docker.io/cym1102/svnwebui:latest linux/amd64

docker.io/cym1102/svnwebui:latest - Trivy安全扫描结果 扫描时间: 2026-08-14 17:21
全部漏洞信息
低危漏洞:13 中危漏洞:14 高危漏洞:9 严重漏洞:2

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-14 17:21

docker.io/cym1102/svnwebui:latest (alpine 3.24.1) (alpine)
低危漏洞:10 中危漏洞:12 高危漏洞:4 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
apr-util CVE-2026-34191 高危 1.6.3-r2 1.6.4-r0 apr-util: Apache Portable Runtime Utility: SQL Injection via apr_dbd_oracle

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34191

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-08-06 15:16 修改: 2026-08-07 19:49

openjdk8-jre CVE-2026-22016 高危 8.482.08-r0 8.492.09-r0 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18

openjdk8-jre-base CVE-2026-22016 高危 8.482.08-r0 8.492.09-r0 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18

openjdk8-jre-lib CVE-2026-22016 高危 8.482.08-r0 8.492.09-r0 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18

apr-util CVE-2026-32327 中危 1.6.3-r2 1.6.4-r0 apr-util: Apache Portable Runtime Utility: Denial of Service via XML stack recursion attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32327

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-08-06 15:16 修改: 2026-08-07 19:49

openjdk8-jre CVE-2026-22013 中危 8.482.08-r0 8.492.09-r0 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk8-jre CVE-2026-22021 中危 8.482.08-r0 8.492.09-r0 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk8-jre CVE-2026-23865 中危 8.482.08-r0 8.492.09-r0 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

apr-util CVE-2026-34501 中危 1.6.3-r2 1.6.4-r0 apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34501

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-08-06 15:16 修改: 2026-08-07 19:55

openjdk8-jre-base CVE-2026-22013 中危 8.482.08-r0 8.492.09-r0 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk8-jre-base CVE-2026-22021 中危 8.482.08-r0 8.492.09-r0 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk8-jre-base CVE-2026-23865 中危 8.482.08-r0 8.492.09-r0 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

apr-util CVE-2026-34502 中危 1.6.3-r2 1.6.4-r0 apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34502

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-08-06 15:16 修改: 2026-08-07 19:58

openjdk8-jre-lib CVE-2026-22013 中危 8.482.08-r0 8.492.09-r0 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk8-jre-lib CVE-2026-22021 中危 8.482.08-r0 8.492.09-r0 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk8-jre-lib CVE-2026-23865 中危 8.482.08-r0 8.492.09-r0 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

openjdk8-jre-base CVE-2026-22007 低危 8.482.08-r0 8.492.09-r0 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk8-jre-base CVE-2026-22018 低危 8.482.08-r0 8.492.09-r0 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk8-jre-base CVE-2026-34268 低危 8.482.08-r0 8.492.09-r0 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38

apr-util CVE-2025-49506 低危 1.6.3-r2 1.6.4-r0 apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49506

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-08-06 15:16 修改: 2026-08-07 19:44

openjdk8-jre CVE-2026-22007 低危 8.482.08-r0 8.492.09-r0 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk8-jre CVE-2026-22018 低危 8.482.08-r0 8.492.09-r0 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk8-jre CVE-2026-34268 低危 8.482.08-r0 8.492.09-r0 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38

openjdk8-jre-lib CVE-2026-22007 低危 8.482.08-r0 8.492.09-r0 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk8-jre-lib CVE-2026-22018 低危 8.482.08-r0 8.492.09-r0 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19

openjdk8-jre-lib CVE-2026-34268 低危 8.482.08-r0 8.492.09-r0 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:23f7c190b2e028d1282fc7ce7edbd119a58747b146d9c400c392f91eb60b23ca

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38

Java (jar)
低危漏洞:3 中危漏洞:2 高危漏洞:5 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
io.undertow:undertow-core CVE-2025-12543 严重 2.2.37.Final 2.3.21.Final, 2.2.39.Final undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12543

镜像层: sha256:1ab209ef534b2931cb3faf96b176b15de6b0500a8cbd7636bdc3719832379a01

发布日期: 2026-01-07 17:15 修改: 2026-08-07 14:16

org.codehaus.plexus:plexus-utils CVE-2017-1000487 严重 2.0.4 3.0.16 plexus-utils: Mishandled strings in Commandline class allow for command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000487

镜像层: sha256:1ab209ef534b2931cb3faf96b176b15de6b0500a8cbd7636bdc3719832379a01

发布日期: 2018-01-03 20:29 修改: 2026-06-17 00:59

io.undertow:undertow-core CVE-2024-4027 高危 2.2.37.Final 2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final undertow: OutOfMemoryError in HttpServletRequestImpl.getParameterNames() can cause remote DoS attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4027

镜像层: sha256:1ab209ef534b2931cb3faf96b176b15de6b0500a8cbd7636bdc3719832379a01

发布日期: 2026-01-30 15:16 修改: 2026-08-05 13:17

io.undertow:undertow-core CVE-2025-9784 高危 2.2.37.Final 2.2.38.Final, 2.3.20.Final undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9784

镜像层: sha256:1ab209ef534b2931cb3faf96b176b15de6b0500a8cbd7636bdc3719832379a01

发布日期: 2025-09-02 14:15 修改: 2026-07-27 16:16

io.undertow:undertow-core CVE-2024-3884 高危 2.2.37.Final 2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final undertow: OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3884

镜像层: sha256:1ab209ef534b2931cb3faf96b176b15de6b0500a8cbd7636bdc3719832379a01

发布日期: 2025-12-03 19:15 修改: 2026-08-05 17:16

org.codehaus.plexus:plexus-utils CVE-2022-4244 高危 2.0.4 3.0.24 codehaus-plexus: Directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4244

镜像层: sha256:1ab209ef534b2931cb3faf96b176b15de6b0500a8cbd7636bdc3719832379a01

发布日期: 2023-09-25 20:15 修改: 2026-06-17 05:20

org.codehaus.plexus:plexus-utils CVE-2025-67030 高危 2.0.4 4.0.3, 3.6.1 org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67030

镜像层: sha256:1ab209ef534b2931cb3faf96b176b15de6b0500a8cbd7636bdc3719832379a01

发布日期: 2026-03-25 18:16 修改: 2026-07-21 12:17

ch.qos.logback:logback-core CVE-2025-11226 中危 1.3.15 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:1ab209ef534b2931cb3faf96b176b15de6b0500a8cbd7636bdc3719832379a01

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16

org.codehaus.plexus:plexus-utils CVE-2022-4245 中危 2.0.4 3.0.24 codehaus-plexus: XML External Entity (XXE) Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4245

镜像层: sha256:1ab209ef534b2931cb3faf96b176b15de6b0500a8cbd7636bdc3719832379a01

发布日期: 2023-09-25 20:15 修改: 2026-06-17 05:20

ch.qos.logback:logback-core CVE-2026-9828 低危 1.3.15 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:1ab209ef534b2931cb3faf96b176b15de6b0500a8cbd7636bdc3719832379a01

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05

ch.qos.logback:logback-core CVE-2026-10532 低危 1.3.15 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:1ab209ef534b2931cb3faf96b176b15de6b0500a8cbd7636bdc3719832379a01

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10

ch.qos.logback:logback-core CVE-2026-1225 低危 1.3.15 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:1ab209ef534b2931cb3faf96b176b15de6b0500a8cbd7636bdc3719832379a01

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×