hashicorp/terraform-provider-kubernetes 软件分析报告

基础信息

项目名称:hashicorp/terraform-provider-kubernetes

项目徽章:

Security Status

仓库地址:https://github.com/pterodactyl/panel

检测报告地址:https://www.murphysec.com/console/report/1744492289855102976/1744492289905434624

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
Kubernetes 输入验证错误漏洞 输入验证不恰当 MPS-2019-15838 CVE-2019-11255 中危

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
k8s.io/kubernetes v1.27.8 直接依赖 建议修复

许可证风险

许可证类型 相关组件 许可证风险
MIT 45
BSD-3-Clause 30
MPL-2.0 22
Apache-2.0 44
BSD-2-Clause 6
ISC 1

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
github.com/mitchellh/go-homedir v1.1.0 直接依赖 go
github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de 间接依赖 go
github.com/ProtonMail/go-crypto v0.0.0-20230717121422-5aa5874ade95 间接依赖 go
github.com/hashicorp/go-plugin v1.5.2 直接依赖 go
k8s.io/client-go v0.25.5 间接依赖 go
github.com/getkin/kin-openapi v0.111.0 直接依赖 go
go.starlark.net v0.0.0-20221205180719-3fd0dac74452 间接依赖 go
github.com/sirupsen/logrus v1.9.3 直接依赖 go
github.com/hashicorp/terraform-json v0.17.1 直接依赖 go
github.com/mitchellh/mapstructure v1.5.0 间接依赖 go
k8s.io/kube-openapi v0.0.0-20230501164219-8b0f38b5fd1f 间接依赖 go
golang.org/x/time v0.3.0 间接依赖 go
gopkg.in/yaml.v3 v3.0.1 间接依赖 go
k8s.io/cli-runtime v0.27.8 间接依赖 go
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 间接依赖 go
github.com/posener/complete v1.2.3 间接依赖 go
github.com/jinzhu/copier v0.3.5 直接依赖 go
github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f 间接依赖 go
github.com/Masterminds/sprig/v3 v3.2.2 间接依赖 go
github.com/huandu/xstrings v1.3.2 间接依赖 go
github.com/Masterminds/goutils v1.1.1 间接依赖 go
golang.org/x/mod v0.13.0 直接依赖 go
github.com/mitchellh/hashstructure v1.1.0 直接依赖 go
github.com/vmihailenco/tagparser/v2 v2.0.0 间接依赖 go
k8s.io/api v0.25.11 间接依赖 go
golang.org/x/text v0.13.0 间接依赖 go
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd 间接依赖 go
golang.org/x/sys v0.15.0 间接依赖 go
k8s.io/apimachinery v0.27.8 直接依赖 go
github.com/hashicorp/go-hclog v1.5.0 直接依赖 go
google.golang.org/genproto/googleapis/rpc v0.0.0-20230822172742-b8732ec3820d 间接依赖 go
github.com/cloudflare/circl v1.3.7 间接依赖 go
github.com/oklog/run v1.1.0 间接依赖 go
github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 间接依赖 go
k8s.io/apiextensions-apiserver v0.27.8 直接依赖 go
github.com/mailru/easyjson v0.7.7 间接依赖 go
github.com/armon/go-radix v1.0.0 间接依赖 go
google.golang.org/protobuf v1.31.0 间接依赖 go
k8s.io/kubernetes v1.27.8 直接依赖 go
github.com/pkg/errors v0.9.1 间接依赖 go
github.com/robfig/cron v1.2.0 直接依赖 go
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 间接依赖 go
sigs.k8s.io/structured-merge-diff/v4 v4.2.3 间接依赖 go
github.com/invopop/yaml v0.2.0 间接依赖 go
github.com/spf13/pflag v1.0.5 间接依赖 go
golang.org/x/exp v0.0.0-20230809150735-7b3493d9a819 间接依赖 go
github.com/shopspring/decimal v1.3.1 间接依赖 go
github.com/hashicorp/terraform-plugin-mux v0.12.0 直接依赖 go
github.com/mattn/go-colorable v0.1.13 间接依赖 go
github.com/spf13/cast v1.5.0 间接依赖 go
k8s.io/kube-aggregator v0.27.8 直接依赖 go
github.com/MakeNowJust/heredoc v1.0.0 间接依赖 go
github.com/hashicorp/go-cty v1.4.1-0.20200414143053-d3edf31b6320 直接依赖 go
github.com/vmihailenco/msgpack/v5 v5.4.1 间接依赖 go
github.com/slok/kubewebhook/v2 v2.5.0 直接依赖 go
github.com/mattn/go-isatty v0.0.16 间接依赖 go
github.com/hashicorp/terraform-exec v0.19.0 直接依赖 go
github.com/hashicorp/terraform-registry-address v0.2.3 间接依赖 go
github.com/go-errors/errors v1.4.2 间接依赖 go
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd 间接依赖 go
github.com/modern-go/reflect2 v1.0.2 间接依赖 go
k8s.io/utils v0.0.0-20230209194617-a36077c30491 间接依赖 go
gopkg.in/inf.v0 v0.9.1 间接依赖 go
k8s.io/utils v0.0.0-20231127182322-b307cd553661 直接依赖 go
github.com/hashicorp/hcl/v2 v2.18.0 直接依赖 go
k8s.io/component-base v0.27.8 间接依赖 go
github.com/hashicorp/go-version v1.6.0 直接依赖 go
github.com/gogo/protobuf v1.3.2 间接依赖 go
github.com/go-openapi/jsonreference v0.20.1 间接依赖 go
github.com/hashicorp/terraform-svchost v0.1.1 间接依赖 go
github.com/google/gofuzz v1.2.0 间接依赖 go
github.com/go-openapi/swag v0.22.3 间接依赖 go
k8s.io/kubectl v0.27.8 直接依赖 go
github.com/hashicorp/go-multierror v1.1.1 间接依赖 go
golang.org/x/text v0.14.0 间接依赖 go
github.com/google/go-cmp v0.6.0 直接依赖 go
github.com/mitchellh/go-wordwrap v1.0.1 间接依赖 go
golang.org/x/sys v0.13.0 间接依赖 go
github.com/mitchellh/reflectwalk v1.0.2 间接依赖 go
github.com/spf13/cobra v1.6.1 间接依赖 go
github.com/google/btree v1.1.2 间接依赖 go
github.com/mitchellh/copystructure v1.2.0 间接依赖 go
k8s.io/klog/v2 v2.90.1 间接依赖 go
golang.org/x/crypto v0.17.0 间接依赖 go
github.com/moby/term v0.0.0-20221205130635-1aeaba878587 间接依赖 go
github.com/davecgh/go-spew v1.1.1 间接依赖 go
github.com/golang/protobuf v1.5.3 间接依赖 go
github.com/vmihailenco/msgpack v4.0.4+incompatible 间接依赖 go
github.com/json-iterator/go v1.1.12 间接依赖 go
github.com/pmezard/go-difflib v1.0.0 间接依赖 go
github.com/evanphx/json-patch v5.6.0+incompatible 间接依赖 go
github.com/hashicorp/yamux v0.1.1 间接依赖 go
golang.org/x/term v0.15.0 间接依赖 go
github.com/peterbourgon/diskv v2.0.1+incompatible 间接依赖 go
k8s.io/client-go v0.27.8 直接依赖 go
github.com/fatih/color v1.13.0 间接依赖 go
google.golang.org/appengine v1.6.7 间接依赖 go
github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 间接依赖 go
github.com/hashicorp/terraform-plugin-docs v0.16.0 直接依赖 go
github.com/xlab/treeprint v1.1.0 间接依赖 go
github.com/hashicorp/terraform-plugin-go v0.19.1 直接依赖 go
github.com/russross/blackfriday v1.6.0 间接依赖 go
github.com/stretchr/testify v1.8.1 直接依赖 go
github.com/moby/spdystream v0.2.0 间接依赖 go
github.com/hashicorp/go-cleanhttp v0.5.2 间接依赖 go
github.com/google/uuid v1.3.1 间接依赖 go
github.com/hashicorp/terraform-plugin-framework v1.4.2 直接依赖 go
github.com/agext/levenshtein v1.2.3 间接依赖 go
github.com/inconshreveable/mousetrap v1.1.0 间接依赖 go
github.com/hashicorp/hc-install v0.6.0 直接依赖 go
github.com/hashicorp/go-checkpoint v0.5.0 间接依赖 go
github.com/go-logr/logr v1.2.3 间接依赖 go
github.com/mitchellh/go-testing-interface v1.14.1 直接依赖 go
github.com/Masterminds/semver/v3 v3.1.1 间接依赖 go
github.com/google/gnostic v0.6.9 间接依赖 go
github.com/Masterminds/semver v1.5.0 直接依赖 go
github.com/emicklei/go-restful/v3 v3.10.1 间接依赖 go
github.com/hashicorp/terraform-plugin-log v0.9.0 直接依赖 go
k8s.io/apimachinery v0.27.7 直接依赖 go
github.com/zclconf/go-cty v1.14.0 直接依赖 go
github.com/apparentlymart/go-textseg/v15 v15.0.0 间接依赖 go
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 间接依赖 go
github.com/chai2010/gettext-go v1.0.2 间接依赖 go
github.com/hashicorp/terraform-plugin-sdk/v2 v2.29.0 直接依赖 go
github.com/imdario/mergo v0.3.15 间接依赖 go
github.com/hashicorp/logutils v1.0.0 间接依赖 go
sigs.k8s.io/kustomize/api v0.13.2 间接依赖 go
github.com/fatih/camelcase v1.0.0 间接依赖 go
gomodules.xyz/orderedmap v0.1.0 间接依赖 go
github.com/hashicorp/errwrap v1.1.0 间接依赖 go
google.golang.org/grpc v1.59.0 直接依赖 go
golang.org/x/net v0.17.0 间接依赖 go
k8s.io/api v0.27.8 直接依赖 go
sigs.k8s.io/yaml v1.3.0 间接依赖 go
gomodules.xyz/jsonpatch/v3 v3.0.1 间接依赖 go
github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 间接依赖 go
golang.org/x/oauth2 v0.11.0 间接依赖 go
gopkg.in/yaml.v2 v2.4.0 间接依赖 go
github.com/mitchellh/cli v1.1.5 间接依赖 go
github.com/bgentry/speakeasy v0.1.0 间接依赖 go
github.com/go-openapi/jsonpointer v0.19.6 间接依赖 go
github.com/hashicorp/go-uuid v1.0.3 间接依赖 go
github.com/russross/blackfriday/v2 v2.1.0 间接依赖 go
sigs.k8s.io/kustomize/kyaml v0.14.1 间接依赖 go
github.com/josharian/intern v1.0.0 间接依赖 go
(0)
上一篇 2024年1月9日
下一篇 2024年1月9日

相关推荐

  • cheng534078182/AvatarImageView 软件分析报告

    基础信息 项目名称:cheng534078182/AvatarImageView 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1716639874295660544/1716639875423928320 此报告…

    软件分析 2023年10月24日
    0
  • works5/SLGSlideShowView 软件分析报告

    基础信息 项目名称:works5/SLGSlideShowView 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721451395469045760/1721451395506794496 此报告由Murphy…

    软件分析 2023年11月6日
    0
  • google/snappy-start 软件分析报告

    基础信息 项目名称:google/snappy-start 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1718285979282440192/1718285979353743360 此报告由Murphysec提…

    软件分析 2023年10月28日
    0
  • fluentmigrator/fluentmigrator 软件分析报告

    基础信息 项目名称:fluentmigrator/fluentmigrator 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721203331409379328/1730950447218778112 此报告由…

    软件分析 2023年12月2日
    0
  • andev-software/graphql-ide 软件分析报告

    基础信息 项目名称:andev-software/graphql-ide 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1720560850293817344/1720560850335760384 此报告由Mur…

    软件分析 2023年11月4日
    0