docker.io/grafana/grafana-enterprise:13.2.0-ubuntu

全部漏洞信息

低危漏洞:15

中危漏洞:48

高危漏洞:164

严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-08-27 10:15

docker.io/grafana/grafana-enterprise:13.2.0-ubuntu (ubuntu 24.04) (ubuntu)

低危漏洞:14

中危漏洞:21

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
bsdutils	CVE-2026-27456	中危	1:2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
curl	CVE-2026-11856	中危	8.5.0-2ubuntu10.11	8.5.0-2ubuntu10.12	curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libattr1	CVE-2026-54371	中危	1:2.5.2-1build1.1		attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-06-29 14:16 修改: 2026-08-24 13:19
libblkid1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libcurl4t64	CVE-2026-11856	中危	8.5.0-2ubuntu10.11	8.5.0-2ubuntu10.12	curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libmount1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libp11-kit0	CVE-2026-13757	中危	0.25.3-4ubuntu2.1		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-06-29 19:16 修改: 2026-08-25 10:18
libsmartcols1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libssl3t64	CVE-2026-63072	中危	3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	openssl: heap buffer overflow in CMS key unwrapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libssl3t64	CVE-2026-63076	中危	3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	openssl: invalid pointer dereference in CMP server via crafted protectionAlg 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libsystemd0	CVE-2026-15059	中危	255.4-1ubuntu8.16	255.4-1ubuntu8.17	Local unprivileged users can terminate arbitrary local processes via a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libsystemd0	CVE-2026-16742	中危	255.4-1ubuntu8.16	255.4-1ubuntu8.17	systemd-homed contains a local privilege escalation bug via arbitrary ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libudev1	CVE-2026-15059	中危	255.4-1ubuntu8.16	255.4-1ubuntu8.17	Local unprivileged users can terminate arbitrary local processes via a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libudev1	CVE-2026-16742	中危	255.4-1ubuntu8.16	255.4-1ubuntu8.17	systemd-homed contains a local privilege escalation bug via arbitrary ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libuuid1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
openssl	CVE-2026-63072	中危	3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	openssl: heap buffer overflow in CMS key unwrapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
openssl	CVE-2026-63076	中危	3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	openssl: invalid pointer dereference in CMP server via crafted protectionAlg 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
tar	CVE-2026-18477	中危	1.35+dfsg-3ubuntu0.4		tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-08-03 17:16 修改: 2026-08-21 13:16
tar	CVE-2026-18508	中危	1.35+dfsg-3ubuntu0.4		tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-08-03 16:16 修改: 2026-08-21 13:16
util-linux	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libudev1	CVE-2026-40228	低危	255.4-1ubuntu8.16		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libssl3t64	CVE-2026-63074	低危	3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	openssl: CMP indefinite cache growth of ExtraCerts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
login	CVE-2024-56433	低危	1:4.13+dfsg1-4ubuntu3.2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libssl3t64	CVE-2026-75803	低危	3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-08-25 13:19 修改: 2026-08-25 13:19
libgcrypt20	CVE-2024-2236	低危	1.10.3-2ubuntu0.1		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
curl	CVE-2026-8932	低危	8.5.0-2ubuntu10.11	8.5.0-2ubuntu10.13	libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
openssl	CVE-2026-54874	低危	3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	openssl: excessive memory use buffering DTLS records for a future epoch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
openssl	CVE-2026-63074	低危	3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	openssl: CMP indefinite cache growth of ExtraCerts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
openssl	CVE-2026-75803	低危	3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-08-25 13:19 修改: 2026-08-25 13:19
passwd	CVE-2024-56433	低危	1:4.13+dfsg1-4ubuntu3.2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libsystemd0	CVE-2026-40228	低危	255.4-1ubuntu8.16		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libcurl4t64	CVE-2026-8932	低危	8.5.0-2ubuntu10.11	8.5.0-2ubuntu10.13	libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
libssl3t64	CVE-2026-54874	低危	3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	openssl: excessive memory use buffering DTLS records for a future epoch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874 镜像层: sha256:8ebdb7a097c8ecdb142f6718e1ee28cf5491089271a74fdc448157c0c9ab47f0 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
zlib1g	CVE-2026-27171	低危	1:1.3.dfsg-3.1ubuntu2.1		zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

Node.js (node-pkg)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

usr/share/grafana/bin/grafana (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/grafana/tempo	CVE-2026-21728	高危	v1.5.1-0.20260427112133-525d1bab07e0	2.8.4, 2.9.2, 2.10.2	grafana/tempo: Tempo: Denial of Service via large queries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21728 镜像层: sha256:284fe304866054fba95a3a58c77b47c21d4ae869cffdc29278286889e3a2f049 发布日期: 2026-04-24 09:16 修改: 2026-08-24 13:17
github.com/grafana/tempo	CVE-2026-28377	高危	v1.5.1-0.20260427112133-525d1bab07e0	2.10.3	Grafana Tempo: Grafana Tempo: Information disclosure of S3 encryption key via status config endpoint 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28377 镜像层: sha256:284fe304866054fba95a3a58c77b47c21d4ae869cffdc29278286889e3a2f049 发布日期: 2026-03-26 22:16 修改: 2026-06-17 13:20
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:284fe304866054fba95a3a58c77b47c21d4ae869cffdc29278286889e3a2f049 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

软件包

漏洞

安全状态

安装版本

修复版本

漏洞信息

github.com/grafana/tempo

CVE-2026-21728

高危

v1.5.1-0.20260427112133-525d1bab07e0

2.8.4, 2.9.2, 2.10.2

grafana/tempo: Tempo: Denial of Service via large queries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21728

镜像层: sha256:284fe304866054fba95a3a58c77b47c21d4ae869cffdc29278286889e3a2f049

发布日期: 2026-04-24 09:16 修改: 2026-08-24 13:17

github.com/grafana/tempo

CVE-2026-28377

高危

v1.5.1-0.20260427112133-525d1bab07e0

2.10.3

Grafana Tempo: Grafana Tempo: Information disclosure of S3 encryption key via status config endpoint

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28377

镜像层: sha256:284fe304866054fba95a3a58c77b47c21d4ae869cffdc29278286889e3a2f049

发布日期: 2026-03-26 22:16 修改: 2026-06-17 13:20

golang.org/x/crypto

GO-2026-5932

未知

v0.54.0

The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:284fe304866054fba95a3a58c77b47c21d4ae869cffdc29278286889e3a2f049

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/share/grafana/data/plugins-bundled/elasticsearch/gpx_grafana_elasticsearch_datasource_linux_amd64 (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:11

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-27145	高危	v1.26.3	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33818	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.26.3	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-42504	高危	v1.26.3	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-46600	高危	v1.26.3	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-42505	中危	v1.26.3	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.26.3	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
golang.org/x/crypto	GO-2026-5932	未知	v0.53.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/share/grafana/data/plugins-bundled/grafana-postgresql-datasource/gpx_grafana_postgresql_datasource_linux_amd64 (gobinary)

低危漏洞:0

中危漏洞:1

高危漏洞:12

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/net	CVE-2026-46600	高危	v0.55.0	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text	CVE-2026-56852	高危	v0.37.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.80.0	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
stdlib	CVE-2026-33818	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-46600	高危	v1.26.4	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-42505	中危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

usr/share/grafana/data/plugins-bundled/grafana-pyroscope-datasource/gpx_grafana-pyroscope-datasource_linux_amd64 (gobinary)

低危漏洞:0

中危漏洞:1

高危漏洞:12

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/net	CVE-2026-46600	高危	v0.55.0	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text	CVE-2026-56852	高危	v0.37.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.81.1	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
stdlib	CVE-2026-33818	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-46600	高危	v1.26.4	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-42505	中危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

usr/share/grafana/data/plugins-bundled/influxdb/gpx_grafana_influxdb_datasource_linux_amd64 (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:11

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-27145	高危	v1.26.3	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33818	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.26.3	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-42504	高危	v1.26.3	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-46600	高危	v1.26.3	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-42505	中危	v1.26.3	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.26.3	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

usr/share/grafana/data/plugins-bundled/jaeger/gpx_grafana-jaeger-datasource_linux_amd64 (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:14

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/net	CVE-2026-46600	高危	v0.55.0	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text	CVE-2026-56852	高危	v0.37.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.80.0	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
stdlib	CVE-2026-27145	高危	v1.26.3	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33818	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.26.3	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-42504	高危	v1.26.3	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-46600	高危	v1.26.3	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-42505	中危	v1.26.3	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.26.3	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10

usr/share/grafana/data/plugins-bundled/loki/gpx_grafana-loki-datasource_linux_amd64 (gobinary)

低危漏洞:0

中危漏洞:1

高危漏洞:10

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.82.0	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
stdlib	CVE-2026-33818	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-46600	高危	v1.26.4	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-42505	中危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/share/grafana/data/plugins-bundled/mssql/gpx_grafana-mssql-datasource_linux_amd64 (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:11

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-27145	高危	v1.26.3	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33818	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.26.3	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-42504	高危	v1.26.3	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-46600	高危	v1.26.3	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-42505	中危	v1.26.3	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.26.3	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
golang.org/x/crypto	GO-2026-5932	未知	v0.53.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/share/grafana/data/plugins-bundled/mysql/gpx_grafana-mysql-datasource_linux_amd64 (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:8

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

usr/share/grafana/data/plugins-bundled/opentsdb/gpx_grafana-opentsdb-datasource_linux_amd64 (gobinary)

低危漏洞:1

中危漏洞:12

高危漏洞:28

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
go.opentelemetry.io/otel	CVE-2026-29181	高危	v1.40.0	1.41.0	github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29181 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-04-07 21:17 修改: 2026-08-25 13:18
go.opentelemetry.io/otel/sdk	CVE-2026-39883	高危	v1.40.0	1.43.0	github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39883 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-04-08 21:17 修改: 2026-08-14 13:18
golang.org/x/net	CVE-2026-25681	高危	v0.51.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-27136	高危	v0.51.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-33814	高危	v0.51.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:18
golang.org/x/net	CVE-2026-39821	高危	v0.51.0	0.55.0	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
golang.org/x/net	CVE-2026-46600	高危	v0.51.0	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text	CVE-2026-56852	高危	v0.34.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.79.3	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
stdlib	CVE-2026-25679	高危	v1.25.7	1.25.8, 1.26.1	net/url: Incorrect parsing of IPv6 host literals in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-03-06 22:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-27145	高危	v1.25.7	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-32280	高危	v1.25.7	1.25.9, 1.26.2	crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-04-08 02:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-32281	高危	v1.25.7	1.25.9, 1.26.2	crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32283	高危	v1.25.7	1.25.9, 1.26.2	crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-04-08 02:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33811	高危	v1.25.7	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33814	高危	v1.25.7	1.25.10, 1.26.3	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33818	高危	v1.25.7	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39820	高危	v1.25.7	1.25.10, 1.26.3	net/mail: golang: Go net/mail: Denial of Service via crafted email inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39821	高危	v1.25.7	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.25.7	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-39836	高危	v1.25.7	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42499	高危	v1.25.7	1.25.10, 1.26.3	net/mail: golang: net/mail: Denial of Service via pathological email address parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:19
stdlib	CVE-2026-42504	高危	v1.25.7	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-56853	高危	v1.25.7	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.25.7	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.25.7	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.25.7	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.25.7	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/net	CVE-2026-25680	中危	v0.51.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42502	中危	v0.51.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42506	中危	v0.51.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
stdlib	CVE-2026-27142	中危	v1.25.7	1.25.8, 1.26.1	html/template: URLs in meta content attribute actions are not escaped in html/template 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
stdlib	CVE-2026-32282	中危	v1.25.7	1.25.9, 1.26.2	golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32288	中危	v1.25.7	1.25.9, 1.26.2	archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32289	中危	v1.25.7	1.25.9, 1.26.2	html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-39823	中危	v1.25.7	1.25.10, 1.26.3	html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39825	中危	v1.25.7	1.25.10, 1.26.3	net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39826	中危	v1.25.7	1.25.10, 1.26.3	html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42505	中危	v1.25.7	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.25.7	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-27139	低危	v1.25.7	1.25.8, 1.26.1	os: FileInfo can escape from a Root in golang os module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
golang.org/x/sys	CVE-2026-39824	未知	v0.41.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10

usr/share/grafana/data/plugins-bundled/prometheus/gpx_grafana-prometheus-datasource_linux_amd64 (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:8

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

usr/share/grafana/data/plugins-bundled/stackdriver/gpx_grafana_cloudmonitoring_datasource_linux_amd64 (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:14

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/net	CVE-2026-46600	高危	v0.55.0	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text	CVE-2026-56852	高危	v0.37.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.79.3	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
stdlib	CVE-2026-27145	高危	v1.26.3	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33818	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.26.3	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-42504	高危	v1.26.3	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-46600	高危	v1.26.3	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.3	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-42505	中危	v1.26.3	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.26.3	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
golang.org/x/crypto	GO-2026-5932	未知	v0.52.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/share/grafana/data/plugins-bundled/tempo/gpx_grafana-tempo-datasource_linux_amd64 (gobinary)

低危漏洞:0

中危漏洞:1

高危漏洞:14

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/grafana/tempo	CVE-2026-21728	高危	v1.5.1-0.20250529124718-87c2dc380cec	2.8.4, 2.9.2, 2.10.2	grafana/tempo: Tempo: Denial of Service via large queries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21728 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-04-24 09:16 修改: 2026-08-24 13:17
github.com/grafana/tempo	CVE-2026-28377	高危	v1.5.1-0.20250529124718-87c2dc380cec	2.10.3	Grafana Tempo: Grafana Tempo: Information disclosure of S3 encryption key via status config endpoint 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28377 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-03-26 22:16 修改: 2026-06-17 13:20
golang.org/x/net	CVE-2026-46600	高危	v0.55.0	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text	CVE-2026-56852	高危	v0.37.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.81.1	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
stdlib	CVE-2026-33818	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-46600	高危	v1.26.4	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-42505	中危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

usr/share/grafana/data/plugins-bundled/zipkin/gpx_grafana-zipkin-datasource_linux_amd64 (gobinary)

低危漏洞:0

中危漏洞:1

高危漏洞:9

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-33818	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-46600	高危	v1.26.4	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.4	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-42505	中危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:7c9d04467d5ec2380044955fc280003a4b3b4422db9b392fc14d4c5ca04f1dae 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05

docker.io/grafana/grafana-enterprise:13.2.0-ubuntu linux/amd64

全部漏洞信息

docker.io/grafana/grafana-enterprise:13.2.0-ubuntu (ubuntu 24.04) (ubuntu)

Node.js (node-pkg)

usr/share/grafana/bin/grafana (gobinary)

usr/share/grafana/data/plugins-bundled/elasticsearch/gpx_grafana_elasticsearch_datasource_linux_amd64 (gobinary)

usr/share/grafana/data/plugins-bundled/grafana-postgresql-datasource/gpx_grafana_postgresql_datasource_linux_amd64 (gobinary)

usr/share/grafana/data/plugins-bundled/grafana-pyroscope-datasource/gpx_grafana-pyroscope-datasource_linux_amd64 (gobinary)

usr/share/grafana/data/plugins-bundled/influxdb/gpx_grafana_influxdb_datasource_linux_amd64 (gobinary)

usr/share/grafana/data/plugins-bundled/jaeger/gpx_grafana-jaeger-datasource_linux_amd64 (gobinary)

usr/share/grafana/data/plugins-bundled/loki/gpx_grafana-loki-datasource_linux_amd64 (gobinary)

usr/share/grafana/data/plugins-bundled/mssql/gpx_grafana-mssql-datasource_linux_amd64 (gobinary)

usr/share/grafana/data/plugins-bundled/mysql/gpx_grafana-mysql-datasource_linux_amd64 (gobinary)

usr/share/grafana/data/plugins-bundled/opentsdb/gpx_grafana-opentsdb-datasource_linux_amd64 (gobinary)

usr/share/grafana/data/plugins-bundled/prometheus/gpx_grafana-prometheus-datasource_linux_amd64 (gobinary)

usr/share/grafana/data/plugins-bundled/stackdriver/gpx_grafana_cloudmonitoring_datasource_linux_amd64 (gobinary)

usr/share/grafana/data/plugins-bundled/tempo/gpx_grafana-tempo-datasource_linux_amd64 (gobinary)

usr/share/grafana/data/plugins-bundled/zipkin/gpx_grafana-zipkin-datasource_linux_amd64 (gobinary)