基础信息
项目名称:androidx/androidx
项目徽章:
仓库地址:https://github.com/pterodactyl/panel
检测报告地址:https://www.murphysec.com/console/report/1715823048279244800/1715823048459599872
此报告由Murphysec提供
漏洞列表
漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
---|---|---|---|---|
PostCSS 安全漏洞 | 注入 | MPS-y3tx-jzms | CVE-2023-44270 | 中危 |
缺陷组件
组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
---|---|---|---|---|
postcss | 8.4.27 | 8.4.31 | 间接依赖 | 可选修复 |
许可证风险
许可证类型 | 相关组件 | 许可证风险 |
---|---|---|
MIT | 171 | 低 |
Apache-2.0 | 11 | 低 |
ISC | 17 | 低 |
BSD-3-Clause | 3 | 低 |
BSD-2-Clause | 2 | 低 |
CC0-1.0 | 1 | 低 |
0BSD | 1 | 低 |
SBOM清单
组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
---|---|---|---|
call-bind | 1.0.2 | 间接依赖 | npm |
mkdirp-classic | 0.5.3 | 间接依赖 | npm |
import-fresh | 3.3.0 | 间接依赖 | npm |
axobject-query | 3.2.1 | 间接依赖 | npm |
tar-stream | 2.2.0 | 间接依赖 | npm |
androidx.activity:activity-compose | 1.3.1 | 直接依赖 | maven |
end-of-stream | 1.4.4 | 间接依赖 | npm |
normalize-path | 3.0.0 | 间接依赖 | npm |
androidx.activity:activity-compose | 1.7.0 | 直接依赖 | maven |
graceful-fs | 4.2.11 | 间接依赖 | npm |
@esbuild/linux-x64 | 0.18.16 | 间接依赖 | npm |
path-is-absolute | 1.0.1 | 间接依赖 | npm |
iconv-lite | 0.4.24 | 间接依赖 | npm |
androidx.annotation:annotation-experimental | 1.3.1 | 直接依赖 | maven |
androidx.annotation:annotation | 1.7.0 | 直接依赖 | maven |
path-parse | 1.0.7 | 间接依赖 | npm |
androidx.core:core | 1.3.2 | 直接依赖 | maven |
tar-fs | 2.1.1 | 间接依赖 | npm |
qs | 6.11.0 | 间接依赖 | npm |
devtools-protocol | 0.0.1045489 | 间接依赖 | npm |
reusify | 1.0.4 | 间接依赖 | npm |
picocolors | 1.0.0 | 间接依赖 | npm |
picomatch | 2.3.1 | 间接依赖 | npm |
buffer | 5.7.1 | 间接依赖 | npm |
@esbuild/linux-arm | 0.18.16 | 间接依赖 | npm |
locate-character | 3.0.0 | 间接依赖 | npm |
androidx.compose.foundation:foundation | 1.2.1 | 直接依赖 | maven |
androidx.annotation:annotation | 1.1.0 | 直接依赖 | maven |
supports-preserve-symlinks-flag | 1.0.0 | 间接依赖 | npm |
wrappy | 1.0.2 | 间接依赖 | npm |
depd | 2.0.0 | 间接依赖 | npm |
fsevents | 2.3.2 | 间接依赖 | npm |
strip-indent | 3.0.0 | 间接依赖 | npm |
has | 1.0.3 | 间接依赖 | npm |
unpipe | 1.0.0 | 间接依赖 | npm |
minimist | 1.2.8 | 间接依赖 | npm |
@nodelib/fs.stat | 2.0.5 | 间接依赖 | npm |
micromatch | 4.0.5 | 间接依赖 | npm |
negotiator | 0.6.3 | 间接依赖 | npm |
queue-microtask | 1.2.3 | 间接依赖 | npm |
@esbuild/win32-ia32 | 0.18.16 | 间接依赖 | npm |
detect-indent | 6.1.0 | 间接依赖 | npm |
@esbuild/darwin-x64 | 0.18.16 | 间接依赖 | npm |
resolve | 1.22.4 | 间接依赖 | npm |
@types/serve-static | 1.15.1 | 间接依赖 | npm |
aria-query | 5.3.0 | 间接依赖 | npm |
parent-module | 1.0.1 | 间接依赖 | npm |
puppeteer-core | 18.2.1 | 间接依赖 | npm |
androidx.activity:activity-compose | 1.3.0 | 直接依赖 | maven |
extract-zip | 2.0.1 | 间接依赖 | npm |
node-fetch | 2.6.7 | 间接依赖 | npm |
methods | 1.1.2 | 间接依赖 | npm |
@sveltejs/vite-plugin-svelte | 2.4.3 | 直接依赖 | npm |
get-stream | 5.2.0 | 间接依赖 | npm |
com.vorlonsoft:androidrate | 间接依赖 | maven | |
androidx.core:core-ktx | 1.6.0 | 直接依赖 | maven |
androidx.compose.animation:animation | 1.4.0 | 直接依赖 | maven |
chokidar | 3.5.3 | 间接依赖 | npm |
content-disposition | 0.5.4 | 间接依赖 | npm |
parseurl | 1.3.3 | 间接依赖 | npm |
@jridgewell/resolve-uri | 3.1.0 | 间接依赖 | npm |
com.google.android.gms:play-services-appindex | 16.1.0 | 直接依赖 | maven |
androidx.compose.runtime:runtime | 1.4.0 | 直接依赖 | maven |
rollup | 3.26.3 | 间接依赖 | npm |
proxy-from-env | 1.1.0 | 间接依赖 | npm |
rollup | 3.27.2 | 间接依赖 | npm |
@esbuild/linux-ia32 | 0.18.16 | 间接依赖 | npm |
inflight | 1.0.6 | 间接依赖 | npm |
ms | 2.1.3 | 间接依赖 | npm |
fs-constants | 1.0.0 | 间接依赖 | npm |
has-symbols | 1.0.3 | 间接依赖 | npm |
esbuild | 0.18.16 | 间接依赖 | npm |
cross-fetch | 3.1.5 | 间接依赖 | npm |
vite | 4.4.7 | 直接依赖 | npm |
es6-promise | 3.3.1 | 间接依赖 | npm |
estree-walker | 3.0.3 | 间接依赖 | npm |
@types/estree | 1.0.1 | 间接依赖 | npm |
androidx.compose.material3:material3 | 1.0.0 | 直接依赖 | maven |
@esbuild/netbsd-x64 | 0.18.16 | 间接依赖 | npm |
statuses | 2.0.1 | 间接依赖 | npm |
@esbuild/linux-arm64 | 0.18.16 | 间接依赖 | npm |
toidentifier | 1.0.1 | 间接依赖 | npm |
@esbuild/linux-mips64el | 0.18.16 | 间接依赖 | npm |
androidx.compose.foundation:foundation | 1.0.1 | 直接依赖 | maven |
brace-expansion | 1.1.11 | 间接依赖 | npm |
pend | 1.2.0 | 间接依赖 | npm |
magic-string | 0.30.1 | 间接依赖 | npm |
body-parser | 1.20.1 | 间接依赖 | npm |
androidx.compose.material:material-icons-extended | 1.4.0 | 直接依赖 | maven |
androidx.lifecycle:lifecycle-livedata | 2.3.1 | 直接依赖 | maven |
is-extglob | 2.1.1 | 间接依赖 | npm |
utils-merge | 1.0.1 | 间接依赖 | npm |
androidx.core:core | 1.7.0 | 直接依赖 | maven |
@types/node | 18.15.10 | 间接依赖 | npm |
inherits | 2.0.4 | 间接依赖 | npm |
tr46 | 0.0.3 | 间接依赖 | npm |
@jridgewell/trace-mapping | 0.3.18 | 间接依赖 | npm |
@esbuild/linux-riscv64 | 0.18.16 | 间接依赖 | npm |
androidx.compose.ui:ui-unit | 1.2.1 | 直接依赖 | maven |
type-is | 1.6.18 | 间接依赖 | npm |
css-tree | 2.3.1 | 间接依赖 | npm |
base64-js | 1.5.1 | 间接依赖 | npm |
androidx.activity:activity-compose | 1.4.0 | 直接依赖 | maven |
@esbuild/sunos-x64 | 0.18.16 | 间接依赖 | npm |
mime-db | 1.52.0 | 间接依赖 | npm |
@types/range-parser | 1.2.4 | 间接依赖 | npm |
get-intrinsic | 1.2.0 | 间接依赖 | npm |
@esbuild/win32-x64 | 0.18.16 | 间接依赖 | npm |
androidx.compose.ui:ui-tooling | 1.4.0 | 直接依赖 | maven |
safer-buffer | 2.1.2 | 间接依赖 | npm |
path-to-regexp | 0.1.7 | 间接依赖 | npm |
array-flatten | 1.1.1 | 间接依赖 | npm |
glob | 7.2.3 | 间接依赖 | npm |
@esbuild/darwin-arm64 | 0.18.16 | 间接依赖 | npm |
androidx.lifecycle:lifecycle-common-java8 | 2.2.0 | 直接依赖 | maven |
is-binary-path | 2.1.0 | 间接依赖 | npm |
is-glob | 4.0.3 | 间接依赖 | npm |
buffer-crc32 | 0.2.13 | 间接依赖 | npm |
ms | 2.1.2 | 间接依赖 | npm |
@esbuild/android-arm | 0.18.16 | 间接依赖 | npm |
source-map-js | 1.0.2 | 间接依赖 | npm |
@types/express | 4.17.17 | 间接依赖 | npm |
debug | 4.3.4 | 间接依赖 | npm |
svelte-preprocess | 5.0.4 | 间接依赖 | npm |
on-finished | 2.4.1 | 间接依赖 | npm |
@types/express-serve-static-core | 4.17.33 | 间接依赖 | npm |
mdn-data | 2.0.30 | 间接依赖 | npm |
string_decoder | 1.3.0 | 间接依赖 | npm |
fresh | 0.5.2 | 间接依赖 | npm |
chart.js | 4.3.1 | 直接依赖 | npm |
fd-slicer | 1.1.0 | 间接依赖 | npm |
@esbuild/win32-arm64 | 0.18.16 | 间接依赖 | npm |
safe-buffer | 5.2.1 | 间接依赖 | npm |
fastq | 1.15.0 | 间接依赖 | npm |
@jridgewell/sourcemap-codec | 1.4.15 | 间接依赖 | npm |
fs.realpath | 1.0.0 | 间接依赖 | npm |
cookie | 0.5.0 | 间接依赖 | npm |
@esbuild/freebsd-x64 | 0.18.16 | 间接依赖 | npm |
androidx.navigation:navigation-compose | 2.4.2 | 直接依赖 | maven |
content-type | 1.0.5 | 间接依赖 | npm |
androidx.privacysandbox.sdkruntime:sdkruntime-client | 1.0.0-alpha03 | 直接依赖 | maven |
@types/qs | 6.9.7 | 间接依赖 | npm |
com.google.android.material:material | 1.6.0 | 直接依赖 | maven |
finalhandler | 1.2.0 | 间接依赖 | npm |
sade | 1.8.1 | 间接依赖 | npm |
dequal | 2.0.3 | 间接依赖 | npm |
androidx.viewpager2:viewpager2 | 1.0.0 | 直接依赖 | maven |
debug | 2.6.9 | 间接依赖 | npm |
androidx.browser:browser | 1.3.0 | 直接依赖 | maven |
proxy-addr | 2.0.7 | 间接依赖 | npm |
concat-map | 0.0.1 | 间接依赖 | npm |
minimatch | 3.1.2 | 间接依赖 | npm |
@types/mime | 3.0.1 | 间接依赖 | npm |
sorcery | 0.11.0 | 间接依赖 | npm |
readdirp | 3.6.0 | 间接依赖 | npm |
@sveltejs/vite-plugin-svelte-inspector | 1.0.3 | 间接依赖 | npm |
function-bind | 1.1.1 | 间接依赖 | npm |
androidx.lifecycle:lifecycle-viewmodel-compose | 2.4.1 | 直接依赖 | maven |
util-deprecate | 1.0.2 | 间接依赖 | npm |
@jridgewell/set-array | 1.1.2 | 间接依赖 | npm |
androidx.compose.material:material | 1.0.1 | 直接依赖 | maven |
glob-parent | 5.1.2 | 间接依赖 | npm |
progress | 2.0.3 | 间接依赖 | npm |
is-reference | 3.0.1 | 间接依赖 | npm |
mime-types | 2.1.35 | 间接依赖 | npm |
com.google.mlkit:barcode-scanning | 17.0.2 | 直接依赖 | maven |
vary | 1.1.2 | 间接依赖 | npm |
typescript | 5.1.6 | 间接依赖 | npm |
@esbuild/linux-loong64 | 0.18.16 | 间接依赖 | npm |
kleur | 4.1.5 | 间接依赖 | npm |
mime | 1.6.0 | 间接依赖 | npm |
etag | 1.8.1 | 间接依赖 | npm |
com.google.android.material:material | 1.2.1 | 直接依赖 | maven |
@esbuild/linux-ppc64 | 0.18.16 | 间接依赖 | npm |
agent-base | 6.0.2 | 间接依赖 | npm |
run-parallel | 1.2.0 | 间接依赖 | npm |
acorn | 8.9.0 | 间接依赖 | npm |
chownr | 1.1.4 | 间接依赖 | npm |
readable-stream | 3.6.2 | 间接依赖 | npm |
destroy | 1.2.0 | 间接依赖 | npm |
svelte-check | 3.4.6 | 直接依赖 | npm |
pump | 3.0.0 | 间接依赖 | npm |
nanoid | 3.3.6 | 间接依赖 | npm |
setprototypeof | 1.2.0 | 间接依赖 | npm |
androidx.compose.material:material | 1.4.0 | 直接依赖 | maven |
fast-glob | 3.2.12 | 间接依赖 | npm |
@esbuild/freebsd-arm64 | 0.18.16 | 间接依赖 | npm |
androidx.appcompat:appcompat | 1.6.0 | 直接依赖 | maven |
ee-first | 1.1.1 | 间接依赖 | npm |
@jridgewell/gen-mapping | 0.3.3 | 间接依赖 | npm |
chrome-types | 0.1.219 | 直接依赖 | npm |
ipaddr.js | 1.9.1 | 间接依赖 | npm |
merge-descriptors | 1.0.1 | 间接依赖 | npm |
tslib | 2.6.1 | 直接依赖 | npm |
@tsconfig/svelte | 5.0.0 | 直接依赖 | npm |
forwarded | 0.2.0 | 间接依赖 | npm |
androidx.constraintlayout:constraintlayout | 2.0.1 | 直接依赖 | maven |
through | 2.3.8 | 间接依赖 | npm |
to-regex-range | 5.0.1 | 间接依赖 | npm |
svelte | 4.1.1 | 直接依赖 | npm |
encodeurl | 1.0.2 | 间接依赖 | npm |
side-channel | 1.0.4 | 间接依赖 | npm |
serve-static | 1.15.0 | 间接依赖 | npm |
@rollup/plugin-typescript | 11.1.2 | 直接依赖 | npm |
androidx.wear:wear | 1.2.0 | 直接依赖 | maven |
sander | 0.5.1 | 间接依赖 | npm |
io.homunculus:hcf-codegen | 间接依赖 | maven | |
http-errors | 2.0.0 | 间接依赖 | npm |
express | 4.18.2 | 间接依赖 | npm |
androidx.concurrent:concurrent-futures | 1.1.0 | 直接依赖 | maven |
media-typer | 0.3.0 | 间接依赖 | npm |
androidx.annotation:annotation | 1.3.0 | 直接依赖 | maven |
androidx.lifecycle:lifecycle-runtime | 2.2.0 | 直接依赖 | maven |
postcss | 8.4.27 | 间接依赖 | npm |
resolve-from | 4.0.0 | 间接依赖 | npm |
send | 0.18.0 | 间接依赖 | npm |
bytes | 3.1.2 | 间接依赖 | npm |
is-core-module | 2.13.0 | 间接依赖 | npm |
androidx.compose.material:material | 1.3.0 | 直接依赖 | maven |
yauzl | 2.10.0 | 间接依赖 | npm |
braces | 3.0.2 | 间接依赖 | npm |
androidx.activity:activity | 1.2.3 | 直接依赖 | maven |
rimraf | 2.7.1 | 间接依赖 | npm |
whatwg-url | 5.0.0 | 间接依赖 | npm |
accepts | 1.3.8 | 间接依赖 | npm |
merge2 | 1.4.1 | 间接依赖 | npm |
ws | 8.9.0 | 间接依赖 | npm |
@types/connect | 3.4.35 | 间接依赖 | npm |
webidl-conversions | 3.0.1 | 间接依赖 | npm |
once | 1.4.0 | 间接依赖 | npm |
svelte-hmr | 0.15.2 | 间接依赖 | npm |
object-inspect | 1.12.3 | 间接依赖 | npm |
bl | 4.1.0 | 间接依赖 | npm |
@types/pug | 2.0.6 | 间接依赖 | npm |
androidx.compose.material:material | 1.2.1 | 直接依赖 | maven |
@rollup/plugin-json | 6.0.0 | 直接依赖 | npm |
com.abubusoft:kripton-arch-integration | 间接依赖 | maven | |
androidx.core:core-ktx | 1.8.0 | 直接依赖 | maven |
min-indent | 1.0.1 | 间接依赖 | npm |
anymatch | 3.1.3 | 间接依赖 | npm |
periscopic | 3.1.0 | 间接依赖 | npm |
androidx.multidex:multidex | 2.0.1 | 直接依赖 | maven |
cookie-signature | 1.0.6 | 间接依赖 | npm |
com.github.ajalt.clikt:clikt | 3.3.0 | 直接依赖 | maven |
androidx.annotation:annotation-experimental | 1.3.0 | 直接依赖 | maven |
androidx.fragment:fragment | 1.3.0 | 直接依赖 | maven |
@esbuild/openbsd-x64 | 0.18.16 | 间接依赖 | npm |
callsites | 3.1.0 | 间接依赖 | npm |
fill-range | 7.0.1 | 间接依赖 | npm |
escape-html | 1.0.3 | 间接依赖 | npm |
mri | 1.2.0 | 间接依赖 | npm |
ieee754 | 1.2.1 | 间接依赖 | npm |
androidx.recyclerview:recyclerview | 1.2.1 | 直接依赖 | maven |
ms | 2.0.0 | 间接依赖 | npm |
binary-extensions | 2.2.0 | 间接依赖 | npm |
is-number | 7.0.0 | 间接依赖 | npm |
rimraf | 3.0.2 | 间接依赖 | npm |
mkdirp | 0.5.6 | 间接依赖 | npm |
androidx.wear:wear | 1.1.0 | 直接依赖 | maven |
@esbuild/linux-s390x | 0.18.16 | 间接依赖 | npm |
range-parser | 1.2.1 | 间接依赖 | npm |
androidx.activity:activity-ktx | 1.7.2 | 直接依赖 | maven |
androidx.lifecycle:lifecycle-common-java8 | 2.5.1 | 直接依赖 | maven |
raw-body | 2.5.1 | 间接依赖 | npm |
balanced-match | 1.0.2 | 间接依赖 | npm |
code-red | 1.0.3 | 间接依赖 | npm |
androidx.concurrent:concurrent-futures-ktx | 1.1.0 | 直接依赖 | maven |
@ampproject/remapping | 2.2.1 | 间接依赖 | npm |
@nodelib/fs.scandir | 2.1.5 | 间接依赖 | npm |
@rollup/pluginutils | 5.0.2 | 间接依赖 | npm |
@esbuild/android-arm64 | 0.18.16 | 间接依赖 | npm |
puppeteer | 18.2.1 | 间接依赖 | npm |
@nodelib/fs.walk | 1.2.8 | 间接依赖 | npm |
comlink | 4.4.1 | 直接依赖 | npm |
@types/body-parser | 1.19.2 | 间接依赖 | npm |
https-proxy-agent | 5.0.1 | 间接依赖 | npm |
unbzip2-stream | 1.4.3 | 间接依赖 | npm |
deepmerge | 4.3.1 | 间接依赖 | npm |
@esbuild/android-x64 | 0.18.16 | 间接依赖 | npm |
@kurkle/color | 0.3.2 | 间接依赖 | npm |
vitefu | 0.2.4 | 间接依赖 | npm |