docker.io/jgraph/drawio:31.3.2 linux/amd64

docker.io/jgraph/drawio:31.3.2 - Trivy安全扫描结果扫描时间: 2026-08-24 10:26

全部漏洞信息

低危漏洞:7

中危漏洞:15

高危漏洞:3

严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-08-24 10:26

docker.io/jgraph/drawio:31.3.2 (ubuntu 24.04) (ubuntu)

低危漏洞:7

中危漏洞:14

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	漏洞信息
bsdutils	CVE-2026-27456	中危	1:2.39.3-9ubuntu6.5	util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5	util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libexpat1	CVE-2025-66382	中危	2.6.1-2ubuntu0.4	libexpat: libexpat: Denial of service via crafted file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382 镜像层: sha256:f1b6d0dfa1550bb7877f04815ad7b812a2b1815a0b8bed83e10379795e41a54f 发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libmount1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5	util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libp11-kit0	CVE-2026-13757	中危	0.25.3-4ubuntu2.1	p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2026-06-29 19:16 修改: 2026-08-21 13:16
libsmartcols1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5	util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5	util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libxslt1.1	CVE-2025-10911	中危	1.1.39-0exp1ubuntu0.24.04.3	libxslt: use-after-free with key data stored cross-RVT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10911 镜像层: sha256:dc0af699928af99f9206ff9c805af1f460f287856e9360d6fe705aff8ea21365 发布日期: 2025-09-25 16:15 修改: 2026-08-21 13:16
libxslt1.1	CVE-2025-7425	中危	1.1.39-0exp1ubuntu0.24.04.3	libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425 镜像层: sha256:dc0af699928af99f9206ff9c805af1f460f287856e9360d6fe705aff8ea21365 发布日期: 2025-07-10 14:15 修改: 2026-08-23 02:16
mount	CVE-2026-27456	中危	2.39.3-9ubuntu6.5	util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
p11-kit	CVE-2026-13757	中危	0.25.3-4ubuntu2.1	p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:f1b6d0dfa1550bb7877f04815ad7b812a2b1815a0b8bed83e10379795e41a54f 发布日期: 2026-06-29 19:16 修改: 2026-08-21 13:16
p11-kit-modules	CVE-2026-13757	中危	0.25.3-4ubuntu2.1	p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:f1b6d0dfa1550bb7877f04815ad7b812a2b1815a0b8bed83e10379795e41a54f 发布日期: 2026-06-29 19:16 修改: 2026-08-21 13:16
util-linux	CVE-2026-27456	中危	2.39.3-9ubuntu6.5	util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
wget	CVE-2021-31879	中危	1.21.4-1ubuntu4.5	wget: authorization header disclosure on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879 镜像层: sha256:f1b6d0dfa1550bb7877f04815ad7b812a2b1815a0b8bed83e10379795e41a54f 发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
libudev1	CVE-2026-40228	低危	255.4-1ubuntu8.17	systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libicu74	CVE-2025-5222	低危	74.2-1ubuntu3.1	icu: Stack buffer overflow in the SRBRoot::addTag function 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222 镜像层: sha256:dc0af699928af99f9206ff9c805af1f460f287856e9360d6fe705aff8ea21365 发布日期: 2025-05-27 21:15 修改: 2026-08-19 18:16
libgcrypt20	CVE-2024-2236	低危	1.10.3-2ubuntu0.1	libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
passwd	CVE-2024-56433	低危	1:4.13+dfsg1-4ubuntu3.2	shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libsystemd0	CVE-2026-40228	低危	255.4-1ubuntu8.17	systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
login	CVE-2024-56433	低危	1:4.13+dfsg1-4ubuntu3.2	shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
zlib1g	CVE-2026-27171	低危	1:1.3.dfsg-3.1ubuntu2.1	zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

Java (jar)

低危漏洞:0

中危漏洞:1

高危漏洞:3

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
commons-fileupload:commons-fileupload	CVE-2023-24998	高危	1.4	1.5	FileUpload: FileUpload DoS with excessive parts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998 镜像层: sha256:d5e2acdcff482aab1a8f11f8e98c1a1e652b60ba7aef2ebe7c123dfb27ec99cf 发布日期: 2023-02-20 16:15 修改: 2026-06-17 05:40
commons-fileupload:commons-fileupload	CVE-2025-48976	高危	1.4	1.6.0	apache-commons-fileupload: Apache Commons FileUpload DoS via part headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48976 镜像层: sha256:d5e2acdcff482aab1a8f11f8e98c1a1e652b60ba7aef2ebe7c123dfb27ec99cf 发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
commons-io:commons-io	CVE-2024-47554	高危	2.11.0	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:d5e2acdcff482aab1a8f11f8e98c1a1e652b60ba7aef2ebe7c123dfb27ec99cf 发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.12.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:d5e2acdcff482aab1a8f11f8e98c1a1e652b60ba7aef2ebe7c123dfb27ec99cf 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30