基础信息
项目名称：cloudfoundry-incubator/diego-release
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1721094076194951168/1725497532261818368
此报告由Murphysec提供
漏洞列表
暂无
缺陷组件
暂无
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| BSD-3-Clause | 22 | 低 |
| MIT | 35 | 低 |
| Apache-2.0 | 92 | 低 |
| ISC | 1 | 低 |
| GPL-3.0 | 1 | 中 |
| CC-BY-SA-4.0 | 2 | 中 |
| BSD-2-Clause | 3 | 低 |
| 自定义许可证 | 1 | 低 |
| MPL-2.0 | 4 | 低 |
| CC-BY-4.0 | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| golang.org/x/oauth2 | v0.14.0 | 直接依赖 | go |
| racc | 1.7.1 | 间接依赖 | bundler |
| github.com/nu7hatch/gouuid | v0.0.0-20131221200532-179d4d0c4d8d | 直接依赖 | go |
| code.cloudfoundry.org/diego-logging-client | v0.0.0-20231114145421-43971a663fb5 | 直接依赖 | go |
| github.com/jackc/fake | v0.0.0-20150926172116-812a484cc733 | 间接依赖 | go |
| github.com/awslabs/amazon-ecr-credential-helper/ecr-login | v0.0.0-20231111033029-eb10ac4f1f27 | 直接依赖 | go |
| github.com/prometheus/client_model | v0.5.0 | 间接依赖 | go |
| github.com/sirupsen/logrus | v1.9.3 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/internal/configsources | v1.2.2 | 间接依赖 | go |
| golang.org/x/mod | v0.14.0 | 间接依赖 | go |
| github.com/census-instrumentation/opencensus-proto | v0.4.1 | 间接依赖 | go |
| github.com/cloudfoundry-community/go-uaa | v0.3.2 | 直接依赖 | go |
| github.com/moby/sys/mountinfo | v0.7.1 | 间接依赖 | go |
| github.com/google/shlex | v0.0.0-20191202100458-e7afc7fbc510 | 直接依赖 | go |
| rainbow | 3.1.1 | 间接依赖 | bundler |
| github.com/onsi/ginkgo/v2 | v2.13.1 | 直接依赖 | go |
| github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 | v2.5.2 | 间接依赖 | go |
| code.cloudfoundry.org/go-loggregator/v8 | v8.0.5 | 直接依赖 | go |
| github.com/distribution/reference | v0.5.0 | 间接依赖 | go |
| code.cloudfoundry.org/go-diodes | v0.0.0-20231113191959-85adc333ee36 | 间接依赖 | go |
| github.com/nats-io/nkeys | v0.4.6 | 间接依赖 | go |
| github.com/prometheus/common | v0.45.0 | 间接依赖 | go |
| github.com/creack/pty | v1.1.20 | 间接依赖 | go |
| github.com/golang-jwt/jwt/v4 | v4.5.0 | 直接依赖 | go |
| google.golang.org/protobuf | v1.31.0 | 间接依赖 | go |
| github.com/docker/go-metrics | v0.0.1 | 间接依赖 | go |
| github.com/BurntSushi/toml | v1.3.2 | 间接依赖 | go |
| code.cloudfoundry.org/debugserver | v0.0.0-20231114142234-a442cc402287 | 直接依赖 | go |
| ast | 2.4.2 | 间接依赖 | bundler |
| rspec-core | 3.12.2 | 间接依赖 | bundler |
| github.com/pkg/sftp | v1.13.6 | 直接依赖 | go |
| parallel | 1.23.0 | 间接依赖 | bundler |
| github.com/openzipkin/zipkin-go | v0.4.2 | 直接依赖 | go |
| github.com/fsnotify/fsnotify | v1.7.0 | 直接依赖 | go |
| github.com/cloudfoundry/socks5-proxy | v0.2.103 | 间接依赖 | go |
| golang.org/x/tools | v0.15.0 | 间接依赖 | go |
| filippo.io/edwards25519 | v1.0.0 | 间接依赖 | go |
| google.golang.org/genproto/googleapis/api | v0.0.0-20231106174013-bbf56f31fb17 | 间接依赖 | go |
| github.com/cyphar/filepath-securejoin | v0.2.4 | 间接依赖 | go |
| golang.org/x/text | v0.14.0 | 间接依赖 | go |
| github.com/vishvananda/netns | v0.0.4 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/sts | v1.25.1 | 间接依赖 | go |
| ruby-progressbar | 1.13.0 | 间接依赖 | bundler |
| code.cloudfoundry.org/cfhttp | v2.0.0+incompatible | 直接依赖 | go |
| github.com/aws/smithy-go | v1.17.0 | 间接依赖 | go |
| github.com/nats-io/nats-server/v2 | v2.10.5 | 直接依赖 | go |
| gopkg.in/yaml.v3 | v3.0.1 | 间接依赖 | go |
| github.com/prometheus/procfs | v0.12.0 | 间接依赖 | go |
| rubocop | 1.57.1 | 间接依赖 | bundler |
| regexp_parser | 2.8.2 | 间接依赖 | bundler |
| semi_semantic | 1.2.0 | 间接依赖 | bundler |
| bosh-template | 2.4.0 | 间接依赖 | bundler |
| golang.org/x/time | v0.4.0 | 直接依赖 | go |
| github.com/cncf/xds/go | v0.0.0-20231109132714-523115ebc101 | 间接依赖 | go |
| github.com/opencontainers/runc | v1.1.10 | 间接依赖 | go |
| golang.org/x/crypto | v0.15.0 | 直接依赖 | go |
| google.golang.org/genproto/googleapis/rpc | v0.0.0-20231106174013-bbf56f31fb17 | 间接依赖 | go |
| code.cloudfoundry.org/lager/v3 | v3.0.2 | 直接依赖 | go |
| github.com/nats-io/jwt/v2 | v2.5.3 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/ecr | v1.22.1 | 间接依赖 | go |
| github.com/cloudfoundry/go-socks5 | v0.0.0-20180221174514-54f73bdb8a8e | 间接依赖 | go |
| code.cloudfoundry.org/credhub-cli | v0.0.0-20231113140620-f30160402bd4 | 直接依赖 | go |
| code.cloudfoundry.org/eventhub | v0.0.0-20231114142847-bd6625d1028d | 直接依赖 | go |
| github.com/hashicorp/errwrap | v1.1.0 | 直接依赖 | go |
| code.cloudfoundry.org/cf-routing-test-helpers | v0.0.0-20230612154734-4f65ecb98d93 | 直接依赖 | go |
| github.com/onsi/gomega | v1.30.0 | 直接依赖 | go |
| google.golang.org/appengine | v1.6.8 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/feature/ec2/imds | v1.14.3 | 间接依赖 | go |
| github.com/lib/pq | v1.10.9 | 直接依赖 | go |
| github.com/docker/docker | v24.0.7+incompatible | 直接依赖 | go |
| github.com/tedsuo/ifrit | v0.0.0-20230516164442-7862c310ad26 | 直接依赖 | go |
| google.golang.org/grpc | v1.59.0 | 直接依赖 | go |
| code.cloudfoundry.org/clock | v1.1.0 | 直接依赖 | go |
| github.com/google/go-cmp | v0.6.0 | 间接依赖 | go |
| github.com/minio/highwayhash | v1.0.2 | 间接依赖 | go |
| github.com/Microsoft/go-winio | v0.6.1 | 间接依赖 | go |
| language_server-protocol | 3.17.0.3 | 间接依赖 | bundler |
| github.com/cockroachdb/apd | v1.1.0 | 间接依赖 | go |
| github.com/hashicorp/go-multierror | v1.1.1 | 直接依赖 | go |
| github.com/vito/go-sse | v1.0.0 | 直接依赖 | go |
| github.com/prometheus/client_golang | v1.17.0 | 间接依赖 | go |
| github.com/hashicorp/go-version | v1.6.0 | 间接依赖 | go |
| code.cloudfoundry.org/goshims | v0.27.0 | 直接依赖 | go |
| github.com/golang/protobuf | v1.5.3 | 直接依赖 | go |
| github.com/pborman/getopt | v1.1.0 | 直接依赖 | go |
| github.com/docker/distribution | v2.8.3+incompatible | 间接依赖 | go |
| github.com/spf13/pflag | v1.0.5 | 间接依赖 | go |
| code.cloudfoundry.org/archiver | v0.0.0-20231114143709-75c3c24574bd | 直接依赖 | go |
| code.cloudfoundry.org/dockerdriver | v0.0.0-20231114145754-913f87a8f68c | 直接依赖 | go |
| rubocop-ast | 1.29.0 | 间接依赖 | bundler |
| golang.org/x/net | v0.18.0 | 直接依赖 | go |
| github.com/gogo/protobuf | v1.3.2 | 直接依赖 | go |
| github.com/docker/go-connections | v0.4.0 | 间接依赖 | go |
| github.com/kr/pty | v1.1.8 | 直接依赖 | go |
| github.com/coreos/go-systemd/v22 | v22.5.0 | 间接依赖 | go |
| github.com/cloudfoundry/sonde-go | v0.0.0-20230911203642-fa89d986ae20 | 间接依赖 | go |
| base64 | 0.1.1 | 间接依赖 | bundler |
| github.com/containers/image | v3.0.2+incompatible | 直接依赖 | go |
| github.com/pkg/errors | v0.9.1 | 直接依赖 | go |
| code.cloudfoundry.org/commandrunner | v0.0.0-20230612151827-2b11a2b4e9b8 | 间接依赖 | go |
| rexml | 3.2.6 | 间接依赖 | bundler |
| github.com/go-sql-driver/mysql | v1.7.1 | 直接依赖 | go |
| github.com/GaryBoone/GoStats | v0.0.0-20130122001700-1993eafbef57 | 直接依赖 | go |
| github.com/google/pprof | v0.0.0-20231101202521-4ca4178f5c7a | 间接依赖 | go |
| code.cloudfoundry.org/localip | v0.0.0-20231114145404-41b8c8e318cb | 直接依赖 | go |
| github.com/tedsuo/rata | v1.0.0 | 直接依赖 | go |
| rspec-expectations | 3.12.3 | 间接依赖 | bundler |
| parser | 3.2.2.4 | 间接依赖 | bundler |
| github.com/opencontainers/runtime-spec | v1.1.0 | 间接依赖 | go |
| github.com/nats-io/nats.go | v1.31.0 | 直接依赖 | go |
| github.com/godbus/dbus/v5 | v5.1.0 | 间接依赖 | go |
| github.com/cespare/xxhash/v2 | v2.2.0 | 间接依赖 | go |
| github.com/nats-io/nuid | v1.0.1 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/credentials | v1.16.0 | 间接依赖 | go |
| github.com/jinzhu/gorm | v1.9.16 | 直接依赖 | go |
| github.com/spf13/cobra | v1.8.0 | 直接依赖 | go |
| github.com/kr/fs | v0.1.0 | 间接依赖 | go |
| github.com/envoyproxy/go-control-plane | v0.11.1 | 直接依赖 | go |
| github.com/gorilla/mux | v1.8.1 | 间接依赖 | go |
| github.com/go-test/deep | v1.1.0 | 直接依赖 | go |
| go.uber.org/automaxprocs | v1.5.3 | 间接依赖 | go |
| code.cloudfoundry.org/tlsconfig | v0.0.0-20231017135636-f0e44068c22f | 直接依赖 | go |
| github.com/docker/docker-credential-helpers | v0.8.0 | 间接依赖 | go |
| rspec | 3.12.0 | 间接依赖 | bundler |
| code.cloudfoundry.org/cfhttp/v2 | v2.0.1-0.20210513172332-4c5ee488a657 | 直接依赖 | go |
| github.com/aws/aws-sdk-go-v2 | v1.22.2 | 间接依赖 | go |
| github.com/opencontainers/go-digest | v1.0.0 | 直接依赖 | go |
| github.com/envoyproxy/protoc-gen-validate | v1.0.2 | 间接依赖 | go |
| github.com/bmizerany/pat | v0.0.0-20210406213842-e4b6760bdd6f | 间接依赖 | go |
| github.com/jinzhu/inflection | v1.0.0 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/ecrpublic | v1.20.1 | 间接依赖 | go |
| github.com/onsi/say | v1.1.0 | 直接依赖 | go |
| github.com/ajstarks/svgo | v0.0.0-20211024235047-1546f124cd8b | 直接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/sso | v1.17.1 | 间接依赖 | go |
| github.com/gofrs/uuid | v4.0.0+incompatible | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/internal/ini | v1.7.0 | 间接依赖 | go |
| gopkg.in/yaml.v2 | v2.4.0 | 直接依赖 | go |
| github.com/jackc/pgx | v3.6.2+incompatible | 直接依赖 | go |
| diff-lcs | 1.5.0 | 间接依赖 | bundler |
| github.com/opencontainers/image-spec | v1.1.0-rc5 | 直接依赖 | go |
| code.cloudfoundry.org/bytefmt | v0.0.0-20231017140541-3b893ed0421b | 直接依赖 | go |
| json | 2.6.3 | 间接依赖 | bundler |
| github.com/cactus/go-statsd-client | v3.1.1-0.20161031215955-d8eabe07bc70+incompatible | 直接依赖 | go |
| github.com/go-logr/logr | v1.3.0 | 间接依赖 | go |
| github.com/matttproud/golang_protobuf_extensions | v1.0.4 | 间接依赖 | go |
| github.com/vishvananda/netlink | v1.2.1-beta.2 | 间接依赖 | go |
| unicode-display_width | 2.5.0 | 间接依赖 | bundler |
| github.com/mitchellh/go-homedir | v1.1.0 | 间接依赖 | go |
| code.cloudfoundry.org/certsplitter | v0.0.0-20231113153630-7d4f5a093b3b | 直接依赖 | go |
| go.step.sm/crypto | v0.36.1 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/config | v1.25.0 | 间接依赖 | go |
| rspec-mocks | 3.12.6 | 间接依赖 | bundler |
| github.com/inconshreveable/mousetrap | v1.1.0 | 间接依赖 | go |
| github.com/cloudfoundry/dropsonde | v1.1.0 | 直接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/ssooidc | v1.19.1 | 间接依赖 | go |
| github.com/moby/term | v0.5.0 | 间接依赖 | go |
| github.com/go-task/slim-sprig | v0.0.0-20230315185526-52ccab3ef572 | 间接依赖 | go |
| github.com/square/certstrap | v1.3.0 | 直接依赖 | go |
| golang.org/x/sys | v0.14.0 | 直接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/internal/presigned-url | v1.10.2 | 间接依赖 | go |
| code.cloudfoundry.org/cf-tcp-router | v0.0.0-20230911184912-89625e5d5967 | 直接依赖 | go |
| github.com/ghodss/yaml | v1.0.0 | 直接依赖 | go |
| gotest.tools/v3 | v3.5.1 | 间接依赖 | go |
| github.com/aws/aws-sdk-go | v1.47.11 | 直接依赖 | go |
| rspec-support | 3.12.1 | 间接依赖 | bundler |
| github.com/containers/storage | v1.45.1 | 间接依赖 | go |
| github.com/Azure/go-ansiterm | v0.0.0-20230124172434-306776ec8161 | 间接依赖 | go |
| github.com/docker/libtrust | v0.0.0-20160708172513-aabc10ec26b7 | 直接依赖 | go |
| github.com/mitchellh/hashstructure | v1.1.0 | 直接依赖 | go |
| code.cloudfoundry.org/durationjson | v0.0.0-20231114145350-b88ca248aa53 | 直接依赖 | go |
| code.cloudfoundry.org/guardian | v0.0.0-20231108202733-3d2fd9566e8b | 直接依赖 | go |
| github.com/klauspost/compress | v1.17.3 | 间接依赖 | go |
| github.com/jmespath/go-jmespath | v0.4.0 | 间接依赖 | go |
| github.com/beorn7/perks | v1.0.1 | 间接依赖 | go |
| code.cloudfoundry.org/garden | v0.0.0-20231114181656-4c2a4ae2aad0 | 直接依赖 | go |