sylabs/singularity 软件分析报告

基础信息

项目名称:sylabs/singularity

项目徽章:

Security Status

仓库地址:https://github.com/pterodactyl/panel

检测报告地址:https://www.murphysec.com/console/report/1757217059950166016/1757217060004691968

此报告由Murphysec提供

漏洞列表

漏洞名称 漏洞类型 MPS编号 CVE编号 漏洞等级
CVE-2023-47108漏洞 不加限制或调节的资源分配 MPS-lrfd-7kb6 CVE-2023-47108 高危

缺陷组件

组件名称 版本 最小修复版本 依赖关系 修复建议
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.45.0 0.46.0 间接依赖 可选修复

许可证风险

许可证类型 相关组件 许可证风险
MIT 50
BSD-3-Clause 36
Apache-2.0 93
BSD-2-Clause 7
MPL-2.0 8
Unlicense 1
GPL-2.0 1
CC-BY-4.0 1
CC-BY-SA-4.0 2
未知许可证 1

SBOM清单

组件名称 组件版本 是否直接依赖 仓库
go.etcd.io/bbolt v1.3.8 直接依赖 go
github.com/cespare/xxhash/v2 v2.2.0 间接依赖 go
golang.org/x/sys v0.17.0 直接依赖 go
github.com/prometheus/common v0.44.0 间接依赖 go
github.com/containerd/cgroups/v3 v3.0.2 间接依赖 go
github.com/gorilla/mux v1.8.0 间接依赖 go
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb 间接依赖 go
github.com/moby/term v0.5.0 直接依赖 go
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 间接依赖 go
github.com/package-url/packageurl-go v0.1.1-0.20220428063043-89078438f170 间接依赖 go
golang.org/x/text v0.14.0 直接依赖 go
go.opentelemetry.io/proto/otlp v1.0.0 间接依赖 go
github.com/seccomp/libseccomp-golang v0.10.0 直接依赖 go
github.com/containerd/log v0.1.0 间接依赖 go
github.com/sylabs/scs-key-client v0.7.5 直接依赖 go
golang.org/x/net v0.19.0 间接依赖 go
github.com/in-toto/in-toto-golang v0.9.0 间接依赖 go
github.com/golang/protobuf v1.5.3 间接依赖 go
github.com/containers/common v0.57.4 直接依赖 go
google.golang.org/genproto v0.0.0-20231106174013-bbf56f31fb17 间接依赖 go
google.golang.org/genproto/googleapis/rpc v0.0.0-20231106174013-bbf56f31fb17 间接依赖 go
github.com/gosimple/slug v1.13.1 直接依赖 go
github.com/docker/go-units v0.5.0 直接依赖 go
github.com/opencontainers/runtime-tools v0.9.1-0.20230914150019-408c51e934dc 直接依赖 go
github.com/sigstore/sigstore v1.8.1 直接依赖 go
github.com/cloudflare/circl v1.3.7 间接依赖 go
github.com/garyburd/redigo v0.0.0-20150301180006-535138d7bcd7 间接依赖 go
github.com/docker/distribution v2.8.3+incompatible 直接依赖 go
github.com/gogo/protobuf v1.3.2 间接依赖 go
github.com/hashicorp/errwrap v1.1.0 间接依赖 go
github.com/gosimple/unidecode v1.0.1 间接依赖 go
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.45.0 间接依赖 go
github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d 间接依赖 go
github.com/sylabs/scs-build-client v0.9.4 直接依赖 go
github.com/adigunhammedolalekan/registry-auth v0.0.0-20200730122110-8cde180a3a60 直接依赖 go
github.com/prometheus/client_model v0.5.0 间接依赖 go
github.com/secure-systems-lab/go-securesystemslib v0.8.0 间接依赖 go
github.com/opencontainers/image-spec v1.1.0-rc6 直接依赖 go
github.com/beorn7/perks v1.0.1 间接依赖 go
github.com/distribution/reference v0.5.0 间接依赖 go
mvdan.cc/sh/v3 v3.7.1-0.20231014181306-8b673862efc6 直接依赖 go
github.com/gofrs/flock v0.8.1 直接依赖 go
github.com/vbatts/go-mtree v0.5.0 间接依赖 go
github.com/d2g/dhcp4client v1.0.0 间接依赖 go
github.com/rivo/uniseg v0.4.4 间接依赖 go
github.com/sirupsen/logrus v1.9.3 直接依赖 go
golang.org/x/mod v0.13.0 间接依赖 go
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da 间接依赖 go
github.com/morikuni/aec v1.0.0 间接依赖 go
google.golang.org/genproto/googleapis/api v0.0.0-20231106174013-bbf56f31fb17 间接依赖 go
github.com/Microsoft/hcsshim v0.12.0-rc.1 间接依赖 go
github.com/BurntSushi/toml v1.3.2 间接依赖 go
github.com/spf13/cobra v1.8.0 直接依赖 go
github.com/tonistiigi/vt100 v0.0.0-20230623042737-f9a4f7ef6531 间接依赖 go
gopkg.in/yaml.v2 v2.4.0 间接依赖 go
github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 间接依赖 go
github.com/containerd/continuity v0.4.3 直接依赖 go
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 间接依赖 go
github.com/containernetworking/cni v1.1.2 直接依赖 go
github.com/vbauerster/mpb/v8 v8.7.2 直接依赖 go
google.golang.org/protobuf v1.31.0 间接依赖 go
github.com/matttproud/golang_protobuf_extensions v1.0.4 间接依赖 go
tags.cncf.io/container-device-interface v0.6.2 直接依赖 go
github.com/rootless-containers/proto v0.1.0 间接依赖 go
github.com/blang/semver/v4 v4.0.0 直接依赖 go
google.golang.org/grpc v1.61.0 直接依赖 go
github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 间接依赖 go
tags.cncf.io/container-device-interface/specs-go v0.6.0 直接依赖 go
github.com/networkplumbing/go-nft v0.4.0 间接依赖 go
golang.org/x/time v0.3.0 间接依赖 go
github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2 直接依赖 go
gopkg.in/go-jose/go-jose.v2 v2.6.1 间接依赖 go
github.com/go-logr/logr v1.3.0 间接依赖 go
github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 间接依赖 go
github.com/pkg/errors v0.9.1 直接依赖 go
github.com/pelletier/go-toml/v2 v2.1.1 直接依赖 go
github.com/moby/sys/sequential v0.5.0 间接依赖 go
github.com/felixge/httpsnoop v1.0.3 间接依赖 go
github.com/gogo/googleapis v1.4.1 间接依赖 go
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 间接依赖 go
github.com/alexflint/go-filemutex v1.2.0 间接依赖 go
github.com/godbus/dbus/v5 v5.1.0 间接依赖 go
github.com/letsencrypt/boulder v0.0.0-20230907030200-6d76a0f91e1e 间接依赖 go
github.com/docker/docker v25.0.3+incompatible 直接依赖 go
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.19.0 间接依赖 go
github.com/cpuguy83/go-md2man/v2 v2.0.3 间接依赖 go
github.com/spf13/pflag v1.0.5 直接依赖 go
go.opentelemetry.io/otel/sdk v1.19.0 间接依赖 go
github.com/cenkalti/backoff/v4 v4.2.1 间接依赖 go
github.com/spdx/tools-golang v0.5.1 间接依赖 go
github.com/cilium/ebpf v0.9.1 间接依赖 go
github.com/mattn/go-colorable v0.1.13 间接依赖 go
github.com/safchain/ethtool v0.3.0 间接依赖 go
github.com/hashicorp/go-multierror v1.1.1 间接依赖 go
github.com/opencontainers/go-digest v1.0.0 间接依赖 go
github.com/pelletier/go-toml v1.9.5 间接依赖 go
github.com/armon/circbuf v0.0.0-20190214190532-5111143e8da2 间接依赖 go
github.com/vbatts/tar-split v0.11.5 间接依赖 go
github.com/klauspost/compress v1.17.3 间接依赖 go
github.com/tonistiigi/units v0.0.0-20180711220420-6950e57a87ea 间接依赖 go
github.com/mattn/go-runewidth v0.0.15 间接依赖 go
github.com/moby/sys/signal v0.7.0 间接依赖 go
go.opencensus.io v0.24.0 间接依赖 go
github.com/astromechza/etcpwdparse v0.0.0-20170319193008-f0e5f0779716 直接依赖 go
github.com/buger/jsonparser v1.1.1 直接依赖 go
github.com/go-log/log v0.2.0 直接依赖 go
golang.org/x/term v0.17.0 直接依赖 go
github.com/moby/sys/user v0.1.0 间接依赖 go
github.com/prometheus/procfs v0.11.1 间接依赖 go
github.com/moby/sys/mount v0.3.3 间接依赖 go
github.com/tonistiigi/fsutil v0.0.0-20230629203738-36ef4d8c0dbb 间接依赖 go
sigs.k8s.io/yaml v1.4.0 间接依赖 go
github.com/moby/buildkit v0.12.5 直接依赖 go
github.com/grpc-ecosystem/grpc-gateway/v2 v2.18.0 间接依赖 go
github.com/hashicorp/go-immutable-radix v1.3.1 间接依赖 go
golang.org/x/sync v0.6.0 直接依赖 go
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.19.0 间接依赖 go
github.com/tonistiigi/go-archvariant v1.0.0 间接依赖 go
go.opentelemetry.io/otel/metric v1.19.0 间接依赖 go
golang.org/x/crypto v0.19.0 直接依赖 go
github.com/sylabs/sif/v2 v2.15.1 直接依赖 go
github.com/hashicorp/golang-lru v1.0.2 间接依赖 go
github.com/coreos/go-iptables v0.7.0 间接依赖 go
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.45.0 间接依赖 go
github.com/mattn/go-shellwords v1.0.12 间接依赖 go
github.com/hashicorp/go-uuid v1.0.1 间接依赖 go
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.45.0 间接依赖 go
github.com/containerd/console v1.0.4 直接依赖 go
github.com/docker/go-metrics v0.0.1 间接依赖 go
github.com/fsnotify/fsnotify v1.7.0 间接依赖 go
gopkg.in/yaml.v3 v3.0.1 直接依赖 go
github.com/russross/blackfriday/v2 v2.1.0 间接依赖 go
github.com/agext/levenshtein v1.2.3 间接依赖 go
github.com/prometheus/client_golang v1.17.0 间接依赖 go
gotest.tools v2.2.0+incompatible 直接依赖 go
github.com/opencontainers/runc v1.1.12 直接依赖 go
go.opentelemetry.io/otel v1.19.0 间接依赖 go
github.com/google/go-cmp v0.6.0 间接依赖 go
github.com/fatih/color v1.16.0 直接依赖 go
github.com/containerd/go-runc v1.1.0 直接依赖 go
github.com/mitchellh/go-homedir v1.1.0 间接依赖 go
github.com/creack/pty v1.1.18 间接依赖 go
github.com/containerd/typeurl/v2 v2.1.1 间接依赖 go
github.com/docker/libtrust v0.0.0-20160708172513-aabc10ec26b7 间接依赖 go
github.com/buger/goterm v1.0.4 直接依赖 go
github.com/inconshreveable/mousetrap v1.1.0 间接依赖 go
github.com/mitchellh/hashstructure/v2 v2.0.2 间接依赖 go
github.com/docker/docker-credential-helpers v0.8.0 间接依赖 go
github.com/opencontainers/runtime-spec v1.1.0 直接依赖 go
github.com/shibumi/go-pathspec v1.3.0 间接依赖 go
go.opentelemetry.io/otel/trace v1.19.0 间接依赖 go
github.com/moby/patternmatcher v0.6.0 间接依赖 go
github.com/containerd/nydus-snapshotter v0.13.3 间接依赖 go
github.com/moby/sys/mountinfo v0.7.1 间接依赖 go
github.com/vishvananda/netns v0.0.4 间接依赖 go
github.com/Microsoft/go-winio v0.6.1 间接依赖 go
github.com/shopspring/decimal v1.3.1 直接依赖 go
github.com/moby/locker v1.0.1 间接依赖 go
github.com/containerd/containerd v1.7.13 直接依赖 go
github.com/google/uuid v1.6.0 直接依赖 go
github.com/containers/storage v1.51.0 间接依赖 go
github.com/containerd/ttrpc v1.2.2 间接依赖 go
github.com/d2g/dhcp4 v0.0.0-20170904100407-a1d1b6c41b1c 间接依赖 go
github.com/containernetworking/plugins v1.4.0 直接依赖 go
github.com/mattn/go-isatty v0.0.20 间接依赖 go
github.com/gorilla/handlers v1.5.1 间接依赖 go
github.com/VividCortex/ewma v1.2.0 间接依赖 go
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 间接依赖 go
github.com/go-logr/stdr v1.2.2 间接依赖 go
github.com/google/go-containerregistry v0.19.0 直接依赖 go
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.19.0 间接依赖 go
github.com/cyphar/filepath-securejoin v0.2.4 直接依赖 go
github.com/xeipuuv/gojsonschema v1.2.0 间接依赖 go
github.com/AdamKorcz/go-fuzz-headers v0.0.0-20210319161527-f761c2329661 间接依赖 go
github.com/syndtr/gocapability v0.0.0-20200815063812-42c35b437635 间接依赖 go
github.com/coreos/go-systemd/v22 v22.5.0 直接依赖 go
github.com/sylabs/scs-library-client v1.4.7 直接依赖 go
github.com/containerd/stargz-snapshotter/estargz v0.15.1 间接依赖 go
github.com/apex/log v1.9.0 直接依赖 go
gotest.tools/v3 v3.5.1 直接依赖 go
github.com/ProtonMail/go-crypto v1.0.0 直接依赖 go
github.com/containerd/fifo v1.1.0 间接依赖 go
github.com/opencontainers/umoci v0.4.7 直接依赖 go
github.com/klauspost/pgzip v1.2.6 间接依赖 go
github.com/sylabs/oci-tools v0.7.0 直接依赖 go
github.com/vishvananda/netlink v1.2.1-beta.2 间接依赖 go
github.com/sylabs/json-resp v0.9.2 直接依赖 go
github.com/containers/image/v5 v5.29.2 直接依赖 go
github.com/docker/go-connections v0.4.0 间接依赖 go
github.com/docker/cli v25.0.3+incompatible 直接依赖 go
github.com/gorilla/websocket v1.5.1 间接依赖 go
github.com/opencontainers/selinux v1.11.0 直接依赖 go
github.com/containerd/go-cni v1.1.9 间接依赖 go
golang.org/x/exp v0.0.0-20231006140011-7918f672742d 间接依赖 go
golang.org/x/tools v0.14.0 间接依赖 go
github.com/samber/lo v1.39.0 直接依赖 go
(0)
上一篇 2024年2月13日
下一篇 2024年2月13日

相关推荐

  • zblogcn/zblogasp 软件分析报告

    基础信息 项目名称:zblogcn/zblogasp 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1720333639335972864/1720333640019644416 此报告由Murphysec提供 漏…

    软件分析 2023年11月3日
    0
  • alrra/browser-logos 软件分析报告

    基础信息 项目名称:alrra/browser-logos 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1715740142768799744/1715740142835908608 此报告由Murphysec提…

    软件分析 2023年10月23日
    0
  • esrrhs/majiang_algorithm 软件分析报告

    基础信息 项目名称:esrrhs/majiang_algorithm 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721169829100064768/1730249200505413632 此报告由Murph…

    软件分析 2023年11月30日
    0
  • golangers/framework 软件分析报告

    基础信息 项目名称:golangers/framework 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721231180161945600/1728210718224244736 此报告由Murphysec提…

    软件分析 2023年11月25日
    0
  • dogzhang/dogboot 软件分析报告

    基础信息 项目名称:dogzhang/dogboot 项目徽章: 仓库地址:https://github.com/pterodactyl/panel 检测报告地址:https://www.murphysec.com/console/report/1721140171650367488/1722737819406782464 此报告由Murphysec提供 漏…

    软件分析 2023年11月10日
    0