1. 墨知首页
  2. 软件分析

arvados/arvados 软件分析报告

• 软件分析
目录 隐藏
1 基础信息
2 漏洞列表
3 缺陷组件
4 许可证风险
5 SBOM清单

基础信息

项目名称：arvados/arvados

项目徽章：

Security Status

仓库地址：https://github.com/pterodactyl/panel

检测报告地址：https://www.murphysec.com/console/report/1716061439180718080/1720728192117293056

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
Google Golang 资源管理错误漏洞 拒绝服务 MPS-c8am-hbny CVE-2023-39325 高危

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
golang.org/x/net v0.9.0 0.17.0 直接依赖 可选修复

许可证风险

许可证类型 相关组件 许可证风险
MPL-2.0 4 低
Apache-2.0 48 低
BSD-3-Clause 21 低
BSD-2-Clause 8 低
MIT 39 低
自定义许可证 6 低
CC-BY-SA-4.0 1 中
ISC 1 低
GPL-3.0 1 中
GPL-3.0-or-later 1 低

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
github.com/hashicorp/yamux v0.0.0-20211028200310-0bc27b27de87 直接依赖 go
acts_as_api 1.0.1 间接依赖 bundler
rails-dom-testing 2.0.3 间接依赖 bundler
simplecov_json_formatter 0.1.4 间接依赖 bundler
retriable 1.4.1 间接依赖 bundler
simplecov-html 0.10.2 间接依赖 bundler
erubi 1.12.0 间接依赖 bundler
github.com/Azure/go-autorest/autorest/azure/cli v0.4.4 间接依赖 go
cloud.google.com/go/compute/metadata v0.2.3 间接依赖 go
actionview 7.0.8 间接依赖 bundler
golang.org/x/time v0.0.0-20200630173020-3af7569d3a1e 间接依赖 go
power_assert 2.0.3 间接依赖 bundler
google.golang.org/protobuf v1.30.0 间接依赖 go
google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1 间接依赖 go
github.com/docker/docker v24.0.5+incompatible 直接依赖 go
extlib 0.9.16 间接依赖 bundler
mocha 1.8.0 间接依赖 bundler
commonjs 0.2.7 间接依赖 bundler
github.com/pkg/errors v0.9.1 间接依赖 go
net-ssh 5.2.0 间接依赖 bundler
github.com/aws/aws-sdk-go v1.44.174 直接依赖 go
simplecov 0.22.0 间接依赖 bundler
github.com/bgentry/speakeasy v0.1.0 间接依赖 go
rake 13.0.6 间接依赖 bundler
metaclass 0.0.4 间接依赖 bundler
activejob 7.0.8 间接依赖 bundler
ffi 1.10.0 间接依赖 bundler
github.com/Azure/go-autorest v14.2.0+incompatible 间接依赖 go
lograge 0.13.0 间接依赖 bundler
github.com/coreos/go-systemd v0.0.0-20190321100706-95778dfbb74e 直接依赖 go
mini_mime 1.1.2 间接依赖 bundler
nokogiri 1.14.3 间接依赖 bundler
arvados-google-api-client 0.8.7.5 间接依赖 bundler
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 直接依赖 go
racc 1.6.2 间接依赖 bundler
i18n 1.14.1 间接依赖 bundler
github.com/jmoiron/sqlx v1.2.0 直接依赖 go
bootstrap-x-editable-rails 1.5.1.1 间接依赖 bundler
actiontext 7.0.8 间接依赖 bundler
github.com/golang/protobuf v1.5.3 间接依赖 go
kramdown 1.17.0 间接依赖 bundler
github.com/bradleypeabody/godap v0.0.0-20170216002349-c249933bc092 直接依赖 go
childprocess 0.9.0 间接依赖 bundler
github.com/Azure/go-autorest/logger v0.2.1 间接依赖 go
request_store 1.5.1 间接依赖 bundler
github.com/johannesboyne/gofakes3 v0.0.0-20200716060623-6b2b4cb092cc 直接依赖 go
piwik_analytics 1.0.2 间接依赖 bundler
github.com/golang-jwt/jwt/v4 v4.1.0 间接依赖 go
rails-controller-testing 1.0.4 间接依赖 bundler
nokogiri 1.15.4 间接依赖 bundler
golang.org/x/tools v0.6.0 间接依赖 go
github.com/aws/aws-sdk-go-v2 v0.23.0 直接依赖 go
actionmailbox 7.0.8 间接依赖 bundler
arel 9.0.0 间接依赖 bundler
i18n 0.9.5 间接依赖 bundler
cliver 0.3.2 间接依赖 bundler
minitest 5.10.3 间接依赖 bundler
responders 3.1.0 间接依赖 bundler
faraday-multipart 1.0.4 间接依赖 bundler
loofah 2.20.0 间接依赖 bundler
andand 1.3.3 间接依赖 bundler
activejob 5.2.8.1 间接依赖 bundler
golang.org/x/net v0.9.0 直接依赖 go
autoparse 0.3.3 间接依赖 bundler
rack 2.2.7 间接依赖 bundler
simplecov-rcov 0.3.1 间接依赖 bundler
ruby2_keywords 0.0.5 间接依赖 bundler
golang.org/x/sys v0.7.0 直接依赖 go
github.com/prometheus/client_golang v1.14.0 直接依赖 go
actionpack 5.2.8.1 间接依赖 bundler
rack-test 2.1.0 间接依赖 bundler
github.com/msteinert/pam v0.0.0-20190215180659-f29b9f28d6f9 直接依赖 go
actioncable 7.0.8 间接依赖 bundler
makerakeworkwell 1.0.4 间接依赖 bundler
bundler 间接依赖 bundler
multi_json 1.15.0 间接依赖 bundler
github.com/go-ldap/ldap v3.0.3+incompatible 直接依赖 go
lograge 0.10.0 间接依赖 bundler
github.com/ghodss/yaml v1.0.0 直接依赖 go
github.com/opencontainers/go-digest v1.0.0 间接依赖 go
jquery-rails 4.6.0 间接依赖 bundler
thor 1.2.1 间接依赖 bundler
loofah 2.21.3 间接依赖 bundler
github.com/gliderlabs/ssh v0.2.2 间接依赖 go
simplecov-rcov 0.2.3 间接依赖 bundler
rsc.io/getopt v0.0.0-20170811000552-20be20937449 直接依赖 go
os 1.1.4 间接依赖 bundler
mail 2.8.1 间接依赖 bundler
multipart-post 2.3.0 间接依赖 bundler
github.com/Microsoft/go-winio v0.5.2 间接依赖 go
mini_portile2 2.8.4 间接依赖 bundler
github.com/morikuni/aec v1.0.0 间接依赖 go
github.com/imdario/mergo v0.3.12 直接依赖 go
github.com/prometheus/common v0.39.0 直接依赖 go
cloud.google.com/go/compute v1.19.1 间接依赖 go
npm-rails 0.2.1 间接依赖 bundler
github.com/coreos/go-oidc/v3 v3.5.0 直接依赖 go
rails-observers 0.1.5 间接依赖 bundler
gopkg.in/yaml.v2 v2.4.0 间接依赖 go
tilt 2.0.9 间接依赖 bundler
github.com/Azure/go-autorest/autorest/date v0.3.0 间接依赖 go
docile 1.3.1 间接依赖 bundler
test-unit 3.6.1 间接依赖 bundler
request_store 1.4.1 间接依赖 bundler
listen 3.8.0 间接依赖 bundler
factory_bot_rails 6.2.0 间接依赖 bundler
github.com/xanzy/ssh-agent v0.1.0 间接依赖 go
net-pop 0.1.2 间接依赖 bundler
websocket-driver 0.7.5 间接依赖 bundler
github.com/go-asn1-ber/asn1-ber v1.4.1 间接依赖 go
rb-inotify 0.10.1 间接依赖 bundler
github.com/Azure/go-autorest/autorest/validation v0.3.0 间接依赖 go
sass 3.7.4 间接依赖 bundler
public_suffix 5.0.3 间接依赖 bundler
googleauth 1.7.0 间接依赖 bundler
github.com/go-jose/go-jose/v3 v3.0.0 间接依赖 go
sassc-rails 2.1.0 间接依赖 bundler
mime-types 3.2.2 间接依赖 bundler
activerecord 7.0.8 间接依赖 bundler
github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e 间接依赖 go
websocket-extensions 0.1.5 间接依赖 bundler
rack-mini-profiler 1.0.2 间接依赖 bundler
bootstrap-sass 3.4.1 间接依赖 bundler
google.golang.org/appengine v1.6.7 间接依赖 go
nio4r 2.5.8 间接依赖 bundler
faraday-gzip 2.0.0 间接依赖 bundler
github.com/cespare/xxhash/v2 v2.2.0 间接依赖 go
github.com/sirupsen/logrus v1.8.1 直接依赖 go
method_source 1.0.0 间接依赖 bundler
execjs 2.7.0 间接依赖 bundler
activestorage 7.0.8 间接依赖 bundler
nio4r 2.5.9 间接依赖 bundler
capybara 2.5.0 间接依赖 bundler
github.com/docker/go-units v0.4.0 间接依赖 go
docile 1.4.0 间接依赖 bundler
marcel 1.0.2 间接依赖 bundler
net-ssh-gateway 2.0.0 间接依赖 bundler
github.com/hashicorp/golang-lru v0.5.1 直接依赖 go
github.com/Azure/go-autorest/tracing v0.6.0 间接依赖 go
github.com/prometheus/procfs v0.9.0 间接依赖 go
builder 3.2.4 间接依赖 bundler
github.com/gorilla/mux v1.8.0 直接依赖 go
github.com/src-d/gcfg v1.3.0 间接依赖 go
golang.org/x/crypto v0.5.0 直接依赖 go
github.com/fsnotify/fsnotify v1.4.9 直接依赖 go
mini_portile2 2.8.2 间接依赖 bundler
selenium-webdriver 3.141.0 间接依赖 bundler
github.com/davecgh/go-spew v1.1.1 间接依赖 go
jquery-rails 4.5.1 间接依赖 bundler
railties 7.0.8 间接依赖 bundler
sassc 2.0.1 间接依赖 bundler
racc 1.7.1 间接依赖 bundler
mini_mime 1.1.5 间接依赖 bundler
xpath 2.1.0 间接依赖 bundler
gopkg.in/src-d/go-billy.v4 v4.0.1 直接依赖 go
sprockets-rails 3.4.2 间接依赖 bundler
github.com/moby/term v0.5.0 间接依赖 go
bootstrap-tab-history-rails 0.1.0 间接依赖 bundler
github.com/kr/pretty v0.2.1 间接依赖 go
github.com/hashicorp/go-cleanhttp v0.5.2 间接依赖 go
gopkg.in/warnings.v0 v0.1.2 间接依赖 go
rb-fsevent 0.10.3 间接依赖 bundler
autoprefixer-rails 9.5.1.1 间接依赖 bundler
arvados 2.7.0.rc2 间接依赖 bundler
github.com/dimchansky/utfbom v1.1.1 间接依赖 go
github.com/Azure/go-autorest/autorest/to v0.4.0 直接依赖 go
launchy 2.4.3 间接依赖 bundler
go.opencensus.io v0.24.0 间接依赖 go
rvm-capistrano 1.5.6 间接依赖 bundler
github.com/googleapis/gax-go/v2 v2.7.1 间接依赖 go
tzinfo 1.2.11 间接依赖 bundler
faraday-net_http 3.0.2 间接依赖 bundler
signet 0.16.1 间接依赖 bundler
gopkg.in/asn1-ber.v1 v1.0.0-20181015200546-f715ec2f112d 间接依赖 go
github.com/Azure/azure-sdk-for-go v45.1.0+incompatible 直接依赖 go
jwt 1.5.6 间接依赖 bundler
activemodel 7.0.8 间接依赖 bundler
timeout 0.4.0 间接依赖 bundler
github.com/julienschmidt/httprouter v1.3.0 直接依赖 go
mail 2.7.1 间接依赖 bundler
zlib 3.0.0 间接依赖 bundler
sprockets 4.2.1 间接依赖 bundler
concurrent-ruby 1.2.2 间接依赖 bundler
capistrano 2.15.9 间接依赖 bundler
launchy 2.5.2 间接依赖 bundler
github.com/pelletier/go-buffruneio v0.2.0 间接依赖 go
rack 2.2.8 间接依赖 bundler
github.com/creack/pty v1.1.18 直接依赖 go
golang.org/x/oauth2 v0.7.0 直接依赖 go
uglifier 2.7.2 间接依赖 bundler
sprockets 3.7.2 间接依赖 bundler
rails-dom-testing 2.2.0 间接依赖 bundler
gopkg.in/src-d/go-git-fixtures.v3 v3.5.0 间接依赖 go
github.com/satori/go.uuid v1.2.1-0.20180103174451-36e9d2ebbde5 间接依赖 go
github.com/Azure/go-autorest/autorest/azure/auth v0.5.9 直接依赖 go
github.com/beorn7/perks v1.0.1 间接依赖 go
less 2.6.0 间接依赖 bundler
net-imap 0.3.7 间接依赖 bundler
net-smtp 0.4.0 间接依赖 bundler
net-protocol 0.2.1 间接依赖 bundler
github.com/kr/text v0.1.0 间接依赖 go
morrisjs-rails 0.5.1.2 间接依赖 bundler
rails-html-sanitizer 1.6.0 间接依赖 bundler
activemodel 5.2.8.1 间接依赖 bundler
coderay 1.1.3 间接依赖 bundler
github.com/hashicorp/go-retryablehttp v0.7.2 直接依赖 go
thor 1.2.2 间接依赖 bundler
github.com/Azure/go-autorest/autorest v0.11.22 直接依赖 go
github.com/dnaeon/go-vcr v1.2.0 间接依赖 go
factory_bot 6.2.1 间接依赖 bundler
zeitwerk 2.6.11 间接依赖 bundler
github.com/jmespath/go-jmespath v0.4.0 间接依赖 go
net-sftp 2.1.2 间接依赖 bundler
golang.org/x/text v0.9.0 间接依赖 go
actionmailer 5.2.8.1 间接依赖 bundler
poltergeist 1.5.1 间接依赖 bundler
simplecov 0.16.1 间接依赖 bundler
websocket-driver 0.7.6 间接依赖 bundler
activestorage 5.2.8.1 间接依赖 bundler
github.com/dustin/go-humanize v1.0.0 直接依赖 go
actioncable 5.2.8.1 间接依赖 bundler
rb-inotify 0.10.0 间接依赖 bundler
github.com/jmcvetta/randutil v0.0.0-20150817122601-2bb1b664bcff 直接依赖 go
github.com/Azure/go-autorest/autorest/adal v0.9.17 间接依赖 go
rails-controller-testing 1.0.5 间接依赖 bundler
github.com/AdRoll/goamz v0.0.0-20170825154802-2731d20f46f4 直接依赖 go
github.com/ryszard/goskiplist v0.0.0-20150312221310-2dfbae5fcf46 间接依赖 go
memoist 0.16.2 间接依赖 bundler
passenger 6.0.15 间接依赖 bundler
responders 2.4.1 间接依赖 bundler
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 间接依赖 go
thread_safe 0.3.6 间接依赖 bundler
globalid 1.1.0 间接依赖 bundler
github.com/opencontainers/image-spec v1.0.2 间接依赖 go
activesupport 7.0.8 间接依赖 bundler
actionpack 7.0.8 间接依赖 bundler
rails-html-sanitizer 1.5.0 间接依赖 bundler
ffi 1.15.5 间接依赖 bundler
github.com/kevinburke/ssh_config v0.0.0-20171013211458-802051befeb5 间接依赖 go
passenger 6.0.18 间接依赖 bundler
highline 2.0.2 间接依赖 bundler
actionmailer 7.0.8 间接依赖 bundler
tzinfo 2.0.6 间接依赖 bundler
github.com/alcortesm/tgz v0.0.0-20161220082320-9c5fe88206d7 间接依赖 go
globalid 1.2.1 间接依赖 bundler
zenweb 3.10.6 间接依赖 bundler
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c 直接依赖 go
faraday 2.7.10 间接依赖 bundler
date 3.3.3 间接依赖 bundler
gopkg.in/src-d/go-git.v4 v4.0.0 直接依赖 go
mime-types-data 3.2019.0331 间接依赖 bundler
simplecov-html 0.12.3 间接依赖 bundler
github.com/gogo/protobuf v1.3.2 直接依赖 go
gopkg.in/square/go-jose.v2 v2.5.1 直接依赖 go
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 间接依赖 go
github.com/google/uuid v1.3.0 间接依赖 go
activesupport 5.2.8.1 间接依赖 bundler
github.com/docker/distribution v2.8.2+incompatible 间接依赖 go
actionview 5.2.8.1 间接依赖 bundler
json 2.6.3 间接依赖 bundler
rubyzip 1.3.0 间接依赖 bundler
addressable 2.8.5 间接依赖 bundler
mocha 2.1.0 间接依赖 bundler
google.golang.org/grpc v1.56.1 间接依赖 go
github.com/anmitsu/go-shlex v0.0.0-20161002113705-648efa622239 间接依赖 go
github.com/googleapis/enterprise-certificate-proxy v0.2.3 间接依赖 go
crass 1.0.6 间接依赖 bundler
github.com/mitchellh/go-homedir v1.1.0 间接依赖 go
activerecord 5.2.8.1 间接依赖 bundler
google.golang.org/api v0.114.0 直接依赖 go
gotest.tools/v3 v3.0.3 间接依赖 go
github.com/docker/go-connections v0.3.0 间接依赖 go
sass-listen 4.0.0 间接依赖 bundler
railties 5.2.8.1 间接依赖 bundler
github.com/lib/pq v1.10.2 直接依赖 go
github.com/prometheus/client_model v0.3.0 直接依赖 go
net-scp 2.0.0 间接依赖 bundler
github.com/arvados/cgofuse v1.2.0-arvados1 直接依赖 go
rails 7.0.8 间接依赖 bundler
rb-fsevent 0.11.2 间接依赖 bundler
github.com/sergi/go-diff v1.0.0 间接依赖 go
rails 5.2.8.1 间接依赖 bundler
github.com/matttproud/golang_protobuf_extensions v1.0.4 间接依赖 go
github.com/shabbyrobe/gocovmerge v0.0.0-20180507124511-f6ea450bfb63 间接依赖 go
赞 (0)
上一篇 2023年11月4日
下一篇 2023年11月4日

相关推荐

  • iWeslie/PokerCard 软件分析报告

    基础信息 项目名称：iWeslie/PokerCard 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1718924570857701376/1718924571323269120 此报告由Murphysec提供 …

    软件分析 2023年10月30日
    0

  • chenqihui/IMApp 软件分析报告

    基础信息 项目名称：chenqihui/IMApp 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1716643440397778944/1716643441517658112 此报告由Murphysec提供 漏洞…

    软件分析 2023年10月24日
    0

  • flosell/trailscraper 软件分析报告

    基础信息 项目名称：flosell/trailscraper 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1721202585951535104/1730945643411103744 此报告由Murphysec…

    软件分析 2023年12月2日
    0

  • hectahertz/react-native-typography 软件分析报告

    基础信息 项目名称：hectahertz/react-native-typography 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1718531506938970112/1718531507161268224…

    软件分析 2023年10月29日
    0

  • JellyDevelopment/JDAvatarProgress 软件分析报告

    基础信息 项目名称：JellyDevelopment/JDAvatarProgress 项目徽章： 仓库地址：https://github.com/pterodactyl/panel 检测报告地址：https://www.murphysec.com/console/report/1721302685088305152/1726756614735613952 …

    软件分析 2023年11月21日
    0