docker.io/goharbor/harbor-db:dev-arm64 linux/arm64

docker.io/goharbor/harbor-db:dev-arm64 - Trivy安全扫描结果 扫描时间: 2026-09-21 09:42 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:0 中危漏洞:11 高危漏洞:24 严重漏洞:3

系统OS: photon 5.0 扫描引擎: Trivy 扫描时间: 2026-09-21 09:42

docker.io/goharbor/harbor-db:dev-arm64 (photon 5.0) (photon)
低危漏洞:0 中危漏洞:11 高危漏洞:24 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libxml2 CVE-2026-86140 严重 2.15.3-3.ph5 2.15.4-1.ph5 libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86140

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2026-09-05 05:17 修改: 2026-09-15 19:39

openssl CVE-2026-63073 严重 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:fb99923a416b515cdfd13667aa728c7be133ac7ba4a2e4906311b60d288e287b

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16

openssl-libs CVE-2026-63073 严重 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16

gzip CVE-2026-41992 高危 1.12-4.ph5 1.12-5.ph5 gzip: gzip: Information disclosure via global buffer overflow in LZH decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2026-06-29 12:16 修改: 2026-08-27 13:17

libxml2 CVE-2026-86138 高危 2.15.3-3.ph5 2.15.4-1.ph5 libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86138

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2026-09-05 05:17 修改: 2026-09-15 19:40

libxml2 CVE-2026-86139 高危 2.15.3-3.ph5 2.15.4-1.ph5 libxml2: libxml2: Integer overflow in xmlURIEscapeStr may lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86139

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2026-09-05 05:17 修改: 2026-09-15 19:39

libxml2 CVE-2026-86142 高危 2.15.3-3.ph5 2.15.4-1.ph5 libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86142

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2026-09-05 05:17 修改: 2026-09-15 19:35

libxml2 CVE-2026-86143 高危 2.15.3-3.ph5 2.15.4-1.ph5 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86143

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2026-09-05 05:17 修改: 2026-09-15 19:31

libxml2 CVE-2026-86144 高危 2.15.3-3.ph5 2.15.4-1.ph5 libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86144

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2026-09-05 05:17 修改: 2026-09-15 19:20

logger CVE-2026-76642 高危 2.41.5-2.ph5 2.42.3-1.ph5 util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642

镜像层: sha256:729bba4608b377801d95f5317160f075426e42d42dc4abef2ff4284e7862ecc6

发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17

logger-bin CVE-2026-76642 高危 2.41.5-2.ph5 2.42.3-1.ph5 util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642

镜像层: sha256:729bba4608b377801d95f5317160f075426e42d42dc4abef2ff4284e7862ecc6

发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17

krb5 CVE-2026-40355 高危 1.20.2-14.ph5 1.20.2-15.ph5 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

openssl CVE-2026-14457 高危 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:fb99923a416b515cdfd13667aa728c7be133ac7ba4a2e4906311b60d288e287b

发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14

openssl CVE-2026-18798 高危 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:fb99923a416b515cdfd13667aa728c7be133ac7ba4a2e4906311b60d288e287b

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46

openssl CVE-2026-54874 高危 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:fb99923a416b515cdfd13667aa728c7be133ac7ba4a2e4906311b60d288e287b

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16

openssl CVE-2026-63072 高危 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:fb99923a416b515cdfd13667aa728c7be133ac7ba4a2e4906311b60d288e287b

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16

openssl CVE-2026-63075 高危 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:fb99923a416b515cdfd13667aa728c7be133ac7ba4a2e4906311b60d288e287b

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17

openssl CVE-2026-63076 高危 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:fb99923a416b515cdfd13667aa728c7be133ac7ba4a2e4906311b60d288e287b

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17

libssh2 CVE-2026-66033 高危 1.11.1-5.ph5 1.11.1-6.ph5 libssh2: libssh2: Denial of Service via integer underflow in AES-GCM cipher negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66033

镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504

发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:44

openssl-libs CVE-2026-14457 高危 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504

发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14

openssl-libs CVE-2026-18798 高危 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46

openssl-libs CVE-2026-54874 高危 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16

openssl-libs CVE-2026-63072 高危 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16

openssl-libs CVE-2026-63075 高危 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17

openssl-libs CVE-2026-63076 高危 3.5.7-5.ph5 3.5.8-0.1.ph5 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17

util-linux CVE-2026-76642 高危 2.41.5-2.ph5 2.42.3-1.ph5 util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642

镜像层: sha256:729bba4608b377801d95f5317160f075426e42d42dc4abef2ff4284e7862ecc6

发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17

util-linux-libs CVE-2026-76642 高危 2.41.5-2.ph5 2.42.3-1.ph5 util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17

logger CVE-2025-14104 中危 2.41.5-2.ph5 2.42.3-1.ph5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:729bba4608b377801d95f5317160f075426e42d42dc4abef2ff4284e7862ecc6

发布日期: 2025-12-05 17:16 修改: 2026-09-01 12:17

logger CVE-2026-27456 中危 2.41.5-2.ph5 2.42.3-1.ph5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:729bba4608b377801d95f5317160f075426e42d42dc4abef2ff4284e7862ecc6

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libxml2 CVE-2026-86137 中危 2.15.3-3.ph5 2.15.4-1.ph5 libxml2: libxml2: Denial of Service via out-of-bounds read in xmlFAParsePosCharGroup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86137

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2026-09-05 05:17 修改: 2026-09-15 19:46

logger-bin CVE-2025-14104 中危 2.41.5-2.ph5 2.42.3-1.ph5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:729bba4608b377801d95f5317160f075426e42d42dc4abef2ff4284e7862ecc6

发布日期: 2025-12-05 17:16 修改: 2026-09-01 12:17

logger-bin CVE-2026-27456 中危 2.41.5-2.ph5 2.42.3-1.ph5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:729bba4608b377801d95f5317160f075426e42d42dc4abef2ff4284e7862ecc6

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libxml2 CVE-2026-86141 中危 2.15.3-3.ph5 2.15.4-1.ph5 libxml2: libxml2: Denial of Service due to NULL pointer dereference in xmlRegNewParserCtxt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86141

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2026-09-05 05:17 修改: 2026-09-15 19:37

util-linux CVE-2025-14104 中危 2.41.5-2.ph5 2.42.3-1.ph5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:729bba4608b377801d95f5317160f075426e42d42dc4abef2ff4284e7862ecc6

发布日期: 2025-12-05 17:16 修改: 2026-09-01 12:17

util-linux CVE-2026-27456 中危 2.41.5-2.ph5 2.42.3-1.ph5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:729bba4608b377801d95f5317160f075426e42d42dc4abef2ff4284e7862ecc6

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

gzip CVE-2026-41991 中危 1.12-4.ph5 1.12-5.ph5 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02

util-linux-libs CVE-2025-14104 中危 2.41.5-2.ph5 2.42.3-1.ph5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2025-12-05 17:16 修改: 2026-09-01 12:17

util-linux-libs CVE-2026-27456 中危 2.41.5-2.ph5 2.42.3-1.ph5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:c0e91f469a6828a74ac0743acbca6c8b41702d1d718908f7ad606b059a796edc

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×