docker.io/cube-sandbox-int.tencentcloudcr.com/cube-sandbox/cube-templatecenter:v0.7.1 linux/amd64

docker.io/cube-sandbox-int.tencentcloudcr.com/cube-sandbox/cube-templatecenter:v0.7.1 - Trivy安全扫描结果 扫描时间: 2026-09-18 14:15
全部漏洞信息
低危漏洞:7 中危漏洞:38 高危漏洞:5 严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-18 14:15

docker.io/cube-sandbox-int.tencentcloudcr.com/cube-sandbox/cube-templatecenter:v0.7.1 (ubuntu 24.04) (ubuntu)
低危漏洞:7 中危漏洞:31 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2026-13608 中危 8.5.0-2ubuntu10.13 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
curl CVE-2026-18924 中危 8.5.0-2ubuntu10.13 curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
curl CVE-2026-19931 中危 8.5.0-2ubuntu10.13 curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
curl CVE-2026-80230 中危 8.5.0-2ubuntu10.13 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
curl CVE-2026-82209 中危 8.5.0-2ubuntu10.13 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libc-bin CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-19499 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc-bin CVE-2026-19542 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc-bin CVE-2026-6368 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-6791 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-77117 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libc-bin CVE-2026-80489 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libc6 CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6 CVE-2026-19499 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc6 CVE-2026-19542 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc6 CVE-2026-6368 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6 CVE-2026-6791 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6 CVE-2026-77117 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libc6 CVE-2026-80489 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libcurl4t64 CVE-2026-13608 中危 8.5.0-2ubuntu10.13 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl4t64 CVE-2026-18924 中危 8.5.0-2ubuntu10.13 curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl4t64 CVE-2026-19931 中危 8.5.0-2ubuntu10.13 curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl4t64 CVE-2026-80230 中危 8.5.0-2ubuntu10.13 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl4t64 CVE-2026-82209 中危 8.5.0-2ubuntu10.13 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libdevmapper1.02.1 CVE-2026-19617 中危 2:1.02.185-3ubuntu3.2 libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19617

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2026-08-14 06:17 修改: 2026-09-01 13:18
libsqlite3-0 CVE-2026-39113 中危 3.45.1-1ubuntu2.7 3.45.1-1ubuntu2.8 Buffer Overflow vulnerability in SQLite affected version source s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39113

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2026-08-25 21:17 修改: 2026-09-09 16:04
perl-base CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17
perl-base CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-03 17:16 修改: 2026-09-10 18:17
tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-03 16:16 修改: 2026-09-10 18:17
zlib1g CVE-2026-85091 中危 1:1.3.dfsg-3.1ubuntu2.2 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libelf1t64 CVE-2025-1352 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38
libelf1t64 CVE-2025-1376 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39
libbpf1 CVE-2025-29481 低危 1:1.3.0-2build2 libbpf: Heap Buffer Overflow in libbpf

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29481

镜像层: sha256:14ac7a9b0fc1a1a32628ce9557760a5626e17f943c05c52037bc505b65587484

发布日期: 2025-04-07 20:15 修改: 2026-06-17 09:05
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
usr/local/services/cubetoolbox/CubeTemplateCenter/bin/templatecenter (gobinary)
低危漏洞:0 中危漏洞:7 高危漏洞:5 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/containerd/containerd CVE-2026-53488 高危 v1.7.32 1.7.33 github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53488

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 2026-07-01 02:17 修改: 2026-07-03 04:17
github.com/quic-go/quic-go CVE-2025-59530 高危 v0.54.0 0.49.1, 0.54.1 github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59530

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 2025-10-10 16:15 修改: 2026-06-17 09:46
google.golang.org/grpc CVE-2026-84304 高危 v1.80.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc CVE-2026-84445 高危 v1.80.0 1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.80.0 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
github.com/quic-go/quic-go CVE-2026-40898 中危 v0.54.0 0.59.1 github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40898

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 2026-06-04 19:16 修改: 2026-07-22 20:10
golang.org/x/crypto CVE-2026-56855 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
github.com/containerd/containerd CVE-2026-53495 中危 v1.7.32 1.7.35 github.com/containerd/containerd: containerd: Denial of Service via CRI ExecSync goroutine leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53495

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 2026-09-14 18:17 修改: 2026-09-14 18:17
github.com/containerd/containerd CVE-2026-47262 中危 v1.7.32 1.7.33 github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47262

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 2026-07-01 19:16 修改: 2026-07-02 19:40
github.com/quic-go/quic-go CVE-2025-64702 中危 v0.54.0 0.57.0 github.com/quic-go/quic-go/http3: quic-go HTTP/3 QPACK Header Expansion DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64702

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 2025-12-11 21:15 修改: 2026-06-17 09:55
google.golang.org/grpc CVE-2026-84303 中危 v1.80.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
golang.org/x/crypto GO-2026-5932 未知 v0.55.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:5d96aec02bc427e7896dd302f0548ca6b69d228442e57f38c0987fbb5a1d1e5b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×