docker.io/jumpserver/ansible-executor:latest linux/amd64

docker.io/jumpserver/ansible-executor:latest - Trivy安全扫描结果扫描时间: 2026-07-30 16:53

全部漏洞信息

低危漏洞:2

中危漏洞:7

高危漏洞:3

严重漏洞:0

系统OS: centos-stream 9 扫描引擎: Trivy 扫描时间: 2026-07-30 16:53

Node.js (node-pkg)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Python (python-pkg)

低危漏洞:2

中危漏洞:7

高危漏洞:3

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
ansible-core	CVE-2026-11332	高危	2.16.18	2.16.19rc1, 2.18.18rc1, 2.19.11rc1, 2.20.7rc1, 2.21.1rc1	ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11332 镜像层: sha256:8b791b1f023fe781f27c8d29702b131d5f8616f86802dcaeac2098487514a359 发布日期: 2026-06-05 09:16 修改: 2026-07-28 20:17
setuptools	CVE-2024-6345	高危	65.5.1	70.0.0	pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345 镜像层: sha256:04f9dab48ab05ec8bb3c26c4e978eca47e4a95ca7af0f1b55941af692baa78b8 发布日期: 2024-07-15 01:15 修改: 2026-06-17 08:17
setuptools	CVE-2025-47273	高危	65.5.1	78.1.1	setuptools: Path Traversal Vulnerability in setuptools PackageIndex 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273 镜像层: sha256:04f9dab48ab05ec8bb3c26c4e978eca47e4a95ca7af0f1b55941af692baa78b8 发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27
pip	CVE-2025-8869	中危	22.3.1	25.3	pip: pip missing checks on symbolic link extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869 镜像层: sha256:04f9dab48ab05ec8bb3c26c4e978eca47e4a95ca7af0f1b55941af692baa78b8 发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
pip	CVE-2026-3219	中危	22.3.1	26.1	pip: pip: Incorrect file installation due to improper archive handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219 镜像层: sha256:04f9dab48ab05ec8bb3c26c4e978eca47e4a95ca7af0f1b55941af692baa78b8 发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
pip	CVE-2026-6357	中危	22.3.1	26.1	pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357 镜像层: sha256:04f9dab48ab05ec8bb3c26c4e978eca47e4a95ca7af0f1b55941af692baa78b8 发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
pip	CVE-2026-8643	中危	22.3.1	26.1.2	python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643 镜像层: sha256:04f9dab48ab05ec8bb3c26c4e978eca47e4a95ca7af0f1b55941af692baa78b8 发布日期: 2026-06-01 17:17 修改: 2026-07-22 12:18
ansible	CVE-2025-14010	中危	9.13.0	12.2.0	ansible-collection-community-general: ansible-collection-community-general: Keycloak user module leaks credentials in verbose output 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14010 镜像层: sha256:0b276d34e601117d88e9766aff79ffa30a555f22d1e4830d642535201620b6ee 发布日期: 2025-12-04 10:16 修改: 2026-06-17 08:35
pip	CVE-2023-5752	中危	22.3.1	23.3	pip: Mercurial configuration injectable in repo revision when installing via pip 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5752 镜像层: sha256:04f9dab48ab05ec8bb3c26c4e978eca47e4a95ca7af0f1b55941af692baa78b8 发布日期: 2023-10-25 18:17 修改: 2026-06-17 06:49
setuptools	CVE-2026-59890	中危	65.5.1	83.0.0	setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890 镜像层: sha256:04f9dab48ab05ec8bb3c26c4e978eca47e4a95ca7af0f1b55941af692baa78b8 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
pip	CVE-2026-1703	低危	22.3.1	26.0	pip: pip: Information disclosure via path traversal when installing crafted wheel archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703 镜像层: sha256:04f9dab48ab05ec8bb3c26c4e978eca47e4a95ca7af0f1b55941af692baa78b8 发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16
paramiko	CVE-2026-44405	低危	3.5.1		paramiko: Paramiko: Data integrity could be compromised due to SHA-1 algorithm use 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44405 镜像层: sha256:0b276d34e601117d88e9766aff79ffa30a555f22d1e4830d642535201620b6ee 发布日期: 2026-05-06 00:16 修改: 2026-07-24 20:10