docker.io/ascendai/cann:8.5.0-910b-openeuler24.03-py3.11 linux/arm64

docker.io/ascendai/cann:8.5.0-910b-openeuler24.03-py3.11 - Trivy安全扫描结果扫描时间: 2026-08-09 02:27 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

系统OS: none 扫描引擎: Trivy 扫描时间: 2026-08-09 02:27

Python (python-pkg)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
jaraco.context	CVE-2026-23949	高危	5.3.0	6.1.0	jaraco.context: jaraco.context: Path traversal via malicious tar archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23949 镜像层: sha256:460918059704e77bb79557a488c2d21e4831921c676888a1b9623ef612320385 发布日期: 2026-01-20 01:15 修改: 2026-06-17 10:22
wheel	CVE-2026-24049	高危	0.45.1	0.46.2	wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24049 镜像层: sha256:460918059704e77bb79557a488c2d21e4831921c676888a1b9623ef612320385 发布日期: 2026-01-22 05:16 修改: 2026-08-05 13:21
pip	CVE-2026-6357	中危	25.3	26.1	pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357 镜像层: sha256:460918059704e77bb79557a488c2d21e4831921c676888a1b9623ef612320385 发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
pip	CVE-2026-8643	中危	25.3	26.1.2	python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643 镜像层: sha256:460918059704e77bb79557a488c2d21e4831921c676888a1b9623ef612320385 发布日期: 2026-06-01 17:17 修改: 2026-08-05 13:24
setuptools	CVE-2026-59890	中危	79.0.1	83.0.0	setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890 镜像层: sha256:460918059704e77bb79557a488c2d21e4831921c676888a1b9623ef612320385 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
pip	CVE-2026-3219	中危	25.3	26.1	pip: pip: Incorrect file installation due to improper archive handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219 镜像层: sha256:460918059704e77bb79557a488c2d21e4831921c676888a1b9623ef612320385 发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
pip	CVE-2026-1703	低危	25.3	26.0	pip: pip: Information disclosure via path traversal when installing crafted wheel archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703 镜像层: sha256:460918059704e77bb79557a488c2d21e4831921c676888a1b9623ef612320385 发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16