docker.io/langfuse/langfuse-worker:4.10 linux/amd64

docker.io/langfuse/langfuse-worker:4.10 - Trivy安全扫描结果扫描时间: 2026-08-14 12:03

全部漏洞信息

低危漏洞:2

中危漏洞:9

高危漏洞:2

严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-14 12:03

docker.io/langfuse/langfuse-worker:4.10 (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:2

中危漏洞:9

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
js-yaml	GHSA-5p4m-2wfm-xmqj	高危	4.3.0	4.3.1, 3.15.1	JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported 漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27
nanoid	CVE-2026-67213	高危	3.3.17	3.3.18, 5.1.6	nanoid: nanoid: Denial of Service via infinite loop in random ID generation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67213 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-07-29 14:16 修改: 2026-08-10 16:19
hono	CVE-2026-71848	中危	4.12.27	4.12.34	Hono: Algorithmic Complexity DoS in Language Middleware 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71848 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-08-07 19:18 修改: 2026-08-08 04:17
hono	CVE-2026-71850	中危	4.12.27	4.12.34	Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71850 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-08-07 19:18 修改: 2026-08-10 14:17
@hono/node-server	GHSA-frvp-7c67-39w9	中危	1.19.14	2.0.5, 1.19.15	Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) 漏洞详情: https://github.com/advisories/GHSA-frvp-7c67-39w9 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-07-21 18:17 修改: 2026-08-12 18:26
hono	CVE-2026-69207	中危	4.12.27	4.12.34	Hono: ReDoS in CORS middleware via Access-Control-Request-Headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69207 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-08-07 21:17 修改: 2026-08-10 14:17
uuid	CVE-2026-41907	中危	10.0.0	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	13.0.0	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	3.3.3	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	8.3.2	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	9.0.1	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
hono	CVE-2026-71849	低危	4.12.27	4.12.34	Hono: Proxy Helper does not remove response headers listed in the `Connection` header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71849 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-08-07 19:18 修改: 2026-08-10 13:20
@ai-sdk/provider-utils	CVE-2026-8769	低危	2.2.8		@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8769 镜像层: sha256:15b53870ce30609749f88204d1ef2b7a968ec3e557e008343a17ccd4eeec1444 发布日期: 2026-05-17 23:17 修改: 2026-06-17 11:04