docker.io/grafana/tempo:2.10.6 linux/amd64

docker.io/grafana/tempo:2.10.6 - Trivy安全扫描结果扫描时间: 2026-06-09 18:03

全部漏洞信息

低危漏洞:0

中危漏洞:2

高危漏洞:2

严重漏洞:0

系统OS: debian 12.13 扫描引擎: Trivy 扫描时间: 2026-06-09 18:03

docker.io/grafana/tempo:2.10.6 (debian 12.13) (debian)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

tempo (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/grafana/tempo	CVE-2026-28377	高危	v2.9.3	2.10.3	Grafana Tempo: Grafana Tempo: Information disclosure of S3 encryption key via status config endpoint 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28377 镜像层: sha256:87894c4a62a82ac55becd61f71e0f0153476e0d90b35b127bbb21a987ceaacc8 发布日期: 2026-03-26 22:16 修改: 2026-03-31 19:00
stdlib	CVE-2026-42504	高危	v1.26.3	1.25.11, 1.26.4	Decoding a maliciously-crafted MIME header containing many invalid enc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:87894c4a62a82ac55becd61f71e0f0153476e0d90b35b127bbb21a987ceaacc8 发布日期: 2026-06-02 23:16 修改: 2026-06-04 16:15
stdlib	CVE-2026-27145	中危	v1.26.3	1.25.11, 1.26.4	*x509.Certificate).VerifyHostname previously called matchHostnames in ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:87894c4a62a82ac55becd61f71e0f0153476e0d90b35b127bbb21a987ceaacc8 发布日期: 2026-06-02 23:16 修改: 2026-06-04 16:15
stdlib	CVE-2026-42507	中危	v1.26.3	1.25.11, 1.26.4	When returning errors, functions in the net/textproto package would in ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:87894c4a62a82ac55becd61f71e0f0153476e0d90b35b127bbb21a987ceaacc8 发布日期: 2026-06-02 23:16 修改: 2026-06-04 16:15