docker.io/openim/openim-server:release-v3.7 - Trivy镜像安全扫描结果

全部漏洞信息

低危漏洞:16

中危漏洞:145

高危漏洞:56

严重漏洞:0

系统OS: alpine 3.20.1 扫描引擎: Trivy 扫描时间: 2024-11-15 15:00

docker.io/openim/openim-server:release-v3.7 (alpine 3.20.1) (alpine)

低危漏洞:2

中危漏洞:4

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libcrypto3	CVE-2024-5535	中危	3.3.1-r0	3.3.1-r1	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:94e5f06ff8e3d4441dc3cd8b090ff38dc911bfa8ebdb0dc28395bc98f82f983f 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libcrypto3	CVE-2024-6119	中危	3.3.1-r0	3.3.2-r0	openssl: Possible denial of service in X.509 name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119 镜像层: sha256:94e5f06ff8e3d4441dc3cd8b090ff38dc911bfa8ebdb0dc28395bc98f82f983f 发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
libssl3	CVE-2024-5535	中危	3.3.1-r0	3.3.1-r1	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:94e5f06ff8e3d4441dc3cd8b090ff38dc911bfa8ebdb0dc28395bc98f82f983f 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libssl3	CVE-2024-6119	中危	3.3.1-r0	3.3.2-r0	openssl: Possible denial of service in X.509 name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119 镜像层: sha256:94e5f06ff8e3d4441dc3cd8b090ff38dc911bfa8ebdb0dc28395bc98f82f983f 发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
libcrypto3	CVE-2024-9143	低危	3.3.1-r0	3.3.2-r1	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:94e5f06ff8e3d4441dc3cd8b090ff38dc911bfa8ebdb0dc28395bc98f82f983f 发布日期: 2024-10-16 17:15 修改: 2024-11-08 16:35
libssl3	CVE-2024-9143	低危	3.3.1-r0	3.3.2-r1	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:94e5f06ff8e3d4441dc3cd8b090ff38dc911bfa8ebdb0dc28395bc98f82f983f 发布日期: 2024-10-16 17:15 修改: 2024-11-08 16:35

Node.js (node-pkg)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

openim-server/_output/bin/platforms/linux/amd64/openim-api (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/platforms/linux/amd64/openim-cmdutils (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/platforms/linux/amd64/openim-crontask (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/platforms/linux/amd64/openim-msggateway (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/platforms/linux/amd64/openim-msgtransfer (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/platforms/linux/amd64/openim-push (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-auth (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-conversation (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-friend (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-group (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-msg (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-third (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-user (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/tools/linux/amd64/changelog (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

openim-server/_output/bin/tools/linux/amd64/check-component (gobinary)

低危漏洞:1

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/image	CVE-2024-24792	高危	v0.15.0	0.18.0	Parsing a corrupt or malicious image with invalid color indices can ca ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24792 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-06-27 18:15 修改: 2024-08-01 13:47
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

openim-server/_output/bin/tools/linux/amd64/check-free-memory (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

openim-server/_output/bin/tools/linux/amd64/imctl (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

openim-server/_output/bin/tools/linux/amd64/infra (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

openim-server/_output/bin/tools/linux/amd64/ncpu (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

openim-server/_output/bin/tools/linux/amd64/url2im (gobinary)

低危漏洞:0

中危漏洞:4

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-45288	中危	v0.22.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

openim-server/_output/bin/tools/linux/amd64/versionchecker (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

openim-server/_output/bin/tools/linux/amd64/yamlfmt (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:75196107a5695a57c9be35e4536eaf3d4928e958bd4587790adc8be335226cf7 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/bin/mage (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd06068334301b5de8e99f0bdcfda46cd15994083ecdc14d9724852d8e80035a 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd06068334301b5de8e99f0bdcfda46cd15994083ecdc14d9724852d8e80035a 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd06068334301b5de8e99f0bdcfda46cd15994083ecdc14d9724852d8e80035a 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd06068334301b5de8e99f0bdcfda46cd15994083ecdc14d9724852d8e80035a 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/bin/go (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/bin/gofmt (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/addr2line (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/asm (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/buildid (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/cgo (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/compile (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/covdata (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/cover (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/doc (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/fix (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/link (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/nm (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/objdump (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/pack (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/pprof (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/test2json (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/trace (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/go/pkg/tool/linux_amd64/vet (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.11	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-24791	中危	1.21.11	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.11	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.11	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:dd5d38f3d9de84b8b9dc3ca183fd9db6391591ffe3ee90482b4abd981851349f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

docker.io/openim/openim-server:release-v3.7 linux/amd64

全部漏洞信息

docker.io/openim/openim-server:release-v3.7 (alpine 3.20.1) (alpine)

Node.js (node-pkg)

openim-server/_output/bin/platforms/linux/amd64/openim-api (gobinary)

openim-server/_output/bin/platforms/linux/amd64/openim-cmdutils (gobinary)

openim-server/_output/bin/platforms/linux/amd64/openim-crontask (gobinary)

openim-server/_output/bin/platforms/linux/amd64/openim-msggateway (gobinary)

openim-server/_output/bin/platforms/linux/amd64/openim-msgtransfer (gobinary)

openim-server/_output/bin/platforms/linux/amd64/openim-push (gobinary)

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-auth (gobinary)

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-conversation (gobinary)

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-friend (gobinary)

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-group (gobinary)

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-msg (gobinary)

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-third (gobinary)

openim-server/_output/bin/platforms/linux/amd64/openim-rpc-user (gobinary)

openim-server/_output/bin/tools/linux/amd64/changelog (gobinary)

openim-server/_output/bin/tools/linux/amd64/check-component (gobinary)

openim-server/_output/bin/tools/linux/amd64/check-free-memory (gobinary)

openim-server/_output/bin/tools/linux/amd64/imctl (gobinary)

openim-server/_output/bin/tools/linux/amd64/infra (gobinary)

openim-server/_output/bin/tools/linux/amd64/ncpu (gobinary)

openim-server/_output/bin/tools/linux/amd64/url2im (gobinary)

openim-server/_output/bin/tools/linux/amd64/versionchecker (gobinary)

openim-server/_output/bin/tools/linux/amd64/yamlfmt (gobinary)

usr/local/bin/mage (gobinary)

usr/local/go/bin/go (gobinary)

usr/local/go/bin/gofmt (gobinary)

usr/local/go/pkg/tool/linux_amd64/addr2line (gobinary)

usr/local/go/pkg/tool/linux_amd64/asm (gobinary)

usr/local/go/pkg/tool/linux_amd64/buildid (gobinary)

usr/local/go/pkg/tool/linux_amd64/cgo (gobinary)

usr/local/go/pkg/tool/linux_amd64/compile (gobinary)

usr/local/go/pkg/tool/linux_amd64/covdata (gobinary)

usr/local/go/pkg/tool/linux_amd64/cover (gobinary)

usr/local/go/pkg/tool/linux_amd64/doc (gobinary)

usr/local/go/pkg/tool/linux_amd64/fix (gobinary)

usr/local/go/pkg/tool/linux_amd64/link (gobinary)

usr/local/go/pkg/tool/linux_amd64/nm (gobinary)

usr/local/go/pkg/tool/linux_amd64/objdump (gobinary)

usr/local/go/pkg/tool/linux_amd64/pack (gobinary)

usr/local/go/pkg/tool/linux_amd64/pprof (gobinary)

usr/local/go/pkg/tool/linux_amd64/test2json (gobinary)

usr/local/go/pkg/tool/linux_amd64/trace (gobinary)

usr/local/go/pkg/tool/linux_amd64/vet (gobinary)