基础信息
项目名称：ginuerzh/gost
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1718117920638894080/1718117920689225728
此报告由Murphysec提供
漏洞列表
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| golang.org/x/net | v0.9.0 | 0.17.0 | 直接依赖 | 可选修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| MIT | 22 | 低 |
| Apache-2.0 | 8 | 低 |
| BSD-3-Clause | 19 | 低 |
| BSD-2-Clause | 3 | 低 |
| CC0-1.0 | 1 | 低 |
| GPL-3.0 | 1 | 中 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| github.com/quic-go/quic-go | v0.32.0 | 直接依赖 | go |
| github.com/onsi/ginkgo/v2 | v2.8.0 | 间接依赖 | go |
| github.com/ryanuber/go-glob | v1.0.0 | 直接依赖 | go |
| github.com/asaskevich/govalidator | v0.0.0-20210307081110-f21760c49a8d | 直接依赖 | go |
| github.com/go-gost/relay | v0.1.1-0.20211123134818-8ef7fd81ffd7 | 直接依赖 | go |
| github.com/golang/mock | v1.6.0 | 间接依赖 | go |
| github.com/quic-go/qtls-go1-19 | v0.2.0 | 间接依赖 | go |
| github.com/klauspost/cpuid/v2 | v2.0.9 | 间接依赖 | go |
| github.com/LiamHaworth/go-tproxy | v0.0.0-20190726054950-ef7efd7f24ed | 直接依赖 | go |
| github.com/go-log/log | v0.2.0 | 直接依赖 | go |
| gitlab.com/yawning/edwards25519-extra.git | v0.0.0-20211229043746-2f91fcc9fbdb | 间接依赖 | go |
| github.com/riobard/go-bloom | v0.0.0-20200614022211-cdc8013cb5b3 | 间接依赖 | go |
| github.com/klauspost/compress | v1.13.6 | 直接依赖 | go |
| github.com/gorilla/websocket | v1.4.2 | 直接依赖 | go |
| golang.org/x/tools | v0.6.0 | 间接依赖 | go |
| github.com/go-task/slim-sprig | v0.0.0-20210107165309-348f09dbbbc0 | 间接依赖 | go |
| github.com/quic-go/qtls-go1-20 | v0.1.0 | 间接依赖 | go |
| github.com/mdlayher/socket | v0.4.1 | 间接依赖 | go |
| github.com/xtaci/smux | v1.5.16 | 直接依赖 | go |
| github.com/xtaci/kcp-go/v5 | v5.6.1 | 直接依赖 | go |
| git.torproject.org/pluggable-transports/goptlib.git | v1.2.0 | 直接依赖 | go |
| github.com/google/pprof | v0.0.0-20230131232505-5a9e8f65f08f | 间接依赖 | go |
| golang.org/x/sync | v0.1.0 | 间接依赖 | go |
| golang.org/x/exp | v0.0.0-20230203172020-98cc5a0785f9 | 间接依赖 | go |
| golang.org/x/text | v0.9.0 | 间接依赖 | go |
| filippo.io/edwards25519 | v1.0.0-rc.1.0.20210721174708-390f27c3be20 | 间接依赖 | go |
| golang.org/x/mod | v0.8.0 | 间接依赖 | go |
| github.com/go-gost/gosocks4 | v0.0.1 | 直接依赖 | go |
| github.com/templexxx/xorsimd | v0.4.1 | 间接依赖 | go |
| github.com/mdlayher/vsock | v1.2.1 | 直接依赖 | go |
| github.com/go-gost/tls-dissector | v0.0.2-0.20220408131628-aac992c27451 | 直接依赖 | go |
| github.com/xtaci/lossyconn | v0.0.0-20200209145036-adba10fffc37 | 间接依赖 | go |
| github.com/shadowsocks/go-shadowsocks2 | v0.1.5 | 直接依赖 | go |
| github.com/xtaci/tcpraw | v1.2.25 | 直接依赖 | go |
| golang.org/x/crypto | v0.5.0 | 直接依赖 | go |
| github.com/templexxx/cpu | v0.0.7 | 间接依赖 | go |
| golang.org/x/net | v0.9.0 | 直接依赖 | go |
| github.com/pkg/errors | v0.9.1 | 间接依赖 | go |
| github.com/dchest/siphash | v1.2.2 | 间接依赖 | go |
| github.com/gobwas/glob | v0.2.3 | 直接依赖 | go |
| github.com/shadowsocks/shadowsocks-go | v0.0.0-20200409064450-3e585ff90601 | 直接依赖 | go |
| github.com/miekg/dns | v1.1.47 | 直接依赖 | go |
| github.com/go-gost/gosocks5 | v0.3.0 | 直接依赖 | go |
| github.com/google/gopacket | v1.1.19 | 间接依赖 | go |
| gitlab.com/yawning/obfs4.git | v0.0.0-20220204003609-77af0cba934d | 直接依赖 | go |
| github.com/quic-go/qtls-go1-18 | v0.2.0 | 间接依赖 | go |
| github.com/tjfoc/gmsm | v1.4.1 | 间接依赖 | go |
| github.com/klauspost/reedsolomon | v1.9.15 | 间接依赖 | go |
| github.com/songgao/water | v0.0.0-20200317203138-2b4b6d7c09d8 | 直接依赖 | go |
| github.com/aead/chacha20 | v0.0.0-20180709150244-8b13a72661da | 间接依赖 | go |
| golang.org/x/sys | v0.7.0 | 间接依赖 | go |
| github.com/coreos/go-iptables | v0.6.0 | 间接依赖 | go |