docker.io/longhornio/longhorn-manager:v1.11.3 linux/amd64

docker.io/longhornio/longhorn-manager:v1.11.3 - Trivy安全扫描结果扫描时间: 2026-07-18 14:43

全部漏洞信息

低危漏洞:0

中危漏洞:3

高危漏洞:5

严重漏洞:0

系统OS: sles 15.7 扫描引擎: Trivy 扫描时间: 2026-07-18 14:43

docker.io/longhornio/longhorn-manager:v1.11.3 (sles 15.7) (sles)

低危漏洞:0

中危漏洞:2

高危漏洞:4

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
cifs-utils	SUSE-SU-2026:2699-1	高危	6.15-150400.3.18.1	6.15-150400.3.21.1	Security update for cifs-utils 漏洞详情: 镜像层: sha256:3b22b91eaff01e98cc99a771fedd9355f391d1368ec7c275624c808d677ea25c 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl	SUSE-SU-2026:2925-1	高危	8.14.1-150700.7.17.1	8.14.1-150700.7.20.1	Security update for curl 漏洞详情: 镜像层: sha256:d70301d6143bfcfaa27f017fe4b69ff942e560b732dcebf61a1dc1ad88b9130d 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
krb5	SUSE-SU-2026:2848-1	高危	1.20.1-150600.11.14.1	1.20.1-150600.11.19.1	Security update for krb5, krb5-mini 漏洞详情: 镜像层: sha256:7c3075c3b0287ff16acb57bb78529471d612420cd49bfde62375d47590487b43 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl4	SUSE-SU-2026:2925-1	高危	8.14.1-150700.7.17.1	8.14.1-150700.7.20.1	Security update for curl 漏洞详情: 镜像层: sha256:d70301d6143bfcfaa27f017fe4b69ff942e560b732dcebf61a1dc1ad88b9130d 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
glibc	SUSE-SU-2026:3030-1	中危	2.38-150600.14.49.1	2.38-150600.14.52.1	Security update for glibc 漏洞详情: 镜像层: sha256:7c3075c3b0287ff16acb57bb78529471d612420cd49bfde62375d47590487b43 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tar	SUSE-SU-2026:2714-1	中危	1.34-150000.3.37.1	1.34-150000.3.42.1	Security update for tar 漏洞详情: 镜像层: sha256:7c3075c3b0287ff16acb57bb78529471d612420cd49bfde62375d47590487b43 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/local/sbin/longhorn-manager (gobinary)

低危漏洞:0

中危漏洞:1

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-39822	高危	v1.25.11	1.25.12, 1.26.5, 1.27.0-rc.2	os: golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:0881d564048a7435ebee755696673294d457ac942497024ceee91354ea957fb4 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-42505	中危	v1.25.11	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:0881d564048a7435ebee755696673294d457ac942497024ceee91354ea957fb4 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
golang.org/x/crypto	GO-2026-5932	未知	v0.53.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:0881d564048a7435ebee755696673294d457ac942497024ceee91354ea957fb4 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/text	CVE-2026-56852	未知	v0.38.0	0.39.0	Infinite loop on invalid input in golang.org/x/text 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:0881d564048a7435ebee755696673294d457ac942497024ceee91354ea957fb4 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00