基础信息
项目名称：tus/tusd
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1755538704174419968/1755538704216363008
此报告由Murphysec提供
漏洞列表
暂无
缺陷组件
暂无
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| MIT | 21 | 低 |
| Apache-2.0 | 49 | 低 |
| BSD-3-Clause | 17 | 低 |
| 未知许可证 | 1 | 低 |
| MPL-2.0 | 2 | 低 |
| ISC | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| github.com/felixge/fgprof | v0.9.3 | 直接依赖 | go |
| go.opentelemetry.io/otel | v1.22.0 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2 | v1.24.1 | 直接依赖 | go |
| github.com/hashicorp/go-hclog | v1.6.2 | 直接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/s3 | v1.48.1 | 直接依赖 | go |
| github.com/Acconut/go-httptest-recorder | v1.0.0 | 直接依赖 | go |
| github.com/aws/aws-sdk-go-v2/feature/ec2/imds | v1.14.11 | 间接依赖 | go |
| github.com/felixge/httpsnoop | v1.0.4 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/internal/configsources | v1.2.10 | 间接依赖 | go |
| github.com/matttproud/golang_protobuf_extensions/v2 | v2.0.0 | 间接依赖 | go |
| github.com/prometheus/procfs | v0.12.0 | 间接依赖 | go |
| google.golang.org/protobuf | v1.32.0 | 直接依赖 | go |
| golang.org/x/oauth2 | v0.16.0 | 间接依赖 | go |
| github.com/Shopify/toxiproxy/v2 | v2.7.0 | 直接依赖 | go |
| go.opencensus.io | v0.24.0 | 间接依赖 | go |
| github.com/bmizerany/pat | v0.0.0-20170815010413-6226ea591a40 | 直接依赖 | go |
| github.com/go-logr/stdr | v1.2.2 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream | v1.5.4 | 间接依赖 | go |
| go.opentelemetry.io/otel/trace | v1.22.0 | 间接依赖 | go |
| gopkg.in/h2non/gock.v1 | v1.1.2 | 直接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/sts | v1.26.7 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/internal/v4a | v1.2.10 | 间接依赖 | go |
| golang.org/x/net | v0.20.0 | 间接依赖 | go |
| cloud.google.com/go/iam | v1.1.5 | 间接依赖 | go |
| github.com/Azure/azure-pipeline-go | v0.2.3 | 间接依赖 | go |
| cloud.google.com/go/compute | v1.23.3 | 间接依赖 | go |
| gopkg.in/tomb.v1 | v1.0.0-20141024135613-dd632973f1e7 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/config | v1.26.6 | 直接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/ssooidc | v1.21.7 | 间接依赖 | go |
| cloud.google.com/go/compute/metadata | v0.2.3 | 间接依赖 | go |
| cloud.google.com/go | v0.112.0 | 间接依赖 | go |
| github.com/tus/lockfile | v1.2.0 | 直接依赖 | go |
| github.com/go-logr/logr | v1.4.1 | 间接依赖 | go |
| github.com/pmezard/go-difflib | v1.0.0 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/internal/ini | v1.7.3 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/internal/checksum | v1.2.10 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding | v1.10.4 | 间接依赖 | go |
| github.com/mitchellh/go-testing-interface | v0.0.0-20171004221916-a61a99592b77 | 间接依赖 | go |
| github.com/google/pprof | v0.0.0-20211214055906-6f57359322fd | 间接依赖 | go |
| github.com/vimeo/go-util | v1.4.1 | 直接依赖 | go |
| github.com/golang/protobuf | v1.5.3 | 间接依赖 | go |
| github.com/hashicorp/go-plugin | v1.6.0 | 直接依赖 | go |
| github.com/gorilla/mux | v1.8.0 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/internal/s3shared | v1.16.10 | 间接依赖 | go |
| github.com/google/uuid | v1.5.0 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/internal/presigned-url | v1.10.10 | 间接依赖 | go |
| github.com/davecgh/go-spew | v1.1.1 | 间接依赖 | go |
| github.com/grpc-ecosystem/go-grpc-middleware | v1.4.0 | 直接依赖 | go |
| golang.org/x/text | v0.14.0 | 间接依赖 | go |
| google.golang.org/genproto/googleapis/rpc | v0.0.0-20240116215550-a9fa1716bcac | 间接依赖 | go |
| github.com/mattn/go-ieproxy | v0.0.1 | 间接依赖 | go |
| gopkg.in/yaml.v3 | v3.0.1 | 间接依赖 | go |
| github.com/prometheus/client_golang | v1.18.0 | 直接依赖 | go |
| github.com/aws/aws-sdk-go-v2/service/sso | v1.18.7 | 间接依赖 | go |
| github.com/goji/httpauth | v0.0.0-20160601135302-2da839ab0f4d | 直接依赖 | go |
| cloud.google.com/go/storage | v1.37.0 | 直接依赖 | go |
| github.com/aws/smithy-go | v1.19.0 | 直接依赖 | go |
| go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | v0.47.0 | 间接依赖 | go |
| golang.org/x/time | v0.5.0 | 间接依赖 | go |
| github.com/rogpeppe/go-internal | v1.11.0 | 间接依赖 | go |
| github.com/google/s2a-go | v0.1.7 | 间接依赖 | go |
| golang.org/x/sync | v0.6.0 | 间接依赖 | go |
| google.golang.org/genproto/googleapis/api | v0.0.0-20240122161410-6c6643bf1457 | 间接依赖 | go |
| github.com/cespare/xxhash/v2 | v2.2.0 | 间接依赖 | go |
| github.com/beorn7/perks | v1.0.1 | 间接依赖 | go |
| github.com/golang/groupcache | v0.0.0-20210331224755-41bb18bfe9da | 间接依赖 | go |
| google.golang.org/genproto | v0.0.0-20240116215550-a9fa1716bcac | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/credentials | v1.16.16 | 间接依赖 | go |
| go.opentelemetry.io/otel/metric | v1.22.0 | 间接依赖 | go |
| google.golang.org/api | v0.161.0 | 直接依赖 | go |
| github.com/mattn/go-colorable | v0.1.13 | 间接依赖 | go |
| golang.org/x/sys | v0.16.0 | 间接依赖 | go |
| google.golang.org/grpc | v1.61.0 | 直接依赖 | go |
| golang.org/x/exp | v0.0.0-20230626212559-97b1e661b5df | 直接依赖 | go |
| go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | v0.47.0 | 间接依赖 | go |
| github.com/sethgrid/pester | v1.2.0 | 直接依赖 | go |
| github.com/rs/zerolog | v1.31.0 | 直接依赖 | go |
| github.com/Azure/azure-storage-blob-go | v0.14.0 | 直接依赖 | go |
| github.com/mattn/go-isatty | v0.0.19 | 间接依赖 | go |
| golang.org/x/crypto | v0.18.0 | 间接依赖 | go |
| github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 | v2.5.10 | 间接依赖 | go |
| github.com/googleapis/gax-go/v2 | v2.12.0 | 间接依赖 | go |
| github.com/prometheus/client_model | v0.5.0 | 间接依赖 | go |
| github.com/stretchr/testify | v1.8.4 | 直接依赖 | go |
| github.com/googleapis/enterprise-certificate-proxy | v0.3.2 | 间接依赖 | go |
| github.com/hashicorp/yamux | v0.1.1 | 间接依赖 | go |
| github.com/prometheus/common | v0.45.0 | 间接依赖 | go |
| github.com/oklog/run | v1.0.0 | 间接依赖 | go |
| github.com/golang/mock | v1.6.0 | 直接依赖 | go |
| github.com/fatih/color | v1.13.0 | 间接依赖 | go |
| google.golang.org/appengine | v1.6.8 | 间接依赖 | go |
| github.com/rs/xid | v1.5.0 | 间接依赖 | go |
| github.com/h2non/parth | v0.0.0-20190131123155-b4df798d6542 | 间接依赖 | go |