docker.io/linuxserver/nextcloud:34.0.2 linux/amd64

docker.io/linuxserver/nextcloud:34.0.2 - Trivy安全扫描结果扫描时间: 2026-08-04 19:07

全部漏洞信息

低危漏洞:1

中危漏洞:10

高危漏洞:2

严重漏洞:0

系统OS: alpine 3.22.5 扫描引擎: Trivy 扫描时间: 2026-08-04 19:07

docker.io/linuxserver/nextcloud:34.0.2 (alpine 3.22.5) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

app/www/src/3rdparty/composer/installed.json (composer-vendor)

低危漏洞:1

中危漏洞:5

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
guzzlehttp/guzzle	CVE-2026-69246	高危	7.13.1	7.15.2, 8.0.1	Guzzle: Noncanonical host can bypass host-based checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69246 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-08-03 21:16 修改: 2026-08-03 21:16
guzzlehttp/guzzle	CVE-2026-69245	中危	7.13.1	7.15.2, 8.0.1	Guzzle: Noncanonical cookie domain keeps subdomain scope 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69245 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-08-03 21:16 修改: 2026-08-03 21:16
guzzlehttp/guzzle	GHSA-94pj-82f3-465w	中危	7.13.1	7.14.2	Guzzle: Proxy-Authorization headers can be sent to origin servers 漏洞详情: https://github.com/advisories/GHSA-94pj-82f3-465w 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-07-20 21:46 修改: 2026-07-20 21:46
guzzlehttp/guzzle	GHSA-f283-ghqc-fg79	中危	7.13.1	7.15.1	Guzzle: Unbounded response cookies risk denial of service 漏洞详情: https://github.com/advisories/GHSA-f283-ghqc-fg79 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-07-20 23:27 修改: 2026-07-20 23:27
guzzlehttp/guzzle	GHSA-h95v-h523-3mw8	中危	7.13.1	7.15.1	Guzzle: URI fragments disclosed in redirect Referer headers 漏洞详情: https://github.com/advisories/GHSA-h95v-h523-3mw8 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-07-20 23:28 修改: 2026-07-20 23:28
guzzlehttp/guzzle	GHSA-wm3w-8rrp-j577	中危	7.13.1	7.15.1	Guzzle: Host-only cookie scope is not preserved 漏洞详情: https://github.com/advisories/GHSA-wm3w-8rrp-j577 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-07-20 23:27 修改: 2026-07-20 23:27
web-auth/webauthn-lib	GHSA-gq4g-fpc9-vjfq	低危	4.9.1	5.3.5	Webauthn: SimpleFakeCredentialGenerator with an empty secret produces predictable fake credentials, weakening username enumeration protection 漏洞详情: https://github.com/advisories/GHSA-gq4g-fpc9-vjfq 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-07-07 23:39 修改: 2026-07-07 23:40

app/www/src/apps/notifications/vendor/composer/installed.json (composer-vendor)

低危漏洞:0

中危漏洞:5

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
guzzlehttp/guzzle	CVE-2026-69246	高危	7.13.2	7.15.2, 8.0.1	Guzzle: Noncanonical host can bypass host-based checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69246 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-08-03 21:16 修改: 2026-08-03 21:16
guzzlehttp/guzzle	CVE-2026-69245	中危	7.13.2	7.15.2, 8.0.1	Guzzle: Noncanonical cookie domain keeps subdomain scope 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69245 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-08-03 21:16 修改: 2026-08-03 21:16
guzzlehttp/guzzle	GHSA-94pj-82f3-465w	中危	7.13.2	7.14.2	Guzzle: Proxy-Authorization headers can be sent to origin servers 漏洞详情: https://github.com/advisories/GHSA-94pj-82f3-465w 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-07-20 21:46 修改: 2026-07-20 21:46
guzzlehttp/guzzle	GHSA-f283-ghqc-fg79	中危	7.13.2	7.15.1	Guzzle: Unbounded response cookies risk denial of service 漏洞详情: https://github.com/advisories/GHSA-f283-ghqc-fg79 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-07-20 23:27 修改: 2026-07-20 23:27
guzzlehttp/guzzle	GHSA-h95v-h523-3mw8	中危	7.13.2	7.15.1	Guzzle: URI fragments disclosed in redirect Referer headers 漏洞详情: https://github.com/advisories/GHSA-h95v-h523-3mw8 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-07-20 23:28 修改: 2026-07-20 23:28
guzzlehttp/guzzle	GHSA-wm3w-8rrp-j577	中危	7.13.2	7.15.1	Guzzle: Host-only cookie scope is not preserved 漏洞详情: https://github.com/advisories/GHSA-wm3w-8rrp-j577 镜像层: sha256:669fcc89d0f8186b1460fa813cb888339dedb400993bc5a537587ac57ac44dce 发布日期: 2026-07-20 23:27 修改: 2026-07-20 23:27

app/www/src/apps/photos/vendor/composer/installed.json (composer-vendor)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

app/www/src/apps/suspicious_login/vendor/composer/installed.json (composer-vendor)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

app/www/src/apps/twofactor_totp/vendor/composer/installed.json (composer-vendor)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息