基础信息
项目名称：dunglas/mercure
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1721151544073719808/1729310431426076672
此报告由Murphysec提供
漏洞列表
暂无
缺陷组件
暂无
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| MIT | 75 | 低 |
| Apache-2.0 | 56 | 低 |
| BSD-3-Clause | 32 | 低 |
| MPL-2.0 | 3 | 低 |
| ISC | 1 | 低 |
| BSD-2-Clause | 5 | 低 |
| CC0-1.0 | 1 | 低 |
| AGPL-3.0 | 1 | 高 |
| 自定义许可证 | 1 | 低 |
| BSD-2-Clause-Views | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| github.com/jackc/pgconn | v1.14.1 | 间接依赖 | go |
| cloud.google.com/go/iam | v1.1.2 | 间接依赖 | go |
| github.com/pmezard/go-difflib | v1.0.1-0.20181226105442-5d4384ee4fb2 | 间接依赖 | go |
| github.com/jackc/pgio | v1.0.0 | 间接依赖 | go |
| github.com/jackc/pgservicefile | v0.0.0-20221227161230-091c0ba34f0a | 间接依赖 | go |
| github.com/jackc/pgtype | v1.14.0 | 间接依赖 | go |
| github.com/jackc/pgpassfile | v1.0.0 | 间接依赖 | go |
| requirements.txt | 间接依赖 | pip | |
| go.etcd.io/bbolt | v1.3.7 | 直接依赖 | go |
| github.com/gofrs/uuid | v4.4.0+incompatible | 直接依赖 | go |
| github.com/go-logfmt/logfmt | v0.6.0 | 间接依赖 | go |
| go.opentelemetry.io/contrib/propagators/ot | v1.17.0 | 间接依赖 | go |
| github.com/quic-go/qpack | v0.4.0 | 间接依赖 | go |
| go.uber.org/zap | v1.26.0 | 直接依赖 | go |
| go.step.sm/cli-utils | v0.8.0 | 间接依赖 | go |
| github.com/yosida95/uritemplate/v3 | v3.0.2 | 直接依赖 | go |
| github.com/mitchellh/copystructure | v1.2.0 | 间接依赖 | go |
| github.com/huandu/xstrings | v1.4.0 | 间接依赖 | go |
| golang.org/x/tools | v0.14.0 | 间接依赖 | go |
| gopkg.in/ini.v1 | v1.67.0 | 间接依赖 | go |
| github.com/cenkalti/backoff/v4 | v4.2.1 | 间接依赖 | go |
| github.com/subosito/gotenv | v1.6.0 | 间接依赖 | go |
| github.com/mastercactapus/proxyprotocol | v0.0.4 | 间接依赖 | go |
| github.com/urfave/cli | v1.22.14 | 间接依赖 | go |
| github.com/hashicorp/golang-lru | v1.0.2 | 直接依赖 | go |
| google.golang.org/genproto/googleapis/rpc | v0.0.0-20231009173412-8bfb1ae86b6c | 间接依赖 | go |
| golang.org/x/sync | v0.4.0 | 间接依赖 | go |
| github.com/imdario/mergo | v0.3.16 | 间接依赖 | go |
| github.com/dlclark/regexp2 | v1.10.0 | 间接依赖 | go |
| github.com/google/uuid | v1.3.1 | 间接依赖 | go |
| github.com/go-task/slim-sprig | v0.0.0-20230315185526-52ccab3ef572 | 间接依赖 | go |
| go.step.sm/linkedca | v0.20.1 | 间接依赖 | go |
| github.com/fsnotify/fsnotify | v1.6.0 | 间接依赖 | go |
| github.com/yuin/goldmark | v1.5.6 | 间接依赖 | go |
| github.com/chzyer/readline | v1.5.1 | 间接依赖 | go |
| github.com/google/certificate-transparency-go | v1.1.6 | 间接依赖 | go |
| golang.org/x/term | v0.13.0 | 间接依赖 | go |
| github.com/shopspring/decimal | v1.3.1 | 间接依赖 | go |
| github.com/inconshreveable/mousetrap | v1.1.0 | 间接依赖 | go |
| github.com/mitchellh/reflectwalk | v1.0.2 | 间接依赖 | go |
| github.com/klauspost/cpuid/v2 | v2.2.5 | 间接依赖 | go |
| github.com/spf13/cast | v1.5.1 | 间接依赖 | go |
| github.com/BurntSushi/toml | v1.3.2 | 间接依赖 | go |
| github.com/go-kit/kit | v0.13.0 | 间接依赖 | go |
| github.com/unrolled/secure | v1.13.0 | 直接依赖 | go |
| github.com/manifoldco/promptui | v0.9.0 | 间接依赖 | go |
| github.com/cpuguy83/go-md2man/v2 | v2.0.3 | 间接依赖 | go |
| github.com/micromdm/scep/v2 | v2.1.0 | 间接依赖 | go |
| github.com/stoewer/go-strcase | v1.3.0 | 间接依赖 | go |
| go.step.sm/crypto | v0.36.0 | 间接依赖 | go |
| github.com/davecgh/go-spew | v1.1.2-0.20180830191138-d8f796af33cc | 间接依赖 | go |
| filippo.io/edwards25519 | v1.0.0 | 间接依赖 | go |
| github.com/cespare/xxhash/v2 | v2.2.0 | 间接依赖 | go |
| github.com/gorilla/mux | v1.8.0 | 直接依赖 | go |
| github.com/Microsoft/go-winio | v0.6.1 | 间接依赖 | go |
| github.com/alecthomas/chroma/v2 | v2.9.1 | 间接依赖 | go |
| github.com/felixge/httpsnoop | v1.0.3 | 间接依赖 | go |
| google.golang.org/protobuf | v1.31.0 | 间接依赖 | go |
| github.com/onsi/ginkgo/v2 | v2.13.0 | 间接依赖 | go |
| github.com/hashicorp/hcl | v1.0.0 | 间接依赖 | go |
| github.com/mschoch/smat | v0.2.0 | 间接依赖 | go |
| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.19.0 | 间接依赖 | go |
| sseclient | 0.0.26 | 间接依赖 | pip |
| github.com/prometheus/common | v0.44.0 | 间接依赖 | go |
| github.com/quic-go/quic-go | v0.39.0 | 间接依赖 | go |
| go.uber.org/multierr | v1.11.0 | 间接依赖 | go |
| go.uber.org/automaxprocs | v1.5.3 | 直接依赖 | go |
| github.com/go-logr/stdr | v1.2.2 | 间接依赖 | go |
| github.com/pelletier/go-toml/v2 | v2.1.0 | 间接依赖 | go |
| github.com/magiconair/properties | v1.8.7 | 间接依赖 | go |
| github.com/google/go-tpm | v0.9.0 | 间接依赖 | go |
| PyJWT | 1.7.1 | 间接依赖 | pip |
| github.com/spf13/cobra | v1.7.0 | 间接依赖 | go |
| github.com/sagikazarmark/slog-shim | v0.1.0 | 间接依赖 | go |
| github.com/go-chi/chi | v4.1.2+incompatible | 间接依赖 | go |
| github.com/quic-go/qtls-go1-20 | v0.3.4 | 间接依赖 | go |
| github.com/inconshreveable/mousetrap | v1.0.1 | 间接依赖 | go |
| github.com/tailscale/tscert | v0.0.0-20230806124524-28a91b69a046 | 间接依赖 | go |
| github.com/matttproud/golang_protobuf_extensions | v1.0.4 | 间接依赖 | go |
| github.com/dgraph-io/badger/v2 | v2.2007.4 | 间接依赖 | go |
| github.com/spf13/afero | v1.10.0 | 间接依赖 | go |
| gopkg.in/natefinch/lumberjack.v2 | v2.2.1 | 间接依赖 | go |
| go.opentelemetry.io/otel/trace | v1.19.0 | 间接依赖 | go |
| go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | v0.44.0 | 间接依赖 | go |
| github.com/caddyserver/caddy/v2 | v2.7.5 | 直接依赖 | go |
| github.com/shurcooL/sanitized_anchor_name | v1.0.0 | 间接依赖 | go |
| github.com/spf13/viper | v1.17.0 | 直接依赖 | go |
| github.com/x448/float16 | v0.8.4 | 间接依赖 | go |
| go.opentelemetry.io/contrib/propagators/autoprop | v0.42.0 | 间接依赖 | go |
| github.com/grpc-ecosystem/grpc-gateway/v2 | v2.16.0 | 间接依赖 | go |
| gopkg.in/yaml.v3 | v3.0.1 | 间接依赖 | go |
| github.com/bits-and-blooms/bitset | v1.9.0 | 间接依赖 | go |
| github.com/sourcegraph/conc | v0.3.0 | 间接依赖 | go |
| golang.org/x/crypto | v0.14.0 | 直接依赖 | go |
| github.com/fxamacker/cbor/v2 | v2.5.0 | 间接依赖 | go |
| github.com/yuin/goldmark-highlighting/v2 | v2.0.0-20230729083705-37449abec8cc | 间接依赖 | go |
| github.com/google/pprof | v0.0.0-20230926050212-f7f687d19a98 | 间接依赖 | go |
| github.com/Masterminds/sprig/v3 | v3.2.3 | 间接依赖 | go |
| golang.org/x/text | v0.13.0 | 间接依赖 | go |
| github.com/stretchr/testify | v1.8.4 | 直接依赖 | go |
| github.com/golang-jwt/jwt/v4 | v4.5.0 | 直接依赖 | go |
| go.opentelemetry.io/contrib/propagators/jaeger | v1.17.0 | 间接依赖 | go |
| github.com/golang/protobuf | v1.5.3 | 间接依赖 | go |
| github.com/Masterminds/semver/v3 | v3.2.1 | 间接依赖 | go |
| gunicorn | 20.0.4 | 间接依赖 | pip |
| github.com/go-sql-driver/mysql | v1.7.1 | 间接依赖 | go |
| github.com/google/cel-go | v0.15.1 | 间接依赖 | go |
| github.com/sirupsen/logrus | v1.9.3 | 间接依赖 | go |
| github.com/caddyserver/certmagic | v0.19.2 | 间接依赖 | go |
| github.com/libdns/libdns | v0.2.1 | 间接依赖 | go |
| github.com/miekg/dns | v1.1.56 | 间接依赖 | go |
| github.com/prometheus/client_model | v0.5.0 | 直接依赖 | go |
| github.com/mgutz/ansi | v0.0.0-20200706080929-d51e80ef957d | 间接依赖 | go |
| golang.org/x/mod | v0.13.0 | 间接依赖 | go |
| github.com/dgraph-io/ristretto | v0.1.1 | 直接依赖 | go |
| go.uber.org/mock | v0.3.0 | 间接依赖 | go |
| github.com/go-chi/chi/v5 | v5.0.10 | 间接依赖 | go |
| go.opentelemetry.io/contrib/propagators/b3 | v1.17.0 | 间接依赖 | go |
| github.com/zeebo/blake3 | v0.2.3 | 间接依赖 | go |
| github.com/spf13/cobra | v1.6.1 | 直接依赖 | go |
| golang.org/x/net | v0.17.0 | 间接依赖 | go |
| go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.19.0 | 间接依赖 | go |
| github.com/rs/xid | v1.5.0 | 间接依赖 | go |
| github.com/russross/blackfriday/v2 | v2.1.0 | 间接依赖 | go |
| github.com/dunglas/mercure | v0.15.5 | 直接依赖 | go |
| github.com/pkg/errors | v0.9.1 | 间接依赖 | go |
| github.com/mattn/go-isatty | v0.0.19 | 间接依赖 | go |
| github.com/mattn/go-colorable | v0.1.13 | 间接依赖 | go |
| github.com/dgryski/go-farm | v0.0.0-20200201041132-a6ae2369ad13 | 间接依赖 | go |
| uritemplate | 3.0.1 | 间接依赖 | pip |
| github.com/dustin/go-humanize | v1.0.1 | 间接依赖 | go |
| github.com/smallstep/truststore | v0.12.1 | 间接依赖 | go |
| go.opentelemetry.io/otel/metric | v1.19.0 | 间接依赖 | go |
| golang.org/x/exp | v0.0.0-20231006140011-7918f672742d | 间接依赖 | go |
| github.com/smallstep/certificates | v0.25.0 | 间接依赖 | go |
| github.com/gorilla/handlers | v1.5.1 | 直接依赖 | go |
| google.golang.org/genproto/googleapis/api | v0.0.0-20231009173412-8bfb1ae86b6c | 间接依赖 | go |
| github.com/mitchellh/go-ps | v1.0.0 | 间接依赖 | go |
| Flask | 1.1.2 | 间接依赖 | pip |
| github.com/golang/snappy | v0.0.4 | 间接依赖 | go |
| github.com/MauriceGit/skiplist | v0.0.0-20211105230623-77f5c8d3e145 | 间接依赖 | go |
| github.com/smallstep/go-attestation | v0.4.4-0.20230627102604-cf579e53cbd2 | 间接依赖 | go |
| github.com/dgraph-io/badger | v1.6.2 | 间接依赖 | go |
| github.com/jackc/chunkreader/v2 | v2.0.1 | 间接依赖 | go |
| go.opentelemetry.io/otel | v1.19.0 | 间接依赖 | go |
| github.com/cespare/xxhash | v1.1.0 | 间接依赖 | go |
| github.com/jackc/pgproto3/v2 | v2.3.2 | 间接依赖 | go |
| github.com/klauspost/compress | v1.17.0 | 间接依赖 | go |
| go.opentelemetry.io/contrib/propagators/aws | v1.17.0 | 间接依赖 | go |
| github.com/aryann/difflib | v0.0.0-20210328193216-ff5ff6dc229b | 间接依赖 | go |
| github.com/prometheus/procfs | v0.12.0 | 间接依赖 | go |
| github.com/mholt/acmez | v1.2.0 | 间接依赖 | go |
| github.com/antlr/antlr4/runtime/Go/antlr/v4 | v4.0.0-20230305170008-8188dc5388df | 间接依赖 | go |
| github.com/AndreasBriese/bbloom | v0.0.0-20190825152654-46b345b51c96 | 间接依赖 | go |
| go.opentelemetry.io/proto/otlp | v1.0.0 | 间接依赖 | go |
| github.com/mitchellh/mapstructure | v1.5.0 | 间接依赖 | go |
| google.golang.org/grpc | v1.58.3 | 间接依赖 | go |
| github.com/beorn7/perks | v1.0.1 | 间接依赖 | go |
| github.com/go-kit/log | v0.2.1 | 间接依赖 | go |
| github.com/smallstep/nosql | v0.6.0 | 间接依赖 | go |
| github.com/RoaringBitmap/roaring | v1.6.0 | 间接依赖 | go |
| github.com/sagikazarmark/locafero | v0.3.0 | 间接依赖 | go |
| github.com/google/go-tspi | v0.3.0 | 间接依赖 | go |
| github.com/kevburnsjr/skipfilter | v0.0.1 | 直接依赖 | go |
| go.opentelemetry.io/otel/sdk | v1.19.0 | 间接依赖 | go |
| github.com/slackhq/nebula | v1.7.2 | 间接依赖 | go |
| golang.org/x/sys | v0.13.0 | 间接依赖 | go |
| github.com/go-logr/logr | v1.2.4 | 间接依赖 | go |
| github.com/golang/glog | v1.1.2 | 间接依赖 | go |
| howett.net/plist | v1.0.0 | 间接依赖 | go |
| github.com/Masterminds/goutils | v1.1.1 | 间接依赖 | go |
| go.mozilla.org/pkcs7 | v0.0.0-20210826202110-33d05740a352 | 间接依赖 | go |
| github.com/prometheus/client_golang | v1.17.0 | 直接依赖 | go |
| gopkg.in/square/go-jose.v2 | v2.6.0 | 间接依赖 | go |
| github.com/jackc/pgx/v4 | v4.18.1 | 间接依赖 | go |
| github.com/spf13/pflag | v1.0.5 | 直接依赖 | go |
| dotenv | 16.0.3 | 间接依赖 | npm |