docker.io/metabase/metabase:v0.63.2.1 linux/amd64

docker.io/metabase/metabase:v0.63.2.1 - Trivy安全扫描结果扫描时间: 2026-07-30 10:10

全部漏洞信息

低危漏洞:0

中危漏洞:6

高危漏洞:5

严重漏洞:0

系统OS: alpine 3.23.5 扫描引擎: Trivy 扫描时间: 2026-07-30 10:10

docker.io/metabase/metabase:v0.63.2.1 (alpine 3.23.5) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Java (jar)

低危漏洞:0

中危漏洞:6

高危漏洞:5

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
com.microsoft.sqlserver:mssql-jdbc	CVE-2025-59250	高危	13.2.1	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11	JDBC Driver for SQL Server has improper input validation issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250 镜像层: sha256:1c6d377d3d8ffb0880807ac2feee1b51dab3dd4ac812aff7143714293f9fed1f 发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
io.netty:netty-codec-compression	CVE-2026-59901	高危	4.2.15.Final	4.2.16.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:1c6d377d3d8ffb0880807ac2feee1b51dab3dd4ac812aff7143714293f9fed1f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-55831	高危	4.1.135.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831 镜像层: sha256:1c6d377d3d8ffb0880807ac2feee1b51dab3dd4ac812aff7143714293f9fed1f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http	CVE-2026-55833	高危	4.1.135.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833 镜像层: sha256:1c6d377d3d8ffb0880807ac2feee1b51dab3dd4ac812aff7143714293f9fed1f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http	CVE-2026-56745	高危	4.1.135.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745 镜像层: sha256:1c6d377d3d8ffb0880807ac2feee1b51dab3dd4ac812aff7143714293f9fed1f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
at.yawk.lz4:lz4-java	CVE-2026-59949	中危	1.10.4	1.11.1	LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949 镜像层: sha256:1c6d377d3d8ffb0880807ac2feee1b51dab3dd4ac812aff7143714293f9fed1f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-56746	中危	4.1.135.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:1c6d377d3d8ffb0880807ac2feee1b51dab3dd4ac812aff7143714293f9fed1f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http	CVE-2026-59898	中危	4.1.135.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:1c6d377d3d8ffb0880807ac2feee1b51dab3dd4ac812aff7143714293f9fed1f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59899	中危	4.1.135.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:1c6d377d3d8ffb0880807ac2feee1b51dab3dd4ac812aff7143714293f9fed1f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59921	中危	4.1.135.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:1c6d377d3d8ffb0880807ac2feee1b51dab3dd4ac812aff7143714293f9fed1f 发布日期: 2026-07-28 23:17 修改: 2026-07-28 23:17
io.netty:netty-codec-http2	CVE-2026-59900	中危	4.1.135.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900 镜像层: sha256:1c6d377d3d8ffb0880807ac2feee1b51dab3dd4ac812aff7143714293f9fed1f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00