docker.io/goharbor/harbor-portal:dev-arm64 linux/arm64

docker.io/goharbor/harbor-portal:dev-arm64 - Trivy安全扫描结果扫描时间: 2026-09-21 09:50 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:0

中危漏洞:2

高危漏洞:15

严重漏洞:2

系统OS: photon 5.0 扫描引擎: Trivy 扫描时间: 2026-09-21 09:50

docker.io/goharbor/harbor-portal:dev-arm64 (photon 5.0) (photon)

低危漏洞:0

中危漏洞:2

高危漏洞:15

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
openssl	CVE-2026-63073	严重	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: untrusted sender DN used as format string in CMP response validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073 镜像层: sha256:737baab7b984b28a29edbf8bbd046126cd0b76b46b91e583e35d0ebc351136fc 发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl-libs	CVE-2026-63073	严重	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: untrusted sender DN used as format string in CMP response validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073 镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504 发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
krb5	CVE-2026-40355	高危	1.20.2-14.ph5	1.20.2-15.ph5	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
openssl	CVE-2026-14457	高危	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: RPK server signature algorithm selection can dereference a missing certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457 镜像层: sha256:737baab7b984b28a29edbf8bbd046126cd0b76b46b91e583e35d0ebc351136fc 发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
openssl	CVE-2026-18798	高危	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: QUIC server may trigger double free when processing INITIAL packet 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798 镜像层: sha256:737baab7b984b28a29edbf8bbd046126cd0b76b46b91e583e35d0ebc351136fc 发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl	CVE-2026-54874	高危	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: excessive memory use buffering DTLS records for a future epoch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874 镜像层: sha256:737baab7b984b28a29edbf8bbd046126cd0b76b46b91e583e35d0ebc351136fc 发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl	CVE-2026-63072	高危	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: heap buffer overflow in CMS key unwrapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072 镜像层: sha256:737baab7b984b28a29edbf8bbd046126cd0b76b46b91e583e35d0ebc351136fc 发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl	CVE-2026-63075	高危	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: QUIC ACK-only packet retention can cause memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075 镜像层: sha256:737baab7b984b28a29edbf8bbd046126cd0b76b46b91e583e35d0ebc351136fc 发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
openssl	CVE-2026-63076	高危	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: invalid pointer dereference in CMP server via crafted protectionAlg 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076 镜像层: sha256:737baab7b984b28a29edbf8bbd046126cd0b76b46b91e583e35d0ebc351136fc 发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libssh2	CVE-2026-66033	高危	1.11.1-5.ph5	1.11.1-6.ph5	libssh2: libssh2: Denial of Service via integer underflow in AES-GCM cipher negotiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66033 镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504 发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:44
openssl-libs	CVE-2026-14457	高危	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: RPK server signature algorithm selection can dereference a missing certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457 镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504 发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
openssl-libs	CVE-2026-18798	高危	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: QUIC server may trigger double free when processing INITIAL packet 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798 镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504 发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl-libs	CVE-2026-54874	高危	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: excessive memory use buffering DTLS records for a future epoch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874 镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504 发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl-libs	CVE-2026-63072	高危	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: heap buffer overflow in CMS key unwrapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072 镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504 发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
openssl-libs	CVE-2026-63075	高危	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: QUIC ACK-only packet retention can cause memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075 镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504 发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
openssl-libs	CVE-2026-63076	高危	3.5.7-5.ph5	3.5.8-0.1.ph5	openssl: invalid pointer dereference in CMP server via crafted protectionAlg 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076 镜像层: sha256:9baef88cde7c420ff928c15aa1cae6d2aeb6e25a80d19e30f9e483e41e43a504 发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
util-linux-libs	CVE-2026-76642	高危	2.41.5-2.ph5	2.42.3-1.ph5	util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642 镜像层: sha256:737baab7b984b28a29edbf8bbd046126cd0b76b46b91e583e35d0ebc351136fc 发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
util-linux-libs	CVE-2025-14104	中危	2.41.5-2.ph5	2.42.3-1.ph5	util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:737baab7b984b28a29edbf8bbd046126cd0b76b46b91e583e35d0ebc351136fc 发布日期: 2025-12-05 17:16 修改: 2026-09-01 12:17
util-linux-libs	CVE-2026-27456	中危	2.41.5-2.ph5	2.42.3-1.ph5	util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:737baab7b984b28a29edbf8bbd046126cd0b76b46b91e583e35d0ebc351136fc 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10