docker.io/darthsim/imgproxy:latest linux/arm64

docker.io/darthsim/imgproxy:latest - Trivy安全扫描结果 扫描时间: 2026-09-04 17:37 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:4 中危漏洞:4 高危漏洞:0 严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-04 17:37

docker.io/darthsim/imgproxy:latest (ubuntu 24.04) (ubuntu)
低危漏洞:4 中危漏洞:4 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libc-bin CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:646eea22414270d74b0c9e9d6d3b9550701ae62e658a099825d4d15045a3630b

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6 CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:646eea22414270d74b0c9e9d6d3b9550701ae62e658a099825d4d15045a3630b

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:646eea22414270d74b0c9e9d6d3b9550701ae62e658a099825d4d15045a3630b

发布日期: 2026-08-03 17:16 修改: 2026-09-01 15:17
tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:646eea22414270d74b0c9e9d6d3b9550701ae62e658a099825d4d15045a3630b

发布日期: 2026-08-03 16:16 修改: 2026-09-01 15:17
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:646eea22414270d74b0c9e9d6d3b9550701ae62e658a099825d4d15045a3630b

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:646eea22414270d74b0c9e9d6d3b9550701ae62e658a099825d4d15045a3630b

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:646eea22414270d74b0c9e9d6d3b9550701ae62e658a099825d4d15045a3630b

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:646eea22414270d74b0c9e9d6d3b9550701ae62e658a099825d4d15045a3630b

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
opt/imgproxy/bin/imgproxy (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56855 未知 v0.55.0 0.56.0 Previously, after a channel has been established, a malicious peer cou ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:ded6274b8bfe1b864b03bc81bf2b41091dc311a17c2762139c7e72efe9e9a69e

发布日期: 2026-09-02 20:17 修改: 2026-09-03 16:37
golang.org/x/crypto CVE-2026-78662 未知 v0.55.0 0.56.0 Previously, a channel registered in the mux's chanList is not usable u ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:ded6274b8bfe1b864b03bc81bf2b41091dc311a17c2762139c7e72efe9e9a69e

发布日期: 2026-09-02 20:17 修改: 2026-09-03 16:37
golang.org/x/crypto GO-2026-5932 未知 v0.55.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:ded6274b8bfe1b864b03bc81bf2b41091dc311a17c2762139c7e72efe9e9a69e

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×