docker.io/node:24.18.0-alpine3.24 linux/amd64

docker.io/node:24.18.0-alpine3.24 - Trivy安全扫描结果扫描时间: 2026-06-26 15:06

全部漏洞信息

低危漏洞:2

中危漏洞:2

高危漏洞:1

严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-06-26 15:06

docker.io/node:24.18.0-alpine3.24 (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:2

中危漏洞:2

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
undici	CVE-2026-12151	高危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151 镜像层: sha256:0ba8902ff50f7fee1d64f2ed6d666e61a9fde25a6d288e667ac6690dd864f97b 发布日期: 2026-06-17 17:16 修改: 2026-06-17 20:20
tar	CVE-2026-53655	中危	7.5.15	7.5.16	node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (nod ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655 镜像层: sha256:0ba8902ff50f7fee1d64f2ed6d666e61a9fde25a6d288e667ac6690dd864f97b 发布日期: 2026-06-22 16:16 修改: 2026-06-23 15:50
undici	CVE-2026-9679	中危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679 镜像层: sha256:0ba8902ff50f7fee1d64f2ed6d666e61a9fde25a6d288e667ac6690dd864f97b 发布日期: 2026-06-17 18:18 修改: 2026-06-17 20:20
undici	CVE-2026-11525	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525 镜像层: sha256:0ba8902ff50f7fee1d64f2ed6d666e61a9fde25a6d288e667ac6690dd864f97b 发布日期: 2026-06-17 18:17 修改: 2026-06-17 20:20
undici	CVE-2026-6733	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733 镜像层: sha256:0ba8902ff50f7fee1d64f2ed6d666e61a9fde25a6d288e667ac6690dd864f97b 发布日期: 2026-06-17 18:18 修改: 2026-06-17 20:20