基础信息
项目名称：kubernetes/ingress-gce
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1721350762515693568/1724545289383534592
此报告由Murphysec提供
漏洞列表
| 漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
|---|---|---|---|---|
| Google Golang 资源管理错误漏洞 | 拒绝服务 | MPS-c8am-hbny | CVE-2023-39325 | 高危 |
缺陷组件
| 组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
|---|---|---|---|---|
| golang.org/x/net | v0.7.0 | 0.17.0 | 间接依赖 | 可选修复 |
| golang.org/x/net | v0.9.0 | 0.17.0 | 间接依赖 | 可选修复 |
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| MIT | 116 | 低 |
| AGPL-3.0 | 1 | 高 |
| GPL-3.0 | 5 | 中 |
| Apache-2.0 | 65 | 低 |
| GPL-3.0-or-later | 2 | 低 |
| BSD-3-Clause | 54 | 低 |
| BSD-2-Clause | 5 | 低 |
| MPL-2.0 | 4 | 低 |
| ISC | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| github.com/ultraware/funlen | v0.0.3 | 间接依赖 | go |
| github.com/leonklingele/grouper | v1.1.0 | 间接依赖 | go |
| github.com/GaijinEntertainment/go-exhaustruct/v2 | v2.3.0 | 间接依赖 | go |
| github.com/alingse/asasalint | v0.0.11 | 间接依赖 | go |
| github.com/spf13/cast | v1.5.0 | 间接依赖 | go |
| github.com/denis-tingaikin/go-header | v0.4.3 | 间接依赖 | go |
| github.com/sivchari/containedctx | v1.0.2 | 间接依赖 | go |
| gitlab.com/bosi/decorder | v0.2.3 | 间接依赖 | go |
| k8s.io/component-base | v0.27.1 | 直接依赖 | go |
| github.com/ldez/gomoddirectives | v0.2.3 | 间接依赖 | go |
| github.com/OpenPeeDeeP/depguard | v1.1.1 | 间接依赖 | go |
| github.com/securego/gosec/v2 | v2.13.1 | 间接依赖 | go |
| github.com/mattn/go-runewidth | v0.0.9 | 间接依赖 | go |
| github.com/olekukonko/tablewriter | v0.0.5 | 间接依赖 | go |
| github.com/julz/importas | v0.1.0 | 间接依赖 | go |
| github.com/quasilyte/gogrep | v0.0.0-20220828223005-86e4605de09f | 间接依赖 | go |
| google.golang.org/grpc | v1.54.0 | 间接依赖 | go |
| k8s.io/kube-openapi | v0.0.0-20230308215209-15aac26d736a | 直接依赖 | go |
| golang.org/x/text | v0.7.0 | 间接依赖 | go |
| github.com/subosito/gotenv | v1.4.1 | 间接依赖 | go |
| github.com/uudashr/gocognit | v1.0.6 | 间接依赖 | go |
| k8s.io/kube-openapi | v0.0.0-20221207184640-f3cff1453715 | 直接依赖 | go |
| github.com/pmezard/go-difflib | v1.0.0 | 间接依赖 | go |
| github.com/kisielk/gotool | v1.0.0 | 间接依赖 | go |
| golang.org/x/text | v0.9.0 | 间接依赖 | go |
| github.com/golangci/dupl | v0.0.0-20180902072040-3e9179ac440a | 间接依赖 | go |
| sigs.k8s.io/structured-merge-diff/v4 | v4.2.3 | 间接依赖 | go |
| github.com/mbilski/exhaustivestruct | v1.2.0 | 间接依赖 | go |
| github.com/mitchellh/mapstructure | v1.5.0 | 间接依赖 | go |
| github.com/BurntSushi/toml | v1.2.1 | 间接依赖 | go |
| google.golang.org/protobuf | v1.30.0 | 间接依赖 | go |
| github.com/blizzy78/varnamelen | v0.8.0 | 间接依赖 | go |
| golang.org/x/sync | v0.0.0-20220819030929-7fc1605a5dde | 间接依赖 | go |
| golang.org/x/mod | v0.6.0 | 间接依赖 | go |
| github.com/inconshreveable/mousetrap | v1.0.1 | 间接依赖 | go |
| github.com/matttproud/golang_protobuf_extensions | v1.0.2 | 间接依赖 | go |
| github.com/stretchr/objx | v0.4.0 | 间接依赖 | go |
| github.com/spf13/jwalterweatherman | v1.1.0 | 间接依赖 | go |
| github.com/cespare/xxhash/v2 | v2.2.0 | 间接依赖 | go |
| github.com/golang/protobuf | v1.5.3 | 直接依赖 | go |
| github.com/mailru/easyjson | v0.7.6 | 间接依赖 | go |
| github.com/hexops/gotextdiff | v1.0.3 | 间接依赖 | go |
| github.com/kr/text | v0.2.0 | 间接依赖 | go |
| cloud.google.com/go/compute/metadata | v0.2.3 | 间接依赖 | go |
| go.uber.org/atomic | v1.7.0 | 间接依赖 | go |
| k8s.io/api | v0.27.1 | 直接依赖 | go |
| github.com/google/gofuzz | v1.1.0 | 间接依赖 | go |
| golang.org/x/net | v0.7.0 | 间接依赖 | go |
| github.com/prometheus/client_golang | v1.14.0 | 直接依赖 | go |
| github.com/gostaticanalysis/analysisutil | v0.7.1 | 间接依赖 | go |
| github.com/jingyugao/rowserrcheck | v1.1.1 | 间接依赖 | go |
| github.com/quasilyte/go-ruleguard | v0.3.18 | 间接依赖 | go |
| github.com/gogo/protobuf | v1.3.2 | 间接依赖 | go |
| github.com/ryancurrah/gomodguard | v1.2.4 | 间接依赖 | go |
| github.com/go-xmlfmt/xmlfmt | v0.0.0-20191208150333-d5b6f63a941b | 间接依赖 | go |
| k8s.io/gengo | v0.0.0-20220902162205-c0856e24416d | 间接依赖 | go |
| github.com/yeya24/promlinter | v0.2.0 | 间接依赖 | go |
| github.com/mitchellh/go-homedir | v1.1.0 | 间接依赖 | go |
| github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | 间接依赖 | go |
| golang.org/x/exp | v0.0.0-20220722155223-a9213eeb770e | 间接依赖 | go |
| golang.org/x/sys | v0.7.0 | 间接依赖 | go |
| k8s.io/utils | v0.0.0-20230209194617-a36077c30491 | 直接依赖 | go |
| github.com/emicklei/go-restful/v3 | v3.9.0 | 间接依赖 | go |
| github.com/onsi/ginkgo/v2 | v2.4.0 | 间接依赖 | go |
| github.com/golangci/check | v0.0.0-20180506172741-cfe4005ccda2 | 间接依赖 | go |
| golang.org/x/crypto | v0.1.0 | 间接依赖 | go |
| golang.org/x/net | v0.9.0 | 间接依赖 | go |
| github.com/kkHAIKE/contextcheck | v1.1.3 | 间接依赖 | go |
| mvdan.cc/lint | v0.0.0-20170908181259-adc824a0674b | 间接依赖 | go |
| github.com/stretchr/testify | v1.8.0 | 间接依赖 | go |
| github.com/spf13/afero | v1.8.2 | 间接依赖 | go |
| mvdan.cc/unparam | v0.0.0-20220706161116-678bad134442 | 间接依赖 | go |
| github.com/sashamelentyev/usestdlibvars | v1.20.0 | 间接依赖 | go |
| github.com/prometheus/client_golang | v1.12.1 | 间接依赖 | go |
| github.com/nakabonne/nestif | v0.3.1 | 间接依赖 | go |
| github.com/sivchari/tenv | v1.7.0 | 间接依赖 | go |
| honnef.co/go/tools | v0.3.3 | 间接依赖 | go |
| github.com/nbutton23/zxcvbn-go | v0.0.0-20210217022336-fa2cb2858354 | 间接依赖 | go |
| golang.org/x/oauth2 | v0.7.0 | 直接依赖 | go |
| gopkg.in/warnings.v0 | v0.1.2 | 间接依赖 | go |
| github.com/go-critic/go-critic | v0.6.5 | 间接依赖 | go |
| github.com/go-toolsmith/astequal | v1.0.3 | 间接依赖 | go |
| github.com/ashanbrown/makezero | v1.1.1 | 间接依赖 | go |
| github.com/quasilyte/stdinfo | v0.0.0-20220114132959-f7386bf02567 | 间接依赖 | go |
| github.com/breml/errchkjson | v0.3.0 | 间接依赖 | go |
| github.com/charithe/durationcheck | v0.0.9 | 间接依赖 | go |
| github.com/gofrs/flock | v0.8.1 | 间接依赖 | go |
| gopkg.in/inf.v0 | v0.9.1 | 间接依赖 | go |
| go.uber.org/multierr | v1.6.0 | 间接依赖 | go |
| github.com/golangci/revgrep | v0.0.0-20220804021717-745bb2f7c2e6 | 间接依赖 | go |
| github.com/tommy-muehle/go-mnd/v2 | v2.5.1 | 间接依赖 | go |
| github.com/matoous/godox | v0.0.0-20210227103229-6504466cf951 | 间接依赖 | go |
| github.com/stbenjam/no-sprintf-host-port | v0.1.1 | 间接依赖 | go |
| github.com/gostaticanalysis/nilerr | v0.1.1 | 间接依赖 | go |
| k8s.io/client-go | v0.27.1 | 直接依赖 | go |
| github.com/google/uuid | v1.3.0 | 间接依赖 | go |
| github.com/golangci/gofmt | v0.0.0-20220901101216-f2edd75033f2 | 间接依赖 | go |
| github.com/golang/groupcache | v0.0.0-20210331224755-41bb18bfe9da | 间接依赖 | go |
| github.com/tdakkota/asciicheck | v0.1.1 | 间接依赖 | go |
| github.com/esimonov/ifshort | v1.0.4 | 间接依赖 | go |
| github.com/go-toolsmith/strparse | v1.0.0 | 间接依赖 | go |
| github.com/sonatard/noctx | v0.0.1 | 间接依赖 | go |
| github.com/yagipy/maintidx | v1.0.0 | 间接依赖 | go |
| github.com/kisielk/errcheck | v1.6.2 | 间接依赖 | go |
| github.com/tomarrell/wrapcheck/v2 | v2.7.0 | 间接依赖 | go |
| k8s.io/cloud-provider-gcp/providers | v0.27.1 | 直接依赖 | go |
| github.com/polyfloyd/go-errorlint | v1.0.5 | 间接依赖 | go |
| github.com/timakin/bodyclose | v0.0.0-20210704033933-f49887972144 | 间接依赖 | go |
| github.com/ssgreg/nlreturn/v2 | v2.2.1 | 间接依赖 | go |
| golang.org/x/sys | v0.5.0 | 间接依赖 | go |
| github.com/kunwardeep/paralleltest | v1.0.6 | 间接依赖 | go |
| github.com/evanphx/json-patch | v4.12.0+incompatible | 间接依赖 | go |
| github.com/prometheus/common | v0.37.0 | 间接依赖 | go |
| github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | 间接依赖 | go |
| github.com/fatih/color | v1.13.0 | 间接依赖 | go |
| github.com/go-toolsmith/astfmt | v1.0.0 | 间接依赖 | go |
| github.com/Abirdcfly/dupword | v0.0.7 | 间接依赖 | go |
| gopkg.in/yaml.v3 | v3.0.1 | 间接依赖 | go |
| github.com/go-openapi/jsonreference | v0.20.0 | 间接依赖 | go |
| github.com/Antonboom/errname | v0.1.7 | 间接依赖 | go |
| github.com/gobwas/glob | v0.2.3 | 间接依赖 | go |
| github.com/sashamelentyev/interfacebloat | v1.1.0 | 间接依赖 | go |
| github.com/prometheus/common | v0.32.1 | 间接依赖 | go |
| github.com/chavacava/garif | v0.0.0-20220630083739-93517212f375 | 间接依赖 | go |
| k8s.io/apimachinery | v0.27.1 | 直接依赖 | go |
| github.com/mattn/go-colorable | v0.1.13 | 间接依赖 | go |
| gopkg.in/ini.v1 | v1.67.0 | 间接依赖 | go |
| github.com/lufeee/execinquery | v1.2.1 | 间接依赖 | go |
| google.golang.org/appengine | v1.6.7 | 间接依赖 | go |
| github.com/butuzov/ireturn | v0.1.1 | 间接依赖 | go |
| github.com/spf13/pflag | v1.0.5 | 直接依赖 | go |
| github.com/prometheus/client_model | v0.3.0 | 直接依赖 | go |
| k8s.io/cloud-provider | v0.27.1 | 直接依赖 | go |
| github.com/beorn7/perks | v1.0.1 | 间接依赖 | go |
| github.com/bkielbasa/cyclop | v1.2.0 | 间接依赖 | go |
| github.com/google/go-cmp | v0.5.9 | 直接依赖 | go |
| github.com/go-openapi/jsonreference | v0.20.1 | 间接依赖 | go |
| github.com/mailru/easyjson | v0.7.7 | 间接依赖 | go |
| github.com/gostaticanalysis/comment | v1.4.2 | 间接依赖 | go |
| github.com/golangci/go-misc | v0.0.0-20220329215616-d24fe342adfe | 间接依赖 | go |
| github.com/sanposhiho/wastedassign/v2 | v2.0.6 | 间接依赖 | go |
| github.com/prometheus/client_model | v0.2.0 | 间接依赖 | go |
| github.com/jgautheron/goconst | v1.5.1 | 间接依赖 | go |
| github.com/sivchari/nosnakecase | v1.7.0 | 间接依赖 | go |
| github.com/mgechev/revive | v1.2.4 | 间接依赖 | go |
| github.com/go-toolsmith/astcopy | v1.0.2 | 间接依赖 | go |
| github.com/sirupsen/logrus | v1.9.0 | 间接依赖 | go |
| google.golang.org/protobuf | v1.28.1 | 间接依赖 | go |
| sigs.k8s.io/yaml | v1.3.0 | 间接依赖 | go |
| golang.org/x/exp | v0.0.0-20230425010034-47ecfdc1ba53 | 直接依赖 | go |
| github.com/hashicorp/errwrap | v1.0.0 | 间接依赖 | go |
| github.com/fzipp/gocyclo | v0.6.0 | 间接依赖 | go |
| github.com/modern-go/reflect2 | v1.0.2 | 间接依赖 | go |
| google.golang.org/api | v0.122.0 | 直接依赖 | go |
| github.com/json-iterator/go | v1.1.12 | 间接依赖 | go |
| github.com/go-toolsmith/astp | v1.0.0 | 间接依赖 | go |
| github.com/go-toolsmith/astcast | v1.0.0 | 间接依赖 | go |
| github.com/matttproud/golang_protobuf_extensions | v1.0.1 | 间接依赖 | go |
| github.com/google/gnostic | v0.5.7-v3refs | 间接依赖 | go |
| github.com/magiconair/properties | v1.8.6 | 间接依赖 | go |
| github.com/Masterminds/semver | v1.5.0 | 间接依赖 | go |
| github.com/shazow/go-diff | v0.0.0-20160112020656-b6b7b6733b8c | 间接依赖 | go |
| sigs.k8s.io/json | v0.0.0-20221116044647-bc3834ca7abd | 间接依赖 | go |
| github.com/spf13/viper | v1.12.0 | 间接依赖 | go |
| cloud.google.com/go/compute | v1.19.0 | 间接依赖 | go |
| github.com/daixiang0/gci | v0.8.1 | 间接依赖 | go |
| k8s.io/klog/v2 | v2.90.1 | 直接依赖 | go |
| github.com/maratori/testableexamples | v1.0.0 | 间接依赖 | go |
| github.com/go-openapi/jsonpointer | v0.19.6 | 间接依赖 | go |
| google.golang.org/genproto | v0.0.0-20230410155749-daa745c078e1 | 间接依赖 | go |
| github.com/nishanths/exhaustive | v0.8.3 | 间接依赖 | go |
| github.com/golangci/unconvert | v0.0.0-20180507085042-28b1c447d1f4 | 间接依赖 | go |
| mvdan.cc/gofumpt | v0.4.0 | 间接依赖 | go |
| github.com/golang/protobuf | v1.5.2 | 间接依赖 | go |
| go.opencensus.io | v0.24.0 | 间接依赖 | go |
| github.com/cespare/xxhash/v2 | v2.1.2 | 间接依赖 | go |
| 4d63.com/gochecknoglobals | v0.1.0 | 间接依赖 | go |
| k8s.io/cloud-provider-gcp/crd | v0.0.0-20230801075638-1b50c1969753 | 直接依赖 | go |
| github.com/google/s2a-go | v0.1.3 | 间接依赖 | go |
| github.com/hashicorp/go-multierror | v1.1.1 | 间接依赖 | go |
| github.com/blang/semver/v4 | v4.0.0 | 间接依赖 | go |
| github.com/rogpeppe/go-internal | v1.10.0 | 间接依赖 | go |
| github.com/pelletier/go-toml | v1.9.5 | 间接依赖 | go |
| github.com/ettle/strcase | v0.1.1 | 间接依赖 | go |
| github.com/phayes/checkstyle | v0.0.0-20170904204023-bfd46e6a821d | 间接依赖 | go |
| github.com/fsnotify/fsnotify | v1.5.4 | 间接依赖 | go |
| golang.org/x/term | v0.7.0 | 间接依赖 | go |
| github.com/timonwong/loggercheck | v0.9.3 | 间接依赖 | go |
| github.com/hashicorp/go-version | v1.6.0 | 间接依赖 | go |
| github.com/sourcegraph/go-diff | v0.6.1 | 间接依赖 | go |
| k8s.io/apiextensions-apiserver | v0.26.1 | 直接依赖 | go |
| golang.org/x/tools | v0.2.0 | 间接依赖 | go |
| github.com/breml/bidichk | v0.2.3 | 间接依赖 | go |
| github.com/prometheus/procfs | v0.8.0 | 间接依赖 | go |
| github.com/kyoh86/exportloopref | v0.1.8 | 间接依赖 | go |
| github.com/jirfag/go-printf-func-name | v0.0.0-20200119135958-7558a9eaa5af | 间接依赖 | go |
| github.com/spf13/cobra | v1.6.0 | 直接依赖 | go |
| github.com/go-toolsmith/typep | v1.0.2 | 间接依赖 | go |
| github.com/moricho/tparallel | v0.2.1 | 间接依赖 | go |
| istio.io/api | v0.0.0-20190809125725-591cf32c1d0e | 直接依赖 | go |
| github.com/firefart/nonamedreturns | v1.0.4 | 间接依赖 | go |
| github.com/googleapis/enterprise-certificate-proxy | v0.2.3 | 间接依赖 | go |
| github.com/ashanbrown/forbidigo | v1.3.0 | 间接依赖 | go |
| github.com/curioswitch/go-reassign | v0.2.0 | 间接依赖 | go |
| github.com/gostaticanalysis/forcetypeassert | v0.1.0 | 间接依赖 | go |
| github.com/tetafro/godot | v1.4.11 | 间接依赖 | go |
| github.com/go-openapi/swag | v0.19.14 | 间接依赖 | go |
| go.uber.org/zap | v1.17.0 | 间接依赖 | go |
| github.com/stretchr/testify | v1.8.1 | 直接依赖 | go |
| github.com/golangci/golangci-lint | v1.50.1 | 直接依赖 | go |
| github.com/pkg/errors | v0.9.1 | 间接依赖 | go |
| github.com/ultraware/whitespace | v0.0.5 | 间接依赖 | go |
| github.com/ryanrolds/sqlclosecheck | v0.3.0 | 间接依赖 | go |
| github.com/kulti/thelper | v0.6.3 | 间接依赖 | go |
| github.com/gordonklaus/ineffassign | v0.0.0-20210914165742-4cc7213b9bc8 | 间接依赖 | go |
| github.com/alexkohler/prealloc | v1.0.0 | 间接依赖 | go |
| github.com/golangci/lint-1 | v0.0.0-20191013205115-297bf364a8e0 | 间接依赖 | go |
| github.com/josharian/intern | v1.0.0 | 间接依赖 | go |
| github.com/golangci/maligned | v0.0.0-20180506175553-b1d89398deca | 间接依赖 | go |
| github.com/prometheus/procfs | v0.7.3 | 间接依赖 | go |
| github.com/hashicorp/hcl | v1.0.0 | 间接依赖 | go |
| github.com/nishanths/predeclared | v0.2.2 | 间接依赖 | go |
| github.com/GoogleCloudPlatform/k8s-cloud-provider | v1.24.0 | 直接依赖 | go |
| github.com/go-logr/logr | v1.2.3 | 间接依赖 | go |
| gopkg.in/yaml.v2 | v2.4.0 | 间接依赖 | go |
| github.com/ldez/tagliatelle | v0.3.1 | 间接依赖 | go |
| github.com/davecgh/go-spew | v1.1.1 | 间接依赖 | go |
| github.com/golangci/misspell | v0.3.5 | 间接依赖 | go |
| github.com/maratori/testpackage | v1.1.0 | 间接依赖 | go |
| github.com/fatih/structtag | v1.2.0 | 间接依赖 | go |
| github.com/onsi/gomega | v1.23.0 | 间接依赖 | go |
| golang.org/x/exp/typeparams | v0.0.0-20220827204233-334a2380cb91 | 间接依赖 | go |
| github.com/go-openapi/swag | v0.22.3 | 间接依赖 | go |
| github.com/quasilyte/regex/syntax | v0.0.0-20200407221936-30656e2c4a95 | 间接依赖 | go |
| gopkg.in/gcfg.v1 | v1.2.3 | 间接依赖 | go |
| golang.org/x/time | v0.0.0-20220210224613-90d013bbcef8 | 间接依赖 | go |
| github.com/Djarvur/go-err113 | v0.0.0-20210108212216-aea10b59be24 | 间接依赖 | go |
| github.com/Antonboom/nilnil | v0.1.1 | 间接依赖 | go |
| mvdan.cc/interfacer | v0.0.0-20180901003855-c20040233aed | 间接依赖 | go |
| github.com/imdario/mergo | v0.3.7 | 间接依赖 | go |
| github.com/go-openapi/jsonpointer | v0.19.5 | 间接依赖 | go |
| github.com/kr/pretty | v0.3.0 | 直接依赖 | go |
| github.com/googleapis/gax-go/v2 | v2.8.0 | 间接依赖 | go |
| k8s.io/klog/v2 | v2.80.1 | 间接依赖 | go |
| github.com/mattn/go-isatty | v0.0.16 | 间接依赖 | go |
| github.com/bombsimon/wsl/v3 | v3.3.0 | 间接依赖 | go |
| github.com/pelletier/go-toml/v2 | v2.0.5 | 间接依赖 | go |