docker.io/nodered/node-red:5.0.7 linux/amd64

docker.io/nodered/node-red:5.0.7 - Trivy安全扫描结果扫描时间: 2026-09-13 16:30

全部漏洞信息

低危漏洞:0

中危漏洞:7

高危漏洞:4

严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-09-13 16:30

docker.io/nodered/node-red:5.0.7 (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:0

中危漏洞:7

高危漏洞:4

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
brace-expansion	CVE-2026-14257	高危	5.0.7	5.0.8, 3.0.3, 2.1.3, 1.1.17	brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257 镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668 发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion	CVE-2026-69152	高危	5.0.7	1.1.18, 2.1.4, 3.0.6, 5.0.9	brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152 镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668 发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
ip-address	CVE-2026-69192	高危	10.2.0	10.3.1	ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192 镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668 发布日期: 2026-08-03 20:17 修改: 2026-09-10 20:30
tar	CVE-2026-73566	高危	7.5.19	7.5.21	tar: node-tar: Denial of Service via crafted long-path tar archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566 镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668 发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
ip-address	CVE-2026-69198	中危	10.2.0	10.2.2	ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69198 镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668 发布日期: 2026-08-03 20:17 修改: 2026-09-10 20:30
qs	CVE-2026-82417	中危	6.15.3	6.16.0	qs: qs: Denial of Service via improper validation in stringify function 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82417 镜像层: sha256:54fcab8dde7eed1396653dc113893ab0fef7055643606b349c3daf2394419b07 发布日期: 2026-08-30 00:16 修改: 2026-09-03 18:00
qs	CVE-2026-82562	中危	6.15.3	6.16.0	qs: qs: Denial of Service via array limit bypass in query string parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82562 镜像层: sha256:54fcab8dde7eed1396653dc113893ab0fef7055643606b349c3daf2394419b07 发布日期: 2026-08-30 01:20 修改: 2026-09-03 18:00
ip-address	CVE-2026-54272	中危	10.2.0	10.2.1	ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54272 镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668 发布日期: 2026-07-27 18:16 修改: 2026-09-09 20:50
undici	CVE-2026-15157	中危	6.27.0	6.28.0, 7.29.0, 8.9.0	undici: undici: HTTP header injection via unvalidated blob-like body type property 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157 镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668 发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
undici	CVE-2026-16728	中危	6.27.0	6.28.0, 7.29.0, 8.9.0	undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728 镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668 发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
undici	CVE-2026-16729	中危	6.27.0	6.28.0, 7.29.0, 8.9.0	undici: Undici: Cookie attribute injection allows bypassing security protections 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729 镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668 发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18