codenotary/immudb 软件分析报告

基础信息

项目名称:codenotary/immudb

项目徽章:

Security Status

仓库地址:https://github.com/pterodactyl/panel

检测报告地址:https://www.murphysec.com/console/report/1716776432368926720/1716776432725442560

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
urllib3 安全漏洞 未授权敏感信息泄露 MPS-46py-nxai CVE-2023-45803 中危
Certifi 数据伪造问题漏洞 对数据真实性的验证不充分 MPS-ck78-r6zg CVE-2023-37920 严重
urllib3 HTTP重定向信息泄露漏洞 未授权敏感信息泄露 MPS-s0oy-afbw CVE-2023-43804 高危

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
urllib3 1.26.14 2.0.6 间接依赖 建议修复
certifi 2022.12.07 2023.7.22 间接依赖 建议修复

许可证风险

许可证类型 相关组件 许可证风险
Apache-2.0 48
MIT 76
BSD-3-Clause 42
BSD-2-Clause 6
ISC 2
MPL-2.0 1

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
github.com/spf13/cobra v1.2.1 间接依赖 go
github.com/fatih/structs v1.1.0 间接依赖 go
github.com/mattn/go-isatty v0.0.14 间接依赖 go
github.com/gizak/termui/v3 v3.1.0 直接依赖 go
github.com/klauspost/compress v1.15.0 间接依赖 go
github.com/influxdata/influxdb-client-go/v2 v2.12.3 直接依赖 go
github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 直接依赖 go
google.golang.org/genproto v0.0.0-20230803162519-f966b187b2e5 间接依赖 go
github.com/pseudomuto/protokit v0.2.1 间接依赖 go
github.com/pborman/uuid v1.2.0 间接依赖 go
gopkg.in/ini.v1 v1.67.0 间接依赖 go
google.golang.org/appengine v1.6.7 间接依赖 go
gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 间接依赖 go
golang.org/x/sys v0.13.0 直接依赖 go
github.com/mattn/goveralls v0.0.11 直接依赖 go
github.com/huandu/xstrings v1.3.2 间接依赖 go
github.com/google/uuid v1.3.0 直接依赖 go
github.com/Masterminds/sprig v2.22.0+incompatible 间接依赖 go
golang.org/x/crypto v0.0.0-20220525230936-793ad666bf5e 间接依赖 go
github.com/russross/blackfriday/v2 v2.1.0 间接依赖 go
github.com/codenotary/immudb v1.4.1 直接依赖 go
github.com/aead/poly1305 v0.0.0-20180717145839-3fee0db0b635 间接依赖 go
google.golang.org/grpc v1.53.0 间接依赖 go
github.com/codenotary/immudb v1.3.3-0.20220901104917-81d4fb37b70e 直接依赖 go
golang.org/x/text v0.13.0 间接依赖 go
github.com/magiconair/properties v1.8.7 间接依赖 go
github.com/o1egl/paseto v1.0.0 直接依赖 go
google.golang.org/protobuf v1.31.0 直接依赖 go
github.com/golang/protobuf v1.5.2 间接依赖 go
github.com/pelletier/go-toml v1.9.5 间接依赖 go
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb 间接依赖 go
github.com/inconshreveable/mousetrap v1.0.1 间接依赖 go
github.com/spf13/afero v1.9.3 间接依赖 go
github.com/xeipuuv/gojsonschema v1.2.0 间接依赖 go
github.com/grpc-ecosystem/grpc-gateway/v2 v2.17.0 直接依赖 go
golang.org/x/text v0.11.0 间接依赖 go
github.com/ghodss/yaml v1.0.0 间接依赖 go
github.com/fsnotify/fsnotify v1.5.4 间接依赖 go
golang.org/x/mod v0.9.0 间接依赖 go
github.com/pseudomuto/protoc-gen-doc v1.4.1 直接依赖 go
github.com/gogo/protobuf v1.3.2 直接依赖 go
golang.org/x/tools/cmd/cover v0.1.0-deprecated 直接依赖 go
golang.org/x/sys v0.10.0 间接依赖 go
github.com/valyala/fasthttp v1.34.0 间接依赖 go
github.com/imkira/go-interpol v1.1.0 间接依赖 go
six 1.16.0 间接依赖 pip
google.golang.org/genproto/googleapis/api v0.0.0-20230822172742-b8732ec3820d 直接依赖 go
google.golang.org/genproto/googleapis/rpc v0.0.0-20230530153820-e85fd2cbaebc 间接依赖 go
github.com/antihax/optional v1.0.0 直接依赖 go
google.golang.org/grpc v1.57.0 直接依赖 go
google.golang.org/protobuf v1.28.1 间接依赖 go
github.com/imdario/mergo v0.3.13 间接依赖 go
github.com/grpc-ecosystem/grpc-gateway v1.16.0 直接依赖 go
github.com/rogpeppe/go-internal v1.9.0 直接依赖 go
github.com/golang/protobuf v1.5.3 直接依赖 go
github.com/subosito/gotenv v1.4.2 间接依赖 go
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 间接依赖 go
github.com/stretchr/testify v1.8.0 直接依赖 go
github.com/jaswdr/faker v1.16.0 直接依赖 go
github.com/pelletier/go-toml/v2 v2.0.1 间接依赖 go
github.com/Masterminds/semver v1.5.0 间接依赖 go
github.com/google/uuid v1.3.1 直接依赖 go
github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 直接依赖 go
gopkg.in/yaml.v3 v3.0.1 间接依赖 go
google.golang.org/genproto/googleapis/rpc v0.0.0-20230822172742-b8732ec3820d 间接依赖 go
google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0 直接依赖 go
github.com/sanity-io/litter v1.5.5 间接依赖 go
github.com/gobwas/glob v0.2.3 间接依赖 go
google.golang.org/genproto v0.0.0-20230110181048-76db0878b65f 间接依赖 go
github.com/spf13/jwalterweatherman v1.1.0 间接依赖 go
github.com/rs/xid v1.3.0 间接依赖 go
github.com/gavv/httpexpect/v2 v2.15.0 直接依赖 go
github.com/rakyll/statik v0.1.7 间接依赖 go
github.com/spf13/cast v1.5.0 间接依赖 go
github.com/peterh/liner v1.2.1 直接依赖 go
github.com/rogpeppe/go-internal v1.8.0 间接依赖 go
golang.org/x/tools v0.7.0 间接依赖 go
github.com/davecgh/go-spew v1.1.1 间接依赖 go
github.com/magiconair/properties v1.8.6 间接依赖 go
github.com/nsf/termbox-go v1.1.1 间接依赖 go
certifi 2022.12.07 间接依赖 pip
github.com/prometheus/client_golang v1.12.2 直接依赖 go
github.com/ajg/form v1.5.1 间接依赖 go
github.com/aead/chacha20poly1305 v0.0.0-20201124145622-1a5aba2a8b29 间接依赖 go
github.com/mwitkow/go-proto-validators v0.0.0-20180403085117-0950a7990007 间接依赖 go
github.com/cespare/xxhash v1.1.0 间接依赖 go
gopkg.in/ini.v1 v1.66.6 间接依赖 go
golang.org/x/crypto v0.11.0 间接依赖 go
github.com/jackc/pgio v1.0.0 间接依赖 go
github.com/mattn/go-colorable v0.1.12 间接依赖 go
github.com/google/go-querystring v1.1.0 间接依赖 go
github.com/pmezard/go-difflib v1.0.0 间接依赖 go
github.com/olekukonko/tablewriter v0.0.5 直接依赖 go
github.com/influxdata/line-protocol v0.0.0-20200327222509-2487e7298839 间接依赖 go
github.com/envoyproxy/protoc-gen-validate v0.10.1 间接依赖 go
typing-extensions 4.5.0 间接依赖 pip
github.com/yalp/jsonpath v0.0.0-20180802001716-5cc68e5049a0 间接依赖 go
github.com/spf13/cobra v1.6.1 直接依赖 go
google.golang.org/genproto/googleapis/api v0.0.0-20230530153820-e85fd2cbaebc 间接依赖 go
github.com/prometheus/client_model v0.2.0 直接依赖 go
github.com/jackc/pgpassfile v1.0.0 间接依赖 go
urllib3 1.26.14 间接依赖 pip
github.com/jackc/pgproto3/v2 v2.3.0 间接依赖 go
golang.org/x/term v0.10.0 间接依赖 go
github.com/hashicorp/hcl v1.0.0 间接依赖 go
github.com/mattn/go-isatty v0.0.17 间接依赖 go
github.com/cespare/xxhash/v2 v2.2.0 间接依赖 go
google.golang.org/grpc v1.55.0 间接依赖 go
github.com/spf13/viper v1.12.0 间接依赖 go
github.com/pkg/errors v0.9.1 间接依赖 go
github.com/mitchellh/copystructure v1.2.0 间接依赖 go
github.com/rs/xid v1.5.0 直接依赖 go
google.golang.org/protobuf v1.30.0 间接依赖 go
reactivex 4.0.4 间接依赖 pip
google.golang.org/genproto v0.0.0-20230526203410-71b5a4ffd15e 间接依赖 go
golang.org/x/net v0.17.0 直接依赖 go
golang.org/x/crypto v0.14.0 直接依赖 go
github.com/deepmap/oapi-codegen v1.12.4 间接依赖 go
golang.org/x/oauth2 v0.5.0 直接依赖 go
github.com/yudai/gojsondiff v1.0.0 间接依赖 go
golang.org/x/net v0.7.0 间接依赖 go
github.com/rivo/uniseg v0.2.0 间接依赖 go
python-dateutil 2.8.2 间接依赖 pip
github.com/andybalholm/brotli v1.0.4 间接依赖 go
github.com/dgraph-io/ristretto v0.0.2 间接依赖 go
github.com/subosito/gotenv v1.3.0 间接依赖 go
github.com/spf13/viper v1.15.0 直接依赖 go
github.com/mitchellh/mapstructure v1.5.0 间接依赖 go
github.com/fsnotify/fsnotify v1.6.0 间接依赖 go
github.com/golang/glog v1.1.0 间接依赖 go
github.com/prometheus/procfs v0.7.3 直接依赖 go
github.com/sergi/go-diff v1.0.0 间接依赖 go
github.com/inconshreveable/mousetrap v1.0.0 间接依赖 go
github.com/apapsch/go-jsonmerge/v2 v2.0.0 间接依赖 go
github.com/aead/chacha20 v0.0.0-20180709150244-8b13a72661da 间接依赖 go
github.com/valyala/bytebufferpool v1.0.0 间接依赖 go
github.com/gorilla/websocket v1.4.2 间接依赖 go
github.com/fatih/color v1.13.0 直接依赖 go
influxdb-client 1.36.0 间接依赖 pip
github.com/codenotary/immudb v1.5.0 直接依赖 go
golang.org/x/sys v0.5.0 间接依赖 go
golang.org/x/term v0.13.0 间接依赖 go
github.com/cpuguy83/go-md2man/v2 v2.0.2 间接依赖 go
github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b 间接依赖 go
github.com/jackc/pgconn v1.12.1 间接依赖 go
github.com/deepmap/oapi-codegen v1.8.2 间接依赖 go
github.com/schollz/progressbar/v2 v2.15.0 直接依赖 go
gopkg.in/yaml.v2 v2.4.0 间接依赖 go
github.com/matttproud/golang_protobuf_extensions v1.0.1 间接依赖 go
github.com/mitchellh/reflectwalk v1.0.2 间接依赖 go
github.com/yudai/golcs v0.0.0-20170316035057-ecda9a501e82 间接依赖 go
moul.io/http2curl/v2 v2.3.0 间接依赖 go
github.com/takama/daemon v0.12.0 直接依赖 go
github.com/jackc/pgx/v4 v4.16.1 直接依赖 go
github.com/beorn7/perks v1.0.1 间接依赖 go
golang.org/x/net v0.12.0 间接依赖 go
github.com/prometheus/common v0.32.1 直接依赖 go
github.com/stretchr/testify v1.8.2 直接依赖 go
github.com/mattn/go-runewidth v0.0.13 间接依赖 go
github.com/spf13/afero v1.8.2 间接依赖 go
immudb 间接依赖 pip
github.com/lib/pq v1.10.9 直接依赖 go
github.com/pelletier/go-toml/v2 v2.0.6 间接依赖 go
github.com/mitchellh/go-wordwrap v1.0.1 间接依赖 go
github.com/ory/go-acc v0.2.8 直接依赖 go
golang.org/x/text v0.7.0 间接依赖 go
github.com/jackc/chunkreader/v2 v2.0.1 间接依赖 go
github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db 间接依赖 go
pkg-resources 0.0.0 间接依赖 pip
github.com/spf13/pflag v1.0.5 直接依赖 go
github.com/mattn/go-colorable v0.1.13 间接依赖 go
github.com/Masterminds/goutils v1.1.1 间接依赖 go
github.com/jackc/pgtype v1.11.0 间接依赖 go
github.com/ory/viper v1.7.5 间接依赖 go
golang.org/x/term v0.5.0 间接依赖 go
(0)
上一篇 2023年10月24日
下一篇 2023年10月24日

相关推荐

  • jiisd/YHPDFImageLoader 软件分析报告

    基础信息 项目名称:jiisd/YHPDFImageLoader 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721309186628603904/1724221493850103808 此报告由Murphys…

    软件分析 2023年11月14日
    0
  • yswenli/SAEA 软件分析报告

    基础信息 项目名称:yswenli/SAEA 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721673814608515072/1721673814658846720 此报告由Murphysec提供 漏洞列表 …

    软件分析 2023年11月7日
    0
  • fazibear/tensorflow.cr 软件分析报告

    基础信息 项目名称:fazibear/tensorflow.cr 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721189141965701120/1728046868813795328 此报告由Murphys…

    软件分析 2023年11月24日
    0
  • k06a/boolinq 软件分析报告

    基础信息 项目名称:k06a/boolinq 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1719345920637452288/1719345920926859264 此报告由Murphysec提供 漏洞列表 …

    软件分析 2023年10月31日
    0
  • inventree/InvenTree 软件分析报告

    基础信息 项目名称:inventree/InvenTree 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1718853686783688704/1718853687186341888 此报告由Murphysec提…

    软件分析 2023年10月30日
    0