docker.io/langfuse/langfuse-worker:3.212.0 linux/amd64

docker.io/langfuse/langfuse-worker:3.212.0 - Trivy安全扫描结果扫描时间: 2026-07-14 09:49

全部漏洞信息

低危漏洞:0

中危漏洞:7

高危漏洞:2

严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-07-14 09:49

docker.io/langfuse/langfuse-worker:3.212.0 (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:0

中危漏洞:7

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
nodemailer	GHSA-p6gq-j5cr-w38f	高危	8.0.11	9.0.1	Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message 漏洞详情: https://github.com/advisories/GHSA-p6gq-j5cr-w38f 镜像层: sha256:8169c69842188d0046a3e69758cf1917f810e69b0c681bcb725ee13538a5cb41 发布日期: 2026-06-18 14:28 修改: 2026-06-18 14:28
path-to-regexp	CVE-2026-4926	高危	8.3.0	8.4.0	path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4926 镜像层: sha256:8169c69842188d0046a3e69758cf1917f810e69b0c681bcb725ee13538a5cb41 发布日期: 2026-03-26 19:17 修改: 2026-07-09 13:17
path-to-regexp	CVE-2026-4923	中危	8.3.0	8.4.0	path-to-regexp: path-to-regexp: Denial of Service via specially crafted paths with multiple wildcards 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4923 镜像层: sha256:8169c69842188d0046a3e69758cf1917f810e69b0c681bcb725ee13538a5cb41 发布日期: 2026-03-26 19:17 修改: 2026-06-17 10:57
postcss	CVE-2026-41305	中危	8.4.31	8.5.10	postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305 镜像层: sha256:8169c69842188d0046a3e69758cf1917f810e69b0c681bcb725ee13538a5cb41 发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46
uuid	CVE-2026-41907	中危	10.0.0	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:8169c69842188d0046a3e69758cf1917f810e69b0c681bcb725ee13538a5cb41 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	13.0.0	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:8169c69842188d0046a3e69758cf1917f810e69b0c681bcb725ee13538a5cb41 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	3.3.3	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:8169c69842188d0046a3e69758cf1917f810e69b0c681bcb725ee13538a5cb41 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	8.3.2	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:8169c69842188d0046a3e69758cf1917f810e69b0c681bcb725ee13538a5cb41 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	9.0.1	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:8169c69842188d0046a3e69758cf1917f810e69b0c681bcb725ee13538a5cb41 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47