coollabsio/coolify 软件分析报告

基础信息

项目名称:coollabsio/coolify

项目徽章:

Security Status

仓库地址:https://github.com/pterodactyl/panel

检测报告地址:https://www.murphysec.com/console/report/1721105517799014400/1731258159116275712

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
Terrafrost phpseclib 安全漏洞 过度迭代 MPS-tkgd-wrz5 CVE-2023-49316 高危

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
phpseclib/phpseclib 3.0.33 3.0.34 间接依赖 可选修复

许可证风险

许可证类型 相关组件 许可证风险
MIT 127
BSD-3-Clause 13
Apache-2.0 4
GPL-2.0 1
GPL-3.0 2
BSD-4-Clause 4
LGPL-2.0 1
ISC 1

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
symfony/polyfill-iconv v1.28.0 间接依赖 composer
illuminate/filesystem 间接依赖 composer
psr/http-message 2.0 间接依赖 composer
symfony/process v6.3.4 间接依赖 composer
postcss-selector-parser 6.0.10 间接依赖 npm
league/commonmark 2.4.1 间接依赖 composer
symfony/polyfill-php72 v1.28.0 间接依赖 composer
ramsey/collection 2.0.0 间接依赖 composer
lodash.isplainobject 4.0.6 间接依赖 npm
nunomaduro/termwind v1.15.1 间接依赖 composer
symfony/http-foundation v6.3.7 间接依赖 composer
php-http/message-factory 1.1.0 间接依赖 composer
doctrine/lexer 3.0.0 间接依赖 composer
symfony/polyfill-php83 v1.28.0 间接依赖 composer
symfony/options-resolver v6.3.0 间接依赖 composer
@vue/reactivity 3.1.5 间接依赖 npm
guzzlehttp/uri-template v1.0.2 间接依赖 composer
fastparse 1.1.2 间接依赖 npm
psr/http-factory 1.0.2 间接依赖 composer
spatie/backtrace 1.5.3 间接依赖 composer
illuminate/support 间接依赖 composer
phpoption/phpoption 1.9.1 间接依赖 composer
symfony/string v6.3.5 间接依赖 composer
symfony/http-client-contracts v3.3.0 间接依赖 composer
yosymfony/parser-utils v2.0.0 间接依赖 composer
symfony/psr-http-message-bridge v2.3.1 间接依赖 composer
masmerise/livewire-toaster 1.3.0 间接依赖 composer
psr/event-dispatcher 1.0.0 间接依赖 composer
webmozart/assert 1.11.0 间接依赖 composer
cssesc 3.0.0 间接依赖 npm
composer-runtime-api 间接依赖 composer
symfony/polyfill-intl-grapheme v1.28.0 间接依赖 composer
ralouphie/getallheaders 3.0.3 间接依赖 composer
symfony/yaml v6.3.7 间接依赖 composer
laravel/sanctum v3.3.2 间接依赖 composer
postcss-js 4.0.1 间接依赖 npm
illuminate/contracts 间接依赖 composer
doctrine/cache 2.2.0 间接依赖 composer
composer-plugin-api 间接依赖 composer
psr/http-factory-implementation 间接依赖 composer
sentry/sdk 3.5.0 间接依赖 composer
livewire/livewire v2.12.6 间接依赖 composer
symfony/translation-contracts v3.3.0 间接依赖 composer
paragonie/constant_time_encoding v2.6.3 间接依赖 composer
nette/schema v1.2.5 间接依赖 composer
tijsverkoyen/css-to-inline-styles 2.2.6 间接依赖 composer
nubs/random-name-generator v2.2.0 间接依赖 composer
symfony/css-selector v6.3.2 间接依赖 composer
php-http/client-common 2.7.0 间接依赖 composer
symfony/polyfill-php80 v1.28.0 间接依赖 composer
dragonmantank/cron-expression v3.3.3 间接依赖 composer
symfony/polyfill-intl-normalizer v1.28.0 间接依赖 composer
symfony/polyfill-ctype v1.28.0 间接依赖 composer
symfony/event-dispatcher-contracts v3.3.0 间接依赖 composer
guzzlehttp/psr7 2.6.1 间接依赖 composer
laravel/prompts v0.1.13 间接依赖 composer
guzzlehttp/promises 2.0.1 间接依赖 composer
spatie/url 2.2.1 间接依赖 composer
lorisleiva/lody v0.4.0 间接依赖 composer
nikic/php-parser v4.17.1 间接依赖 composer
psr/container 2.0.2 间接依赖 composer
illuminate/collections 间接依赖 composer
php-http/message 1.16.0 间接依赖 composer
illuminate/validation 间接依赖 composer
laravel/fortify v1.18.1 间接依赖 composer
graham-campbell/result-type v1.1.1 间接依赖 composer
symfony/var-dumper v6.3.6 间接依赖 composer
css-selector-tokenizer 0.8.0 间接依赖 npm
ramsey/uuid 4.7.5 间接依赖 composer
php-http/async-client-implementation 间接依赖 composer
spatie/macroable 2.0.0 间接依赖 composer
daisyui 4.3.1 间接依赖 npm
lodash.castarray 4.4.0 间接依赖 npm
psr/clock 1.0.0 间接依赖 composer
bacon/bacon-qr-code 2.0.8 间接依赖 composer
@vue/shared 3.1.5 间接依赖 npm
symfony/uid v6.3.0 间接依赖 composer
league/mime-type-detection 1.14.0 间接依赖 composer
util-deprecate 1.0.2 间接依赖 npm
symfony/polyfill-uuid v1.28.0 间接依赖 composer
php-http/promise 1.2.1 间接依赖 composer
symfony/mailer v6.3.5 间接依赖 composer
yosymfony/toml v1.0.4 间接依赖 composer
spatie/laravel-package-tools 1.16.1 间接依赖 composer
http-interop/http-factory-guzzle 1.2.0 间接依赖 composer
psy/psysh v0.11.22 间接依赖 composer
doctrine/deprecations 1.1.2 间接依赖 composer
aws/aws-sdk-php 3.285.2 间接依赖 composer
phpdocumentor/type-resolver 1.7.3 间接依赖 composer
phpseclib/phpseclib 3.0.33 间接依赖 composer
alpinejs 3.13.2 间接依赖 npm
doctrine/dbal 3.7.1 间接依赖 composer
@tailwindcss/typography 0.5.10 间接依赖 npm
pimple/pimple v3.5.0 间接依赖 composer
voku/portable-ascii 2.0.1 间接依赖 composer
monolog/monolog 3.5.0 间接依赖 composer
symfony/polyfill-intl-idn v1.28.0 间接依赖 composer
egulias/email-validator 4.0.2 间接依赖 composer
php-http/discovery 1.19.1 间接依赖 composer
symfony/error-handler v6.3.5 间接依赖 composer
symfony/mime v6.3.5 间接依赖 composer
laravel/serializable-closure v1.3.2 间接依赖 composer
illuminate/console 间接依赖 composer
spatie/laravel-activitylog 4.7.3 间接依赖 composer
laravel/tinker v2.8.2 间接依赖 composer
spatie/laravel-data 3.9.2 间接依赖 composer
lodash.merge 4.6.2 间接依赖 npm
symfony/event-dispatcher v6.3.2 间接依赖 composer
symfony/stopwatch v6.3.0 间接依赖 composer
illuminate/config 间接依赖 composer
paragonie/random_compat v9.99.100 间接依赖 composer
visus/cuid2 2.0.0 间接依赖 composer
doctrine/inflector 2.0.8 间接依赖 composer
symfony/finder v6.3.5 间接依赖 composer
laravel/ui v4.2.2 间接依赖 composer
psr/http-client 1.0.3 间接依赖 composer
doctrine/event-manager 2.0.0 间接依赖 composer
culori 3.2.0 间接依赖 npm
zbateson/mb-wrapper 1.2.0 间接依赖 composer
pragmarx/google2fa v8.0.1 间接依赖 composer
league/flysystem 3.19.0 间接依赖 composer
lcobucci/jwt 5.1.0 间接依赖 composer
nesbot/carbon 2.71.0 间接依赖 composer
brick/math 0.11.0 间接依赖 composer
symfony/http-client v6.3.7 间接依赖 composer
lorisleiva/laravel-actions v2.7.1 间接依赖 composer
fruitcake/php-cors v1.3.0 间接依赖 composer
zbateson/mail-mime-parser 2.4.0 间接依赖 composer
symfony/http-kernel v6.3.7 间接依赖 composer
nyholm/psr7 1.8.0 间接依赖 composer
camelcase-css 2.0.1 间接依赖 npm
guzzlehttp/guzzle 7.8.0 间接依赖 composer
phpdocumentor/reflection-common 2.2.0 间接依赖 composer
sentry/sentry-laravel 3.8.2 间接依赖 composer
aws/aws-crt-php v1.2.3 间接依赖 composer
league/flysystem-sftp-v3 3.19.0 间接依赖 composer
psr/simple-cache 3.0.0 间接依赖 composer
sentry/sentry 3.22.0 间接依赖 composer
symfony/translation v6.3.7 间接依赖 composer
spatie/laravel-ray 1.33.0 间接依赖 composer
league/config v1.2.0 间接依赖 composer
resend/resend-laravel v0.5.0 间接依赖 composer
poliander/cron 3.0.7 间接依赖 composer
mtdowling/jmespath.php 2.7.0 间接依赖 composer
league/flysystem-aws-s3-v3 3.19.0 间接依赖 composer
symfony/polyfill-mbstring v1.28.0 间接依赖 composer
resend/resend-php v0.7.2 间接依赖 composer
vlucas/phpdotenv v5.5.0 间接依赖 composer
jean85/pretty-package-versions 2.0.5 间接依赖 composer
spatie/ray 1.40.0 间接依赖 composer
stripe/stripe-php v12.8.0 间接依赖 composer
illuminate/database 间接依赖 composer
psr/cache 3.0.0 间接依赖 composer
picocolors 1.0.0 间接依赖 npm
tailwindcss-scrollbar 0.1.0 间接依赖 npm
phpstan/phpdoc-parser 1.24.2 间接依赖 composer
zbateson/stream-decorators 1.2.1 间接依赖 composer
laravel/horizon v5.21.3 间接依赖 composer
symfony/deprecation-contracts v3.3.0 间接依赖 composer
symfony/console v6.3.4 间接依赖 composer
dflydev/dot-access-data v3.0.2 间接依赖 composer
symfony/service-contracts v3.3.0 间接依赖 composer
laravel/framework v10.31.0 间接依赖 composer
illuminate/queue 间接依赖 composer
symfony/routing v6.3.5 间接依赖 composer
spatie/laravel-schemaless-attributes 2.4.0 间接依赖 composer
dasprid/enum 1.0.5 间接依赖 composer
psr/log 3.0.0 间接依赖 composer
php-http/httplug 2.4.0 间接依赖 composer
danharrin/livewire-rate-limiting v1.2.0 间接依赖 composer
clue/stream-filter v1.6.0 间接依赖 composer
league/flysystem-local 3.19.0 间接依赖 composer
(0)
上一篇 2023年12月3日
下一篇 2023年12月3日

相关推荐

  • AlwaysRightInstitute/SwiftyExpat 软件分析报告

    基础信息 项目名称:AlwaysRightInstitute/SwiftyExpat 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1715744224870973440/1715744224942276608 此…

    软件分析 2023年10月23日
    0
  • alexander171294/web-poker 软件分析报告

    基础信息 项目名称:alexander171294/web-poker 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1715629378683666432/1715629379358949376 此报告由Murp…

    软件分析 2023年10月23日
    0
  • coderliguoqing/vans 软件分析报告

    基础信息 项目名称:coderliguoqing/vans 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1716778651697676288/1716778651798339584 此报告由Murphysec提…

    软件分析 2023年10月24日
    0
  • Distrotech/pixman 软件分析报告

    基础信息 项目名称:Distrotech/pixman 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721136275976687616/1725767510191460352 此报告由Murphysec提供 …

    软件分析 2023年11月18日
    0
  • ajvb/kala 软件分析报告

    基础信息 项目名称:ajvb/kala 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1746228444465373184/1755520211458723840 此报告由Murphysec提供 漏洞列表 漏洞名…

    软件分析 2024年2月8日
    0