基础信息
项目名称：statsmodels/statsmodels
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1756639272874995712/1762470598856048640
此报告由Murphysec提供
漏洞列表
| 漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
|---|---|---|---|---|
| Jinja 跨站脚本漏洞 | XSS | MPS-6p1s-f3oy | CVE-2024-22195 | 中危 |
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| jinja2 | 3.0.3 | 3.1.3 | 间接依赖 | 可选修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| MIT | 6 | 低 |
| Python-2.0 | 1 | 低 |
| BSD-3-Clause | 3 | 低 |
| BSD-2-Clause | 2 | 低 |
| 自定义许可证 | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| inv | 间接依赖 | pip | |
| clean0 | 间接依赖 | pip | |
| assert_array_equal | 间接依赖 | pip | |
| matplotlib | 3.5 | 间接依赖 | pip |
| NewNorm | 间接依赖 | pip | |
| NAAction | 间接依赖 | pip | |
| jinja2 | 3.0.3 | 间接依赖 | pip |
| linalg | 间接依赖 | pip | |
| var_plots | 间接依赖 | pip | |
| assert_raises | 间接依赖 | pip | |
| GaussProcess | 间接依赖 | pip | |
| get_lilliefors_table | 间接依赖 | pip | |
| pytest | 7.3.0 | 间接依赖 | pip |
| numpy | 间接依赖 | pip | |
| scipy | 间接依赖 | pip | |
| assert_allclose | 间接依赖 | pip | |
| HTTPError | 间接依赖 | pip | |
| bootstrap | 间接依赖 | pip | |
| assert_ | 间接依赖 | pip | |
| stringify_var_names | 间接依赖 | pip | |
| monotone_fn_inverter | 间接依赖 | pip | |
| lake | 间接依赖 | pip | |
| gamma | 间接依赖 | pip | |
| oshorts | 间接依赖 | pip | |
| plot_corr | 间接依赖 | pip | |
| array_like | 间接依赖 | pip | |
| eigh | 间接依赖 | pip | |
| statsmodels | 间接依赖 | pip | |
| StepFunction | 间接依赖 | pip | |
| oldest-supported-numpy | 2022.4.18 | 间接依赖 | pip |
| approx_fprime_cs | 间接依赖 | pip | |
| beanplot | 间接依赖 | pip | |
| webdoc | 间接依赖 | pip | |
| stats | 间接依赖 | pip | |
| fullrank | 间接依赖 | pip | |
| rv_discrete | 间接依赖 | pip | |
| MI | 间接依赖 | pip | |
| remove_parameters | 间接依赖 | pip | |
| poisson | 间接依赖 | pip | |
| assert_equal | 间接依赖 | pip | |
| load_macrodata | 间接依赖 | pip | |
| _generate_url | 间接依赖 | pip | |
| kernel_euclid | 间接依赖 | pip | |
| norm | 间接依赖 | pip | |
| PandasWrapper | 间接依赖 | pip | |
| BayesGaussMI | 间接依赖 | pip | |
| lilliefors | 间接依赖 | pip | |
| testing | 间接依赖 | pip | |
| chi2 | 间接依赖 | pip | |
| violinplot | 间接依赖 | pip | |
| arange | 间接依赖 | pip | |
| assert_almost_equal | 间接依赖 | pip | |
| URLError | 间接依赖 | pip | |
| assert_array_less | 间接依赖 | pip | |
| dmatrices | 间接依赖 | pip | |
| packaging | 间接依赖 | pip | |
| sublists | 间接依赖 | pip | |
| plot_corr_grid | 间接依赖 | pip | |
| factorial | 间接依赖 | pip | |
| Docstring | 间接依赖 | pip | |
| _get_epsilon | 间接依赖 | pip |