docker.io/istio/proxyv2:1.30.2-distroless linux/amd64

docker.io/istio/proxyv2:1.30.2-distroless - Trivy安全扫描结果扫描时间: 2026-06-30 18:43

全部漏洞信息

低危漏洞:0

中危漏洞:8

高危漏洞:6

严重漏洞:0

系统OS: wolfi 20230201 扫描引擎: Trivy 扫描时间: 2026-06-30 18:43

docker.io/istio/proxyv2:1.30.2-distroless (wolfi 20230201) (wolfi)

低危漏洞:0

中危漏洞:6

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
glibc	CVE-2026-5450	中危	2.43-r6	2.43-r7	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:ab537012aa12c1cc56077278754dfefe667c2e165b463229b668d99515157e1f 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
glibc	CVE-2026-5928	中危	2.43-r6	2.43-r7	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:ab537012aa12c1cc56077278754dfefe667c2e165b463229b668d99515157e1f 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
glibc-locale-posix	CVE-2026-5450	中危	2.43-r6	2.43-r7	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:ab537012aa12c1cc56077278754dfefe667c2e165b463229b668d99515157e1f 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
glibc-locale-posix	CVE-2026-5928	中危	2.43-r6	2.43-r7	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:ab537012aa12c1cc56077278754dfefe667c2e165b463229b668d99515157e1f 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
ld-linux	CVE-2026-5450	中危	2.43-r6	2.43-r7	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:ab537012aa12c1cc56077278754dfefe667c2e165b463229b668d99515157e1f 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
ld-linux	CVE-2026-5928	中危	2.43-r6	2.43-r7	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:ab537012aa12c1cc56077278754dfefe667c2e165b463229b668d99515157e1f 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59

usr/local/bin/pilot-agent (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:6

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
istio.io/istio	CVE-2019-14993	高危	v0.0.0-20260624003133-f888ab4c8a0c	1.1.13, 1.2.4	istio/envoy: mishandling regular expressions for long URIs leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14993 镜像层: sha256:3896f4ac0613f8ddaf0614f30faf248abda2801cdaf2c725a6109b27040175fd 发布日期: 2019-08-13 18:15 修改: 2026-06-17 02:19
istio.io/istio	CVE-2021-39155	高危	v0.0.0-20260624003133-f888ab4c8a0c	1.9.8, 1.10.4, 1.11.1	istio/istio: HTTP request can bypass authorization mechanisms due to case insensitive host comparison 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39155 镜像层: sha256:3896f4ac0613f8ddaf0614f30faf248abda2801cdaf2c725a6109b27040175fd 发布日期: 2021-08-24 23:15 修改: 2026-06-17 04:03
istio.io/istio	CVE-2021-39156	高危	v0.0.0-20260624003133-f888ab4c8a0c	1.9.8, 1.10.4, 1.11.1	istio/istio: HTTP request with fragment in URI can bypass authorization mechanisms 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39156 镜像层: sha256:3896f4ac0613f8ddaf0614f30faf248abda2801cdaf2c725a6109b27040175fd 发布日期: 2021-08-24 23:15 修改: 2026-06-17 04:03
istio.io/istio	CVE-2022-23635	高危	v0.0.0-20260624003133-f888ab4c8a0c	1.13.1, 1.12.4, 1.11.7	istio: unauthenticated control plane denial of service attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23635 镜像层: sha256:3896f4ac0613f8ddaf0614f30faf248abda2801cdaf2c725a6109b27040175fd 发布日期: 2022-02-22 22:15 修改: 2026-06-17 04:30
stdlib	CVE-2026-27145	高危	v1.26.3	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:3896f4ac0613f8ddaf0614f30faf248abda2801cdaf2c725a6109b27040175fd 发布日期: 2026-06-02 23:16 修改: 2026-06-30 03:17
stdlib	CVE-2026-42504	高危	v1.26.3	1.25.11, 1.26.4	Decoding a maliciously-crafted MIME header containing many invalid enc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:3896f4ac0613f8ddaf0614f30faf248abda2801cdaf2c725a6109b27040175fd 发布日期: 2026-06-02 23:16 修改: 2026-06-17 10:47
istio.io/istio	CVE-2022-31045	中危	v0.0.0-20260624003133-f888ab4c8a0c	1.12.18, 1.13.5, 1.14.1	Istio: Unsafe memory access in metadata exchange. 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31045 镜像层: sha256:3896f4ac0613f8ddaf0614f30faf248abda2801cdaf2c725a6109b27040175fd 发布日期: 2022-06-09 21:15 修改: 2026-06-17 04:44
stdlib	CVE-2026-42507	中危	v1.26.3	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:3896f4ac0613f8ddaf0614f30faf248abda2801cdaf2c725a6109b27040175fd 发布日期: 2026-06-02 23:16 修改: 2026-06-17 10:47