docker.io/dpanel/dpanel:1.10.5 linux/amd64

docker.io/dpanel/dpanel:1.10.5 - Trivy安全扫描结果 扫描时间: 2026-07-08 17:40
全部漏洞信息
低危漏洞:9 中危漏洞:24 高危漏洞:45 严重漏洞:3

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-07-08 17:40

docker.io/dpanel/dpanel:1.10.5 (alpine 3.24.1) (alpine)
低危漏洞:8 中危漏洞:14 高危漏洞:25 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2026-11352 高危 8.20.0-r1 8.21.0-r0 curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 19:16
curl CVE-2026-11586 高危 8.20.0-r1 8.21.0-r0 curl: curl: Denial of Service via WebSocket PING flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
curl CVE-2026-12064 高危 8.20.0-r1 8.21.0-r0 curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 19:16
curl CVE-2026-8286 高危 8.20.0-r1 8.21.0-r0 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
curl CVE-2026-8925 高危 8.20.0-r1 8.21.0-r0 curl: curl: Double-free vulnerability in SASL authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
curl CVE-2026-8927 高危 8.20.0-r1 8.21.0-r0 libcurl: libcurl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
curl CVE-2026-8932 高危 8.20.0-r1 8.21.0-r0 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
curl CVE-2026-9079 高危 8.20.0-r1 8.21.0-r0 libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
curl CVE-2026-9080 高危 8.20.0-r1 8.21.0-r0 libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
curl CVE-2026-9545 高危 8.20.0-r1 8.21.0-r0 libcurl: libcurl: Information disclosure via cached SSL session and early data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
curl CVE-2026-9546 高危 8.20.0-r1 8.21.0-r0 libcurl: libcurl: Information disclosure due to persistent Referer header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9546

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
curl CVE-2026-9547 高危 8.20.0-r1 8.21.0-r0 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-11352 高危 8.20.0-r1 8.21.0-r0 curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 19:16
libcurl CVE-2026-11586 高危 8.20.0-r1 8.21.0-r0 curl: curl: Denial of Service via WebSocket PING flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-12064 高危 8.20.0-r1 8.21.0-r0 curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 19:16
libcurl CVE-2026-8286 高危 8.20.0-r1 8.21.0-r0 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-8925 高危 8.20.0-r1 8.21.0-r0 curl: curl: Double-free vulnerability in SASL authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-8927 高危 8.20.0-r1 8.21.0-r0 libcurl: libcurl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-8932 高危 8.20.0-r1 8.21.0-r0 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-9079 高危 8.20.0-r1 8.21.0-r0 libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-9080 高危 8.20.0-r1 8.21.0-r0 libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-9545 高危 8.20.0-r1 8.21.0-r0 libcurl: libcurl: Information disclosure via cached SSL session and early data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-9546 高危 8.20.0-r1 8.21.0-r0 libcurl: libcurl: Information disclosure due to persistent Referer header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9546

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-9547 高危 8.20.0-r1 8.21.0-r0 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
nginx CVE-2026-42055 高危 1.30.2-r1 1.30.3-r0 nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42055

镜像层: sha256:ac997722e2a72e026ca3f33ad9dff9c6a88c437fcacd71f53417ebd2212cef39

发布日期: 2026-06-17 15:16 修改: 2026-07-02 20:03
curl CVE-2026-8926 中危 8.20.0-r1 8.21.0-r0 curl: curl: Information disclosure via incorrect .netrc password lookup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-11856 中危 8.20.0-r1 8.21.0-r0 Successfully using libcurl to do a transfer to a specific HTTP origin ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 19:16
libcurl CVE-2026-8926 中危 8.20.0-r1 8.21.0-r0 curl: curl: Information disclosure via incorrect .netrc password lookup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libexpat CVE-2026-50219 中危 2.8.1-r0 2.8.2-r0 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-04 06:16 修改: 2026-06-17 10:57
libexpat CVE-2026-56132 中危 2.8.1-r0 2.8.2-r0 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat CVE-2026-56403 中危 2.8.1-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat CVE-2026-56404 中危 2.8.1-r0 2.8.2-r0 libexpat before 2.8.2 has an integer overflow in addBinding.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat CVE-2026-56405 中危 2.8.1-r0 2.8.2-r0 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat CVE-2026-56406 中危 2.8.1-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat CVE-2026-56410 中危 2.8.1-r0 2.8.2-r0 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat CVE-2026-56411 中危 2.8.1-r0 2.8.2-r0 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat CVE-2026-56412 中危 2.8.1-r0 2.8.2-r0 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
curl CVE-2026-11856 中危 8.20.0-r1 8.21.0-r0 Successfully using libcurl to do a transfer to a specific HTTP origin ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 19:16
nginx CVE-2026-48142 中危 1.30.2-r1 1.30.3-r0 nginx: NGINX: Memory disclosure or denial of service via ngx_http_charset_module heap buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48142

镜像层: sha256:ac997722e2a72e026ca3f33ad9dff9c6a88c437fcacd71f53417ebd2212cef39

发布日期: 2026-06-17 15:16 修改: 2026-06-22 16:50
curl CVE-2026-11564 低危 8.20.0-r1 8.21.0-r0 libcurl keeps previously used connections in a connection pool for sub ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11564

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-10536 低危 8.20.0-r1 8.21.0-r0 A use-after-free vulnerability exists in libcurl when an application c ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 19:16
libcurl CVE-2026-11564 低危 8.20.0-r1 8.21.0-r0 libcurl keeps previously used connections in a connection pool for sub ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11564

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-8458 低危 8.20.0-r1 8.21.0-r0 libcurl might in some circumstances reuse the wrong connection when as ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
libcurl CVE-2026-8924 低危 8.20.0-r1 8.21.0-r0 A flaw in curl\u2019s cookie parsing logic allows a malicious HTTP ser ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
curl CVE-2026-8458 低危 8.20.0-r1 8.21.0-r0 libcurl might in some circumstances reuse the wrong connection when as ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
curl CVE-2026-8924 低危 8.20.0-r1 8.21.0-r0 A flaw in curl\u2019s cookie parsing logic allows a malicious HTTP ser ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 18:20
curl CVE-2026-10536 低危 8.20.0-r1 8.21.0-r0 A use-after-free vulnerability exists in libcurl when an application c ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-07-03 07:16 修改: 2026-07-06 19:16
libexpat CVE-2026-56408 未知 2.8.1-r0 2.8.2-r0 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libexpat CVE-2026-56409 未知 2.8.1-r0 2.8.2-r0 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat CVE-2026-56131 未知 2.8.1-r0 2.8.2-r0 libexpat before 2.8.2 lacks handler call depth tracking for calls to X ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat CVE-2026-56407 未知 2.8.1-r0 2.8.2-r0 libexpat before 2.8.2 has an integer overflow in doProlog that is rela ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:211d5349717efb95a1aa2eb2659ab0dcdff4f579e53cd4d595fe57add952bebc

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
app/server/dpanel (gobinary)
低危漏洞:1 中危漏洞:10 高危漏洞:20 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/jackc/pgx/v5 CVE-2026-33815 严重 v5.7.5 5.9.0 github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33815

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-04-07 16:16 修改: 2026-06-30 03:18
github.com/jackc/pgx/v5 CVE-2026-33816 严重 v5.7.5 5.9.0 github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33816

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-04-07 16:16 修改: 2026-06-30 03:18
google.golang.org/grpc CVE-2026-33186 严重 v1.78.0 1.79.3 google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33186

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-03-20 23:16 修改: 2026-07-02 12:17
github.com/go-jose/go-jose/v4 CVE-2026-34986 高危 v4.1.3 4.1.4 github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34986

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-04-06 17:17 修改: 2026-07-06 13:16
github.com/docker/docker CVE-2026-34040 高危 v28.5.2+incompatible 29.3.1 Moby: Moby: Authorization bypass vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34040

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
github.com/docker/docker CVE-2026-41567 高危 v28.5.2+incompatible docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-06-05 02:17 修改: 2026-07-06 13:16
github.com/sigstore/fulcio CVE-2026-49478 高危 v1.8.5 1.8.6 Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49478

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
go.opentelemetry.io/otel CVE-2026-29181 高危 v1.40.0 1.41.0 github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29181

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-04-07 21:17 修改: 2026-06-30 03:18
golang.org/x/crypto CVE-2026-39827 高危 v0.49.0 0.52.0 An authenticated SSH client that repeatedly opened channels which were ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39828 高危 v0.49.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-07-07 12:16
golang.org/x/crypto CVE-2026-39829 高危 v0.49.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-07-06 13:16
golang.org/x/crypto CVE-2026-39830 高危 v0.49.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-07-06 13:16
golang.org/x/crypto CVE-2026-39832 高危 v0.49.0 0.52.0 golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-07-06 13:16
golang.org/x/crypto CVE-2026-39835 高危 v0.49.0 0.52.0 golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-07-03 13:17
golang.org/x/crypto CVE-2026-42508 高危 v0.49.0 0.52.0 golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-07-06 13:16
golang.org/x/crypto CVE-2026-46595 高危 v0.49.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-07-06 13:17
golang.org/x/crypto CVE-2026-46597 高危 v0.49.0 0.52.0 An incorrectly placed cast from bytes to int allowed for server-side p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
golang.org/x/net CVE-2026-25681 高危 v0.52.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net CVE-2026-27136 高危 v0.52.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:26
golang.org/x/net CVE-2026-33814 高危 v0.52.0 0.53.0 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-07 20:16 修改: 2026-07-06 13:16
golang.org/x/net CVE-2026-39821 高危 v0.52.0 0.55.0 golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 16:16 修改: 2026-07-07 12:16
golang.org/x/net CVE-2026-42502 高危 v0.52.0 0.55.0 Parsing arbitrary HTML which is then rendered using Render can result ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
github.com/docker/docker CVE-2026-42306 高危 v28.5.2+incompatible Moby is an open source container framework. In Docker Engine prior to ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47
golang.org/x/crypto CVE-2026-39834 中危 v0.49.0 0.52.0 When writing data larger than 4GB in a single Write call on an SSH cha ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-46598 中危 v0.49.0 0.52.0 golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
github.com/docker/docker CVE-2026-41568 中危 v28.5.2+incompatible github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46
github.com/sigstore/sigstore CVE-2026-24137 中危 v1.10.3 1.10.4 github.com/sigstore/sigstore: sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24137

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-01-23 00:15 修改: 2026-06-17 10:22
github.com/docker/docker CVE-2026-33997 中危 v28.5.2+incompatible 29.3.1 moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-03-31 03:15 修改: 2026-06-30 03:18
github.com/quic-go/quic-go CVE-2026-40898 中危 v0.59.0 0.59.1 quic-go is an implementation of the QUIC protocol in Go. Prior to vers ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40898

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-06-04 19:16 修改: 2026-06-17 10:45
golang.org/x/crypto CVE-2026-39831 中危 v0.49.0 0.52.0 The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nis ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/net CVE-2026-25680 中危 v0.52.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net CVE-2026-42506 中危 v0.52.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
golang.org/x/crypto CVE-2026-39833 中危 v0.49.0 0.52.0 golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
github.com/jackc/pgx/v5 CVE-2026-41889 低危 v5.7.5 5.9.2 github.com/jackc/pgx: golang: pgx: SQL injection via specific SQL query conditions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41889

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-08 17:16 修改: 2026-06-17 10:47
golang.org/x/sys CVE-2026-39824 未知 v0.42.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:2a62870794690c878b6182f5e109bedcd4d605124469e70af30b8af7436096d4

发布日期: 2026-05-22 20:16 修改: 2026-06-17 10:42
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×