docker.io/gitea/runner:2.0.0-dind - Trivy镜像安全扫描结果

全部漏洞信息

低危漏洞:0

中危漏洞:48

高危漏洞:84

严重漏洞:3

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-07-01 15:34

docker.io/gitea/runner:2.0.0-dind (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:9

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libexpat	CVE-2026-50219	中危	2.8.1-r0	2.8.2-r0	expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-04 06:16 修改: 2026-06-17 10:57
libexpat	CVE-2026-56132	中危	2.8.1-r0	2.8.2-r0	expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat	CVE-2026-56403	中危	2.8.1-r0	2.8.2-r0	libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat	CVE-2026-56404	中危	2.8.1-r0	2.8.2-r0	libexpat before 2.8.2 has an integer overflow in addBinding. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat	CVE-2026-56405	中危	2.8.1-r0	2.8.2-r0	libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat	CVE-2026-56406	中危	2.8.1-r0	2.8.2-r0	libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat	CVE-2026-56410	中危	2.8.1-r0	2.8.2-r0	libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat	CVE-2026-56411	中危	2.8.1-r0	2.8.2-r0	expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat	CVE-2026-56412	中危	2.8.1-r0	2.8.2-r0	libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libexpat	CVE-2026-56131	未知	2.8.1-r0	2.8.2-r0	libexpat before 2.8.2 lacks handler call depth tracking for calls to X ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat	CVE-2026-56407	未知	2.8.1-r0	2.8.2-r0	libexpat before 2.8.2 has an integer overflow in doProlog that is rela ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat	CVE-2026-56408	未知	2.8.1-r0	2.8.2-r0	libexpat before 2.8.2 has an integer overflow in copyString. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libexpat	CVE-2026-56409	未知	2.8.1-r0	2.8.2-r0	xmlwf in libexpat before 2.8.2 has an integer overflow for the output ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409 镜像层: sha256:f0ca63eca78f9526fbe3f03d713a4ba4b8b904645e55e136a52febbcdb4838ad 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21

usr/local/bin/containerd (gobinary)

低危漏洞:0

中危漏洞:8

高危漏洞:21

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
google.golang.org/grpc	CVE-2026-33186	严重	v1.78.0	1.79.3	google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33186 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-03-20 23:16 修改: 2026-06-30 03:18
github.com/containerd/containerd/v2	CVE-2026-53489	高危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-53489 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53489 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-53492	高危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-53492 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53492 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
go.opentelemetry.io/otel	CVE-2026-29181	高危	v1.38.0	1.41.0	github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29181 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-04-07 21:17 修改: 2026-06-30 03:18
go.opentelemetry.io/otel/sdk	CVE-2026-24051	高危	v1.38.0	1.40.0	OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24051 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-02-02 23:16 修改: 2026-06-17 10:22
go.opentelemetry.io/otel/sdk	CVE-2026-39883	高危	v1.38.0	1.43.0	github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39883 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-04-08 21:17 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-39827	高危	v0.45.0	0.52.0	An authenticated SSH client that repeatedly opened channels which were ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-39828	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-39829	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-39830	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-39832	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-39835	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-42508	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-46595	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:20
golang.org/x/crypto	CVE-2026-46597	高危	v0.45.0	0.52.0	An incorrectly placed cast from bytes to int allowed for server-side p ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
golang.org/x/net	CVE-2026-25680	高危	v0.47.0	0.55.0	Parsing arbitrary HTML can consume excessive CPU time, possibly leadin ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net	CVE-2026-25681	高危	v0.47.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net	CVE-2026-27136	高危	v0.47.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:26
golang.org/x/net	CVE-2026-33814	高危	v0.47.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-07 20:16 修改: 2026-06-30 03:18
golang.org/x/net	CVE-2026-39821	高危	v0.47.0	0.55.0	golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-30 03:19
golang.org/x/net	CVE-2026-42502	高危	v0.47.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
github.com/containerd/containerd/v2	CVE-2026-53488	高危	v2.2.4	2.0.10, 2.1.9, 2.2.5, 2.3.2	CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53488 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	CVE-2026-39882	中危	v1.35.0	1.43.0	OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39882 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-04-08 21:17 修改: 2026-06-17 10:42
github.com/containerd/containerd/v2	CVE-2026-50195	中危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-50195 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50195 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-47262	中危	v2.2.4	2.0.10, 2.1.9, 2.2.5, 2.3.2	CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47262 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/crypto	CVE-2026-39831	中危	v0.45.0	0.52.0	The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nis ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-39833	中危	v0.45.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-39834	中危	v0.45.0	0.52.0	When writing data larger than 4GB in a single Write call on an SSH cha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/net	CVE-2026-42506	中危	v0.47.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
golang.org/x/crypto	CVE-2026-46598	中危	v0.45.0	0.52.0	golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
golang.org/x/sys	CVE-2026-39824	未知	v0.38.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 20:16 修改: 2026-06-17 10:42

usr/local/bin/containerd-shim-runc-v2 (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:9

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
google.golang.org/grpc	CVE-2026-33186	严重	v1.78.0	1.79.3	google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33186 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-03-20 23:16 修改: 2026-06-30 03:18
github.com/containerd/containerd/v2	CVE-2026-53489	高危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-53489 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53489 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-53492	高危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-53492 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53492 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/net	CVE-2026-25680	高危	v0.47.0	0.55.0	Parsing arbitrary HTML can consume excessive CPU time, possibly leadin ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net	CVE-2026-25681	高危	v0.47.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net	CVE-2026-27136	高危	v0.47.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:26
golang.org/x/net	CVE-2026-33814	高危	v0.47.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-07 20:16 修改: 2026-06-30 03:18
golang.org/x/net	CVE-2026-39821	高危	v0.47.0	0.55.0	golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-30 03:19
golang.org/x/net	CVE-2026-42502	高危	v0.47.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
github.com/containerd/containerd/v2	CVE-2026-53488	高危	v2.2.4	2.0.10, 2.1.9, 2.2.5, 2.3.2	CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53488 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-50195	中危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-50195 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50195 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/net	CVE-2026-42506	中危	v0.47.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
github.com/containerd/containerd/v2	CVE-2026-47262	中危	v2.2.4	2.0.10, 2.1.9, 2.2.5, 2.3.2	CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47262 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/sys	CVE-2026-39824	未知	v0.38.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 20:16 修改: 2026-06-17 10:42

usr/local/bin/ctr (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:10

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
google.golang.org/grpc	CVE-2026-33186	严重	v1.78.0	1.79.3	google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33186 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-03-20 23:16 修改: 2026-06-30 03:18
github.com/containerd/containerd/v2	CVE-2026-53489	高危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-53489 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53489 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-53492	高危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-53492 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53492 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
go.opentelemetry.io/otel	CVE-2026-29181	高危	v1.38.0	1.41.0	github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29181 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-04-07 21:17 修改: 2026-06-30 03:18
golang.org/x/net	CVE-2026-25680	高危	v0.47.0	0.55.0	Parsing arbitrary HTML can consume excessive CPU time, possibly leadin ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net	CVE-2026-25681	高危	v0.47.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net	CVE-2026-27136	高危	v0.47.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:26
golang.org/x/net	CVE-2026-33814	高危	v0.47.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-07 20:16 修改: 2026-06-30 03:18
golang.org/x/net	CVE-2026-39821	高危	v0.47.0	0.55.0	golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-30 03:19
golang.org/x/net	CVE-2026-42502	高危	v0.47.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
github.com/containerd/containerd/v2	CVE-2026-53488	高危	v2.2.4	2.0.10, 2.1.9, 2.2.5, 2.3.2	CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53488 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-47262	中危	v2.2.4	2.0.10, 2.1.9, 2.2.5, 2.3.2	CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47262 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/net	CVE-2026-42506	中危	v0.47.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
github.com/containerd/containerd/v2	CVE-2026-50195	中危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-50195 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50195 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/sys	CVE-2026-39824	未知	v0.38.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 20:16 修改: 2026-06-17 10:42

usr/local/bin/docker (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

usr/local/bin/docker-proxy (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

usr/local/bin/dockerd (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:3

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/containerd/containerd/v2	CVE-2026-53488	高危	v2.2.4	2.0.10, 2.1.9, 2.2.5, 2.3.2	CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53488 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-53489	高危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-53489 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53489 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-53492	高危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-53492 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53492 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-47262	中危	v2.2.4	2.0.10, 2.1.9, 2.2.5, 2.3.2	CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47262 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-50195	中危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-50195 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50195 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/local/bin/gitea-runner (gobinary)

低危漏洞:0

中危漏洞:1

高危漏洞:5

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/net	CVE-2026-25680	高危	v0.54.0	0.55.0	Parsing arbitrary HTML can consume excessive CPU time, possibly leadin ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:4dd01cda2431a6a7461ea00c3e221d20509bcd4915ed38f7f446a36a3b5b7952 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net	CVE-2026-25681	高危	v0.54.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:4dd01cda2431a6a7461ea00c3e221d20509bcd4915ed38f7f446a36a3b5b7952 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net	CVE-2026-27136	高危	v0.54.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:4dd01cda2431a6a7461ea00c3e221d20509bcd4915ed38f7f446a36a3b5b7952 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:26
golang.org/x/net	CVE-2026-39821	高危	v0.54.0	0.55.0	golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:4dd01cda2431a6a7461ea00c3e221d20509bcd4915ed38f7f446a36a3b5b7952 发布日期: 2026-05-22 16:16 修改: 2026-06-30 03:19
golang.org/x/net	CVE-2026-42502	高危	v0.54.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:4dd01cda2431a6a7461ea00c3e221d20509bcd4915ed38f7f446a36a3b5b7952 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
golang.org/x/net	CVE-2026-42506	中危	v0.54.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:4dd01cda2431a6a7461ea00c3e221d20509bcd4915ed38f7f446a36a3b5b7952 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47

usr/local/bin/runc (gobinary)

低危漏洞:0

中危漏洞:5

高危漏洞:6

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/net	CVE-2026-25680	高危	v0.35.0	0.55.0	Parsing arbitrary HTML can consume excessive CPU time, possibly leadin ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net	CVE-2026-25681	高危	v0.35.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net	CVE-2026-27136	高危	v0.35.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:26
golang.org/x/net	CVE-2026-33814	高危	v0.35.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-07 20:16 修改: 2026-06-30 03:18
golang.org/x/net	CVE-2026-39821	高危	v0.35.0	0.55.0	golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-30 03:19
golang.org/x/net	CVE-2026-42502	高危	v0.35.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
golang.org/x/net	CVE-2025-22870	中危	v0.35.0	0.36.0	golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50
golang.org/x/net	CVE-2025-22872	中危	v0.35.0	0.38.0	golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22872 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2025-04-16 18:16 修改: 2026-06-17 08:50
golang.org/x/net	CVE-2025-47911	中危	v0.35.0	0.45.0	golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47911 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:28
golang.org/x/net	CVE-2025-58190	中危	v0.35.0	0.45.0	golang.org/x/net/html: Infinite parsing loop in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58190 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:44
golang.org/x/net	CVE-2026-42506	中危	v0.35.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
golang.org/x/sys	CVE-2026-39824	未知	v0.30.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:1615da2250e1334af6721fe10655eb7d383457c32ecf14aff07fadd69c28e83e 发布日期: 2026-05-22 20:16 修改: 2026-06-17 10:42

usr/local/libexec/docker/cli-plugins/docker-buildx (gobinary)

低危漏洞:0

中危漏洞:4

高危漏洞:6

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/containerd/containerd/v2	CVE-2026-53488	高危	v2.2.4	2.0.10, 2.1.9, 2.2.5, 2.3.2	CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53488 镜像层: sha256:940f6d243e78af124a9178864229a2ca24391e41691897dcc75ac04535f19310 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-53489	高危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-53489 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53489 镜像层: sha256:940f6d243e78af124a9178864229a2ca24391e41691897dcc75ac04535f19310 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-53492	高危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-53492 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53492 镜像层: sha256:940f6d243e78af124a9178864229a2ca24391e41691897dcc75ac04535f19310 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/docker/docker	CVE-2026-34040	高危	v28.5.2+incompatible	29.3.1	Moby: Moby: Authorization bypass vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34040 镜像层: sha256:940f6d243e78af124a9178864229a2ca24391e41691897dcc75ac04535f19310 发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
github.com/docker/docker	CVE-2026-41567	高危	v28.5.2+incompatible		docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567 镜像层: sha256:940f6d243e78af124a9178864229a2ca24391e41691897dcc75ac04535f19310 发布日期: 2026-06-05 02:17 修改: 2026-06-30 03:19
github.com/docker/docker	CVE-2026-42306	高危	v28.5.2+incompatible		Moby is an open source container framework. In Docker Engine prior to ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306 镜像层: sha256:940f6d243e78af124a9178864229a2ca24391e41691897dcc75ac04535f19310 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47
github.com/containerd/containerd/v2	CVE-2026-50195	中危	v2.2.4	2.1.9, 2.2.5, 2.3.2	CVE-2026-50195 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50195 镜像层: sha256:940f6d243e78af124a9178864229a2ca24391e41691897dcc75ac04535f19310 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-47262	中危	v2.2.4	2.0.10, 2.1.9, 2.2.5, 2.3.2	CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47262 镜像层: sha256:940f6d243e78af124a9178864229a2ca24391e41691897dcc75ac04535f19310 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/docker/docker	CVE-2026-33997	中危	v28.5.2+incompatible	29.3.1	moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997 镜像层: sha256:940f6d243e78af124a9178864229a2ca24391e41691897dcc75ac04535f19310 发布日期: 2026-03-31 03:15 修改: 2026-06-30 03:18
github.com/docker/docker	CVE-2026-41568	中危	v28.5.2+incompatible		github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568 镜像层: sha256:940f6d243e78af124a9178864229a2ca24391e41691897dcc75ac04535f19310 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46

usr/local/libexec/docker/cli-plugins/docker-compose (gobinary)

低危漏洞:0

中危漏洞:13

高危漏洞:24

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/containerd/containerd/v2	CVE-2026-46680	高危	v2.2.3	2.0.9, 2.2.4, 2.3.1	containerd user ID handling bypass allows runAsNonRoot evasion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46680 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-53488	高危	v2.2.3	2.0.10, 2.1.9, 2.2.5, 2.3.2	CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53488 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-53489	高危	v2.2.3	2.1.9, 2.2.5, 2.3.2	CVE-2026-53489 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53489 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd/v2	CVE-2026-53492	高危	v2.2.3	2.1.9, 2.2.5, 2.3.2	CVE-2026-53492 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53492 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/docker/docker	CVE-2026-34040	高危	v28.5.2+incompatible	29.3.1	Moby: Moby: Authorization bypass vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34040 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
github.com/docker/docker	CVE-2026-41567	高危	v28.5.2+incompatible		docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-06-05 02:17 修改: 2026-06-30 03:19
github.com/docker/docker	CVE-2026-42306	高危	v28.5.2+incompatible		Moby is an open source container framework. In Docker Engine prior to ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47
golang.org/x/crypto	CVE-2026-39827	高危	v0.48.0	0.52.0	An authenticated SSH client that repeatedly opened channels which were ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-39828	高危	v0.48.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-39829	高危	v0.48.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-39830	高危	v0.48.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-39832	高危	v0.48.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-39835	高危	v0.48.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-42508	高危	v0.48.0	0.52.0	golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:19
golang.org/x/crypto	CVE-2026-46595	高危	v0.48.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-30 03:20
golang.org/x/crypto	CVE-2026-46597	高危	v0.48.0	0.52.0	An incorrectly placed cast from bytes to int allowed for server-side p ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
golang.org/x/net	CVE-2026-25680	高危	v0.51.0	0.55.0	Parsing arbitrary HTML can consume excessive CPU time, possibly leadin ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net	CVE-2026-25681	高危	v0.51.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net	CVE-2026-27136	高危	v0.51.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:26
golang.org/x/net	CVE-2026-33814	高危	v0.51.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-07 20:16 修改: 2026-06-30 03:18
golang.org/x/net	CVE-2026-39821	高危	v0.51.0	0.55.0	golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 16:16 修改: 2026-06-30 03:19
golang.org/x/net	CVE-2026-42502	高危	v0.51.0	0.55.0	Parsing arbitrary HTML which is then rendered using Render can result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
stdlib	CVE-2026-27145	高危	v1.26.3	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-06-02 23:16 修改: 2026-06-30 03:17
stdlib	CVE-2026-42504	高危	v1.26.3	1.25.11, 1.26.4	Decoding a maliciously-crafted MIME header containing many invalid enc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-06-02 23:16 修改: 2026-06-17 10:47
golang.org/x/crypto	CVE-2026-39833	中危	v0.48.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-39834	中危	v0.48.0	0.52.0	When writing data larger than 4GB in a single Write call on an SSH cha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-46598	中危	v0.48.0	0.52.0	golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
github.com/docker/docker	CVE-2026-33997	中危	v28.5.2+incompatible	29.3.1	moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-03-31 03:15 修改: 2026-06-30 03:18
github.com/docker/docker	CVE-2026-41568	中危	v28.5.2+incompatible		github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46
github.com/in-toto/in-toto-golang	GHSA-pmwq-pjrm-6p5r	中危	v0.10.0	0.11.0	in-toto-golang and in-toto-python have inconsistent negation behavior 漏洞详情: https://github.com/advisories/GHSA-pmwq-pjrm-6p5r 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-08 22:24 修改: 2026-05-08 22:24
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp	CVE-2026-39882	中危	v1.42.0	1.43.0	OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39882 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-04-08 21:17 修改: 2026-06-17 10:42
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	CVE-2026-39882	中危	v1.42.0	1.43.0	OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39882 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-04-08 21:17 修改: 2026-06-17 10:42
github.com/containerd/containerd/v2	CVE-2026-50195	中危	v2.2.3	2.1.9, 2.2.5, 2.3.2	CVE-2026-50195 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50195 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/net	CVE-2026-42506	中危	v0.51.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
github.com/containerd/containerd/v2	CVE-2026-47262	中危	v2.2.3	2.0.10, 2.1.9, 2.2.5, 2.3.2	CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47262 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/crypto	CVE-2026-39831	中危	v0.48.0	0.52.0	The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nis ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42507	中危	v1.26.3	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:3481389964e9e0474419c5fcc043d07f9dfaa057aaa8dbbe8c4d1966d0865af7 发布日期: 2026-06-02 23:16 修改: 2026-06-17 10:47

docker.io/gitea/runner:2.0.0-dind linux/amd64

全部漏洞信息

docker.io/gitea/runner:2.0.0-dind (alpine 3.24.1) (alpine)

usr/local/bin/containerd (gobinary)

usr/local/bin/containerd-shim-runc-v2 (gobinary)

usr/local/bin/ctr (gobinary)

usr/local/bin/docker (gobinary)

usr/local/bin/docker-proxy (gobinary)

usr/local/bin/dockerd (gobinary)

usr/local/bin/gitea-runner (gobinary)

usr/local/bin/runc (gobinary)

usr/local/libexec/docker/cli-plugins/docker-buildx (gobinary)

usr/local/libexec/docker/cli-plugins/docker-compose (gobinary)