基础信息
项目名称：anchore/grype
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1720560084001931264/1720560084043874304
此报告由Murphysec提供
漏洞列表
暂无
缺陷组件
暂无
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| BSD-3-Clause | 49 | 低 |
| BSD-2-Clause | 6 | 低 |
| MIT | 94 | 低 |
| MPL-2.0 | 8 | 低 |
| Apache-2.0 | 85 | 低 |
| Unlicense | 2 | 低 |
| ISC | 3 | 低 |
| GPL-2.0 | 1 | 中 |
| CC-BY-4.0 | 1 | 低 |
| ICU | 1 | 低 |
| CC0-1.0 | 1 | 低 |
| CC-BY-SA-4.0 | 1 | 中 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| github.com/dsnet/compress | v0.0.2-0.20210315054119-f66993602bf5 | 间接依赖 | go |
| github.com/nwaples/rardecode | v1.1.0 | 间接依赖 | go |
| gorm.io/gorm | v1.25.5 | 直接依赖 | go |
| github.com/hashicorp/go-safetemp | v1.0.0 | 间接依赖 | go |
| github.com/tidwall/pretty | v1.2.1 | 间接依赖 | go |
| github.com/Masterminds/semver | v1.5.0 | 间接依赖 | go |
| github.com/anchore/go-testutils | v0.0.0-20200925183923-d5f45b0d3c04 | 直接依赖 | go |
| github.com/wagoodman/go-partybus | v0.0.0-20230516145632-8ccac152c651 | 直接依赖 | go |
| org.joda:joda-convert | 1.2 | 直接依赖 | maven |
| github.com/sergi/go-diff | v1.3.1 | 直接依赖 | go |
| github.com/AdamKorcz/go-118-fuzz-build | v0.0.0-20230306123547-8075edf89bb0 | 间接依赖 | go |
| github.com/deitch/magic | v0.0.0-20230404182410-1ff89d7342da | 间接依赖 | go |
| google.golang.org/grpc | v1.58.3 | 间接依赖 | go |
| github.com/anchore/stereoscope | v0.0.0-20231027135531-5909e353ee88 | 直接依赖 | go |
| github.com/vifraa/gopom | v1.0.0 | 间接依赖 | go |
| github.com/docker/cli | v24.0.0+incompatible | 间接依赖 | go |
| github.com/jinzhu/now | v1.1.5 | 间接依赖 | go |
| github.com/spf13/viper | v1.16.0 | 间接依赖 | go |
| go.mozilla.org/pkcs7 | v0.0.0-20210826202110-33d05740a352 | 间接依赖 | go |
| github.com/containerd/ttrpc | v1.2.2 | 间接依赖 | go |
| golang.org/x/xerrors | v0.0.0-20220907171357-04be3eba64a2 | 间接依赖 | go |
| github.com/remyoudompheng/bigfft | v0.0.0-20230129092748-24d4a6f8daec | 间接依赖 | go |
| golang.org/x/crypto | v0.14.0 | 间接依赖 | go |
| github.com/vbatts/tar-split | v0.11.3 | 间接依赖 | go |
| github.com/anchore/clio | v0.0.0-20231016125544-c98a83e1c7fc | 直接依赖 | go |
| github.com/gogo/protobuf | v1.3.2 | 间接依赖 | go |
| github.com/jbenet/go-context | v0.0.0-20150711004518-d14ea06fba99 | 间接依赖 | go |
| github.com/olekukonko/tablewriter | v0.0.5 | 直接依赖 | go |
| github.com/logrusorgru/aurora | v0.0.0-20200102142835-e9ef32dff381 | 间接依赖 | go |
| github.com/jinzhu/copier | v0.4.0 | 间接依赖 | go |
| github.com/aquasecurity/go-pep440-version | v0.0.0-20210121094942-22b2f8951d46 | 直接依赖 | go |
| github.com/kastenhq/goversion | v0.0.0-20230811215019-93b2f8823953 | 间接依赖 | go |
| github.com/DataDog/zstd | v1.4.5 | 间接依赖 | go |
| github.com/golang/snappy | v0.0.4 | 间接依赖 | go |
| github.com/iancoleman/strcase | v0.3.0 | 间接依赖 | go |
| github.com/emirpasic/gods | v1.18.1 | 间接依赖 | go |
| go.opentelemetry.io/otel | v1.14.0 | 间接依赖 | go |
| cloud.google.com/go | v0.110.4 | 间接依赖 | go |
| github.com/pelletier/go-toml | v1.9.5 | 间接依赖 | go |
| github.com/pkg/profile | v1.7.0 | 间接依赖 | go |
| github.com/anchore/go-struct-converter | v0.0.0-20221118182256-c68fdcfa2092 | 间接依赖 | go |
| github.com/charmbracelet/bubbles | v0.16.1 | 间接依赖 | go |
| golang.org/x/exp | v0.0.0-20230905200255-921286631fa9 | 直接依赖 | go |
| github.com/google/uuid | v1.3.0 | 直接依赖 | go |
| github.com/owenrumney/go-sarif | v1.1.2-0.20231003122901-1000f5e05554 | 直接依赖 | go |
| github.com/imdario/mergo | v0.3.15 | 间接依赖 | go |
| github.com/moby/locker | v1.0.1 | 间接依赖 | go |
| github.com/wagoodman/go-progress | v0.0.0-20230925121702-07e42b3cdba0 | 直接依赖 | go |
| github.com/rogpeppe/go-internal | v1.11.0 | 间接依赖 | go |
| github.com/glebarez/sqlite | v1.10.0 | 直接依赖 | go |
| github.com/bmatcuk/doublestar/v4 | v4.6.1 | 间接依赖 | go |
| google.golang.org/api | v0.128.0 | 间接依赖 | go |
| github.com/opencontainers/image-spec | v1.1.0-rc3 | 间接依赖 | go |
| github.com/xi2/xz | v0.0.0-20171230120015-48954b6210f8 | 间接依赖 | go |
| github.com/x-cray/logrus-prefixed-formatter | v0.5.2 | 直接依赖 | go |
| github.com/microsoft/go-rustaudit | v0.0.0-20220730194248-4b17361d90a5 | 间接依赖 | go |
| github.com/spdx/tools-golang | v0.5.3 | 间接依赖 | go |
| github.com/moby/sys/sequential | v0.5.0 | 间接依赖 | go |
| gopkg.in/warnings.v0 | v0.1.2 | 间接依赖 | go |
| github.com/CycloneDX/cyclonedx-go | v0.7.2 | 直接依赖 | go |
| github.com/sylabs/sif/v2 | v2.11.5 | 间接依赖 | go |
| github.com/anchore/go-macholibre | v0.0.0-20220308212642-53e6d0aaf6fb | 间接依赖 | go |
| golang.org/x/sync | v0.3.0 | 间接依赖 | go |
| github.com/golang/groupcache | v0.0.0-20210331224755-41bb18bfe9da | 间接依赖 | go |
| github.com/skeema/knownhosts | v1.2.0 | 间接依赖 | go |
| joda-time:joda-time | 2.9.2 | 直接依赖 | maven |
| golang.org/x/term | v0.13.0 | 间接依赖 | go |
| github.com/shopspring/decimal | v1.2.0 | 间接依赖 | go |
| github.com/saferwall/pe | v1.4.7 | 间接依赖 | go |
| github.com/spf13/afero | v1.10.0 | 直接依赖 | go |
| github.com/containerd/cgroups | v1.1.0 | 间接依赖 | go |
| github.com/ProtonMail/go-crypto | v0.0.0-20230828082145-3c4c8a2d2371 | 间接依赖 | go |
| github.com/kr/pretty | v0.3.1 | 间接依赖 | go |
| golang.org/x/text | v0.13.0 | 间接依赖 | go |
| github.com/docker/go-units | v0.5.0 | 间接依赖 | go |
| github.com/gookit/color | v1.5.4 | 直接依赖 | go |
| dario.cat/mergo | v1.0.0 | 间接依赖 | go |
| github.com/googleapis/gax-go/v2 | v2.11.0 | 间接依赖 | go |
| github.com/apparentlymart/go-textseg/v15 | v15.0.0 | 间接依赖 | go |
| github.com/lucasb-eyer/go-colorful | v1.2.0 | 间接依赖 | go |
| github.com/googleapis/enterprise-certificate-proxy | v0.2.4 | 间接依赖 | go |
| google.golang.org/protobuf | v1.31.0 | 间接依赖 | go |
| github.com/jmespath/go-jmespath | v0.4.0 | 间接依赖 | go |
| github.com/scylladb/go-set | v1.0.3-0.20200225121959-cc7b2070d91e | 直接依赖 | go |
| github.com/anchore/bubbly | v0.0.0-20230801194016-acdb4981b461 | 直接依赖 | go |
| github.com/edsrzf/mmap-go | v1.1.0 | 间接依赖 | go |
| github.com/fsnotify/fsnotify | v1.6.0 | 间接依赖 | go |
| github.com/anchore/go-logger | v0.0.0-20230725134548-c21dafa1ec5a | 直接依赖 | go |
| github.com/hashicorp/go-multierror | v1.1.1 | 直接依赖 | go |
| github.com/aws/aws-sdk-go | v1.44.288 | 间接依赖 | go |
| github.com/subosito/gotenv | v1.4.2 | 间接依赖 | go |
| github.com/google/licensecheck | v0.3.1 | 间接依赖 | go |
| go.opencensus.io | v0.24.0 | 间接依赖 | go |
| github.com/dustin/go-humanize | v1.0.1 | 直接依赖 | go |
| github.com/cloudflare/circl | v1.3.3 | 间接依赖 | go |
| github.com/docker/docker | v24.0.7+incompatible | 直接依赖 | go |
| github.com/hashicorp/errwrap | v1.1.0 | 间接依赖 | go |
| github.com/google/s2a-go | v0.1.4 | 间接依赖 | go |
| github.com/knqyf263/go-rpmdb | v0.0.0-20230301153543-ba94b245509b | 间接依赖 | go |
| github.com/google/pprof | v0.0.0-20221118152302-e6195bd50e26 | 间接依赖 | go |
| github.com/andybalholm/brotli | v1.0.4 | 间接依赖 | go |
| github.com/bgentry/go-netrc | v0.0.0-20140422174119-9fd32a8b3d3d | 间接依赖 | go |
| github.com/acobaugh/osrelease | v0.1.0 | 间接依赖 | go |
| github.com/Microsoft/go-winio | v0.6.1 | 间接依赖 | go |
| tabulate | 0.9.0 | 间接依赖 | pip |
| github.com/go-git/gcfg | v1.5.1-0.20230307220236-3a3c6141e376 | 间接依赖 | go |
| github.com/davecgh/go-spew | v1.1.1 | 间接依赖 | go |
| github.com/tidwall/match | v1.1.1 | 间接依赖 | go |
| github.com/go-logr/logr | v1.2.4 | 间接依赖 | go |
| google.golang.org/genproto/googleapis/api | v0.0.0-20230711160842-782d3b101e98 | 间接依赖 | go |
| modernc.org/libc | v1.24.1 | 间接依赖 | go |
| github.com/github/go-spdx/v2 | v2.2.0 | 间接依赖 | go |
| github.com/spf13/pflag | v1.0.5 | 间接依赖 | go |
| github.com/mattn/go-colorable | v0.1.13 | 间接依赖 | go |
| github.com/anchore/go-version | v1.2.2-0.20210903204242-51efa5b487c4 | 直接依赖 | go |
| github.com/adrg/xdg | v0.4.0 | 直接依赖 | go |
| github.com/AdaLogics/go-fuzz-headers | v0.0.0-20230811130428-ced1acdcaa24 | 间接依赖 | go |
| github.com/klauspost/pgzip | v1.2.5 | 间接依赖 | go |
| github.com/containerd/log | v0.1.0 | 间接依赖 | go |
| cloud.google.com/go/compute | v1.21.0 | 间接依赖 | go |
| github.com/containerd/continuity | v0.4.2 | 间接依赖 | go |
| go.uber.org/goleak | v1.2.0 | 间接依赖 | go |
| github.com/stretchr/testify | v1.8.4 | 直接依赖 | go |
| github.com/charmbracelet/bubbletea | v0.24.2 | 直接依赖 | go |
| github.com/anchore/syft | v0.94.1-0.20231030161204-1aaa6440073d | 直接依赖 | go |
| github.com/sassoftware/go-rpmutils | v0.2.0 | 间接依赖 | go |
| github.com/hashicorp/hcl | v1.0.0 | 间接依赖 | go |
| github.com/aquasecurity/go-version | v0.0.0-20210121072130-637058cfe492 | 间接依赖 | go |
| golang.org/x/net | v0.17.0 | 间接依赖 | go |
| github.com/spf13/cast | v1.5.1 | 间接依赖 | go |
| github.com/acarl005/stripansi | v0.0.0-20180116102854-5a71ef0e047d | 直接依赖 | go |
| github.com/containerd/stargz-snapshotter/estargz | v0.14.3 | 间接依赖 | go |
| github.com/docker/go-events | v0.0.0-20190806004212-e31b211e4f1c | 间接依赖 | go |
| github.com/go-restruct/restruct | v1.2.0-alpha | 间接依赖 | go |
| github.com/docker/go-connections | v0.4.0 | 间接依赖 | go |
| github.com/pmezard/go-difflib | v1.0.0 | 间接依赖 | go |
| github.com/go-test/deep | v1.1.0 | 直接依赖 | go |
| github.com/Masterminds/semver/v3 | v3.2.1 | 间接依赖 | go |
| github.com/gabriel-vasile/mimetype | v1.4.3 | 直接依赖 | go |
| github.com/mitchellh/go-testing-interface | v1.14.1 | 间接依赖 | go |
| github.com/becheran/wildmatch-go | v1.0.0 | 间接依赖 | go |
| github.com/kr/text | v0.2.0 | 间接依赖 | go |
| github.com/knqyf263/go-apk-version | v0.0.0-20200609155635-041fdbb8563f | 直接依赖 | go |
| github.com/moby/term | v0.5.0 | 间接依赖 | go |
| github.com/containerd/typeurl/v2 | v2.1.1 | 间接依赖 | go |
| github.com/mitchellh/go-homedir | v1.1.0 | 直接依赖 | go |
| github.com/mattn/go-isatty | v0.0.18 | 间接依赖 | go |
| github.com/sylabs/squashfs | v0.6.1 | 间接依赖 | go |
| github.com/bmatcuk/doublestar/v2 | v2.0.4 | 直接依赖 | go |
| github.com/gkampitakis/go-diff | v1.3.2 | 间接依赖 | go |
| github.com/spf13/cobra | v1.7.0 | 直接依赖 | go |
| github.com/glebarez/go-sqlite | v1.21.2 | 间接依赖 | go |
| github.com/muesli/reflow | v0.3.0 | 间接依赖 | go |
| golang.org/x/mod | v0.13.0 | 间接依赖 | go |
| github.com/Masterminds/goutils | v1.1.1 | 间接依赖 | go |
| github.com/acomagu/bufpipe | v1.0.4 | 间接依赖 | go |
| github.com/masahiro331/go-mvn-version | v0.0.0-20210429150710-d3157d602a08 | 直接依赖 | go |
| golang.org/x/oauth2 | v0.10.0 | 间接依赖 | go |
| github.com/muesli/cancelreader | v0.2.2 | 间接依赖 | go |
| github.com/hashicorp/go-getter | v1.7.3 | 直接依赖 | go |
| cloud.google.com/go/compute/metadata | v0.2.3 | 间接依赖 | go |
| github.com/jinzhu/inflection | v1.0.0 | 间接依赖 | go |
| github.com/aymanbagabas/go-osc52/v2 | v2.0.1 | 间接依赖 | go |
| gopkg.in/yaml.v3 | v3.0.1 | 间接依赖 | go |
| cloud.google.com/go/iam | v1.1.1 | 间接依赖 | go |
| github.com/containerd/fifo | v1.1.0 | 间接依赖 | go |
| modernc.org/memory | v1.6.0 | 间接依赖 | go |
| github.com/openvex/go-vex | v0.2.5 | 直接依赖 | go |
| github.com/go-logr/stdr | v1.2.2 | 间接依赖 | go |
| github.com/mitchellh/mapstructure | v1.5.0 | 直接依赖 | go |
| github.com/Microsoft/hcsshim | v0.11.1 | 间接依赖 | go |
| github.com/felixge/fgprof | v0.9.3 | 间接依赖 | go |
| github.com/muesli/ansi | v0.0.0-20211031195517-c9f0611b6c70 | 间接依赖 | go |
| google.golang.org/genproto | v0.0.0-20230711160842-782d3b101e98 | 间接依赖 | go |
| github.com/saintfish/chardet | v0.0.0-20230101081208-5e3ef4b5456d | 间接依赖 | go |
| cloud.google.com/go/storage | v1.30.1 | 间接依赖 | go |
| github.com/google/go-containerregistry | v0.16.1 | 直接依赖 | go |
| github.com/klauspost/compress | v1.16.5 | 间接依赖 | go |
| github.com/moby/sys/mountinfo | v0.6.2 | 间接依赖 | go |
| github.com/zyedidia/generic | v1.2.2-0.20230320175451-4410d2372cb1 | 间接依赖 | go |
| github.com/spf13/jwalterweatherman | v1.1.0 | 间接依赖 | go |
| github.com/sirupsen/logrus | v1.9.3 | 直接依赖 | go |
| github.com/moby/sys/signal | v0.7.0 | 间接依赖 | go |
| github.com/go-git/go-billy/v5 | v5.5.0 | 间接依赖 | go |
| github.com/tidwall/gjson | v1.16.0 | 间接依赖 | go |
| github.com/containerd/containerd | v1.7.8 | 间接依赖 | go |
| github.com/onsi/ginkgo | v1.16.5 | 间接依赖 | go |
| github.com/therootcompany/xz | v1.0.1 | 间接依赖 | go |
| github.com/gkampitakis/ciinfo | v0.2.5 | 间接依赖 | go |
| google.golang.org/appengine | v1.6.7 | 间接依赖 | go |
| github.com/distribution/reference | v0.5.0 | 间接依赖 | go |
| github.com/package-url/packageurl-go | v0.1.1 | 间接依赖 | go |
| go.opentelemetry.io/otel/trace | v1.14.0 | 间接依赖 | go |
| github.com/mitchellh/hashstructure/v2 | v2.0.2 | 直接依赖 | go |
| github.com/mgutz/ansi | v0.0.0-20200706080929-d51e80ef957d | 间接依赖 | go |
| github.com/tidwall/sjson | v1.2.5 | 间接依赖 | go |
| github.com/vbatts/go-mtree | v0.5.3 | 间接依赖 | go |
| github.com/pkg/errors | v0.9.1 | 间接依赖 | go |
| github.com/docker/distribution | v2.8.3+incompatible | 间接依赖 | go |
| github.com/hashicorp/go-cleanhttp | v0.5.2 | 直接依赖 | go |
| modernc.org/mathutil | v1.5.0 | 间接依赖 | go |
| github.com/zclconf/go-cty | v1.14.0 | 间接依赖 | go |
| golang.org/x/sys | v0.13.0 | 间接依赖 | go |
| github.com/mholt/archiver/v3 | v3.5.1 | 直接依赖 | go |
| github.com/anchore/fangs | v0.0.0-20230818131516-2186b10924fe | 间接依赖 | go |
| github.com/golang/protobuf | v1.5.3 | 间接依赖 | go |
| github.com/knqyf263/go-deb-version | v0.0.0-20190517075300-09fca494f03d | 直接依赖 | go |
| github.com/ulikunitz/xz | v0.5.10 | 间接依赖 | go |
| github.com/magiconair/properties | v1.8.7 | 间接依赖 | go |
| github.com/xo/terminfo | v0.0.0-20210125001918-ca9a967f8778 | 间接依赖 | go |
| github.com/go-git/go-git/v5 | v5.10.0 | 间接依赖 | go |
| github.com/charmbracelet/harmonica | v0.2.0 | 间接依赖 | go |
| github.com/pjbgf/sha1cd | v0.3.0 | 间接依赖 | go |
| github.com/cyphar/filepath-securejoin | v0.2.4 | 间接依赖 | go |
| github.com/xanzy/ssh-agent | v0.3.3 | 间接依赖 | go |
| gopkg.in/ini.v1 | v1.67.0 | 间接依赖 | go |
| github.com/pborman/indent | v1.2.1 | 间接依赖 | go |
| github.com/mitchellh/copystructure | v1.2.0 | 间接依赖 | go |
| golang.org/x/time | v0.2.0 | 间接依赖 | go |
| github.com/pelletier/go-toml/v2 | v2.0.8 | 间接依赖 | go |
| github.com/opencontainers/runtime-spec | v1.1.0-rc.1 | 间接依赖 | go |
| github.com/pierrec/lz4/v4 | v4.1.15 | 间接依赖 | go |
| github.com/docker/docker-credential-helpers | v0.7.0 | 间接依赖 | go |
| github.com/kevinburke/ssh_config | v1.2.0 | 间接依赖 | go |
| github.com/facebookincubator/nvdtools | v0.1.5 | 直接依赖 | go |
| github.com/charmbracelet/lipgloss | v0.9.1 | 直接依赖 | go |
| github.com/google/uuid | v1.4.0 | 直接依赖 | go |
| github.com/anchore/packageurl-go | v0.1.1-0.20230104203445-02e0a6721501 | 直接依赖 | go |
| github.com/containerd/console | v1.0.4-0.20230313162750-1ae8d489ac81 | 间接依赖 | go |
| github.com/mattn/go-localereader | v0.0.2-0.20220822084749-2491eb6c1c75 | 间接依赖 | go |
| modernc.org/sqlite | v1.26.0 | 间接依赖 | go |
| github.com/muesli/termenv | v0.15.2 | 间接依赖 | go |
| golang.org/x/tools | v0.13.0 | 间接依赖 | go |
| github.com/opencontainers/go-digest | v1.0.0 | 间接依赖 | go |
| github.com/google/go-cmp | v0.6.0 | 直接依赖 | go |
| github.com/inconshreveable/mousetrap | v1.1.0 | 间接依赖 | go |
| github.com/mitchellh/reflectwalk | v1.0.2 | 间接依赖 | go |
| google.golang.org/genproto/googleapis/rpc | v0.0.0-20230711160842-782d3b101e98 | 间接依赖 | go |
| github.com/hashicorp/go-version | v1.6.0 | 直接依赖 | go |
| github.com/gkampitakis/go-snaps | v0.4.11 | 直接依赖 | go |
| github.com/mattn/go-runewidth | v0.0.15 | 间接依赖 | go |
| github.com/opencontainers/selinux | v1.11.0 | 间接依赖 | go |
| github.com/huandu/xstrings | v1.3.3 | 间接依赖 | go |
| github.com/opencontainers/runc | v1.1.5 | 间接依赖 | go |
| github.com/hako/durafmt | v0.0.0-20210608085754-5c1018a4e16b | 直接依赖 | go |
| github.com/Masterminds/sprig/v3 | v3.2.3 | 直接依赖 | go |
| github.com/wagoodman/go-presenter | v0.0.0-20211015174752-f9c01afc824b | 直接依赖 | go |
| github.com/rivo/uniseg | v0.2.0 | 间接依赖 | go |