基础信息
项目名称：flet-dev/flet
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1721200569397350400/1730937680281690112
此报告由Murphysec提供
漏洞列表
| 漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
|---|---|---|---|---|
| rubygem-activesupport 安全漏洞 | ReDoS | MPS-2023-0494 | CVE-2023-22796 | 高危 |
| Gin 安全漏洞 | 下载代码缺少完整性检查 | MPS-2023-9711 | CVE-2023-29401 | 中危 |
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| activesupport | 6.1.6 | 6.1.7.1 | 间接依赖 | 建议修复 |
| github.com/gin-gonic/gin | v1.9.0 | 1.9.1 | 直接依赖 | 可选修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| 自定义许可证 | 11 | 低 |
| MIT | 24 | 低 |
| Apache-2.0 | 11 | 低 |
| MPL-2.0 | 1 | 低 |
| BSD-3-Clause | 4 | 低 |
| BSD-2-Clause | 2 | 低 |
| Apache-2.0 OR MIT | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| Optional | 间接依赖 | pip | |
| IconFile | 间接依赖 | pip | |
| get_package_bin_dir | 间接依赖 | pip | |
| gh_inspector | 1.1.3 | 间接依赖 | bundler |
| cocoapods-plugins | 1.0.0 | 间接依赖 | bundler |
| rouge | 2.0.7 | 间接依赖 | bundler |
| ruby2_keywords | 0.0.5 | 间接依赖 | bundler |
| mini_mime | 1.1.2 | 间接依赖 | bundler |
| nanaimo | 0.3.0 | 间接依赖 | bundler |
| faraday_middleware | 1.2.0 | 间接依赖 | bundler |
| algoliasearch | 1.27.5 | 间接依赖 | bundler |
| Enum | 间接依赖 | pip | |
| simctl | 1.6.10 | 间接依赖 | bundler |
| github.com/leodido/go-urn | v1.2.3 | 间接依赖 | go |
| flet | 间接依赖 | pip | |
| get_upload_signature | 间接依赖 | pip | |
| List | 间接依赖 | pip | |
| faraday-httpclient | 1.0.1 | 间接依赖 | bundler |
| url_launcher_macos | 0.0.1 | 间接依赖 | cocoapods |
| faraday | 1.10.3 | 间接依赖 | bundler |
| json | 2.6.3 | 间接依赖 | bundler |
| Flutter | 1.0.0 | 间接依赖 | cocoapods |
| tty-spinner | 0.9.3 | 间接依赖 | bundler |
| claide | 1.1.0 | 间接依赖 | bundler |
| google-cloud-errors | 1.3.1 | 间接依赖 | bundler |
| faraday-patron | 1.0.0 | 间接依赖 | bundler |
| SwiftyGif | 5.4.3 | 间接依赖 | cocoapods |
| faraday-multipart | 1.0.4 | 间接依赖 | bundler |
| retriable | 3.1.2 | 间接依赖 | bundler |
| xcodeproj | 1.22.0 | 间接依赖 | bundler |
| google-apis-storage_v1 | 0.19.0 | 间接依赖 | bundler |
| trailblazer-option | 0.1.2 | 间接依赖 | bundler |
| audioplayers_darwin | 0.0.1 | 间接依赖 | cocoapods |
| aws-sdk-kms | 1.64.0 | 间接依赖 | bundler |
| rexml | 3.2.5 | 间接依赖 | bundler |
| security | 0.1.3 | 间接依赖 | bundler |
| flet_runtime | 间接依赖 | pip | |
| colored | 1.2 | 间接依赖 | bundler |
| plist | 3.7.0 | 间接依赖 | bundler |
| github.com/gomodule/redigo | v1.8.9 | 直接依赖 | go |
| normalize_icon_type | 间接依赖 | pip | |
| faraday-em_synchrony | 1.0.0 | 间接依赖 | bundler |
| IntFlag | 间接依赖 | pip | |
| molinillo | 0.8.0 | 间接依赖 | bundler |
| TYPE_CHECKING | 间接依赖 | pip | |
| DKImagePickerController/PhotoGallery | 4.3.4 | 间接依赖 | cocoapods |
| Tuple | 间接依赖 | pip | |
| addressable | 2.8.4 | 间接依赖 | bundler |
| github.com/goccy/go-json | v0.10.2 | 间接依赖 | go |
| google-apis-iamcredentials_v1 | 0.17.0 | 间接依赖 | bundler |
| github.com/klauspost/cpuid/v2 | v2.2.4 | 间接依赖 | go |
| httpclient | 2.8.3 | 间接依赖 | bundler |
| fastapi | 间接依赖 | pip | |
| urlparse | 间接依赖 | pip | |
| SDWebImage | 5.13.2 | 间接依赖 | cocoapods |
| tzinfo | 2.0.4 | 间接依赖 | bundler |
| webview_flutter_wkwebview | 0.0.1 | 间接依赖 | cocoapods |
| commander | 4.6.0 | 间接依赖 | bundler |
| CFPropertyList | 3.0.6 | 间接依赖 | bundler |
| is_macos | 间接依赖 | pip | |
| github.com/gosimple/slug | v1.13.1 | 直接依赖 | go |
| Any | 间接依赖 | pip | |
| naturally | 2.2.1 | 间接依赖 | bundler |
| DKPhotoGallery/Model | 0.0.17 | 间接依赖 | cocoapods |
| cloud.google.com/go/iam | v1.0.0 | 间接依赖 | go |
| is_coroutine | 间接依赖 | pip | |
| Border | 间接依赖 | pip | |
| Union | 间接依赖 | pip | |
| github.com/rifflock/lfshook | v0.0.0-20180920164130-b9218ef580f5 | 直接依赖 | go |
| unicode-display_width | 1.8.0 | 间接依赖 | bundler |
| escape | 0.0.4 | 间接依赖 | bundler |
| google.golang.org/genproto | v0.0.0-20230410155749-daa745c078e1 | 直接依赖 | go |
| faraday-retry | 1.0.3 | 间接依赖 | bundler |
| cocoapods-trunk | 1.6.0 | 间接依赖 | bundler |
| timedelta | 间接依赖 | pip | |
| github.com/spf13/viper | v1.15.0 | 直接依赖 | go |
| memoist | 0.16.2 | 间接依赖 | bundler |
| github.com/go-playground/validator/v10 | v10.12.0 | 间接依赖 | go |
| jmespath | 1.6.2 | 间接依赖 | bundler |
| aws-sigv4 | 1.5.2 | 间接依赖 | bundler |
| golang.org/x/arch | v0.3.0 | 间接依赖 | go |
| github.com/sirupsen/logrus | v1.9.0 | 直接依赖 | go |
| xcpretty-travis-formatter | 1.0.1 | 间接依赖 | bundler |
| dataclass | 间接依赖 | pip | |
| DKImagePickerController/Core | 4.3.4 | 间接依赖 | cocoapods |
| dotenv | 2.8.1 | 间接依赖 | bundler |
| unf | 0.1.4 | 间接依赖 | bundler |
| screen_retriever | 0.0.1 | 间接依赖 | cocoapods |
| cocoapods | 1.11.3 | 间接依赖 | bundler |
| activesupport | 6.1.6 | 间接依赖 | bundler |
| google-apis-androidpublisher_v3 | 0.42.0 | 间接依赖 | bundler |
| highline | 2.0.3 | 间接依赖 | bundler |
| DKPhotoGallery/Preview | 0.0.17 | 间接依赖 | cocoapods |
| word_wrap | 1.0.0 | 间接依赖 | bundler |
| faraday-excon | 1.1.0 | 间接依赖 | bundler |
| faraday-rack | 1.0.0 | 间接依赖 | bundler |
| declarative | 0.0.20 | 间接依赖 | bundler |
| multipart-post | 2.0.0 | 间接依赖 | bundler |
| fourflusher | 2.3.1 | 间接依赖 | bundler |
| Flutter | 间接依赖 | cocoapods | |
| i18n | 1.10.0 | 间接依赖 | bundler |
| xcpretty | 0.3.0 | 间接依赖 | bundler |
| window_manager | 0.2.0 | 间接依赖 | cocoapods |
| faraday-cookie_jar | 0.0.7 | 间接依赖 | bundler |
| faraday-em_http | 1.0.0 | 间接依赖 | bundler |
| aws-eventstream | 1.2.0 | 间接依赖 | bundler |
| path_provider_foundation | 0.0.1 | 间接依赖 | cocoapods |
| is_windows | 间接依赖 | pip | |
| atomos | 0.1.3 | 间接依赖 | bundler |
| minitest | 5.15.0 | 间接依赖 | bundler |
| os | 1.1.4 | 间接依赖 | bundler |
| github.com/spf13/afero | v1.9.5 | 间接依赖 | go |
| multi_json | 1.15.0 | 间接依赖 | bundler |
| copy_tree | 间接依赖 | pip | |
| Callable | 间接依赖 | pip | |
| Dict | 间接依赖 | pip | |
| google-cloud-storage | 1.44.0 | 间接依赖 | bundler |
| cocoapods-core | 1.11.3 | 间接依赖 | bundler |
| aws-sdk-core | 3.173.0 | 间接依赖 | bundler |
| cocoapods-deintegrate | 1.0.5 | 间接依赖 | bundler |
| url_launcher_ios | 0.0.1 | 间接依赖 | cocoapods |
| domain_name | 0.5.20190701 | 间接依赖 | bundler |
| github.com/gorilla/websocket | v1.5.0 | 直接依赖 | go |
| github.com/spf13/cobra | v1.7.0 | 直接依赖 | go |
| DKPhotoGallery/Resource | 0.0.17 | 间接依赖 | cocoapods |
| github.com/bytedance/sonic | v1.8.8 | 间接依赖 | go |
| github.com/pelletier/go-toml/v2 | v2.0.7 | 间接依赖 | go |
| jwt | 2.7.0 | 间接依赖 | bundler |
| github.com/gin-gonic/contrib | v0.0.0-20221130124618-7e01895a63f2 | 直接依赖 | go |
| signet | 0.17.0 | 间接依赖 | bundler |
| flet_fastapi | 间接依赖 | pip | |
| github.com/ugorji/go/codec | v1.2.11 | 间接依赖 | go |
| tty-cursor | 0.7.1 | 间接依赖 | bundler |
| netrc | 0.11.0 | 间接依赖 | bundler |
| fuzzy_match | 2.0.4 | 间接依赖 | bundler |
| ffi | 1.15.5 | 间接依赖 | bundler |
| field | 间接依赖 | pip | |
| build_upload_query_string | 间接依赖 | pip | |
| file_picker | 0.0.1 | 间接依赖 | cocoapods |
| terminal-notifier | 2.0.0 | 间接依赖 | bundler |
| nap | 1.1.0 | 间接依赖 | bundler |
| concurrent-ruby | 1.1.10 | 间接依赖 | bundler |
| public_suffix | 4.0.7 | 间接依赖 | bundler |
| FlutterMacOS | 间接依赖 | cocoapods | |
| cloud.google.com/go/compute | v1.19.1 | 间接依赖 | go |
| golang.org/x/crypto | v0.8.0 | 间接依赖 | go |
| mini_magick | 4.12.0 | 间接依赖 | bundler |
| colored2 | 3.1.2 | 间接依赖 | bundler |
| rake | 13.0.6 | 间接依赖 | bundler |
| webrick | 1.8.1 | 间接依赖 | bundler |
| uber | 0.1.0 | 间接依赖 | bundler |
| random_string | 间接依赖 | pip | |
| aws-sdk-s3 | 1.122.0 | 间接依赖 | bundler |
| github.com/mattn/go-isatty | v0.0.18 | 间接依赖 | go |
| rubyzip | 2.3.2 | 间接依赖 | bundler |
| excon | 0.99.0 | 间接依赖 | bundler |
| zeitwerk | 2.5.4 | 间接依赖 | bundler |
| babosa | 1.0.4 | 间接依赖 | bundler |
| http-cookie | 1.0.5 | 间接依赖 | bundler |
| optparse | 0.1.1 | 间接依赖 | bundler |
| DKPhotoGallery/Core | 0.0.17 | 间接依赖 | cocoapods |
| github.com/google/uuid | v1.3.0 | 直接依赖 | go |
| emoji_regex | 3.2.3 | 间接依赖 | bundler |
| cocoapods-try | 1.2.0 | 间接依赖 | bundler |
| artifactory | 3.0.15 | 间接依赖 | bundler |
| fastimage | 2.2.6 | 间接依赖 | bundler |
| quote | 间接依赖 | pip | |
| shared_preferences_foundation | 0.0.1 | 间接依赖 | cocoapods |
| google-apis-playcustomapp_v1 | 0.13.0 | 间接依赖 | bundler |
| integration_test | 0.0.1 | 间接依赖 | cocoapods |
| unf_ext | 0.0.8.2 | 间接依赖 | bundler |
| flet_core | 间接依赖 | pip | |
| cloud.google.com/go/secretmanager | v1.10.0 | 直接依赖 | go |
| window_to_front | 0.0.1 | 间接依赖 | cocoapods |
| google-cloud-core | 1.6.0 | 间接依赖 | bundler |
| github.com/gin-gonic/gin | v1.9.0 | 直接依赖 | go |
| ruby-macho | 2.5.1 | 间接依赖 | bundler |
| typhoeus | 1.4.0 | 间接依赖 | bundler |
| digest-crc | 0.6.4 | 间接依赖 | bundler |
| aws-partitions | 1.767.0 | 间接依赖 | bundler |
| representable | 3.2.0 | 间接依赖 | bundler |
| google-apis-core | 0.11.0 | 间接依赖 | bundler |
| DKPhotoGallery | 0.0.17 | 间接依赖 | cocoapods |
| tty-screen | 0.8.1 | 间接依赖 | bundler |
| github.com/wangjia184/sortedset | v0.0.0-20220209072355-af6d6d227aa7 | 直接依赖 | go |
| googleauth | 1.5.2 | 间接依赖 | bundler |
| cocoapods-downloader | 1.6.3 | 间接依赖 | bundler |
| DKImagePickerController/ImageDataManager | 4.3.4 | 间接依赖 | cocoapods |
| sensors_plus | 0.0.1 | 间接依赖 | cocoapods |
| FlutterMacOS | 1.0.0 | 间接依赖 | cocoapods |
| google-cloud-env | 1.6.0 | 间接依赖 | bundler |
| SDWebImage/Core | 5.13.2 | 间接依赖 | cocoapods |
| fastlane | 2.212.2 | 间接依赖 | bundler |
| bundler | 间接依赖 | bundler | |
| terminal-table | 1.8.0 | 间接依赖 | bundler |
| faraday-net_http | 1.0.1 | 间接依赖 | bundler |
| ethon | 0.15.0 | 间接依赖 | bundler |
| faraday-net_http_persistent | 1.2.0 | 间接依赖 | bundler |
| DKImagePickerController/Resource | 4.3.4 | 间接依赖 | cocoapods |
| google.golang.org/api | v0.120.0 | 间接依赖 | go |
| cocoapods-search | 1.0.1 | 间接依赖 | bundler |
| BorderSide | 间接依赖 | pip |