基础信息
项目名称：Orange-OpenSource/hurl
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1758270648947453952/1758270648985202688
此报告由Murphysec提供
漏洞列表
暂无
缺陷组件
暂无
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| ISC | 15 | 低 |
| MIT | 50 | 低 |
| MPL-2.0 | 2 | 低 |
| BSD-3-Clause | 6 | 低 |
| 自定义许可证 | 5 | 低 |
| Apache-2.0 | 1 | 低 |
| BSD-2-Clause | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| signal-exit | 4.1.0 | 间接依赖 | npm |
| color-convert | 2.0.1 | 直接依赖 | npm |
| KERNEL32.dll | 间接依赖 | ||
| end-of-stream | 1.4.4 | 间接依赖 | npm |
| get-stream | 5.2.0 | 间接依赖 | npm |
| mypy | 1.8.0 | 间接依赖 | pip |
| form-data | 4.0.0 | 间接依赖 | npm |
| @types/node | 17.0.31 | 间接依赖 | npm |
| minizlib | 2.1.2 | 间接依赖 | npm |
| minipass | 3.1.6 | 间接依赖 | npm |
| blinker | 1.7.0 | 间接依赖 | pip |
| strip-ansi | 7.1.0 | 间接依赖 | npm |
| wrap-ansi-cjs | npm:wrap-ansi@7.0.0 | 间接依赖 | npm |
| delayed-stream | 1.0.0 | 间接依赖 | npm |
| is-fullwidth-code-point | 3.0.0 | 间接依赖 | npm |
| pathspec | 0.12.1 | 间接依赖 | pip |
| string-width | 5.1.2 | 间接依赖 | npm |
| string-width-cjs | npm:string-width@4.2.3 | 间接依赖 | npm |
| urllib3 | 2.1.0 | 间接依赖 | pip |
| MarkupSafe | 2.1.3 | 间接依赖 | pip |
| color-name | 1.1.4 | 间接依赖 | npm |
| glob | 10.3.10 | 间接依赖 | npm |
| ms | 2.1.2 | 间接依赖 | npm |
| jackspeak | 2.3.6 | 间接依赖 | npm |
| @isaacs/cliui | 8.0.2 | 间接依赖 | npm |
| yallist | 4.0.0 | 间接依赖 | npm |
| pump | 3.0.0 | 间接依赖 | npm |
| asynckit | 0.4.0 | 间接依赖 | npm |
| charset-normalizer | 3.3.2 | 间接依赖 | pip |
| path-key | 3.1.1 | 间接依赖 | npm |
| clone | 1.0.4 | 间接依赖 | npm |
| platformdirs | 4.1.0 | 间接依赖 | pip |
| packaging | 23.2 | 间接依赖 | pip |
| path-scurry | 1.10.1 | 间接依赖 | npm |
| ansi-styles | 6.2.1 | 间接依赖 | npm |
| rimraf | 5.0.5 | 直接依赖 | npm |
| defaults | 1.0.3 | 间接依赖 | npm |
| ansi-regex | 6.0.1 | 间接依赖 | npm |
| typing_extensions | 4.9.0 | 间接依赖 | pip |
| Jinja2 | 3.1.3 | 间接依赖 | pip |
| beautifulsoup4 | 4.12.2 | 间接依赖 | pip |
| balanced-match | 1.0.2 | 间接依赖 | npm |
| types-urllib3 | 1.26.25.14 | 间接依赖 | pip |
| yauzl | 2.10.0 | 间接依赖 | npm |
| brace-expansion | 2.0.1 | 间接依赖 | npm |
| ADVAPI32.dll | 间接依赖 | ||
| mime-types | 2.1.35 | 间接依赖 | npm |
| shebang-regex | 3.0.0 | 间接依赖 | npm |
| mkdirp | 1.0.4 | 间接依赖 | npm |
| Flask | 3.0.0 | 间接依赖 | pip |
| idna | 3.6 | 间接依赖 | pip |
| app | 间接依赖 | pip | |
| eastasianwidth | 0.2.0 | 间接依赖 | npm |
| tar | 6.2.0 | 直接依赖 | npm |
| black | 23.12.1 | 间接依赖 | pip |
| flask | 间接依赖 | pip | |
| itsdangerous | 2.1.2 | 间接依赖 | pip |
| proxy-from-env | 1.1.0 | 间接依赖 | npm |
| wcwidth | 1.0.1 | 间接依赖 | npm |
| cross-spawn | 7.0.3 | 间接依赖 | npm |
| buffer-crc32 | 0.2.13 | 间接依赖 | npm |
| types-requests | 2.31.0.0 | 间接依赖 | pip |
| debug | 4.3.4 | 间接依赖 | npm |
| Werkzeug | 3.0.1 | 间接依赖 | pip |
| certifi | 2023.11.17 | 间接依赖 | pip |
| fd-slicer | 1.1.0 | 间接依赖 | npm |
| wrap-ansi | 8.1.0 | 间接依赖 | npm |
| console.table | 0.10.0 | 直接依赖 | npm |
| requests | 2.31.0 | 间接依赖 | pip |
| strip-ansi-cjs | npm:strip-ansi@6.0.1 | 间接依赖 | npm |
| mime-db | 1.52.0 | 间接依赖 | npm |
| follow-redirects | 1.15.5 | 间接依赖 | npm |
| isexe | 2.0.0 | 间接依赖 | npm |
| wrappy | 1.0.2 | 间接依赖 | npm |
| mypy-extensions | 1.0.0 | 间接依赖 | pip |
| foreground-child | 3.1.1 | 间接依赖 | npm |
| emoji-regex | 9.2.2 | 间接依赖 | npm |
| once | 1.4.0 | 间接依赖 | npm |
| fs-minipass | 2.1.0 | 间接依赖 | npm |
| pend | 1.2.0 | 间接依赖 | npm |
| USER32.dll | 间接依赖 | ||
| types-html5lib | 1.1.11.20240106 | 间接依赖 | pip |
| soupsieve | 2.5 | 间接依赖 | pip |
| @pkgjs/parseargs | 0.11.0 | 间接依赖 | npm |
| types-beautifulsoup4 | 4.12.0.0 | 间接依赖 | pip |
| lru-cache | 10.1.0 | 间接依赖 | npm |
| combined-stream | 1.0.8 | 间接依赖 | npm |
| click | 8.1.7 | 间接依赖 | pip |
| extract-zip | 2.0.1 | 直接依赖 | npm |
| chownr | 2.0.0 | 间接依赖 | npm |
| minimatch | 9.0.3 | 间接依赖 | npm |
| lxml | 5.1.0 | 间接依赖 | pip |
| @types/yauzl | 2.10.0 | 间接依赖 | npm |
| which | 2.0.2 | 间接依赖 | npm |
| shebang-command | 2.0.0 | 间接依赖 | npm |
| easy-table | 1.1.0 | 间接依赖 | npm |
| axios | 1.6.5 | 直接依赖 | npm |