docker.io/node:22.23.2-alpine3.24 linux/amd64

docker.io/node:22.23.2-alpine3.24 - Trivy安全扫描结果扫描时间: 2026-07-31 17:47

全部漏洞信息

低危漏洞:0

中危漏洞:8

高危漏洞:5

严重漏洞:1

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-07-31 17:47

docker.io/node:22.23.2-alpine3.24 (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:0

中危漏洞:8

高危漏洞:5

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
tar	CVE-2026-59873	严重	7.5.11	7.5.19	tar: node-tar: Denial of Service via crafted gzip bomb 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
brace-expansion	CVE-2026-14257	高危	2.0.2	5.0.8	brace-expansion through 5.0.7 is vulnerable to denial of service via m ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
picomatch	CVE-2026-33671	高危	4.0.3	4.0.4, 3.0.2, 2.3.2	picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
sigstore	CVE-2026-48815	高危	3.1.0	4.1.1	sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
brace-expansion	CVE-2026-13149	高危	2.0.2	5.0.7, 1.1.16, 2.1.2	brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
tar	CVE-2026-59874	高危	7.5.11	7.5.18	tar: Node-tar: Denial of Service via malformed tar archive header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
picomatch	CVE-2026-33672	中危	4.0.3	4.0.4, 3.0.2, 2.3.2	picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
brace-expansion	CVE-2026-33750	中危	2.0.2	5.0.5, 3.0.2, 2.0.3, 1.1.13	brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
ip-address	CVE-2026-42338	中危	10.1.0	10.1.1	ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-05-12 20:16 修改: 2026-07-29 13:18
@sigstore/core	CVE-2026-48758	中危	2.0.0	3.2.1	sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
tar	CVE-2026-53655	中危	7.5.11	7.5.16	node-tar: node-tar: File smuggling due to inconsistent tar archive parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar	CVE-2026-59871	中危	7.5.11	7.5.18	node-tar: node-tar: Denial of Service due to incorrect PAX path handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar	CVE-2026-59875	中危	7.5.11	7.5.17	node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar	GHSA-r292-9mhp-454m	中危	7.5.11	7.5.21	node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection 漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m 镜像层: sha256:5654eeaf04645c03fadc59bca7835753203d173222ab6ad8729f75b3dde98784 发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26