docker.io/library/node:lts-alpine3.24 linux/arm64

docker.io/library/node:lts-alpine3.24 - Trivy安全扫描结果扫描时间: 2026-08-28 10:35 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:12

中危漏洞:11

高危漏洞:6

严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-28 10:35

docker.io/library/node:lts-alpine3.24 (alpine 3.24.1) (alpine)

低危漏洞:12

中危漏洞:6

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libcrypto3	CVE-2026-14456	高危	3.5.7-r0	3.5.8-r0	openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-13 15:19 修改: 2026-08-13 18:17
libssl3	CVE-2026-14456	高危	3.5.7-r0	3.5.8-r0	openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-13 15:19 修改: 2026-08-13 18:17
libcrypto3	CVE-2026-63072	中危	3.5.7-r0	3.5.8-r0	openssl: heap buffer overflow in CMS key unwrapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libcrypto3	CVE-2026-63076	中危	3.5.7-r0	3.5.8-r0	openssl: invalid pointer dereference in CMP server via crafted protectionAlg 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libcrypto3	CVE-2026-18798	中危	3.5.7-r0	3.5.8-r0	openssl: QUIC server may trigger double free when processing INITIAL packet 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:17 修改: 2026-08-25 15:16
libssl3	CVE-2026-18798	中危	3.5.7-r0	3.5.8-r0	openssl: QUIC server may trigger double free when processing INITIAL packet 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:17 修改: 2026-08-25 15:16
libssl3	CVE-2026-63072	中危	3.5.7-r0	3.5.8-r0	openssl: heap buffer overflow in CMS key unwrapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libssl3	CVE-2026-63076	中危	3.5.7-r0	3.5.8-r0	openssl: invalid pointer dereference in CMP server via crafted protectionAlg 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libcrypto3	CVE-2026-63075	低危	3.5.7-r0	3.5.8-r0	openssl: QUIC ACK-only packet retention can cause memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libcrypto3	CVE-2026-75803	低危	3.5.7-r0	3.5.8-r0	Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 13:19
libcrypto3	CVE-2026-14457	低危	3.5.7-r0	3.5.8-r0	openssl: RPK server signature algorithm selection can dereference a missing certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:17 修改: 2026-08-25 14:16
libcrypto3	CVE-2026-54874	低危	3.5.7-r0	3.5.8-r0	openssl: excessive memory use buffering DTLS records for a future epoch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libcrypto3	CVE-2026-63073	低危	3.5.7-r0	3.5.8-r0	openssl: untrusted sender DN used as format string in CMP response validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 13:19
libcrypto3	CVE-2026-63074	低危	3.5.7-r0	3.5.8-r0	openssl: CMP indefinite cache growth of ExtraCerts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libssl3	CVE-2026-14457	低危	3.5.7-r0	3.5.8-r0	openssl: RPK server signature algorithm selection can dereference a missing certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:17 修改: 2026-08-25 14:16
libssl3	CVE-2026-54874	低危	3.5.7-r0	3.5.8-r0	openssl: excessive memory use buffering DTLS records for a future epoch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libssl3	CVE-2026-63073	低危	3.5.7-r0	3.5.8-r0	openssl: untrusted sender DN used as format string in CMP response validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 13:19
libssl3	CVE-2026-63074	低危	3.5.7-r0	3.5.8-r0	openssl: CMP indefinite cache growth of ExtraCerts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libssl3	CVE-2026-63075	低危	3.5.7-r0	3.5.8-r0	openssl: QUIC ACK-only packet retention can cause memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libssl3	CVE-2026-75803	低危	3.5.7-r0	3.5.8-r0	Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-25 13:19

Node.js (node-pkg)

低危漏洞:0

中危漏洞:5

高危漏洞:4

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
brace-expansion	CVE-2026-14257	高危	5.0.7	5.0.8, 3.0.3, 2.1.3, 1.1.17	brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257 镜像层: sha256:b8a8ec6b2d08c90e95aaa53437b18fccfe4bddd5a4910ada49c1bf9157d0387d 发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion	CVE-2026-69152	高危	5.0.7	1.1.18, 2.1.4, 3.0.6, 5.0.9	brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152 镜像层: sha256:b8a8ec6b2d08c90e95aaa53437b18fccfe4bddd5a4910ada49c1bf9157d0387d 发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
ip-address	CVE-2026-69192	高危	10.2.0	10.3.1	ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192 镜像层: sha256:b8a8ec6b2d08c90e95aaa53437b18fccfe4bddd5a4910ada49c1bf9157d0387d 发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
tar	CVE-2026-73566	高危	7.5.19	7.5.21	tar: node-tar: Denial of Service via crafted long-path tar archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566 镜像层: sha256:b8a8ec6b2d08c90e95aaa53437b18fccfe4bddd5a4910ada49c1bf9157d0387d 发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
ip-address	CVE-2026-69198	中危	10.2.0	10.2.2	ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69198 镜像层: sha256:b8a8ec6b2d08c90e95aaa53437b18fccfe4bddd5a4910ada49c1bf9157d0387d 发布日期: 2026-08-03 20:17 修改: 2026-08-04 18:16
ip-address	CVE-2026-54272	中危	10.2.0	10.2.1	ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54272 镜像层: sha256:b8a8ec6b2d08c90e95aaa53437b18fccfe4bddd5a4910ada49c1bf9157d0387d 发布日期: 2026-07-27 18:16 修改: 2026-07-27 18:16
undici	CVE-2026-15157	中危	6.27.0	6.28.0, 7.29.0, 8.9.0	undici: undici: HTTP header injection via unvalidated blob-like body type property 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157 镜像层: sha256:b8a8ec6b2d08c90e95aaa53437b18fccfe4bddd5a4910ada49c1bf9157d0387d 发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
undici	CVE-2026-16728	中危	6.27.0	6.28.0, 7.29.0, 8.9.0	undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728 镜像层: sha256:b8a8ec6b2d08c90e95aaa53437b18fccfe4bddd5a4910ada49c1bf9157d0387d 发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
undici	CVE-2026-16729	中危	6.27.0	6.28.0, 7.29.0, 8.9.0	undici: Undici: Cookie attribute injection allows bypassing security protections 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729 镜像层: sha256:b8a8ec6b2d08c90e95aaa53437b18fccfe4bddd5a4910ada49c1bf9157d0387d 发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18