docker.io/deluan/navidrome:pr-5832 - Trivy镜像安全扫描结果

全部漏洞信息

低危漏洞:3

中危漏洞:4

高危漏洞:3

严重漏洞:2

系统OS: alpine 3.20.10 扫描引擎: Trivy 扫描时间: 2026-07-21 17:31

docker.io/deluan/navidrome:pr-5832 (alpine 3.20.10) (alpine)

低危漏洞:3

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
luajit	CVE-2024-25176	低危	2.1_p20240314-r0	2.1_p20240815-r1	luajit: From CVEorg collector 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25176 镜像层: sha256:9ee22c74e7871ff4ebb64b25992e7d8261837f02fa658f354102f070b8bf9d90 发布日期: 2025-07-07 17:15 修改: 2026-06-17 07:15
luajit	CVE-2024-25177	低危	2.1_p20240314-r0	2.1_p20240815-r1	luajit: Out of bounds read in LuaJIT 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25177 镜像层: sha256:9ee22c74e7871ff4ebb64b25992e7d8261837f02fa658f354102f070b8bf9d90 发布日期: 2025-07-07 17:15 修改: 2026-06-17 07:15
luajit	CVE-2024-25178	低危	2.1_p20240314-r0	2.1_p20240815-r1	luajit: Out of bounds read in LuaJIT 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25178 镜像层: sha256:9ee22c74e7871ff4ebb64b25992e7d8261837f02fa658f354102f070b8bf9d90 发布日期: 2025-07-07 17:15 修改: 2026-06-17 07:15

软件包

漏洞

安全状态

安装版本

修复版本

漏洞信息

luajit

CVE-2024-25176

低危

2.1_p20240314-r0

2.1_p20240815-r1

luajit: From CVEorg collector

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25176

镜像层: sha256:9ee22c74e7871ff4ebb64b25992e7d8261837f02fa658f354102f070b8bf9d90

发布日期: 2025-07-07 17:15 修改: 2026-06-17 07:15

luajit

CVE-2024-25177

低危

2.1_p20240314-r0

2.1_p20240815-r1

luajit: Out of bounds read in LuaJIT

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25177

镜像层: sha256:9ee22c74e7871ff4ebb64b25992e7d8261837f02fa658f354102f070b8bf9d90

发布日期: 2025-07-07 17:15 修改: 2026-06-17 07:15

luajit

CVE-2024-25178

低危

2.1_p20240314-r0

2.1_p20240815-r1

luajit: Out of bounds read in LuaJIT

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25178

镜像层: sha256:9ee22c74e7871ff4ebb64b25992e7d8261837f02fa658f354102f070b8bf9d90

发布日期: 2025-07-07 17:15 修改: 2026-06-17 07:15

app/navidrome (gobinary)

低危漏洞:0

中危漏洞:4

高危漏洞:3

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/navidrome/navidrome	CVE-2024-47062	严重	v0.0.0-20260721013629-c6b06625e8ea+dirty	0.53.0	Navidrome has Multiple SQL Injections and ORM Leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47062 镜像层: sha256:42d6b26648d8f1f14c65ef68d7448aeec53c236b81ad1fef0e31be5f25b03305 发布日期: 2024-09-20 19:15 修改: 2026-06-17 07:56
github.com/navidrome/navidrome	CVE-2026-25579	严重	v0.0.0-20260721013629-c6b06625e8ea+dirty	0.60.0	Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25579 镜像层: sha256:42d6b26648d8f1f14c65ef68d7448aeec53c236b81ad1fef0e31be5f25b03305 发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24
github.com/navidrome/navidrome	CVE-2023-51442	高危	v0.0.0-20260721013629-c6b06625e8ea+dirty	0.50.2	Authentication bypass vulnerability in navidrome's subsonic endpoint 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51442 镜像层: sha256:42d6b26648d8f1f14c65ef68d7448aeec53c236b81ad1fef0e31be5f25b03305 发布日期: 2023-12-21 15:15 修改: 2026-06-17 06:40
github.com/navidrome/navidrome	CVE-2024-56362	高危	v0.0.0-20260721013629-c6b06625e8ea+dirty	0.54.1	Navidrome Stores JWT Secret in Plaintext in navidrome.db 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56362 镜像层: sha256:42d6b26648d8f1f14c65ef68d7448aeec53c236b81ad1fef0e31be5f25b03305 发布日期: 2024-12-23 18:15 修改: 2026-06-17 08:12
github.com/navidrome/navidrome	CVE-2025-48948	高危	v0.0.0-20260721013629-c6b06625e8ea+dirty	0.56.0	Navidrome Transcoding Permission Bypass Vulnerability Report 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48948 镜像层: sha256:42d6b26648d8f1f14c65ef68d7448aeec53c236b81ad1fef0e31be5f25b03305 发布日期: 2025-05-30 20:15 修改: 2026-06-17 09:30
github.com/navidrome/navidrome	CVE-2022-23857	中危	v0.0.0-20260721013629-c6b06625e8ea+dirty	0.47.5	SQL injection in github.com/navidrome/navidrome 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23857 镜像层: sha256:42d6b26648d8f1f14c65ef68d7448aeec53c236b81ad1fef0e31be5f25b03305 发布日期: 2022-01-24 02:15 修改: 2026-06-17 04:30
github.com/navidrome/navidrome	CVE-2024-32963	中危	v0.0.0-20260721013629-c6b06625e8ea+dirty	0.52.0	Navidrome Parameter Tampering vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32963 镜像层: sha256:42d6b26648d8f1f14c65ef68d7448aeec53c236b81ad1fef0e31be5f25b03305 发布日期: 2024-05-01 07:15 修改: 2026-06-17 07:30
github.com/navidrome/navidrome	CVE-2024-41259	中危	v0.0.0-20260721013629-c6b06625e8ea+dirty		Navidrome uses MD5 hashing algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41259 镜像层: sha256:42d6b26648d8f1f14c65ef68d7448aeec53c236b81ad1fef0e31be5f25b03305 发布日期: 2024-08-01 21:15 修改: 2026-06-17 07:47
github.com/navidrome/navidrome	CVE-2026-25578	中危	v0.0.0-20260721013629-c6b06625e8ea+dirty	0.60.0	Navidrome has XSS via comment from song metadata 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25578 镜像层: sha256:42d6b26648d8f1f14c65ef68d7448aeec53c236b81ad1fef0e31be5f25b03305 发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:42d6b26648d8f1f14c65ef68d7448aeec53c236b81ad1fef0e31be5f25b03305 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

docker.io/deluan/navidrome:pr-5832 linux/arm64

全部漏洞信息

docker.io/deluan/navidrome:pr-5832 (alpine 3.20.10) (alpine)

app/navidrome (gobinary)