docker.io/langfuse/langfuse-worker:4 linux/amd64

docker.io/langfuse/langfuse-worker:4 - Trivy安全扫描结果扫描时间: 2026-08-26 11:31

全部漏洞信息

低危漏洞:2

中危漏洞:8

高危漏洞:1

严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-26 11:31

docker.io/langfuse/langfuse-worker:4 (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:2

中危漏洞:8

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
deepmerge-ts	CVE-2026-40345	高危	7.1.5	8.0.0	DeepmergeTS has stack exhaustion when merging recursive object graphs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40345 镜像层: sha256:5cd8a7486e1b266c6610a2d04ad09bf15392499feb97847898738c11bc689295 发布日期: 2026-08-20 17:17 修改: 2026-08-21 17:16
@hono/node-server	GHSA-frvp-7c67-39w9	中危	1.19.14	2.0.5, 1.19.15	Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) 漏洞详情: https://github.com/advisories/GHSA-frvp-7c67-39w9 镜像层: sha256:5cd8a7486e1b266c6610a2d04ad09bf15392499feb97847898738c11bc689295 发布日期: 2026-07-21 18:17 修改: 2026-08-12 18:26
hono	CVE-2026-69207	中危	4.12.27	4.12.34	Hono: ReDoS in CORS middleware via Access-Control-Request-Headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69207 镜像层: sha256:5cd8a7486e1b266c6610a2d04ad09bf15392499feb97847898738c11bc689295 发布日期: 2026-08-07 21:17 修改: 2026-08-10 14:17
hono	CVE-2026-71848	中危	4.12.27	4.12.34	Hono: Algorithmic Complexity DoS in Language Middleware 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71848 镜像层: sha256:5cd8a7486e1b266c6610a2d04ad09bf15392499feb97847898738c11bc689295 发布日期: 2026-08-07 19:18 修改: 2026-08-08 04:17
hono	CVE-2026-71850	中危	4.12.27	4.12.34	Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71850 镜像层: sha256:5cd8a7486e1b266c6610a2d04ad09bf15392499feb97847898738c11bc689295 发布日期: 2026-08-07 19:18 修改: 2026-08-10 14:17
uuid	CVE-2026-41907	中危	10.0.0	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:5cd8a7486e1b266c6610a2d04ad09bf15392499feb97847898738c11bc689295 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	3.3.3	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:5cd8a7486e1b266c6610a2d04ad09bf15392499feb97847898738c11bc689295 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	8.3.2	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:5cd8a7486e1b266c6610a2d04ad09bf15392499feb97847898738c11bc689295 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	9.0.1	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:5cd8a7486e1b266c6610a2d04ad09bf15392499feb97847898738c11bc689295 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
@ai-sdk/provider-utils	CVE-2026-8769	低危	2.2.8		@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8769 镜像层: sha256:5cd8a7486e1b266c6610a2d04ad09bf15392499feb97847898738c11bc689295 发布日期: 2026-05-17 23:17 修改: 2026-06-17 11:04
hono	CVE-2026-71849	低危	4.12.27	4.12.34	Hono: Proxy Helper does not remove response headers listed in the `Connection` header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71849 镜像层: sha256:5cd8a7486e1b266c6610a2d04ad09bf15392499feb97847898738c11bc689295 发布日期: 2026-08-07 19:18 修改: 2026-08-10 13:20