docker.io/istio/proxyv2:1.30.1-distroless linux/amd64

docker.io/istio/proxyv2:1.30.1-distroless - Trivy安全扫描结果扫描时间: 2026-06-25 11:00

全部漏洞信息

低危漏洞:0

中危漏洞:13

高危漏洞:14

严重漏洞:0

系统OS: wolfi 20230201 扫描引擎: Trivy 扫描时间: 2026-06-25 11:00

docker.io/istio/proxyv2:1.30.1-distroless (wolfi 20230201) (wolfi)

低危漏洞:0

中危漏洞:6

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
glibc	CVE-2026-5450	中危	2.43-r6	2.43-r7	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:ab537012aa12c1cc56077278754dfefe667c2e165b463229b668d99515157e1f 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
glibc	CVE-2026-5928	中危	2.43-r6	2.43-r7	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:ab537012aa12c1cc56077278754dfefe667c2e165b463229b668d99515157e1f 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
glibc-locale-posix	CVE-2026-5450	中危	2.43-r6	2.43-r7	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:ab537012aa12c1cc56077278754dfefe667c2e165b463229b668d99515157e1f 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
glibc-locale-posix	CVE-2026-5928	中危	2.43-r6	2.43-r7	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:ab537012aa12c1cc56077278754dfefe667c2e165b463229b668d99515157e1f 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
ld-linux	CVE-2026-5450	中危	2.43-r6	2.43-r7	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:ab537012aa12c1cc56077278754dfefe667c2e165b463229b668d99515157e1f 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
ld-linux	CVE-2026-5928	中危	2.43-r6	2.43-r7	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:ab537012aa12c1cc56077278754dfefe667c2e165b463229b668d99515157e1f 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59

usr/local/bin/pilot-agent (gobinary)

低危漏洞:0

中危漏洞:7

高危漏洞:14

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/crypto	CVE-2026-39827	高危	v0.51.0	0.52.0	An authenticated SSH client that repeatedly opened channels which were ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-39828	高危	v0.51.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-39829	高危	v0.51.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-39830	高危	v0.51.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-39835	高危	v0.51.0	0.52.0	SSH servers which use CertChecker as a public key callback without set ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-42508	高危	v0.51.0	0.52.0	golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:47
golang.org/x/crypto	CVE-2026-46595	高危	v0.51.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
golang.org/x/crypto	CVE-2026-46597	高危	v0.51.0	0.52.0	An incorrectly placed cast from bytes to int allowed for server-side p ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
istio.io/istio	CVE-2019-14993	高危	v0.0.0-20260604142548-10229c76f285	1.1.13, 1.2.4	istio/envoy: mishandling regular expressions for long URIs leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14993 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2019-08-13 18:15 修改: 2026-06-17 02:19
istio.io/istio	CVE-2021-39155	高危	v0.0.0-20260604142548-10229c76f285	1.9.8, 1.10.4, 1.11.1	istio/istio: HTTP request can bypass authorization mechanisms due to case insensitive host comparison 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39155 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2021-08-24 23:15 修改: 2026-06-17 04:03
istio.io/istio	CVE-2021-39156	高危	v0.0.0-20260604142548-10229c76f285	1.9.8, 1.10.4, 1.11.1	istio/istio: HTTP request with fragment in URI can bypass authorization mechanisms 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39156 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2021-08-24 23:15 修改: 2026-06-17 04:03
istio.io/istio	CVE-2022-23635	高危	v0.0.0-20260604142548-10229c76f285	1.13.1, 1.12.4, 1.11.7	istio: unauthenticated control plane denial of service attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23635 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2022-02-22 22:15 修改: 2026-06-17 04:30
stdlib	CVE-2026-27145	高危	v1.26.3	1.25.11, 1.26.4	*x509.Certificate).VerifyHostname previously called matchHostnames in ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-06-02 23:16 修改: 2026-06-17 10:26
stdlib	CVE-2026-42504	高危	v1.26.3	1.25.11, 1.26.4	Decoding a maliciously-crafted MIME header containing many invalid enc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-06-02 23:16 修改: 2026-06-17 10:47
golang.org/x/crypto	CVE-2026-39832	中危	v0.51.0	0.52.0	When adding a key to a remote agent constraint extensions such as rest ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-39833	中危	v0.51.0	0.52.0	The in-memory keyring returned by NewKeyring() silently accepted keys ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto	CVE-2026-39834	中危	v0.51.0	0.52.0	When writing data larger than 4GB in a single Write call on an SSH cha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
istio.io/istio	CVE-2022-31045	中危	v0.0.0-20260604142548-10229c76f285	1.12.18, 1.13.5, 1.14.1	Istio: Unsafe memory access in metadata exchange. 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31045 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2022-06-09 21:15 修改: 2026-06-17 04:44
golang.org/x/crypto	CVE-2026-46598	中危	v0.51.0	0.52.0	golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
golang.org/x/crypto	CVE-2026-39831	中危	v0.51.0	0.52.0	The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nis ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42507	中危	v1.26.3	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:6e4f43bd39a337a0ee88d92d44db4c38a64ef22dfaa479def8efc8f4eb9ea847 发布日期: 2026-06-02 23:16 修改: 2026-06-17 10:47