docker.io/kuekhaoyang/kvideo:4.9.20 linux/amd64

docker.io/kuekhaoyang/kvideo:4.9.20 - Trivy安全扫描结果 扫描时间: 2026-09-13 18:01
全部漏洞信息
低危漏洞:13 中危漏洞:16 高危漏洞:19 严重漏洞:3

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-09-13 18:01

docker.io/kuekhaoyang/kvideo:4.9.20 (alpine 3.24.1) (alpine)
低危漏洞:12 中危漏洞:6 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto3 CVE-2026-14456 高危 3.5.7-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-14456 高危 3.5.7-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-63072 中危 3.5.7-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libcrypto3 CVE-2026-63076 中危 3.5.7-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libcrypto3 CVE-2026-18798 中危 3.5.7-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3 CVE-2026-18798 中危 3.5.7-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3 CVE-2026-63072 中危 3.5.7-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-63076 中危 3.5.7-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libcrypto3 CVE-2026-63075 低危 3.5.7-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libcrypto3 CVE-2026-75803 低危 3.5.7-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libcrypto3 CVE-2026-14457 低危 3.5.7-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
libcrypto3 CVE-2026-54874 低危 3.5.7-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libcrypto3 CVE-2026-63073 低危 3.5.7-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libcrypto3 CVE-2026-63074 低危 3.5.7-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-14457 低危 3.5.7-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
libssl3 CVE-2026-54874 低危 3.5.7-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-63073 低危 3.5.7-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-63074 低危 3.5.7-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-63075 低危 3.5.7-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libssl3 CVE-2026-75803 低危 3.5.7-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
Node.js (node-pkg)
低危漏洞:1 中危漏洞:10 高危漏洞:17 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
next CVE-2026-75604 严重 16.2.12 15.5.24, 16.3.3 Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75604

镜像层: sha256:6ece5ef72021c391abd50f143ffc91d4bd15a8d8167edcd6b9f28823ecb69670

发布日期: 2026-09-01 22:17 修改: 2026-09-09 21:09
next GHSA-2xp9-vwfh-vxw4 严重 16.2.12 15.5.24, 16.3.3 Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

漏洞详情: https://github.com/advisories/GHSA-2xp9-vwfh-vxw4

镜像层: sha256:6ece5ef72021c391abd50f143ffc91d4bd15a8d8167edcd6b9f28823ecb69670

发布日期: 2026-09-08 21:21 修改: 2026-09-08 21:21
tar CVE-2026-59873 严重 7.5.11 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
ip-address CVE-2026-69192 高危 10.1.0 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-08-03 20:17 修改: 2026-09-10 20:30
nanoid CVE-2026-67213 高危 3.3.11 3.3.18, 5.1.6 nanoid: nanoid: Denial of Service via infinite loop in random ID generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67213

镜像层: sha256:6ece5ef72021c391abd50f143ffc91d4bd15a8d8167edcd6b9f28823ecb69670

发布日期: 2026-07-29 14:16 修改: 2026-08-18 14:26
nanoid CVE-2026-67214 高危 3.3.11 3.3.16, 5.1.16 nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67214

镜像层: sha256:6ece5ef72021c391abd50f143ffc91d4bd15a8d8167edcd6b9f28823ecb69670

发布日期: 2026-07-29 14:16 修改: 2026-08-26 17:53
nanoid CVE-2026-73086 高危 3.3.11 3.3.12, 5.1.11 nanoid: nanoid: Predictable ID generation due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73086

镜像层: sha256:6ece5ef72021c391abd50f143ffc91d4bd15a8d8167edcd6b9f28823ecb69670

发布日期: 2026-08-11 17:19 修改: 2026-09-09 20:46
brace-expansion CVE-2026-13149 高危 2.0.2 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 2.0.2 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
pacote CVE-2026-9496 高危 19.0.2 21.5.1 Versions of the package pacote from 11.2.7 and before 21.5.1 are vulne ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9496

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-05-26 07:16 修改: 2026-07-23 11:10
pacote CVE-2026-9496 高危 20.0.1 21.5.1 Versions of the package pacote from 11.2.7 and before 21.5.1 are vulne ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9496

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-05-26 07:16 修改: 2026-07-23 11:10
picomatch CVE-2026-33671 高危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
postcss CVE-2026-45623 高危 8.4.31 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:6ece5ef72021c391abd50f143ffc91d4bd15a8d8167edcd6b9f28823ecb69670

发布日期: 2026-07-27 18:16 修改: 2026-08-07 00:13
postcss CVE-2026-73646 高危 8.4.31 8.5.18 postcss: PostCSS: Information disclosure via path traversal in source map auto-loading

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73646

镜像层: sha256:6ece5ef72021c391abd50f143ffc91d4bd15a8d8167edcd6b9f28823ecb69670

发布日期: 2026-08-17 16:17 修改: 2026-08-17 17:16
sharp GHSA-f88m-g3jw-g9cj 高危 0.34.5 0.35.0 sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

漏洞详情: https://github.com/advisories/GHSA-f88m-g3jw-g9cj

镜像层: sha256:6ece5ef72021c391abd50f143ffc91d4bd15a8d8167edcd6b9f28823ecb69670

发布日期: 2026-07-21 22:07 修改: 2026-07-21 22:07
sharp GHSA-rgj7-g3m4-5g8c 高危 0.34.5 0.35.4 sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545

漏洞详情: https://github.com/advisories/GHSA-rgj7-g3m4-5g8c

镜像层: sha256:6ece5ef72021c391abd50f143ffc91d4bd15a8d8167edcd6b9f28823ecb69670

发布日期: 2026-09-08 21:25 修改: 2026-09-08 21:25
sigstore CVE-2026-48815 高危 3.1.0 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
brace-expansion CVE-2026-69152 高危 2.0.2 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
tar CVE-2026-59874 高危 7.5.11 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-73566 高危 7.5.11 7.5.21 tar: node-tar: Denial of Service via crafted long-path tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
postcss CVE-2026-69153 中危 8.4.31 8.5.23 postcss: PostCSS: Information disclosure via crafted sourceMappingURL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69153

镜像层: sha256:6ece5ef72021c391abd50f143ffc91d4bd15a8d8167edcd6b9f28823ecb69670

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
baseline-browser-mapping CVE-2026-45819 中危 2.10.0 2.11.0 baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45819

镜像层: sha256:6ece5ef72021c391abd50f143ffc91d4bd15a8d8167edcd6b9f28823ecb69670

发布日期: 2026-08-13 12:17 修改: 2026-09-09 15:52
ip-address CVE-2026-42338 中危 10.1.0 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-05-12 20:16 修改: 2026-09-11 13:17
picomatch CVE-2026-33672 中危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
@sigstore/core CVE-2026-48758 中危 2.0.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
brace-expansion CVE-2026-33750 中危 2.0.2 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
postcss CVE-2026-41305 中危 8.4.31 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:6ece5ef72021c391abd50f143ffc91d4bd15a8d8167edcd6b9f28823ecb69670

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46
tar CVE-2026-53655 中危 7.5.11 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 7.5.11 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 7.5.11 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
postcss-selector-parser CVE-2026-9358 低危 7.1.1 6.1.3, 7.1.3 postcss-selector-parser: Postcss: Denial of Service via uncontrolled recursion in AST Serialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9358

镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784

发布日期: 2026-05-24 06:16 修改: 2026-07-23 11:10
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×