docker.io/docker:29.8.1-dind-rootless linux/amd64

docker.io/docker:29.8.1-dind-rootless - Trivy安全扫描结果 扫描时间: 2026-09-22 11:31
全部漏洞信息
低危漏洞:9 中危漏洞:17 高危漏洞:29 严重漏洞:0

系统OS: alpine 3.24.2 扫描引擎: Trivy 扫描时间: 2026-09-22 11:31

docker.io/docker:29.8.1-dind-rootless (alpine 3.24.2) (alpine)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
usr/local/bin/containerd (gobinary)
低危漏洞:5 中危漏洞:3 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56854 高危 v0.53.0 0.55.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/mod CVE-2026-56864 高危 v0.36.0 0.40.0 golang.org/x/mod/sumdb: golang.org/x/mod/sumdb: Integrity bypass via malicious GOSUMDB

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
golang.org/x/mod CVE-2026-56865 高危 v0.36.0 0.40.0 golang.org/x/mod/sumdb/tlog: golang.org/x/mod/sumdb/tlog: Supply chain compromise via transparency log tile verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
golang.org/x/net CVE-2026-46600 高危 v0.55.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text CVE-2026-56852 高危 v0.38.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
google.golang.org/grpc CVE-2026-84304 高危 v1.80.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc CVE-2026-84445 高危 v1.80.0 1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.80.0 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
golang.org/x/crypto CVE-2026-78662 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto CVE-2026-56855 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
google.golang.org/grpc CVE-2026-84303 中危 v1.80.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
go.opentelemetry.io/otel/exporters/otlp/otlptrace CVE-2026-81870 低危 v1.43.0 1.45.0 OpenTelemetry-Go is the Go implementation of OpenTelemetry. From versi ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81870

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-16 20:17 修改: 2026-09-17 15:16
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc CVE-2026-81870 低危 v1.43.0 1.45.0 OpenTelemetry-Go is the Go implementation of OpenTelemetry. From versi ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81870

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-16 20:17 修改: 2026-09-17 15:16
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp CVE-2026-81870 低危 v1.43.0 1.45.0 OpenTelemetry-Go is the Go implementation of OpenTelemetry. From versi ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81870

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-16 20:17 修改: 2026-09-17 15:16
go.opentelemetry.io/otel/sdk CVE-2026-81870 低危 v1.43.0 1.45.0 OpenTelemetry-Go is the Go implementation of OpenTelemetry. From versi ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81870

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-16 20:17 修改: 2026-09-17 15:16
github.com/cilium/ebpf CVE-2026-10722 低危 v0.16.0 0.22.0 github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10722

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-06-03 13:16 修改: 2026-07-22 19:10
golang.org/x/crypto GO-2026-5932 未知 v0.53.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/local/bin/containerd-shim-runc-v2 (gobinary)
低危漏洞:1 中危漏洞:1 高危漏洞:4 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/net CVE-2026-46600 高危 v0.55.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
google.golang.org/grpc CVE-2026-84304 高危 v1.80.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc CVE-2026-84445 高危 v1.80.0 1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.80.0 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
google.golang.org/grpc CVE-2026-84303 中危 v1.80.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
github.com/cilium/ebpf CVE-2026-10722 低危 v0.16.0 0.22.0 github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10722

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-06-03 13:16 修改: 2026-07-22 19:10
usr/local/bin/ctr (gobinary)
低危漏洞:1 中危漏洞:1 高危漏洞:7 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/mod CVE-2026-56864 高危 v0.36.0 0.40.0 golang.org/x/mod/sumdb: golang.org/x/mod/sumdb: Integrity bypass via malicious GOSUMDB

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
golang.org/x/mod CVE-2026-56865 高危 v0.36.0 0.40.0 golang.org/x/mod/sumdb/tlog: golang.org/x/mod/sumdb/tlog: Supply chain compromise via transparency log tile verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
golang.org/x/net CVE-2026-46600 高危 v0.55.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text CVE-2026-56852 高危 v0.38.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
google.golang.org/grpc CVE-2026-84304 高危 v1.80.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc CVE-2026-84445 高危 v1.80.0 1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.80.0 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
google.golang.org/grpc CVE-2026-84303 中危 v1.80.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
github.com/cilium/ebpf CVE-2026-10722 低危 v0.16.0 0.22.0 github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10722

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-06-03 13:16 修改: 2026-07-22 19:10
usr/local/bin/docker (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
usr/local/bin/docker-proxy (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
usr/local/bin/dockerd (gobinary)
低危漏洞:1 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/cilium/ebpf CVE-2026-10722 低危 v0.17.3 0.22.0 github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10722

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-06-03 13:16 修改: 2026-07-22 19:10
golang.org/x/crypto GO-2026-5932 未知 v0.57.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/local/bin/rootlesskit (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56854 高危 v0.52.0 0.55.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854

镜像层: sha256:fd367124958bf2bdb8616f61c36490ebe56d476f534d87907931d3feb996383e

发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/net CVE-2026-46600 高危 v0.55.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:fd367124958bf2bdb8616f61c36490ebe56d476f534d87907931d3feb996383e

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/crypto CVE-2026-78662 中危 v0.52.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:fd367124958bf2bdb8616f61c36490ebe56d476f534d87907931d3feb996383e

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto CVE-2026-56855 中危 v0.52.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:fd367124958bf2bdb8616f61c36490ebe56d476f534d87907931d3feb996383e

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto GO-2026-5932 未知 v0.52.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:fd367124958bf2bdb8616f61c36490ebe56d476f534d87907931d3feb996383e

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/local/bin/runc (gobinary)
低危漏洞:1 中危漏洞:4 高危漏洞:5 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/net CVE-2026-25681 高危 v0.50.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-27136 高危 v0.50.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-33814 高危 v0.50.0 0.53.0 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-05-07 20:16 修改: 2026-09-18 13:17
golang.org/x/net CVE-2026-39821 高危 v0.50.0 0.55.0 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-05-22 16:16 修改: 2026-09-17 12:18
golang.org/x/net CVE-2026-46600 高危 v0.50.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/net CVE-2026-25680 中危 v0.50.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-27141 中危 v0.50.0 0.51.0 golang.org/x/net/http2: golang.org/x/net/http2: Denial of Service due to malformed HTTP/2 frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27141

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-02-26 20:31 修改: 2026-06-17 10:26
golang.org/x/net CVE-2026-42502 中危 v0.50.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-42506 中危 v0.50.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
github.com/cilium/ebpf CVE-2026-10722 低危 v0.17.3 0.22.0 github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10722

镜像层: sha256:7c63ca14fce36d85c32e8702909849335258e14d414000622329b61ae2669fc7

发布日期: 2026-06-03 13:16 修改: 2026-07-22 19:10
usr/local/libexec/docker/cli-plugins/docker-buildx (gobinary)
低危漏洞:0 中危漏洞:5 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/docker/docker CVE-2026-41567 高危 v28.5.2+incompatible docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567

镜像层: sha256:e3d1de5f1375e39d81112995ea8215ab47ebdbc8adfcdaf44fa795d37f35a733

发布日期: 2026-06-05 02:17 修改: 2026-09-09 13:19
github.com/docker/docker CVE-2026-42306 高危 v28.5.2+incompatible github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306

镜像层: sha256:e3d1de5f1375e39d81112995ea8215ab47ebdbc8adfcdaf44fa795d37f35a733

发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47
github.com/moby/go-archive CVE-2026-17106 高危 v0.2.0 0.3.0 github.com/moby/go-archive: moby/go-archive: Arbitrary file write via link following in tar extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-17106

镜像层: sha256:e3d1de5f1375e39d81112995ea8215ab47ebdbc8adfcdaf44fa795d37f35a733

发布日期: 2026-08-18 19:16 修改: 2026-08-28 15:29
github.com/docker/docker CVE-2026-33997 中危 v28.5.2+incompatible 29.3.1 moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997

镜像层: sha256:e3d1de5f1375e39d81112995ea8215ab47ebdbc8adfcdaf44fa795d37f35a733

发布日期: 2026-03-31 03:15 修改: 2026-09-09 13:19
github.com/docker/docker CVE-2026-41568 中危 v28.5.2+incompatible github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568

镜像层: sha256:e3d1de5f1375e39d81112995ea8215ab47ebdbc8adfcdaf44fa795d37f35a733

发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46
github.com/containerd/containerd/v2 CVE-2026-53495 中危 v2.3.4 2.0.12, 2.2.8, 2.3.5 github.com/containerd/containerd: containerd: Denial of Service via CRI ExecSync goroutine leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53495

镜像层: sha256:e3d1de5f1375e39d81112995ea8215ab47ebdbc8adfcdaf44fa795d37f35a733

发布日期: 2026-09-14 18:17 修改: 2026-09-14 18:17
golang.org/x/crypto CVE-2026-56855 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:e3d1de5f1375e39d81112995ea8215ab47ebdbc8adfcdaf44fa795d37f35a733

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:e3d1de5f1375e39d81112995ea8215ab47ebdbc8adfcdaf44fa795d37f35a733

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto GO-2026-5932 未知 v0.55.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:e3d1de5f1375e39d81112995ea8215ab47ebdbc8adfcdaf44fa795d37f35a733

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/local/libexec/docker/cli-plugins/docker-compose (gobinary)
低危漏洞:0 中危漏洞:1 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/containerd/containerd/v2 CVE-2026-53495 中危 v2.3.4 2.0.12, 2.2.8, 2.3.5 github.com/containerd/containerd: containerd: Denial of Service via CRI ExecSync goroutine leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53495

镜像层: sha256:9194244e50cbd4f552bcd3314fb6750424e4c405e4b59a5fea9e4b7595f8c299

发布日期: 2026-09-14 18:17 修改: 2026-09-14 18:17
golang.org/x/crypto GO-2026-5932 未知 v0.56.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:9194244e50cbd4f552bcd3314fb6750424e4c405e4b59a5fea9e4b7595f8c299

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×