chimojiacai / grafana-wecaht-alert Goto Github PK

webook，填写提示的url，测试的时候提示 Failed to send alert notifications
服务器post 404

[root@test-gitlab-runner grafana-wecaht-alert]# go build main.go -o wechat-alert
can't load package: named files must be .go files: -o

大佬，你好，我是@abbykimi，我IDE运行您这个项目的时候，提示有几个漏洞，项目调用了gopkg.in/yaml.v2等25个开源组件，存在3个安全漏洞，建议你升级下。

漏洞标题：go-yaml < 2.2.8拒绝服务漏洞
漏洞编号：CVE-2019-11254
漏洞描述：
gopkg.in/yaml.v2是go语言中用于处理yaml格式的包。
在2.2.8之前的版本中，处理恶意的yaml数据时，会导致CPU资源耗尽。
漏洞由Kubernetes开发者在fuzz测试中发现并提交修复补丁。
国家漏洞库信息：https://www.cnvd.org.cn/flaw/show/CNVD-2020-35519
影响范围：(∞, 2.2.8)
最小修复版本：2.2.8
引入路径：
g2ww@->github.com/gin-gonic/[email protected]>github.com/stretchr/[email protected]>gopkg.in/[email protected]

另外2个漏洞,如需查看详细报告、复测或持续监测您的项目，戳这里https://www.mfsec.cn/jr?p=m34902

如果你对这个issues有任何疑问可以回复我哈( @abbykimi )，我会及时回复你的。

[root@ip-172-31-225-87 grafana-wecaht-alert]# ./wechat-alert
[GIN-debug] [WARNING] Creating an Engine instance with the Logger and Recovery middleware already attached.

[GIN-debug] [WARNING] Running in "debug" mode. Switch to "release" mode in production.

• using env: export GIN_MODE=release
• using code: gin.SetMode(gin.ReleaseMode)

[GIN-debug] GET / --> main.GetSendCount (3 handlers)
[GIN-debug] POST /send --> main.SendMsg (3 handlers)
json: cannot unmarshal number into Go struct field Hook.orgId of type string
[GIN] 2022/01/18 - 08:55:17 | 400 | 208.094µs | 172.31.225.87 | POST "/send"
json: cannot unmarshal number into Go struct field Hook.orgId of type string
[GIN] 2022/01/18 - 08:55:19 | 400 | 79.057µs | 172.31.225.87 | POST "/send"
[GIN] 2022/01/18 - 08:56:48 | 404 | 1.9µs | 172.31.225.87 | PUT "/send?key=d64a0caa-bf62-4958-8f8e-08af39761"
[GIN] 2022/01/18 - 08:56:50 | 404 | 1.984µs | 172.31.225.87 | PUT "/send?key=d64a0caa-bf62-4958-8f8e-08af39761"
[GIN] 2022/01/18 - 08:56:51 | 404 | 1.799µs | 172.31.225.87 | PUT "/send?key=d64a0caa-bf62-4958-8f8e-08af39761"
[GIN] 2022/01/18 - 08:56:52 | 404 | 1.96µs | 172.31.225.87 | PUT "/send?key=d64a0caa-bf62-4958-8f8e-08af39761"
[GIN] 2022/01/18 - 08:56:52 | 404 | 1.714µs | 172.31.225.87 | PUT "/send?key=d64a0caa-bf62-4958-8f8e-08af39761"
[GIN] 2022/01/18 - 08:56:52 | 404 | 1.837µs | 172.31.225.87 | PUT "/send?key=d64a0caa-bf62-4958-8f8e-08af39761"
[GIN] 2022/01/18 - 08:56:52 | 404 | 2.038µs | 172.31.225.87 | PUT "/send?key=d64a0caa-bf62-4958-8f8e-08af397"
[GIN] 2022/01/18 - 08:57:00 | 404 | 1.727µs | 172.31.225.87 | PUT "/send?key=d64a0caa-bf62-4958-8f8e-08af39761"
[GIN] 2022/01/18 - 08:57:00 | 404 | 1.873µs | 172.31.225.87 | PUT "/send?key=d64a0caa-bf62-4958-8f8e-08af39761"
[GIN] 2022/01/18 - 08:57:01 | 404 | 2.018µs | 172.31.225.87 | PUT "/send?key=d64a0caa-bf62-4958-8f8e-08af39761"
[GIN] 2022/01/18 - 08:57:01 | 404 | 1.933µs | 172.31.225.87 | PUT "/send?key=d64a0caa-bf62-4958-8f8e-08af39761"