docker.io/openlistteam/openlist:v4.2.5 linux/amd64

docker.io/openlistteam/openlist:v4.2.5 - Trivy安全扫描结果扫描时间: 2026-08-12 15:11

全部漏洞信息

低危漏洞:4

中危漏洞:6

高危漏洞:3

严重漏洞:2

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-12 15:11

docker.io/openlistteam/openlist:v4.2.5 (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

opt/openlist/openlist (gobinary)

低危漏洞:4

中危漏洞:6

高危漏洞:3

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/jackc/pgx/v5	CVE-2026-33815	严重	v5.6.0	5.9.0	github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33815 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-04-07 16:16 修改: 2026-08-10 13:19
github.com/jackc/pgx/v5	CVE-2026-33816	严重	v5.6.0	5.9.0	github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33816 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-04-07 16:16 修改: 2026-08-10 13:19
github.com/rclone/rclone	CVE-2026-71309	高危	v1.74.4	1.75.0	github.com/rclone/rclone: rclone: Backend Root Escape via Incomplete Path Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71309 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-08-05 21:16 修改: 2026-08-06 14:16
github.com/rclone/rclone	CVE-2026-71312	高危	v1.74.4	1.75.0	github.com/rclone/rclone: rclone: Server-Side Command Execution via Malicious SFTP Filenames 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71312 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-08-05 21:16 修改: 2026-08-07 05:17
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.82.0	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
github.com/rclone/rclone	CVE-2026-71311	中危	v1.74.4	1.75.0	github.com/rclone/rclone: rclone: FTP command injection via CRLF in filename encoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71311 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-08-05 21:16 修改: 2026-08-06 22:18
github.com/rclone/rclone	CVE-2026-71313	中危	v1.74.4	1.75.0	github.com/rclone/rclone: rclone: Path Traversal allows arbitrary file write 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71313 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-08-05 21:16 修改: 2026-08-06 16:16
github.com/rclone/rclone	GHSA-3x6r-wxxg-53vv	中危	v1.74.4	1.75.0	rclone: Infinite Scale TUS Creation Transport Error Causes a Nil-Response Panic 漏洞详情: https://github.com/advisories/GHSA-3x6r-wxxg-53vv 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-08-05 20:26 修改: 2026-08-05 20:26
github.com/rclone/rclone	GHSA-8mxv-9xhp-86h4	中危	v1.74.4	1.75.0	rclone: S3 Redirect Sanitization Omits IBM IAM Bearer Tokens and SSE-C Keys 漏洞详情: https://github.com/advisories/GHSA-8mxv-9xhp-86h4 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-08-05 20:27 修改: 2026-08-05 20:27
github.com/rclone/rclone	GHSA-h4mf-4v27-hggj	中危	v1.74.4	1.75.0	rclone: WebDAV Credentials Survive a Same-Host HTTPS-to-HTTP Redirect 漏洞详情: https://github.com/advisories/GHSA-h4mf-4v27-hggj 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-08-05 20:36 修改: 2026-08-05 20:36
github.com/rclone/rclone	CVE-2026-71310	中危	v1.74.4	1.75.0	github.com/rclone/rclone: rclone: Denial of Service via unbounded HTTP CONNECT response headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71310 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-08-05 21:16 修改: 2026-08-06 14:16
filippo.io/edwards25519	CVE-2026-26958	低危	v1.1.0	1.1.1	filippo.io/edwards25519: filippo.io/edwards25519: Cryptographic integrity bypass due to incorrect MultiScalarMult results 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26958 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-02-19 23:16 修改: 2026-06-17 10:26
github.com/disintegration/imaging	CVE-2023-36308	低危	v1.6.2		disintegration Imaging 1.6.2 allows attackers to cause a panic (becaus ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36308 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2023-09-05 04:15 修改: 2026-06-17 06:06
github.com/rclone/rclone	GHSA-gwfq-86j8-7qhv	低危	v1.74.4	1.75.0	rclone: Verbose Stack Trace Disclosure in RC API Error Responses 漏洞详情: https://github.com/advisories/GHSA-gwfq-86j8-7qhv 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-08-05 19:59 修改: 2026-08-05 19:59
github.com/jackc/pgx/v5	CVE-2026-41889	低危	v5.6.0	5.9.2	github.com/jackc/pgx: golang: pgx: SQL injection via specific SQL query conditions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41889 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 2026-05-08 17:16 修改: 2026-06-17 10:47
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:c6006adae6bc781455ffdc7a7d28434a882b988b7a5a13b92e94777856ac2374 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00