docker.io/mongodb/mongodb-community-server:7.0.37-ubi9-slim linux/amd64

docker.io/mongodb/mongodb-community-server:7.0.37-ubi9-slim - Trivy安全扫描结果扫描时间: 2026-07-03 17:24

全部漏洞信息

低危漏洞:6

中危漏洞:10

高危漏洞:2

严重漏洞:0

系统OS: redhat 9.8 扫描引擎: Trivy 扫描时间: 2026-07-03 17:24

docker.io/mongodb/mongodb-community-server:7.0.37-ubi9-slim (redhat 9.8) (redhat)

低危漏洞:6

中危漏洞:10

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libacl	CVE-2026-54369	高危	2.3.1-4.el9		acl: Symlink traversal privilege escalation via libacl functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2026-06-29 14:16 修改: 2026-07-02 12:17
libattr	CVE-2026-54371	高危	2.5.1-3.el9		attr: Symlink Traversal Privilege Escalation via getfattr and setfattr 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2026-06-29 14:16 修改: 2026-06-30 15:16
glibc	CVE-2026-6238	中危	2.34-272.el9_8		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17
glibc-common	CVE-2026-5435	中危	2.34-272.el9_8		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59
glibc-common	CVE-2026-5928	中危	2.34-272.el9_8		glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
glibc-common	CVE-2026-6238	中危	2.34-272.el9_8		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17
glibc-minimal-langpack	CVE-2026-5435	中危	2.34-272.el9_8		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59
glibc-minimal-langpack	CVE-2026-5928	中危	2.34-272.el9_8		glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
glibc-minimal-langpack	CVE-2026-6238	中危	2.34-272.el9_8		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2026-04-28 19:37 修改: 2026-06-19 21:17
glibc	CVE-2026-5435	中危	2.34-272.el9_8		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2026-04-28 13:19 修改: 2026-06-17 10:59
libacl	CVE-2026-54370	中危	2.3.1-4.el9		acl: TOCTOU Symlink Traversal via getfacl/setfacl 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22
glibc	CVE-2026-5928	中危	2.34-272.el9_8		glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
libgcc	CVE-2021-46195	低危	11.5.0-14.el9		gcc: uncontrolled recursion in libiberty/rust-demangle.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46195 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2022-01-14 20:15 修改: 2026-06-17 04:14
libgcc	CVE-2022-27943	低危	11.5.0-14.el9		binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
ncurses-base	CVE-2023-50495	低危	6.2-12.20210508.el9		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
ncurses-libs	CVE-2023-50495	低危	6.2-12.20210508.el9		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
pcre2	CVE-2022-41409	低危	10.40-6.el9		pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
pcre2-syntax	CVE-2022-41409	低危	10.40-6.el9		pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409 镜像层: sha256:c7f0581deee3537883fe1e34d0d4a741a7a90c095427f2ababb4fba4dd6ead93 发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03