docker.io/linuxserver/pairdrop:1.11.2 linux/amd64

docker.io/linuxserver/pairdrop:1.11.2 - Trivy安全扫描结果 扫描时间: 2026-09-04 15:08
全部漏洞信息
低危漏洞:14 中危漏洞:24 高危漏洞:6 严重漏洞:0

系统OS: alpine 3.22.5 扫描引擎: Trivy 扫描时间: 2026-09-04 15:08

docker.io/linuxserver/pairdrop:1.11.2 (alpine 3.22.5) (alpine)
低危漏洞:12 中危漏洞:20 高危漏洞:4 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
jq CVE-2026-32316 高危 1.8.1-r0 1.8.2-r0 jq: jq: Denial of Service or potential arbitrary code execution due to integer overflow and heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32316

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-04-13 18:16 修改: 2026-06-17 10:35
jq CVE-2026-40164 高危 1.8.1-r0 1.8.2-r0 jq: jq: Denial of Service via crafted JSON object causing hash collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40164

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-04-14 00:16 修改: 2026-07-15 02:21
libcrypto3 CVE-2026-14456 高危 3.5.7-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-14456 高危 3.5.7-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
jq CVE-2026-39956 中危 1.8.1-r0 1.8.2-r0 jq: missing runtime type checks for _strindices lead to crash and limited memory disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39956

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-04-13 23:16 修改: 2026-06-17 10:42
jq CVE-2026-39979 中危 1.8.1-r0 1.8.2-r0 jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39979

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-04-13 23:16 修改: 2026-07-15 02:20
jq CVE-2026-40612 中危 1.8.1-r0 1.8.2-r0 jq: stack overflow via unbounded recursion in jv_contains

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40612

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:45
jq CVE-2026-41256 中危 1.8.1-r0 1.8.2-r0 jq: embedded NUL truncates top-level jq programs loaded with -f

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
jq CVE-2026-41257 中危 1.8.1-r0 1.8.2-r0 jq: signed-int overflow in stack_reallocate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
jq CVE-2026-43894 中危 1.8.1-r0 1.8.2-r0 jq: jq: Arbitrary Code Execution or Denial of Service via Signed Integer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43894

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq CVE-2026-43895 中危 1.8.1-r0 1.8.2-r0 jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq CVE-2026-43896 中危 1.8.1-r0 1.8.2-r0 jq: stack overflow in recursive object merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq CVE-2026-44777 中危 1.8.1-r0 1.8.2-r0 jq: stack overflow in module loading on mutual include

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
jq CVE-2026-47770 中危 1.8.1-r0 1.8.2-r0 jq: jq: Denial of Service via deeply nested array comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47770

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-06-25 18:16 修改: 2026-06-26 19:16
jq CVE-2026-49839 中危 1.8.1-r0 1.8.2-r0 jq: jq: Heap out-of-bounds write via oversized raw file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49839

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-06-25 18:16 修改: 2026-06-26 18:53
jq CVE-2026-54679 中危 1.8.1-r0 1.8.2-r0 jq: jq: Denial of Service via integer overflow and buffer overrun on 32-bit systems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54679

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-06-25 18:16 修改: 2026-06-26 18:53
jq CVE-2026-33947 中危 1.8.1-r0 1.8.2-r0 jq: unbounded Recursion in jv_setpath() / jv_getpath() / delpaths_sorted()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33947

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-04-13 22:16 修改: 2026-06-17 10:38
libcrypto3 CVE-2026-18798 中危 3.5.7-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-63072 中危 3.5.7-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-63076 中危 3.5.7-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
jq CVE-2026-33948 中危 1.8.1-r0 1.8.2-r0 jq: jq: Input validation bypass via embedded NUL bytes allows parser differential attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33948

镜像层: sha256:3429af4cc40e654f897168115b48f3965e89705756197e72653379de3a8b16f8

发布日期: 2026-04-14 00:16 修改: 2026-06-17 10:38
libssl3 CVE-2026-18798 中危 3.5.7-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3 CVE-2026-63072 中危 3.5.7-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-63076 中危 3.5.7-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-63075 低危 3.5.7-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-75803 低危 3.5.7-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
libcrypto3 CVE-2026-14457 低危 3.5.7-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-54874 低危 3.5.7-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-63073 低危 3.5.7-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
libcrypto3 CVE-2026-63074 低危 3.5.7-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-14457 低危 3.5.7-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3 CVE-2026-54874 低危 3.5.7-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-63073 低危 3.5.7-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
libssl3 CVE-2026-63074 低危 3.5.7-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-63075 低危 3.5.7-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-75803 低危 3.5.7-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:45847d12a1161df36e30d91100cebcd824d6c47767dd592e045ac5e6b942ebc5

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
Node.js (node-pkg)
低危漏洞:2 中危漏洞:4 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
path-to-regexp CVE-2026-4867 高危 0.1.12 0.1.13 path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4867

镜像层: sha256:ec608e9a047394aaba7f23827aeaddfa8c0a8d622ebfd1a79015c17409428543

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:57
ws CVE-2026-48779 高危 8.18.1 5.2.5, 6.2.4, 7.5.11, 8.21.0 ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48779

镜像层: sha256:ec608e9a047394aaba7f23827aeaddfa8c0a8d622ebfd1a79015c17409428543

发布日期: 2026-06-17 13:20 修改: 2026-08-31 13:18
qs CVE-2026-82417 中危 6.13.0 6.16.0 ### Summary `qs.stringify` throws a `TypeError` when it serializes ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82417

镜像层: sha256:ec608e9a047394aaba7f23827aeaddfa8c0a8d622ebfd1a79015c17409428543

发布日期: 2026-08-30 00:16 修改: 2026-08-31 18:17
qs CVE-2026-8723 中危 6.13.0 6.15.2 qs: qs: Denial of Service due to improper handling of null/undefined array elements

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:ec608e9a047394aaba7f23827aeaddfa8c0a8d622ebfd1a79015c17409428543

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2025-15284 中危 6.13.0 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:ec608e9a047394aaba7f23827aeaddfa8c0a8d622ebfd1a79015c17409428543

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
ws CVE-2026-45736 中危 8.18.1 8.20.1 ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45736

镜像层: sha256:ec608e9a047394aaba7f23827aeaddfa8c0a8d622ebfd1a79015c17409428543

发布日期: 2026-05-15 15:16 修改: 2026-08-28 16:18
body-parser CVE-2026-12590 低危 1.20.3 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:ec608e9a047394aaba7f23827aeaddfa8c0a8d622ebfd1a79015c17409428543

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
qs CVE-2026-2391 低危 6.13.0 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:ec608e9a047394aaba7f23827aeaddfa8c0a8d622ebfd1a79015c17409428543

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×