache-2.0 10 低
0BSD 2 低
CC-BY-3.0 1 低
ISC 9 低
CC0-1.0 2 低

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
simple-update-in 2.2.0 间接依赖 npm
requires-port 1.0.0 间接依赖 npm
memoize-one 5.2.1 间接依赖 npm
react-mentions 4.4.10 间接依赖 npm
vfile-message 3.1.4 间接依赖 npm
get-symbol-description 1.0.0 间接依赖 npm
inline-style-parser 0.1.1 间接依赖 npm
asynckit 0.4.0 间接依赖 npm
iconv-lite 0.6.3 间接依赖 npm
htmlparser2 8.0.2 间接依赖 npm
domelementtype 2.3.0 间接依赖 npm
micromark-util-normalize-identifier 1.1.0 间接依赖 npm
@babel/types 7.22.5 间接依赖 npm
@types/parse-json 4.0.0 间接依赖 npm
mj-context-menu 0.6.1 间接依赖 npm
is-number-object 1.0.7 间接依赖 npm
i18next-http-backend 2.2.1 间接依赖 npm
load-json-file 4.0.0 间接依赖 npm
is-typed-array 1.1.10 间接依赖 npm
is-weakref 1.0.2 间接依赖 npm
react-dom 18.2.0 间接依赖 npm
estraverse 5.3.0 间接依赖 npm
json-parse-even-better-errors 2.3.1 间接依赖 npm
symbol-tree 3.2.4 间接依赖 npm
is-plain-object 5.0.0 间接依赖 npm
nwsapi 2.2.2 间接依赖 npm
string.prototype.padend 3.1.4 间接依赖 npm
micromark-factory-destination 1.1.0 间接依赖 npm
micromark-util-combine-extensions 1.1.0 间接依赖 npm
lodash.isequal 4.5.0 间接依赖 npm
has-tostringtag 1.0.0 间接依赖 npm
tslib 1.14.1 间接依赖 npm
argparse 1.0.10 间接依赖 npm
spdx-correct 3.2.0 间接依赖 npm
react-router 6.14.2 间接依赖 npm
extend 3.0.2 间接依赖 npm
prelude-ls 1.1.2 间接依赖 npm
loose-envify 1.4.0 间接依赖 npm
@sentry/replay 7.60.1 间接依赖 npm
punycode 2.3.0 间接依赖 npm
@rive-app/canvas 2.0.0 间接依赖 npm
domutils 3.1.0 间接依赖 npm
escape-string-regexp 4.0.0 间接依赖 npm
unist-util-find-after 4.0.1 间接依赖 npm
has 1.0.3 间接依赖 npm
@emotion/memoize 0.8.1 间接依赖 npm
has-flag 3.0.0 间接依赖 npm
micromark-util-sanitize-uri 1.2.0 间接依赖 npm
@emotion/sheet 1.2.2 间接依赖 npm
dequal 2.0.3 间接依赖 npm
micromark-util-encode 1.1.0 间接依赖 npm
is-symbol 1.0.4 间接依赖 npm
parse-json 5.2.0 间接依赖 npm
@types/mdast 3.0.11 间接依赖 npm
npm-run-all 4.1.5 间接依赖 npm
nanoid 3.3.6 间接依赖 npm
react-i18next 13.0.2 间接依赖 npm
function.prototype.name 1.1.5 间接依赖 npm
react-is 17.0.2 间接依赖 npm
parse-json 4.0.0 间接依赖 npm
combined-stream 1.0.8 间接依赖 npm
ws 8.13.0 间接依赖 npm
levn 0.3.0 间接依赖 npm
globalthis 1.0.3 间接依赖 npm
sade 1.8.1 间接依赖 npm
spdx-exceptions 2.3.0 间接依赖 npm
hast-util-is-element 2.1.3 间接依赖 npm
cssstyle 2.3.0 间接依赖 npm
@sentry/integrations 7.60.1 间接依赖 npm
is-array-buffer 3.0.2 间接依赖 npm
regenerator-runtime 0.13.11 间接依赖 npm
entities 4.5.0 间接依赖 npm
error-ex 1.3.2 间接依赖 npm
@babel/runtime-corejs3 7.23.4 间接依赖 npm
micromark-util-chunked 1.1.0 间接依赖 npm
@tauri-apps/api 1.5.0 间接依赖 npm
micromark-util-symbol 1.1.0 间接依赖 npm
lie 3.1.1 间接依赖 npm
supports-preserve-symlinks-flag 1.0.0 间接依赖 npm
color-name 1.1.3 间接依赖 npm
jsdom 20.0.3 间接依赖 npm
bail 2.0.2 间接依赖 npm
@babel/code-frame 7.22.5 间接依赖 npm
escodegen 2.0.0 间接依赖 npm
debug 4.3.4 间接依赖 npm
@emotion/utils 1.2.1 间接依赖 npm
prismjs 1.29.0 间接依赖 npm
rehype-mathjax 4.0.3 间接依赖 npm
whatwg-url 11.0.0 间接依赖 npm
longest-streak 3.1.0 间接依赖 npm
is-boolean-object 1.1.2 间接依赖 npm
@sentry/core 7.60.1 间接依赖 npm
path-type 4.0.0 间接依赖 npm
decode-named-character-reference 1.0.2 间接依赖 npm
parent-module 1.0.1 间接依赖 npm
is-date-object 1.0.5 间接依赖 npm
@types/prop-types 15.7.5 间接依赖 npm
read-pkg 3.0.0 间接依赖 npm
stylis 4.2.0 间接依赖 npm
commander 9.2.0 间接依赖 npm
is-regex 1.1.4 间接依赖 npm
micromark-factory-label 1.1.0 间接依赖 npm
lodash.debounce 4.0.8 间接依赖 npm
is-potential-custom-element-name 1.0.1 间接依赖 npm
function-bind 1.1.1 间接依赖 npm
unist-util-visit 4.1.2 间接依赖 npm
prop-types 15.7.2 间接依赖 npm
graceful-fs 4.2.11 间接依赖 npm
source-map 0.5.7 间接依赖 npm
hosted-git-info 2.8.9 间接依赖 npm
type-check 0.3.2 间接依赖 npm
object-keys 1.1.1 间接依赖 npm
lodash.throttle 4.1.1 间接依赖 npm
internal-slot 1.0.5 间接依赖 npm
sprintf-js 1.0.3 间接依赖 npm
react 18.2.0 间接依赖 npm
shell-quote 1.8.0 间接依赖 npm
@emotion/serialize 1.1.2 间接依赖 npm
mdast-util-phrasing 3.0.1 间接依赖 npm
data-urls 3.0.2 间接依赖 npm
is-core-module 2.11.0 间接依赖 npm
regexp.prototype.flags 1.4.3 间接依赖 npm
acorn-walk 8.2.0 间接依赖 npm
react-scroll-to-bottom 4.2.0 间接依赖 npm
zwitch 2.0.4 间接依赖 npm
deepmerge 4.3.1 间接依赖 npm
micromark-util-types 1.1.0 间接依赖 npm
remark-rehype 10.1.0 间接依赖 npm
pify 3.0.0 间接依赖 npm
typed-array-length 1.0.4 间接依赖 npm
find-root 1.1.0 间接依赖 npm
scheduler 0.23.0 间接依赖 npm
strip-bom 3.0.0 间接依赖 npm
supports-color 5.5.0 间接依赖 npm
mdast-util-to-string 3.2.0 间接依赖 npm
mri 1.2.0 间接依赖 npm
@tootallnate/once 2.0.0 间接依赖 npm
dom-serializer 2.0.0 间接依赖 npm
hast-util-whitespace 2.0.1 间接依赖 npm
ms 2.1.2 间接依赖 npm
web-namespaces 2.0.1 间接依赖 npm
brace-expansion 1.1.11 间接依赖 npm
path-parse 1.0.7 间接依赖 npm
cross-spawn 6.0.5 间接依赖 npm
katex 0.16.8 间接依赖 npm
es-abstract 1.21.2 间接依赖 npm
entities 2.2.0 间接依赖 npm
tippy.js 6.3.7 间接依赖 npm
es-to-primitive 1.2.1 间接依赖 npm
delayed-stream 1.0.0 间接依赖 npm
react-virtualized-auto-sizer 1.0.20 间接依赖 npm
micromark-core-commonmark 1.1.0 间接依赖 npm
react-is 16.13.1 间接依赖 npm
object-inspect 1.12.3 间接依赖 npm
compute-scroll-into-view 2.0.4 间接依赖 npm
@babel/runtime 7.22.6 间接依赖 npm
object-assign 4.1.1 间接依赖 npm
hast-util-parse-selector 3.1.1 间接依赖 npm
acorn-globals 7.0.1 间接依赖 npm
is-bigint 1.0.4 间接依赖 npm
html-parse-stringify 3.0.1 间接依赖 npm
csstype 3.1.1 间接依赖 npm
domhandler 5.0.3 间接依赖 npm
@emotion/weak-memoize 0.3.1 间接依赖 npm
core-js 3.18.3 间接依赖 npm
validate-npm-package-license 3.0.4 间接依赖 npm
safer-buffer 2.1.2 间接依赖 npm
lodash.flatten 4.4.0 间接依赖 npm
string.prototype.trimend 1.0.6 间接依赖 npm
for-each 0.3.3 间接依赖 npm
normalize-package-data 2.5.0 间接依赖 npm
proxy-from-env 1.1.0 间接依赖 npm
json-parse-better-errors 1.0.2 间接依赖 npm
unist-util-is 5.2.1 间接依赖 npm
es-set-tostringtag 2.0.1 间接依赖 npm
object.assign 4.1.4 间接依赖 npm
react-markdown 8.0.7 间接依赖 npm
cssom 0.5.0 间接依赖 npm
esm 3.2.25 间接依赖 npm
hoist-non-react-statics 3.3.2 间接依赖 npm
kleur 4.1.5 间接依赖 npm
mhchemparser 4.2.1 间接依赖 npm
decimal.js 10.4.3 间接依赖 npm
xmlchars 2.2.0 间接依赖 npm
fast-levenshtein 2.0.6 间接依赖 npm
hast-util-from-dom 4.2.0 间接依赖 npm
to-fast-properties 2.0.0 间接依赖 npm
@babel/helper-string-parser 7.22.5 间接依赖 npm
nice-try 1.0.5 间接依赖 npm
webidl-conversions 7.0.0 间接依赖 npm
micromark-util-html-tag-name 1.2.0 间接依赖 npm
tr46 3.0.0 间接依赖 npm
deep-is 0.1.4 间接依赖 npm
is-string 1.0.7 间接依赖 npm
rudder-sdk-js 2.28.0 间接依赖 npm
form-data 4.0.0 间接依赖 npm
lines-and-columns 1.2.4 间接依赖 npm
speech-rule-engine 4.0.7 间接依赖 npm
agent-base 6.0.2 间接依赖 npm
string.prototype.trim 1.2.7 间接依赖 npm
escape-string-regexp 1.0.5 间接依赖 npm
path-type 3.0.0 间接依赖 npm
has-proto 1.0.1 间接依赖 npm
space-separated-tokens 2.0.2 间接依赖 npm
@sentry/tracing 7.60.1 间接依赖 npm
@popperjs/core 2.11.6 间接依赖 npm
domexception 4.0.0 间接依赖 npm
minimatch 3.1.2 间接依赖 npm
sanitize-html 2.11.0 间接依赖 npm
string.prototype.trimstart 1.0.6 间接依赖 npm
micromark-factory-title 1.1.0 间接依赖 npm
core-js-pure 3.33.3 间接依赖 npm
@types/katex 0.16.2 间接依赖 npm
wicked-good-xpath 1.3.0 间接依赖 npm
querystringify 2.2.0 间接依赖 npm
saxes 6.0.0 间接依赖 npm
@sentry-internal/tracing 7.60.1 间接依赖 npm
prop-types 15.8.1 间接依赖 npm
micromark-extension-math 2.1.2 间接依赖 npm
vfile 5.3.7 间接依赖 npm
array-buffer-byte-length 1.0.0 间接依赖 npm
picocolors 1.0.0 间接依赖 npm
define-properties 1.2.0 间接依赖 npm
http-proxy-agent 5.0.0 间接依赖 npm
uuid 9.0.0 间接依赖 npm
@emotion/css 11.1.3 间接依赖 npm
unist-util-stringify-position 3.0.3 间接依赖 npm
xml-name-validator 4.0.0 间接依赖 npm
@types/mathjax 0.0.37 间接依赖 npm
functions-have-names 1.2.3 间接依赖 npm
balanced-match 1.0.2 间接依赖 npm
substyle 9.4.1 间接依赖 npm
whatwg-mimetype 3.0.0 间接依赖 npm
@emotion/hash 0.9.1 间接依赖 npm
unist-util-generated 2.0.1 间接依赖 npm
micromark-factory-whitespace 1.1.0 间接依赖 npm
@types/hast 2.3.4 间接依赖 npm
unist-util-visit-parents 5.1.3 间接依赖 npm
cross-fetch 3.1.6 间接依赖 npm
get-intrinsic 1.2.0 间接依赖 npm
resolve-from 4.0.0 间接依赖 npm
localforage 1.10.0 间接依赖 npm
semver 6.3.1 间接依赖 npm
universalify 0.2.0 间接依赖 npm
parse-srcset 1.0.2 间接依赖 npm
@sentry/react 7.60.1 间接依赖 npm
cssom 0.3.8 间接依赖 npm
remarkable 2.0.1 间接依赖 npm
available-typed-arrays 1.0.5 间接依赖 npm
@babel/runtime 7.4.5 间接依赖 npm
micromark-util-classify-character 1.1.0 间接依赖 npm
@babel/highlight 7.22.5 间接依赖 npm
autolinker 3.16.2 间接依赖 npm
has-bigints 1.0.2 间接依赖 npm
url-parse 1.5.10 间接依赖 npm
property-information 6.2.0 间接依赖 npm
@rive-app/react-canvas 4.0.0 间接依赖 npm
micromark-util-character 1.2.0 间接依赖 npm
node-fetch 2.6.12 间接依赖 npm
source-map-js 1.0.2 间接依赖 npm
follow-redirects 1.15.2 间接依赖 npm
chalk 2.4.2 间接依赖 npm
memorystream 0.3.1 间接依赖 npm
spdx-expression-parse 3.0.1 间接依赖 npm
micromark-util-decode-string 1.1.0 间接依赖 npm
has-property-descriptors 1.0.0 间接依赖 npm
color-convert 1.9.3 间接依赖 npm
resolve 1.22.2 间接依赖 npm
abab 2.0.6 间接依赖 npm
@remix-run/router 1.7.2 间接依赖 npm
remark-math 5.1.1 间接依赖 npm
react-router-dom 6.14.2 间接依赖 npm
i18next 23.3.0 间接依赖 npm
hastscript 7.2.0 间接依赖 npm
is-negative-zero 2.0.2 间接依赖 npm
cosmiconfig 7.1.0 间接依赖 npm
commander 8.3.0 间接依赖 npm
babel-plugin-macros 3.1.0 间接依赖 npm
psl 1.9.0 间接依赖 npm
is-arrayish 0.2.1 间接依赖 npm
is-plain-obj 4.1.0 间接依赖 npm
callsites 3.1.0 间接依赖 npm
tough-cookie 4.1.3 间接依赖 npm
@sentry/utils 7.60.1 间接依赖 npm
@babel/helper-validator-identifier 7.22.5 间接依赖 npm
tslib 2.5.0 间接依赖 npm
yaml 1.10.2 间接依赖 npm
regenerator-runtime 0.14.0 间接依赖 npm
micromark-util-subtokenize 1.1.0 间接依赖 npm
side-channel 1.0.4 间接依赖 npm
is-buffer 2.0.5 间接依赖 npm
convert-source-map 1.9.0 间接依赖 npm
has-symbols 1.0.3 间接依赖 npm
axios 1.4.0 间接依赖 npm
mathjax-full 3.2.2 间接依赖 npm
esutils 2.0.3 间接依赖 npm
micromark-util-resolve-all 1.1.0 间接依赖 npm
js-tokens 4.0.0 间接依赖 npm
invariant 2.2.4 间接依赖 npm
@types/unist 2.0.6 间接依赖 npm
unist-util-position 4.0.4 间接依赖 npm
is-shared-array-buffer 1.0.2 间接依赖 npm
immediate 3.0.6 间接依赖 npm
safe-regex-test 1.0.0 间接依赖 npm
@sentry/types 7.60.1 间接依赖 npm
mdast-util-definitions 5.1.2 间接依赖 npm
mime-types 2.1.35 间接依赖 npm
comma-separated-tokens 2.0.3 间接依赖 npm
math-random 2.0.1 间接依赖 npm
downshift 8.0.0 间接依赖 npm
unified 10.1.2 间接依赖 npm
@types/debug 4.1.8 间接依赖 npm
w3c-xmlserializer 4.0.0 间接依赖 npm
import-fresh 3.3.0 间接依赖 npm
date-fns 2.30.0 间接依赖 npm
concat-map 0.0.1 间接依赖 npm
call-bind 1.0.2 间接依赖 npm
which-boxed-primitive 1.0.2 间接依赖 npm
mime-db 1.52.0 间接依赖 npm
hast-util-to-text 3.1.2 间接依赖 npm
parse5 7.1.2 间接依赖 npm
classnames 2.3.1 间接依赖 npm
semver 5.7.2 间接依赖 npm
word-wrap 1.2.5 间接依赖 npm
lodash.findlastindex 4.6.0 间接依赖 npm
@babel/helper-module-imports 7.22.5 间接依赖 npm
@types/ms 0.7.31 间接依赖 npm
ansi-to-html 0.7.2 间接依赖 npm
diff 5.1.0 间接依赖 npm
trough 2.1.0 间接依赖 npm
postcss 8.4.27 间接依赖 npm
micromark-util-decode-numeric-character-reference 1.1.0 间接依赖 npm
trim-lines 3.0.1 间接依赖 npm
html-encoding-sniffer 3.0.0 间接依赖 npm
void-elements 3.1.0 间接依赖 npm
whatwg-encoding 2.0.0 间接依赖 npm
gopd 1.0.1 间接依赖 npm
acorn 8.10.0 间接依赖 npm
react-is 18.2.0 间接依赖 npm
@emotion/babel-plugin 11.11.0 间接依赖 npm
pidtree 0.3.1 间接依赖 npm
micromark 3.2.0 间接依赖 npm
https-proxy-agent 5.0.1 间接依赖 npm
@tippyjs/react 4.2.6 间接依赖 npm
mdast-util-to-markdown 1.5.0 间接依赖 npm
file-icons-js 1.1.0 间接依赖 npm
mdast-util-math 2.0.2 间接依赖 npm
mdast-util-to-hast 12.3.0 间接依赖 npm
@emotion/unitless 0.8.1 间接依赖 npm
style-to-object 0.4.1 间接依赖 npm
framer-motion 10.15.0 间接依赖 npm
remark-parse 10.0.2 间接依赖 npm
xmldom-sre 0.1.31 间接依赖 npm
mdast-util-from-markdown 1.3.1 间接依赖 npm
ansi-styles 3.2.1 间接依赖 npm
unbox-primitive 1.0.2 间接依赖 npm
uvu 0.5.6 间接依赖 npm
esprima 4.0.1 间接依赖 npm
character-entities 2.0.2 间接依赖 npm
micromark-factory-space 1.1.0 间接依赖 npm
@emotion/cache 11.11.0 间接依赖 npm
react-window 1.8.9 间接依赖 npm
optionator 0.8.3 间接依赖 npm
is-callable 1.2.7 间接依赖 npm
@sentry/browser 7.60.1 间接依赖 npm
which-typed-array 1.1.9 间接依赖 npm
whatwg-url 5.0.0 间接依赖 npm
spdx-license-ids 3.0.13 间接依赖 npm
赞 (0)
上一篇 2023年12月2日
下一篇 2023年12月2日

相关推荐

  • aws/aws-iot-device-sdk-embedded-C 软件分析报告

    基础信息 项目名称：aws/aws-iot-device-sdk-embedded-C 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1722064562857357312/1722064563016740864 …

    软件分析 2023年11月8日
    0

  • apollographql/react-apollo 软件分析报告

    基础信息 项目名称：apollographql/react-apollo 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1715969530048151552/1715969530165592064 此报告由Mur…

    软件分析 2023年10月23日
    0

  • cocoakekeyu/markdown-img-paste 软件分析报告

    基础信息 项目名称：cocoakekeyu/markdown-img-paste 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1716759598211055616/1716759598278164480 此报告…

    软件分析 2023年10月24日
    0

  • dbeck/acto-rs 软件分析报告

    基础信息 项目名称：dbeck/acto-rs 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1717082733447790592/1717082733548453888 此报告由Murphysec提供 漏洞列表…

    软件分析 2023年10月25日
    0

  • jin-yufeng/mp-html 软件分析报告

    基础信息 项目名称：jin-yufeng/mp-html 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1721309624077418496/1724224244283297792 此报告由Murphysec提供…

    软件分析 2023年11月14日
    0