基础信息
项目名称:nickjj/docker-django-example
项目徽章:
仓库地址:https://github.com/pterodactyl/panel
检测报告地址:https://www.murphysec.com/console/report/1757776905574686720/1757776905620824064
此报告由Murphysec提供
漏洞列表
漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
---|---|---|---|---|
npm path-parse 安全漏洞 | 拒绝服务 | MPS-2021-6165 | CVE-2021-23343 | 高危 |
PostCSS 安全漏洞 | 注入 | MPS-y3tx-jzms | CVE-2023-44270 | 中危 |
缺陷组件
组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
---|---|---|---|---|
path-parse | 1.0.6 | 1.0.7 | 间接依赖 | 建议修复 |
postcss | 8.4.23 | 8.4.31 | 间接依赖 | 可选修复 |
许可证风险
许可证类型 | 相关组件 | 许可证风险 |
---|---|---|
MIT | 99 | 低 |
ISC | 14 | 低 |
MPL-2.0 | 1 | 低 |
自定义许可证 | 6 | 低 |
BSD-3-Clause | 9 | 低 |
Apache-2.0 | 4 | 低 |
LGPL-3.0-only | 1 | 低 |
CC-BY-4.0 | 1 | 低 |
SBOM清单
组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
---|---|---|---|
function-bind | 1.1.1 | 间接依赖 | npm |
typing_extensions | 4.9.0 | 间接依赖 | pip |
picomatch | 2.2.2 | 间接依赖 | npm |
@jridgewell/resolve-uri | 3.1.0 | 间接依赖 | npm |
postcss-import | 16.0.0 | 直接依赖 | npm |
is-binary-path | 2.1.0 | 间接依赖 | npm |
object-assign | 4.1.1 | 间接依赖 | npm |
picomatch | 2.3.1 | 间接依赖 | npm |
run-parallel | 1.1.10 | 间接依赖 | npm |
mypy-extensions | 1.0.0 | 间接依赖 | pip |
mz | 2.7.0 | 间接依赖 | npm |
supports-preserve-symlinks-flag | 1.0.0 | 间接依赖 | npm |
update-browserslist-db | 1.0.13 | 间接依赖 | npm |
@jridgewell/set-array | 1.1.2 | 间接依赖 | npm |
lines-and-columns | 1.2.4 | 间接依赖 | npm |
wcwidth | 0.2.13 | 间接依赖 | pip |
@esbuild/android-x64 | 0.20.0 | 直接依赖 | npm |
postcss | 8.4.34 | 直接依赖 | npm |
wrappy | 1.0.2 | 间接依赖 | npm |
postcss-js | 4.0.1 | 间接依赖 | npm |
tailwindcss | 3.4.1 | 直接依赖 | npm |
to-regex-range | 5.0.1 | 间接依赖 | npm |
fastq | 1.10.0 | 间接依赖 | npm |
@esbuild/darwin-arm64 | 0.20.0 | 直接依赖 | npm |
django | 间接依赖 | pip | |
is-number | 7.0.0 | 间接依赖 | npm |
@nodelib/fs.stat | 2.0.3 | 间接依赖 | npm |
@esbuild/win32-ia32 | 0.20.0 | 直接依赖 | npm |
postcss-value-parser | 4.2.0 | 间接依赖 | npm |
@esbuild/win32-x64 | 0.20.0 | 直接依赖 | npm |
commander | 4.1.1 | 间接依赖 | npm |
fast-glob | 3.3.2 | 间接依赖 | npm |
dlv | 1.1.3 | 间接依赖 | npm |
cssesc | 3.0.0 | 间接依赖 | npm |
balanced-match | 1.0.2 | 间接依赖 | npm |
@esbuild/android-arm | 0.20.0 | 直接依赖 | npm |
pirates | 4.0.5 | 间接依赖 | npm |
inherits | 2.0.4 | 间接依赖 | npm |
read-cache | 1.0.0 | 间接依赖 | npm |
pathspec | 0.12.1 | 间接依赖 | pip |
amqp | 5.2.0 | 间接依赖 | pip |
whitenoise | 6.6.0 | 间接依赖 | pip |
vine | 5.1.0 | 间接依赖 | pip |
is-glob | 4.0.3 | 间接依赖 | npm |
@esbuild/linux-s390x | 0.20.0 | 直接依赖 | npm |
concat-map | 0.0.1 | 间接依赖 | npm |
yaml | 2.2.2 | 间接依赖 | npm |
normalize-path | 3.0.0 | 间接依赖 | npm |
autoprefixer | 10.4.17 | 直接依赖 | npm |
is-glob | 4.0.1 | 间接依赖 | npm |
lilconfig | 2.0.5 | 间接依赖 | npm |
@esbuild/netbsd-x64 | 0.20.0 | 直接依赖 | npm |
fsevents | 2.3.2 | 直接依赖 | npm |
thenify | 3.3.1 | 间接依赖 | npm |
any-promise | 1.3.0 | 间接依赖 | npm |
micromatch | 4.0.5 | 间接依赖 | npm |
postcss-selector-parser | 6.0.11 | 间接依赖 | npm |
resolve | 1.19.0 | 间接依赖 | npm |
six | 1.16.0 | 间接依赖 | pip |
@esbuild/freebsd-arm64 | 0.20.0 | 直接依赖 | npm |
asgiref | 3.7.2 | 间接依赖 | pip |
resolve | 1.22.2 | 间接依赖 | npm |
is-extglob | 2.1.1 | 间接依赖 | npm |
esbuild | 0.20.0 | 直接依赖 | npm |
click-didyoumean | 0.3.0 | 间接依赖 | pip |
redis | 5.0.1 | 间接依赖 | pip |
click-repl | 0.3.0 | 间接依赖 | pip |
@esbuild/linux-ia32 | 0.20.0 | 直接依赖 | npm |
nanoid | 3.3.7 | 间接依赖 | npm |
brace-expansion | 1.1.11 | 间接依赖 | npm |
@esbuild/freebsd-x64 | 0.20.0 | 直接依赖 | npm |
@esbuild/linux-arm | 0.20.0 | 直接依赖 | npm |
jiti | 1.21.0 | 间接依赖 | npm |
binary-extensions | 2.2.0 | 间接依赖 | npm |
browserslist | 4.22.2 | 间接依赖 | npm |
@jridgewell/sourcemap-codec | 1.4.15 | 间接依赖 | npm |
sucrase | 3.32.0 | 间接依赖 | npm |
is-core-module | 2.2.0 | 间接依赖 | npm |
arg | 5.0.2 | 间接依赖 | npm |
thenify-all | 1.6.0 | 间接依赖 | npm |
is-core-module | 2.12.0 | 间接依赖 | npm |
picomatch | 2.3.0 | 间接依赖 | npm |
@esbuild/aix-ppc64 | 0.20.0 | 直接依赖 | npm |
isort | 5.13.2 | 间接依赖 | pip |
packaging | 23.2 | 间接依赖 | pip |
reusify | 1.0.4 | 间接依赖 | npm |
@esbuild/linux-mips64el | 0.20.0 | 直接依赖 | npm |
@esbuild/win32-arm64 | 0.20.0 | 直接依赖 | npm |
postcss-nested | 6.0.1 | 间接依赖 | npm |
kombu | 5.3.5 | 间接依赖 | pip |
tzdata | 2023.4 | 间接依赖 | pip |
pyflakes | 3.2.0 | 间接依赖 | pip |
normalize-range | 0.1.2 | 间接依赖 | npm |
Django | 5.0.2 | 间接依赖 | pip |
postcss-load-config | 4.0.1 | 间接依赖 | npm |
util-deprecate | 1.0.2 | 间接依赖 | npm |
@nodelib/fs.scandir | 2.1.3 | 间接依赖 | npm |
@jridgewell/trace-mapping | 0.3.18 | 间接依赖 | npm |
django-debug-toolbar | 4.3.0 | 间接依赖 | pip |
escalade | 3.1.1 | 间接依赖 | npm |
object-hash | 3.0.0 | 间接依赖 | npm |
path-is-absolute | 1.0.1 | 间接依赖 | npm |
esbuild-copy-static-files | 0.1.0 | 直接依赖 | npm |
source-map-js | 1.0.2 | 间接依赖 | npm |
click | 8.1.7 | 间接依赖 | pip |
psycopg | 3.1.18 | 间接依赖 | pip |
readdirp | 3.6.0 | 间接依赖 | npm |
fraction.js | 4.3.7 | 间接依赖 | npm |
electron-to-chromium | 1.4.639 | 间接依赖 | npm |
@esbuild/linux-loong64 | 0.20.0 | 直接依赖 | npm |
camelcase-css | 2.0.1 | 间接依赖 | npm |
inflight | 1.0.6 | 间接依赖 | npm |
lilconfig | 2.1.0 | 间接依赖 | npm |
path-parse | 1.0.6 | 间接依赖 | npm |
postcss-value-parser | 4.1.0 | 间接依赖 | npm |
flake8 | 7.0.0 | 间接依赖 | pip |
python-dateutil | 2.8.2 | 间接依赖 | pip |
glob-parent | 5.1.2 | 间接依赖 | npm |
node-releases | 2.0.14 | 间接依赖 | npm |
postcss | 8.4.23 | 间接依赖 | npm |
merge2 | 1.4.1 | 间接依赖 | npm |
braces | 3.0.2 | 间接依赖 | npm |
chokidar | 3.5.3 | 间接依赖 | npm |
nanoid | 3.3.6 | 间接依赖 | npm |
fill-range | 7.0.1 | 间接依赖 | npm |
mccabe | 0.7.0 | 间接依赖 | pip |
ts-interface-checker | 0.1.13 | 间接依赖 | npm |
prompt-toolkit | 3.0.43 | 间接依赖 | pip |
platformdirs | 4.2.0 | 间接依赖 | pip |
glob | 7.1.6 | 间接依赖 | npm |
@esbuild/sunos-x64 | 0.20.0 | 直接依赖 | npm |
celery | 5.3.6 | 间接依赖 | pip |
didyoumean | 1.2.2 | 间接依赖 | npm |
fs.realpath | 1.0.0 | 间接依赖 | npm |
@esbuild/linux-riscv64 | 0.20.0 | 直接依赖 | npm |
glob-parent | 6.0.2 | 间接依赖 | npm |
@esbuild/android-arm64 | 0.20.0 | 直接依赖 | npm |
@esbuild/linux-arm64 | 0.20.0 | 直接依赖 | npm |
@nodelib/fs.walk | 1.2.4 | 间接依赖 | npm |
micromatch | 4.0.4 | 间接依赖 | npm |
picocolors | 1.0.0 | 间接依赖 | npm |
billiard | 4.2.0 | 间接依赖 | pip |
pycodestyle | 2.11.1 | 间接依赖 | pip |
caniuse-lite | 1.0.30001579 | 间接依赖 | npm |
has | 1.0.3 | 间接依赖 | npm |
minimatch | 3.1.2 | 间接依赖 | npm |
path-parse | 1.0.7 | 间接依赖 | npm |
once | 1.4.0 | 间接依赖 | npm |
sqlparse | 0.4.4 | 间接依赖 | pip |
@esbuild/openbsd-x64 | 0.20.0 | 直接依赖 | npm |
@jridgewell/sourcemap-codec | 1.4.14 | 间接依赖 | npm |
black | 24.1.1 | 间接依赖 | pip |
click-plugins | 1.1.1 | 间接依赖 | pip |
gunicorn | 21.2.0 | 间接依赖 | pip |
postcss-import | 15.1.0 | 间接依赖 | npm |
pify | 2.3.0 | 间接依赖 | npm |
@jridgewell/gen-mapping | 0.3.3 | 间接依赖 | npm |
@alloc/quick-lru | 5.2.0 | 间接依赖 | npm |
anymatch | 3.1.2 | 间接依赖 | npm |
@esbuild/linux-ppc64 | 0.20.0 | 直接依赖 | npm |
@esbuild/darwin-x64 | 0.20.0 | 直接依赖 | npm |
@esbuild/linux-x64 | 0.20.0 | 直接依赖 | npm |