bytedance/Elkeid 软件分析报告

基础信息

项目名称:bytedance/Elkeid

项目徽章:

Security Status

仓库地址:https://github.com/pterodactyl/panel

检测报告地址:https://www.murphysec.com/console/report/1722269184285503488/1722269184361000960

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
Alertmanager 跨站脚本漏洞 XSS MPS-1plu-98m6 CVE-2023-40577 中危
Gin-Gonic Gin 环境问题漏洞 HTTP请求走私 MPS-2021-5932 CVE-2020-28483 高危
io.netty:netty-handler 存在证书验证不恰当漏洞 证书验证不恰当 MPS-2022-12067 中危
Google Golang 资源管理错误漏洞 MPS-2022-58307 CVE-2022-41723 高危
Netty 未经控制的递归 MPS-2022-58518 CVE-2022-41881 中危
Netty 解释冲突 MPS-2022-58552 CVE-2022-41915 中危
Google Go 权限许可和访问控制问题漏洞 权限管理不当 MPS-2022-9049 CVE-2022-29526 中危
snakeYAML 反序列化 MPS-2022-9425 CVE-2022-1471 高危
Gin-Gonic Gin 输入验证错误漏洞 输入验证不恰当 MPS-2023-5119 CVE-2023-26125 高危
Moby 安全漏洞 未能安全地进行程序失效(Failing Open) MPS-2023-8823 CVE-2023-28840 高危
Moby 安全漏洞 未能安全地进行程序失效(Failing Open) MPS-2023-8824 CVE-2023-28841 中危
Moby 安全漏洞 未能安全地进行程序失效(Failing Open) MPS-2023-8826 CVE-2023-28842 中危
Gin 安全漏洞 下载代码缺少完整性检查 MPS-2023-9711 CVE-2023-29401 中危
Netty 资源管理错误漏洞 拒绝服务 MPS-9u07-bna1 CVE-2023-34462 中危
Hot Rod 安全漏洞 证书验证不恰当 MPS-b7oj-adm3 CVE-2023-4586 高危
Google Golang 资源管理错误漏洞 拒绝服务 MPS-c8am-hbny CVE-2023-39325 高危
【存在争议】FasterXML jackson-databind 代码问题漏洞 不加限制或调节的资源分配 MPS-z1bx-p8y2 CVE-2023-35116 中危

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
golang.org/x/net v0.0.0-20220722155237-a158d28d115b 0.17.0 间接依赖 建议修复
github.com/gin-gonic/gin v1.7.1 1.9.1 直接依赖 建议修复
io.netty:netty-handler 4.1.85.Final 间接依赖 建议修复
com.fasterxml.jackson.core:jackson-databind 2.14.0 直接依赖 建议修复
golang.org/x/net v0.0.0-20220412020605-290c469a71a5 0.17.0 间接依赖 建议修复
github.com/gin-gonic/gin v1.8.1 1.9.1 直接依赖 建议修复
golang.org/x/net v0.0.0-20220927171203-f486391704dc 0.17.0 间接依赖 建议修复
github.com/docker/docker v20.10.21+incompatible 20.10.24 直接依赖 建议修复
org.yaml:snakeyaml 1.33 2.0 间接依赖 建议修复
github.com/gin-gonic/gin v1.7.0 1.9.1 直接依赖 建议修复
golang.org/x/net v0.0.0-20210525063256-abc453219eb5 0.17.0 间接依赖 建议修复
io.netty:netty-codec-haproxy 4.1.85.Final 4.1.86.final 间接依赖 可选修复
golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10 0.1.0 间接依赖 可选修复
io.netty:netty-codec-http 4.1.85.Final 4.1.86.final 间接依赖 可选修复
golang.org/x/sys v0.0.0-20211210111614-af8b64212486 0.1.0 间接依赖 可选修复
golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 0.1.0 直接依赖 可选修复
golang.org/x/sys v0.0.0-20220114195835-da31bd327af9 0.1.0 间接依赖 可选修复
github.com/prometheus/alertmanager v0.24.0 直接依赖 可选修复
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f 0.1.0 直接依赖 可选修复

许可证风险

许可证类型 相关组件 许可证风险
Apache-2.0 125
MIT 150
BSD-3-Clause 65
MPL-2.0 7
LGPL-2.1 1
MPL-1.1 1
ISC 6
BSD-2-Clause 9
LGPL-3.0 1
CC-BY-SA-4.0 1
BSD-2-Clause-Views 2

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
io.netty:netty-transport-native-epoll 4.1.85.Final 间接依赖 maven
color-string 1.9.1 间接依赖 npm
github.com/tklauser/go-sysconf v0.3.10 直接依赖 go
github.com/spf13/viper v1.7.0 直接依赖 go
github.com/hashicorp/hcl v1.0.0 间接依赖 go
go.uber.org/atomic v1.9.0 间接依赖 go
golang.org/x/net v0.0.0-20220722155237-a158d28d115b 间接依赖 go
io.netty:netty-codec-http2 4.1.85.Final 间接依赖 maven
golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 间接依赖 go
github.com/muesli/cache2go v0.0.0-20221011235721-518229cd8021 直接依赖 go
github.com/tklauser/numcpus v0.3.0 间接依赖 go
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 间接依赖 go
github.com/mattn/go-isatty v0.0.14 间接依赖 go
golang.org/x/time v0.2.0 间接依赖 go
github.com/jcmturner/rpc/v2 v2.0.3 间接依赖 go
winston-daily-rotate-file 4.7.1 直接依赖 npm
github.com/shirou/gopsutil/v3 v3.21.11 直接依赖 go
github.com/tklauser/numcpus v0.4.0 间接依赖 go
github.com/go-logr/zapr v1.2.2 直接依赖 go
k8s.io/kube-openapi v0.0.0-20220803162953-67bda5d908f1 间接依赖 go
io.netty:netty-common 4.1.85.Final 间接依赖 maven
estree-walker 2.0.2 间接依赖 npm
github.com/klauspost/compress v1.11.0 间接依赖 go
ajv 8.11.2 直接依赖 npm
github.com/go-logr/logr v0.4.0 间接依赖 go
github.com/go-playground/universal-translator v0.17.0 间接依赖 go
io.netty:netty-handler-proxy 4.1.85.Final 间接依赖 maven
github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578 间接依赖 go
github.com/rogpeppe/go-internal v1.9.0 间接依赖 go
github.com/eapache/go-xerial-snappy v0.0.0-20180814174437-776d5712da21 间接依赖 go
google.golang.org/grpc v1.45.0 直接依赖 go
go.uber.org/zap v1.19.0 直接依赖 go
github.com/fsnotify/fsnotify v1.4.7 间接依赖 go
deepmerge 4.2.2 间接依赖 npm
org.javassist:javassist 3.29.0-GA 直接依赖 maven
github.com/shirou/gopsutil/v3 v3.22.3 直接依赖 go
resolve 1.22.1 间接依赖 npm
go.uber.org/multierr v1.8.0 间接依赖 go
github.com/stretchr/testify v1.8.0 直接依赖 go
fs.realpath 1.0.0 直接依赖 npm
@rollup/plugin-node-resolve 15.0.1 直接依赖 npm
is-core-module 2.11.0 间接依赖 npm
github.com/opencontainers/image-spec v1.0.2 间接依赖 go
google.golang.org/grpc v1.40.0 直接依赖 go
inflight 1.0.6 直接依赖 npm
punycode 2.1.1 间接依赖 npm
github.com/go-ole/go-ole v1.2.6 间接依赖 go
safe-buffer 5.2.1 间接依赖 npm
enabled 2.0.0 间接依赖 npm
github.com/morikuni/aec v1.0.0 间接依赖 go
@types/resolve 1.20.2 间接依赖 npm
com.lmax:disruptor 3.4.4 直接依赖 maven
k8s.io/apimachinery v0.25.4 直接依赖 go
:No dependencies 直接依赖 maven
io.netty:netty-resolver-dns-native-macos 4.1.85.Final 间接依赖 maven
io.netty:netty-all 4.1.85.Final 直接依赖 maven
github.com/hashicorp/golang-lru v0.5.4 直接依赖 go
github.com/matttproud/golang_protobuf_extensions v1.0.1 间接依赖 go
github.com/shurcooL/vfsgen v0.0.0-20200824052919-0d455de96546 间接依赖 go
k8s.io/api v0.21.0 间接依赖 go
github.com/docker/go-connections v0.4.0 间接依赖 go
io.netty:netty-transport-sctp 4.1.85.Final 间接依赖 maven
github.com/GehirnInc/crypt v0.0.0-20200316065508-bb7000b8a962 直接依赖 go
github.com/emicklei/go-restful/v3 v3.8.0 间接依赖 go
colorspace 1.1.4 间接依赖 npm
github.com/fsnotify/fsnotify v1.4.9 直接依赖 go
github.com/spf13/jwalterweatherman v1.0.0 间接依赖 go
github.com/spf13/afero v1.1.2 间接依赖 go
github.com/go-playground/validator/v10 v10.10.0 直接依赖 go
golang.org/x/net v0.0.0-20220412020605-290c469a71a5 间接依赖 go
github.com/DataDog/zstd v1.4.5 直接依赖 go
github.com/gin-gonic/gin v1.7.0 直接依赖 go
ms 2.1.3 间接依赖 npm
github.com/jcmturner/aescts/v2 v2.0.0 间接依赖 go
github.com/Shopify/sarama v1.24.1 直接依赖 go
go.opentelemetry.io/otel/trace v1.5.0 间接依赖 go
github.com/mitchellh/mapstructure v1.1.2 间接依赖 go
github.com/Microsoft/go-winio v0.6.0 间接依赖 go
github.com/coreos/go-systemd v0.0.0-20191104093116-d3cd4ed1dbcf 直接依赖 go
sigs.k8s.io/yaml v1.2.0 间接依赖 go
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f 直接依赖 go
commondir 1.0.1 间接依赖 npm
io.netty:netty-codec-http 4.1.85.Final 间接依赖 maven
github.com/deckarep/golang-set v1.8.0 直接依赖 go
golang.org/x/text v0.4.0 间接依赖 go
github.com/golang-jwt/jwt v3.2.1+incompatible 直接依赖 go
github.com/go-playground/locales v0.13.0 间接依赖 go
kuler 2.0.0 间接依赖 npm
winston 3.8.2 直接依赖 npm
io.netty:netty-codec-redis 4.1.85.Final 间接依赖 maven
io.netty:netty-buffer 4.1.85.Final 间接依赖 maven
golang.org/x/sys v0.0.0-20211210111614-af8b64212486 间接依赖 go
golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4 间接依赖 go
wrappy 1.0.2 间接依赖 npm
github.com/eapache/queue v1.1.0 间接依赖 go
is-stream 2.0.1 间接依赖 npm
github.com/mitchellh/mapstructure v1.4.3 间接依赖 go
github.com/spf13/pflag v1.0.3 间接依赖 go
github.com/hashicorp/errwrap v1.0.0 间接依赖 go
github.com/klauspost/compress v1.15.11 间接依赖 go
github.com/prometheus/alertmanager v0.24.0 直接依赖 go
github.com/opencontainers/runtime-spec v1.0.2 直接依赖 go
json-schema-traverse 1.0.0 间接依赖 npm
github.com/xdg-go/scram v1.1.1 间接依赖 go
github.com/eapache/go-resiliency v1.2.0 间接依赖 go
github.com/go-playground/validator/v10 v10.4.1 间接依赖 go
google.golang.org/genproto v0.0.0-20220502173005-c8bf987b8c21 间接依赖 go
stack-trace 0.0.10 间接依赖 npm
fn.name 1.1.0 间接依赖 npm
github.com/gin-contrib/sse v0.1.0 间接依赖 go
github.com/go-logr/logr v1.2.2 间接依赖 go
color-name 1.1.3 间接依赖 npm
inherits 2.0.4 直接依赖 npm
google.golang.org/genproto v0.0.0-20220414192740-2d67ff6cf2b4 间接依赖 go
github.com/rs/xid v1.2.1 直接依赖 go
go.uber.org/multierr v1.6.0 间接依赖 go
supports-preserve-symlinks-flag 1.0.0 间接依赖 npm
github.com/gin-gonic/gin v1.8.1 直接依赖 go
triple-beam 1.3.0 间接依赖 npm
github.com/go-openapi/jsonpointer v0.19.5 间接依赖 go
org.ow2.asm:asm-analysis 9.3 间接依赖 maven
fsevents 2.3.2 间接依赖 npm
gopkg.in/inf.v0 v0.9.1 间接依赖 go
io.netty:netty-transport-rxtx 4.1.85.Final 间接依赖 maven
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f 间接依赖 go
io.netty:netty-transport-udt 4.1.85.Final 间接依赖 maven
github.com/pkg/errors v0.9.1 间接依赖 go
golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa 间接依赖 go
text-hex 1.0.0 间接依赖 npm
github.com/hashicorp/go-multierror v1.1.1 间接依赖 go
k8s.io/utils v0.0.0-20220728103510-ee6ede2d64ed 间接依赖 go
function-bind 1.1.1 间接依赖 npm
org.ow2.asm:asm-tree 9.3 直接依赖 maven
k8s.io/klog/v2 v2.70.1 间接依赖 go
github.com/gin-gonic/gin v1.7.1 直接依赖 go
color-convert 1.9.3 间接依赖 npm
io.netty:netty-transport-classes-kqueue 4.1.85.Final 间接依赖 maven
github.com/pelletier/go-toml/v2 v2.0.1 间接依赖 go
go.uber.org/zap v1.21.0 直接依赖 go
file-stream-rotator 0.6.1 间接依赖 npm
github.com/spf13/viper v1.10.1 直接依赖 go
go.uber.org/zap v1.10.0 直接依赖 go
k8s.io/cri-api v0.25.4 直接依赖 go
golang.org/x/oauth2 v0.0.0-20211104180415-d3ed0bb246c8 间接依赖 go
github.com/fsnotify/fsnotify v1.5.1 间接依赖 go
rollup 3.5.0 直接依赖 npm
simple-swizzle 0.2.2 间接依赖 npm
github.com/josharian/intern v1.0.0 间接依赖 go
color 3.2.1 间接依赖 npm
golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10 间接依赖 go
github.com/Shopify/sarama v1.37.2 直接依赖 go
github.com/subosito/gotenv v1.2.0 间接依赖 go
com.fasterxml.jackson:jackson-bom 2.14.0 间接依赖 maven
com.fasterxml.jackson.core:jackson-core 2.14.0 间接依赖 maven
github.com/jellydator/ttlcache/v3 v3.0.0 直接依赖 go
github.com/containerd/cgroups v1.0.2 直接依赖 go
io.netty:netty-codec-memcache 4.1.85.Final 间接依赖 maven
github.com/jcmturner/gokrb5/v8 v8.4.3 间接依赖 go
github.com/magiconair/properties v1.8.1 间接依赖 go
@rollup/plugin-commonjs 23.0.3 直接依赖 npm
github.com/docker/distribution v2.8.1+incompatible 间接依赖 go
gopkg.in/ini.v1 v1.51.0 间接依赖 go
google.golang.org/appengine v1.6.7 间接依赖 go
go.mongodb.org/mongo-driver v1.8.3 直接依赖 go
go.uber.org/atomic v1.7.0 间接依赖 go
io.netty:netty-codec-smtp 4.1.85.Final 间接依赖 maven
once 1.4.0 间接依赖 npm
github.com/yusufpapurcu/wmi v1.2.2 间接依赖 go
gopkg.in/ini.v1 v1.66.2 间接依赖 go
github.com/godbus/dbus/v5 v5.0.4 间接依赖 go
github.com/lufia/plan9stats v0.0.0-20220326011226-f1430873d8db 间接依赖 go
github.com/prometheus/client_model v0.2.0 间接依赖 go
google.golang.org/protobuf v1.28.0 间接依赖 go
io.netty:netty-codec-dns 4.1.85.Final 间接依赖 maven
github.com/go-openapi/jsonreference v0.19.6 间接依赖 go
io.netty:netty-transport 4.1.85.Final 间接依赖 maven
@dabh/diagnostics 2.0.3 间接依赖 npm
@types/estree 1.0.0 间接依赖 npm
github.com/bytedance/mockey v1.0.0-rc.0 直接依赖 go
github.com/go-stack/stack v1.8.1 间接依赖 go
golang.org/x/arch v0.0.0-20201008161808-52c3e6f60cff 间接依赖 go
one-time 1.0.0 间接依赖 npm
golang.org/x/tools v0.1.12 间接依赖 go
com.fasterxml.jackson.core:jackson-annotations 2.14.0 间接依赖 maven
io.netty:netty-codec 4.1.85.Final 间接依赖 maven
github.com/BurntSushi/toml v1.0.0 间接依赖 go
github.com/go-redis/redis/v8 v8.8.0 直接依赖 go
io.netty:netty-resolver 4.1.85.Final 间接依赖 maven
github.com/prometheus/client_golang v1.12.1 直接依赖 go
org.ow2.asm:asm-commons 9.3 直接依赖 maven
object-hash 2.2.0 间接依赖 npm
go.opentelemetry.io/otel v1.5.0 间接依赖 go
github.com/docker/docker v20.10.21+incompatible 直接依赖 go
github.com/jcmturner/gofork v0.0.0-20190328161633-dc7c13fece03 间接依赖 go
github.com/ugorji/go/codec v1.2.7 间接依赖 go
gotest.tools/v3 v3.4.0 间接依赖 go
github.com/juju/ratelimit v1.0.2 直接依赖 go
github.com/coreos/go-systemd/v22 v22.3.2 间接依赖 go
github.com/go-logr/stdr v1.2.2 间接依赖 go
github.com/shurcooL/httpfs v0.0.0-20190707220628-8d4bc4ba7749 间接依赖 go
k8s.io/client-go v0.25.4 直接依赖 go
github.com/smartystreets/assertions v1.1.1 间接依赖 go
github.com/jtolds/gls v4.20.0+incompatible 间接依赖 go
github.com/spf13/jwalterweatherman v1.1.0 间接依赖 go
github.com/spf13/pflag v1.0.5 直接依赖 go
google.golang.org/grpc v1.51.0 直接依赖 go
github.com/go-playground/locales v0.14.0 间接依赖 go
github.com/cespare/xxhash/v2 v2.1.2 直接依赖 go
safe-stable-stringify 2.4.1 间接依赖 npm
go.opentelemetry.io/otel/internal/metric v0.27.0 间接依赖 go
github.com/mailru/easyjson v0.7.7 间接依赖 go
sigs.k8s.io/json v0.0.0-20220713155537-f223a00ba0e2 间接依赖 go
fast-deep-equal 3.1.3 间接依赖 npm
golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83 间接依赖 go
github.com/hashicorp/go-uuid v1.0.1 间接依赖 go
github.com/jcmturner/gofork v1.7.6 间接依赖 go
github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c 间接依赖 go
github.com/leodido/go-urn v1.2.0 间接依赖 go
io.netty:netty-codec-socks 4.1.85.Final 间接依赖 maven
github.com/pelletier/go-toml v1.2.0 间接依赖 go
github.com/beorn7/perks v1.0.1 间接依赖 go
google.golang.org/protobuf v1.26.0 间接依赖 go
@rollup/plugin-json 5.0.2 直接依赖 npm
io.netty:netty-handler 4.1.85.Final 间接依赖 maven
is-reference 1.2.1 间接依赖 npm
github.com/golang/protobuf v1.5.2 直接依赖 go
is-module 1.0.0 间接依赖 npm
gopkg.in/yaml.v2 v2.4.0 直接依赖 go
github.com/prometheus/procfs v0.7.3 间接依赖 go
logform 2.4.2 间接依赖 npm
go.uber.org/multierr v1.1.0 间接依赖 go
github.com/google/gnostic v0.5.7-v3refs 间接依赖 go
github.com/goccy/go-json v0.9.7 间接依赖 go
github.com/bytedance/plugins v0.0.0-00010101000000-000000000000 直接依赖 go
github.com/spf13/viper v1.7.1 直接依赖 go
github.com/go-openapi/swag v0.21.1 间接依赖 go
github.com/pierrec/lz4 v2.3.0+incompatible 间接依赖 go
com.fasterxml.jackson.core:jackson-databind 2.14.0 直接依赖 maven
builtin-modules 3.3.0 间接依赖 npm
magic-string 0.26.7 间接依赖 npm
moment 2.29.4 间接依赖 npm
go.uber.org/atomic v1.4.0 间接依赖 go
github.com/vishvananda/netns v0.0.0-20211101163701-50045581ed74 间接依赖 go
github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1 间接依赖 go
sigs.k8s.io/structured-merge-diff/v4 v4.2.3 间接依赖 go
winston-transport 4.5.0 间接依赖 npm
golang.org/x/sys v0.0.0-20220114195835-da31bd327af9 间接依赖 go
gopkg.in/jcmturner/dnsutils.v1 v1.0.1 间接依赖 go
github.com/mattn/go-isatty v0.0.12 间接依赖 go
github.com/bytedance/plugins v0.0.0-20220826022814-07b31790f447 直接依赖 go
github.com/google/go-querystring v1.0.0 间接依赖 go
github.com/spf13/viper v1.4.0 直接依赖 go
@rollup/pluginutils 5.0.2 间接依赖 npm
github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 间接依赖 go
github.com/matttproud/golang_protobuf_extensions v1.0.2-0.20181231171920-c182affec369 间接依赖 go
github.com/docker/go-units v0.4.0 间接依赖 go
github.com/pierrec/lz4/v4 v4.1.17 间接依赖 go
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211 间接依赖 go
github.com/bramvdbogaerde/go-scp v1.2.0 直接依赖 go
github.com/hashicorp/go-uuid v1.0.3 间接依赖 go
github.com/sirupsen/logrus v1.9.0 间接依赖 go
github.com/levigross/grequests v0.0.0-20190908174114-253788527a1a 直接依赖 go
uri-js 4.4.1 间接依赖 npm
has 1.0.3 间接依赖 npm
github.com/google/uuid v1.3.0 直接依赖 go
sigs.k8s.io/structured-merge-diff/v4 v4.1.0 间接依赖 go
github.com/moby/term v0.0.0-20221128092401-c43b287e0e0f 间接依赖 go
golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 直接依赖 go
github.com/spf13/afero v1.2.2 间接依赖 go
github.com/google/go-cmp v0.5.5 间接依赖 go
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd 间接依赖 go
github.com/karrick/godirwalk v1.16.1 直接依赖 go
github.com/go-playground/universal-translator v0.18.0 间接依赖 go
github.com/robfig/cron/v3 v3.0.1 直接依赖 go
go.opentelemetry.io/otel/metric v0.27.0 间接依赖 go
github.com/spf13/cast v1.3.1 间接依赖 go
org.apache.commons:commons-lang3 3.11 直接依赖 maven
github.com/go-logr/logr v1.2.3 间接依赖 go
github.com/xdg-go/stringprep v1.0.3 间接依赖 go
go.uber.org/zap v1.20.0 直接依赖 go
k8s.io/klog/v2 v2.8.0 间接依赖 go
golang.org/x/time v0.0.0-20220210224613-90d013bbcef8 间接依赖 go
util-deprecate 1.0.2 直接依赖 npm
github.com/docker/go-units v0.5.0 间接依赖 go
github.com/leodido/go-urn v1.2.1 间接依赖 go
github.com/patrickmn/go-cache v2.1.0+incompatible 直接依赖 go
github.com/opencontainers/go-digest v1.0.0 间接依赖 go
golang.org/x/text v0.3.6 间接依赖 go
fecha 4.2.3 间接依赖 npm
github.com/spf13/cast v1.3.0 间接依赖 go
github.com/nightlyone/lockfile v1.0.0 直接依赖 go
github.com/coocood/freecache v1.2.3 直接依赖 go
github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d 间接依赖 go
github.com/pelletier/go-toml v1.7.0 间接依赖 go
github.com/spf13/cobra v1.3.0 直接依赖 go
io.netty:netty-resolver-dns-classes-macos 4.1.85.Final 间接依赖 maven
io.netty:netty-transport-classes-epoll 4.1.85.Final 间接依赖 maven
io.netty:netty-transport-native-kqueue 4.1.85.Final 间接依赖 maven
github.com/eapache/go-resiliency v1.3.0 间接依赖 go
k8s.io/api v0.25.4 直接依赖 go
gopkg.in/natefinch/lumberjack.v2 v2.0.0 直接依赖 go
io.netty:netty-codec-stomp 4.1.85.Final 间接依赖 maven
github.com/imdario/mergo v0.3.6 间接依赖 go
github.com/power-devops/perfstat v0.0.0-20220216144756-c35f1ee13d7c 间接依赖 go
github.com/PuerkitoBio/purell v1.1.1 间接依赖 go
require-from-string 2.0.2 间接依赖 npm
sourcemap-codec 1.4.8 间接依赖 npm
github.com/jcmturner/dnsutils/v2 v2.0.0 间接依赖 go
io.netty:netty-codec-xml 4.1.85.Final 间接依赖 maven
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.14.0 直接依赖 maven
gopkg.in/yaml.v3 v3.0.1 直接依赖 go
github.com/xdg-go/pbkdf2 v1.0.0 间接依赖 go
go.uber.org/multierr v1.7.0 间接依赖 go
io.netty:netty-codec-haproxy 4.1.85.Final 间接依赖 maven
github.com/smartystreets/goconvey v1.6.4 间接依赖 go
github.com/gogo/protobuf v1.3.2 直接依赖 go
path-parse 1.0.7 间接依赖 npm
gopkg.in/jcmturner/rpc.v1 v1.1.0 间接依赖 go
io.netty:netty-resolver-dns 4.1.85.Final 间接依赖 maven
google.golang.org/genproto v0.0.0-20201110150050-8816d57aaa9a 间接依赖 go
org.ow2.asm:asm 9.3 间接依赖 maven
github.com/golang/snappy v0.0.4 直接依赖 go
gopkg.in/jcmturner/aescts.v1 v1.0.1 间接依赖 go
github.com/json-iterator/go v1.1.12 直接依赖 go
github.com/modern-go/reflect2 v1.0.2 间接依赖 go
k8s.io/apimachinery v0.21.0 间接依赖 go
org.yaml:snakeyaml 1.33 间接依赖 maven
github.com/davecgh/go-spew v1.1.1 间接依赖 go
github.com/prometheus/common v0.32.1 间接依赖 go
is-builtin-module 3.2.0 间接依赖 npm
picomatch 2.3.1 间接依赖 npm
gopkg.in/jcmturner/gokrb5.v7 v7.2.3 间接依赖 go
github.com/inconshreveable/mousetrap v1.0.0 间接依赖 go
github.com/rcrowley/go-metrics v0.0.0-20190826022208-cac0b30c2563 间接依赖 go
github.com/tklauser/go-sysconf v0.3.9 间接依赖 go
github.com/mitchellh/mapstructure v1.5.0 直接依赖 go
@colors/colors 1.5.0 间接依赖 npm
io.netty:netty-codec-mqtt 4.1.85.Final 间接依赖 maven
github.com/pelletier/go-toml v1.9.4 间接依赖 go
io.netty:netty-transport-native-unix-common 4.1.85.Final 间接依赖 maven
github.com/olivere/elastic/v7 v7.0.32 直接依赖 go
github.com/google/gofuzz v1.1.0 间接依赖 go
golang.org/x/net v0.0.0-20220927171203-f486391704dc 间接依赖 go
github.com/oliveagle/jsonpath v0.0.0-20180606110733-2e52cf6e6852 直接依赖 go
github.com/spf13/afero v1.6.0 间接依赖 go
github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 间接依赖 go
async 3.2.4 间接依赖 npm
k8s.io/apiserver v0.21.0 直接依赖 go
github.com/vishvananda/netlink v1.2.0-beta 直接依赖 go
github.com/spf13/cast v1.4.1 间接依赖 go
github.com/onsi/ginkgo v1.15.1 间接依赖 go
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 间接依赖 go
golang.org/x/text v0.3.7 间接依赖 go
github.com/golang/snappy v0.0.2 直接依赖 go
golang.org/x/sync v0.0.0-20220923202941-7f9b1623fab7 间接依赖 go
github.com/magiconair/properties v1.8.5 间接依赖 go
balanced-match 1.0.2 直接依赖 npm
github.com/pmezard/go-difflib v1.0.0 间接依赖 go
golang.org/x/net v0.0.0-20210525063256-abc453219eb5 间接依赖 go
string_decoder 1.3.0 直接依赖 npm
github.com/ugorji/go/codec v1.1.7 间接依赖 go
github.com/shirou/gopsutil/v3 v3.22.10 直接依赖 go
(0)
上一篇 2023年11月8日
下一篇 2023年11月8日

相关推荐

  • yenkuanlee/IPDC 软件分析报告

    基础信息 项目名称:yenkuanlee/IPDC 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721660192064053248/1721660192097607680 此报告由Murphysec提供 漏洞…

    软件分析 2023年11月7日
    0
  • Jidcoo/LeetcodeJavaDebugEnhancer/ 软件分析报告

    基础信息 项目名称:Jidcoo/LeetcodeJavaDebugEnhancer/ 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1777183028749156352/1777183207942406144 …

    软件分析 2024年4月8日
    0
  • kaishin/gifu 软件分析报告

    基础信息 项目名称:kaishin/gifu 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1719362422883270656/1719362422916825088 此报告由Murphysec提供 漏洞列表 …

    软件分析 2023年10月31日
    0
  • colatusso/canDB.swift 软件分析报告

    基础信息 项目名称:colatusso/canDB.swift 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1716795953780490240/1716795954388664320 此报告由Murphyse…

    软件分析 2023年10月24日
    0
  • eBay/KPRN 软件分析报告

    基础信息 项目名称:eBay/KPRN 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1717365131323244544/1717365133776912384 此报告由Murphysec提供 漏洞列表 暂无 …

    软件分析 2023年10月26日
    0