docker.io/langfuse/langfuse-worker:4.6 linux/amd64

docker.io/langfuse/langfuse-worker:4.6 - Trivy安全扫描结果扫描时间: 2026-08-10 16:56

全部漏洞信息

低危漏洞:2

中危漏洞:9

高危漏洞:5

严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-10 16:56

docker.io/langfuse/langfuse-worker:4.6 (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:2

中危漏洞:9

高危漏洞:5

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
js-yaml	GHSA-5p4m-2wfm-xmqj	高危	3.15.0	4.3.1, 3.15.1	JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported 漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27
js-yaml	GHSA-5p4m-2wfm-xmqj	高危	4.3.0	4.3.1, 3.15.1	JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported 漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27
nanoid	CVE-2026-67213	高危	3.3.12	3.3.17, 5.1.6	nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customA ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67213 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-07-29 14:16 修改: 2026-07-30 19:07
nanoid	CVE-2026-67214	高危	3.3.12	3.3.16, 5.1.16	nanoid (Nano ID) before 5.1.16 contains an infinite loop in the custom ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67214 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-07-29 14:16 修改: 2026-07-30 19:07
sharp	GHSA-f88m-g3jw-g9cj	高危	0.34.5	0.35.0	sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 漏洞详情: https://github.com/advisories/GHSA-f88m-g3jw-g9cj 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-07-21 22:07 修改: 2026-07-21 22:07
hono	CVE-2026-69207	中危	4.12.27	4.12.34	Hono: ReDoS in CORS middleware via Access-Control-Request-Headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69207 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-08-07 21:17 修改: 2026-08-07 21:17
hono	CVE-2026-71848	中危	4.12.27	4.12.34	Hono: Algorithmic Complexity DoS in Language Middleware 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71848 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-08-07 19:18 修改: 2026-08-08 04:17
hono	CVE-2026-71850	中危	4.12.27	4.12.34	Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71850 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-08-07 19:18 修改: 2026-08-07 19:18
@hono/node-server	GHSA-frvp-7c67-39w9	中危	1.19.14	2.0.5	Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) 漏洞详情: https://github.com/advisories/GHSA-frvp-7c67-39w9 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-07-21 18:17 修改: 2026-07-21 18:17
uuid	CVE-2026-41907	中危	10.0.0	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	13.0.0	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	3.3.3	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	8.3.2	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid	CVE-2026-41907	中危	9.0.1	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
@ai-sdk/provider-utils	CVE-2026-8769	低危	2.2.8		@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8769 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-05-17 23:17 修改: 2026-06-17 11:04
hono	CVE-2026-71849	低危	4.12.27	4.12.34	Hono: Proxy Helper does not remove response headers listed in the `Connection` header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71849 镜像层: sha256:6b83e363ea8eab751ca3c43163c42b13c30ce553344ca8846d7b28deae0df931 发布日期: 2026-08-07 19:18 修改: 2026-08-07 19:18