基础信息
项目名称：dnote/dnote
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1717203577915179008/1717203577973899264
此报告由Murphysec提供
漏洞列表
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| golang.org/x/net | v0.7.0 | 0.17.0 | 间接依赖 | 可选修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| MIT | 32 | 低 |
| Apache-2.0 | 4 | 低 |
| BSD-3-Clause | 18 | 低 |
| ISC | 2 | 低 |
| BSD-2-Clause | 2 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| is-extglob | 2.1.1 | 间接依赖 | npm |
| sass | 1.50.1 | 直接依赖 | npm |
| binary-extensions | 2.2.0 | 间接依赖 | npm |
| github.com/inconshreveable/mousetrap | v1.1.0 | 间接依赖 | go |
| github.com/PuerkitoBio/goquery | v1.8.1 | 间接依赖 | go |
| github.com/jinzhu/gorm | v1.9.16 | 直接依赖 | go |
| github.com/mattn/go-colorable | v0.1.13 | 间接依赖 | go |
| fill-range | 7.0.1 | 间接依赖 | npm |
| github.com/rubenv/sql-migrate | v1.3.1 | 直接依赖 | go |
| golang.org/x/term | v0.5.0 | 间接依赖 | go |
| golang.org/x/time | v0.3.0 | 直接依赖 | go |
| is-glob | 4.0.3 | 间接依赖 | npm |
| github.com/radovskyb/watcher | v1.0.7 | 直接依赖 | go |
| immutable | 4.0.0 | 间接依赖 | npm |
| glob-parent | 5.1.2 | 间接依赖 | npm |
| github.com/joho/godotenv | v1.5.1 | 直接依赖 | go |
| github.com/pkg/errors | v0.9.1 | 直接依赖 | go |
| github.com/google/go-github | v17.0.0+incompatible | 直接依赖 | go |
| github.com/gorilla/schema | v1.2.0 | 直接依赖 | go |
| github.com/spf13/pflag | v1.0.5 | 间接依赖 | go |
| github.com/andybalholm/cascadia | v1.3.1 | 间接依赖 | go |
| golang.org/x/net | v0.7.0 | 间接依赖 | go |
| github.com/mattn/go-isatty | v0.0.17 | 间接依赖 | go |
| gopkg.in/alexcesaro/quotedprintable.v3 | v3.0.0-20150716171945-2caba252f4dc | 间接依赖 | go |
| github.com/lib/pq | v1.10.7 | 直接依赖 | go |
| github.com/dnote/color | v1.7.0 | 直接依赖 | go |
| github.com/google/go-querystring | v1.1.0 | 间接依赖 | go |
| gopkg.in/gomail.v2 | v2.0.0-20160411212932-81ebce5c23df | 直接依赖 | go |
| github.com/robfig/cron | v1.2.0 | 直接依赖 | go |
| readdirp | 3.6.0 | 间接依赖 | npm |
| github.com/jinzhu/inflection | v1.0.0 | 间接依赖 | go |
| golang.org/x/crypto | v0.6.0 | 直接依赖 | go |
| is-binary-path | 2.1.0 | 间接依赖 | npm |
| github.com/go-gorp/gorp/v3 | v3.1.0 | 间接依赖 | go |
| github.com/mattn/go-sqlite3 | v1.14.16 | 直接依赖 | go |
| github.com/spf13/cobra | v1.6.1 | 直接依赖 | go |
| source-map-js | 1.0.2 | 间接依赖 | npm |
| anymatch | 3.1.2 | 间接依赖 | npm |
| github.com/gorilla/css | v1.0.0 | 间接依赖 | go |
| github.com/gorilla/securecookie | v1.1.1 | 间接依赖 | go |
| github.com/aymerick/douceur | v0.2.0 | 直接依赖 | go |
| github.com/google/go-cmp | v0.5.9 | 直接依赖 | go |
| normalize-path | 3.0.0 | 间接依赖 | npm |
| golang.org/x/sys | v0.5.0 | 间接依赖 | go |
| github.com/dnote/actions | v0.2.0 | 直接依赖 | go |
| braces | 3.0.2 | 间接依赖 | npm |
| is-number | 7.0.0 | 间接依赖 | npm |
| to-regex-range | 5.0.1 | 间接依赖 | npm |
| picomatch | 2.3.1 | 间接依赖 | npm |
| github.com/gorilla/csrf | v1.7.1 | 直接依赖 | go |
| github.com/google/uuid | v1.3.0 | 直接依赖 | go |
| github.com/gorilla/mux | v1.8.0 | 直接依赖 | go |
| fsevents | 2.3.2 | 间接依赖 | npm |
| gopkg.in/yaml.v2 | v2.4.0 | 直接依赖 | go |
| github.com/sergi/go-diff | v1.3.1 | 直接依赖 | go |
| chokidar | 3.5.3 | 间接依赖 | npm |