Go module

github.com/opencost/opencost

v1.104.5

Newer version available

v1.104.5

Newer version available

Default version

Published

July 14, 2023

Licenses

Apache-2.0

Dependency Licenses

Apache-2.0

BSD-2-Clause

BSD-3-Clause

BSL-1.0

CC-BY-3.0

CC0-1.0

HPND

ISC

MIT

MPL-2.0

NCSA

OpenSSL

Zlib

Security Advisories

In the dependencies

github.com/Azure/azure-sdk-for-go/sdk/azidentityv1.2.2

GHSA-m5vv-6r4h-3vj9Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

GO-2024-2918Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity

github.com/aws/aws-sdk-gov1.44.153

GO-2022-0635In-band key negotiation issue in AWS S3 Crypto SDK for golang in github.com/aws/aws-sdk-go

GO-2022-0646CBC padding oracle issue in AWS S3 Crypto SDK for golang in github.com/aws/aws-sdk-go

github.com/golang-jwt/jwt/v4v4.5.0

GHSA-29wx-vh33-7x7rBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations

GO-2024-3250Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt

github.com/google/flatbuffersv2.0.8+incompatible

OSV-2021-1229Heap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffset

OSV-2021-1249Heap-buffer-overflow in int flatbuffers::ReadScalar<int>

OSV-2021-1314Use-of-uninitialized-value in LoadBinarySchema

OSV-2021-1678Heap-buffer-overflow in flatbuffers::EscapeString

OSV-2021-1695Heap-buffer-overflow in flexbuffers::Verifier::VerifyRef

OSV-2021-281Heap-buffer-overflow in flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>

OSV-2021-308Heap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffset

OSV-2021-333Heap-buffer-overflow in int flatbuffers::ReadScalar<int>

OSV-2021-347Heap-buffer-overflow in flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>

OSV-2021-349Heap-buffer-overflow in flatbuffers::vector_downward::fill

OSV-2021-520Heap-buffer-overflow in flatbuffers::EscapeString

OSV-2021-541Heap-buffer-overflow in flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>

OSV-2021-581UNKNOWN READ in unsigned short flatbuffers::ReadScalar<unsigned short>

golang.org/x/cryptov0.6.0

GHSA-45x7-px36-x8w8Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

GHSA-v778-237x-gjrcMisuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

GO-2023-2402Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

GO-2024-3321Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

GO-2025-3487Potential denial of service in golang.org/x/crypto

golang.org/x/netv0.8.0

GHSA-2wrh-6pvc-2jm9Improper rendering of text nodes in golang.org/x/net/html

GHSA-4374-p667-p6c8HTTP/2 rapid reset can cause excessive work in net/http

GHSA-4v7x-pqxf-cx7mnet/http, x/net/http2: close connections when receiving too many headers

GHSA-qppj-fm5r-hxr3HTTP/2 Stream Cancellation Attack

GHSA-qxp5-gwg8-xv66HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

GHSA-w32m-9786-jp63Non-linear parsing of case-insensitive content in golang.org/x/net/html

GO-2023-1988Improper rendering of text nodes in golang.org/x/net/html

GO-2023-2102HTTP/2 rapid reset can cause excessive work in net/http

GO-2024-2687HTTP/2 CONTINUATION flood in net/http

GO-2024-3333Non-linear parsing of case-insensitive content in golang.org/x/net/html

GO-2025-3503HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

golang.org/x/oauth2v0.6.0

GO-2025-3488Unexpected memory consumption during token parsing in golang.org/x/oauth2

google.golang.org/grpcv1.53.0

GHSA-m425-mq94-257ggRPC-Go HTTP/2 Rapid Reset vulnerability

GHSA-qppj-fm5r-hxr3HTTP/2 Stream Cancellation Attack

GO-2023-2153Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

google.golang.org/protobufv1.29.1

GHSA-8r3f-844c-mc37Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

GO-2024-2611Infinite loop in JSON unmarshaling in google.golang.org/protobuf

Dependencies

cloud.google.com/gov0.110.0

cloud.google.com/go/bigqueryv1.48.0

cloud.google.com/go/computev1.18.0

cloud.google.com/go/compute/metadatav0.2.3

cloud.google.com/go/iamv0.12.0

cloud.google.com/go/storagev1.28.1

github.com/Azure/azure-pipeline-gov0.2.3

github.com/Azure/azure-sdk-for-go/sdk/azcorev1.5.0

github.com/Azure/azure-sdk-for-go/sdk/azidentityv1.2.2

github.com/Azure/azure-sdk-for-go/sdk/internalv1.3.0

github.com/Azure/azure-sdk-for-go/sdk/storage/azblobv1.0.0

github.com/Azure/azure-storage-blob-gov0.15.0

github.com/Azure/go-autorest/autorestv0.11.28

github.com/Azure/go-autorest/autorest/adalv0.9.21

github.com/Azure/go-autorest/autorest/azure/authv0.5.11

github.com/Azure/go-autorest/autorest/azure/cliv0.4.5

github.com/Azure/go-autorest/autorest/datev0.3.0

github.com/Azure/go-autorest/autorest/tov0.4.0

github.com/Azure/go-autorest/autorest/validationv0.3.1

github.com/Azure/go-autorest/loggerv0.2.1

github.com/Azure/go-autorest/tracingv0.6.0

github.com/AzureAD/microsoft-authentication-library-for-gov0.9.0

github.com/PuerkitoBio/purellv1.1.1

github.com/aliyun/alibaba-cloud-sdk-gov1.62.3

github.com/andybalholm/brotliv1.0.4

github.com/apache/arrow/go/v10v10.0.1

github.com/apache/thriftv0.16.0

github.com/aws/aws-sdk-gov1.44.153

github.com/aws/aws-sdk-go-v2v1.17.7

github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamv1.4.10

github.com/aws/aws-sdk-go-v2/configv1.13.1

github.com/aws/aws-sdk-go-v2/credentialsv1.8.0

github.com/aws/aws-sdk-go-v2/feature/ec2/imdsv1.10.0

github.com/aws/aws-sdk-go-v2/feature/s3/managerv1.9.1

github.com/aws/aws-sdk-go-v2/internal/configsourcesv1.1.31

github.com/aws/aws-sdk-go-v2/internal/endpoints/v2v2.4.25

github.com/aws/aws-sdk-go-v2/internal/iniv1.3.5

github.com/aws/aws-sdk-go-v2/internal/v4av1.0.23

github.com/aws/aws-sdk-go-v2/service/athenav1.12.0

github.com/aws/aws-sdk-go-v2/service/ec2v1.29.0

github.com/aws/aws-sdk-go-v2/service/internal/accept-encodingv1.9.11

github.com/aws/aws-sdk-go-v2/service/internal/checksumv1.1.26

github.com/aws/aws-sdk-go-v2/service/internal/presigned-urlv1.9.25

github.com/aws/aws-sdk-go-v2/service/internal/s3sharedv1.14.0

github.com/aws/aws-sdk-go-v2/service/s3v1.31.0

github.com/aws/aws-sdk-go-v2/service/ssov1.9.0

github.com/aws/aws-sdk-go-v2/service/stsv1.14.0

github.com/aws/smithy-gov1.13.5

github.com/aymerick/douceurv0.2.0

github.com/azure/azure-sdk-for-gov65.0.0+incompatible

github.com/azure/go-autorestv14.2.0+incompatible

github.com/beorn7/perksv1.0.1

github.com/cespare/xxhash/v2v2.2.0

github.com/davecgh/go-spewv1.1.1

github.com/dimchansky/utfbomv1.1.1

github.com/dustin/go-humanizev1.0.1

github.com/emicklei/go-restful/v3v3.10.2

github.com/fsnotify/fsnotifyv1.6.0

github.com/getsentry/sentry-gov0.6.1

github.com/go-logr/logrv1.2.3

github.com/go-openapi/jsonpointerv0.19.5

github.com/go-openapi/jsonreferencev0.19.6

github.com/go-openapi/swagv0.21.1

github.com/goccy/go-jsonv0.9.11

github.com/gofrs/uuidv4.2.0+incompatible

github.com/gogo/protobufv1.3.2

github.com/golang-jwt/jwt/v4v4.5.0

github.com/golang/groupcachev0.0.0-20200121045136-8c9f03a8e57e

github.com/golang/protobufv1.5.2

github.com/golang/snappyv0.0.4

github.com/google/flatbuffersv2.0.8+incompatible

github.com/google/gnosticv0.5.7

github.com/google/go-cmpv0.5.9

github.com/google/gofuzzv1.2.0

github.com/google/uuidv1.3.0

github.com/googleapis/enterprise-certificate-proxyv0.2.3

github.com/googleapis/gax-go/v2v2.7.1

github.com/gorilla/cssv1.0.0

github.com/hashicorp/errwrapv1.0.0

github.com/hashicorp/go-multierrorv1.0.0

github.com/hashicorp/hclv1.0.0

github.com/imdario/mergov0.3.12

github.com/inconshreveable/mousetrapv1.0.0

github.com/jmespath/go-jmespathv0.4.0

github.com/josharian/internv1.0.0

github.com/json-iterator/gov1.1.12

github.com/jszwec/csvutilv1.2.1

github.com/julienschmidt/httprouterv1.3.0

github.com/klauspost/asmfmtv1.3.2

github.com/klauspost/compressv1.16.0

github.com/klauspost/cpuid/v2v2.2.4

github.com/kubecost/eventsv0.0.6

github.com/kylelemons/godebugv1.1.0

github.com/lib/pqv1.2.0

github.com/magiconair/propertiesv1.8.5

github.com/mailru/easyjsonv0.7.7

github.com/mattn/go-ieproxyv0.0.1

github.com/matttproud/golang_protobuf_extensionsv1.0.2-0.20181231171920-c182affec369

github.com/microcosm-cc/bluemondayv1.0.16

github.com/minio/asm2plan9sv0.0.0-20200509001527-cdd76441f9d8

github.com/minio/c2goasmv0.0.0-20190812172519-36a3d3bbc4f3

github.com/minio/md5-simdv1.1.2

github.com/minio/minio-go/v7v7.0.50

github.com/minio/sha256-simdv1.0.0

github.com/mitchellh/go-homedirv1.1.0

github.com/mitchellh/mapstructurev1.5.0

github.com/modern-go/concurrentv0.0.0-20180306012644-bacd9c7ef1dd

github.com/modern-go/reflect2v1.0.2

github.com/munnerz/goautonegv0.0.0-20191010083416-a7dc8b61c822

github.com/opentracing/opentracing-gov1.2.1-0.20220228012449-10b1cf09e00b

github.com/patrickmn/go-cachev2.1.0+incompatible

github.com/pelletier/go-tomlv1.9.3

github.com/pierrec/lz4/v4v4.1.15

github.com/pkg/browserv0.0.0-20210911075715-681adbf594b8

github.com/pkg/errorsv0.9.1

github.com/pmezard/go-difflibv1.0.0

github.com/prometheus/client_golangv1.13.1

github.com/prometheus/client_modelv0.3.0

github.com/prometheus/commonv0.37.1

github.com/prometheus/procfsv0.8.0

github.com/puerkitobio/urlescv0.0.0-20170810143723-de5bf2ad4578

github.com/rs/corsv1.8.2

github.com/rs/xidv1.4.0

github.com/rs/zerologv1.26.1

github.com/scaleway/scaleway-sdk-gov1.0.0-beta.9.0.20220214170521-7770c5ba7246

github.com/shopspring/decimalv1.1.1-0.20180709203117-cd690d0c9e24

github.com/sirupsen/logrusv1.9.0

github.com/spf13/aferov1.9.2

github.com/spf13/castv1.3.1

github.com/spf13/cobrav1.2.1

github.com/spf13/jwalterweathermanv1.1.0

github.com/spf13/pflagv1.0.5

github.com/spf13/viperv1.8.1

github.com/stretchr/testifyv1.8.1

github.com/subosito/gotenvv1.2.0

github.com/zeebo/xxh3v1.0.2

go.etcd.io/bboltv1.3.5

go.opencensus.iov0.24.0

golang.org/x/cryptov0.6.0

golang.org/x/expv0.0.0-20221031165847-c99f073a8326

golang.org/x/modv0.8.0

golang.org/x/netv0.8.0

golang.org/x/oauth2v0.6.0

golang.org/x/syncv0.1.0

golang.org/x/sysv0.6.0

golang.org/x/termv0.6.0

golang.org/x/textv0.8.0

golang.org/x/timev0.1.0

golang.org/x/toolsv0.6.0

golang.org/x/xerrorsv0.0.0-20220907171357-04be3eba64a2

google.golang.org/apiv0.114.0

google.golang.org/appenginev1.6.7

google.golang.org/genprotov0.0.0-20230320184635-7606e756e683

google.golang.org/grpcv1.53.0

google.golang.org/protobufv1.29.1

gopkg.in/inf.v0v0.9.1

gopkg.in/ini.v1v1.67.0

gopkg.in/yaml.v2v2.4.0

gopkg.in/yaml.v3v3.0.1

k8s.io/apiv0.25.3

k8s.io/apimachineryv0.25.3

k8s.io/client-gov0.25.3

k8s.io/klog/v2v2.80.0

k8s.io/kube-openapiv0.0.0-20220803162953-67bda5d908f1

k8s.io/utilsv0.0.0-20220728103510-ee6ede2d64ed

sigs.k8s.io/jsonv0.0.0-20220713155537-f223a00ba0e2

sigs.k8s.io/structured-merge-diff/v4v4.2.3

sigs.k8s.io/yamlv1.3.0

Capabilities

No analysis results for version.