docker.elastic.co/apm/apm-server:9.4.3-arm64 linux/arm64

docker.elastic.co/apm/apm-server:9.4.3-arm64 - Trivy安全扫描结果扫描时间: 2026-07-21 14:28 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:0

中危漏洞:2

高危漏洞:2

严重漏洞:0

系统OS: redhat 10.2 扫描引擎: Trivy 扫描时间: 2026-07-21 14:28

docker.elastic.co/apm/apm-server:9.4.3-arm64 (redhat 10.2) (redhat)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

usr/share/apm-server/apm-server (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/elastic/apm-server	CVE-2024-23448	高危	v0.0.0-20260625152903-775b7874d7e5	8.12.1	APM Server vulnerable to Insertion of Sensitive Information into Log File 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23448 镜像层: sha256:505530049874ed10f6940a89b71a69d1977f8a3cbac812d6012bad1c3f427623 发布日期: 2024-02-07 22:15 修改: 2026-06-17 07:12
stdlib	CVE-2026-39822	高危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	os: golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:505530049874ed10f6940a89b71a69d1977f8a3cbac812d6012bad1c3f427623 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
github.com/elastic/apm-server	CVE-2024-37286	中危	v0.0.0-20260625152903-775b7874d7e5	8.14.0	APM Server vulnerable to Insertion of Sensitive Information into Log File 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37286 镜像层: sha256:505530049874ed10f6940a89b71a69d1977f8a3cbac812d6012bad1c3f427623 发布日期: 2024-08-03 16:15 修改: 2026-06-17 07:38
stdlib	CVE-2026-42505	中危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:505530049874ed10f6940a89b71a69d1977f8a3cbac812d6012bad1c3f427623 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
golang.org/x/crypto	GO-2026-5932	未知	v0.53.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:505530049874ed10f6940a89b71a69d1977f8a3cbac812d6012bad1c3f427623 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/text	CVE-2026-56852	未知	v0.38.0	0.39.0	Infinite loop on invalid input in golang.org/x/text 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:505530049874ed10f6940a89b71a69d1977f8a3cbac812d6012bad1c3f427623 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00