docker.io/pgsty/silo:RELEASE.2026-08-06T00-00-00Z linux/arm64

docker.io/pgsty/silo:RELEASE.2026-08-06T00-00-00Z - Trivy安全扫描结果扫描时间: 2026-08-18 20:52 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:6

中危漏洞:3

高危漏洞:17

严重漏洞:0

系统OS: redhat 9.8 扫描引擎: Trivy 扫描时间: 2026-08-18 20:52

docker.io/pgsty/silo:RELEASE.2026-08-06T00-00-00Z (redhat 9.8) (redhat)

低危漏洞:6

中危漏洞:3

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
coreutils-single	CVE-2026-56391	中危	8.32-41.el9_8		coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56391 镜像层: sha256:4ecec40eb4f68a00522ca8da840748322b59a58427a69e533ccea4ef1636dbf1 发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28
coreutils-single	CVE-2026-56392	中危	8.32-41.el9_8		coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56392 镜像层: sha256:4ecec40eb4f68a00522ca8da840748322b59a58427a69e533ccea4ef1636dbf1 发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28
libattr	CVE-2026-54371	中危	2.5.1-3.el9		attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371 镜像层: sha256:4ecec40eb4f68a00522ca8da840748322b59a58427a69e533ccea4ef1636dbf1 发布日期: 2026-06-29 14:16 修改: 2026-07-15 01:16
libgcc	CVE-2021-46195	低危	11.5.0-14.el9		gcc: uncontrolled recursion in libiberty/rust-demangle.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46195 镜像层: sha256:4ecec40eb4f68a00522ca8da840748322b59a58427a69e533ccea4ef1636dbf1 发布日期: 2022-01-14 20:15 修改: 2026-06-17 04:14
libgcc	CVE-2022-27943	低危	11.5.0-14.el9		binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943 镜像层: sha256:4ecec40eb4f68a00522ca8da840748322b59a58427a69e533ccea4ef1636dbf1 发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
ncurses-base	CVE-2023-50495	低危	6.2-12.20210508.el9		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:4ecec40eb4f68a00522ca8da840748322b59a58427a69e533ccea4ef1636dbf1 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
ncurses-libs	CVE-2023-50495	低危	6.2-12.20210508.el9		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:4ecec40eb4f68a00522ca8da840748322b59a58427a69e533ccea4ef1636dbf1 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
pcre2	CVE-2022-41409	低危	10.40-6.el9		pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409 镜像层: sha256:4ecec40eb4f68a00522ca8da840748322b59a58427a69e533ccea4ef1636dbf1 发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
pcre2-syntax	CVE-2022-41409	低危	10.40-6.el9		pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409 镜像层: sha256:4ecec40eb4f68a00522ca8da840748322b59a58427a69e533ccea4ef1636dbf1 发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03

usr/bin/mcli (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:8

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:b8e5cdd0ada4a448fda4677dda9b3f13ac265b399da60c6b6cd6f5381f2cb9ad 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:b8e5cdd0ada4a448fda4677dda9b3f13ac265b399da60c6b6cd6f5381f2cb9ad 发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:b8e5cdd0ada4a448fda4677dda9b3f13ac265b399da60c6b6cd6f5381f2cb9ad 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:b8e5cdd0ada4a448fda4677dda9b3f13ac265b399da60c6b6cd6f5381f2cb9ad 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:b8e5cdd0ada4a448fda4677dda9b3f13ac265b399da60c6b6cd6f5381f2cb9ad 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:b8e5cdd0ada4a448fda4677dda9b3f13ac265b399da60c6b6cd6f5381f2cb9ad 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:b8e5cdd0ada4a448fda4677dda9b3f13ac265b399da60c6b6cd6f5381f2cb9ad 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:b8e5cdd0ada4a448fda4677dda9b3f13ac265b399da60c6b6cd6f5381f2cb9ad 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/crypto	GO-2026-5932	未知	v0.53.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:b8e5cdd0ada4a448fda4677dda9b3f13ac265b399da60c6b6cd6f5381f2cb9ad 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/bin/silo (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:9

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/minio/minio	CVE-2026-39414	高危	v0.0.0-20260806142117-3be10fcc1a44		MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39414 镜像层: sha256:0975f35a101c064cced9bac339b0c3b195713d24cd26640a4eaa5a9dd78a9b39 发布日期: 2026-04-08 21:16 修改: 2026-07-24 21:10
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:0975f35a101c064cced9bac339b0c3b195713d24cd26640a4eaa5a9dd78a9b39 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:0975f35a101c064cced9bac339b0c3b195713d24cd26640a4eaa5a9dd78a9b39 发布日期: 2026-05-22 16:16 修改: 2026-08-17 12:18
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:0975f35a101c064cced9bac339b0c3b195713d24cd26640a4eaa5a9dd78a9b39 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:0975f35a101c064cced9bac339b0c3b195713d24cd26640a4eaa5a9dd78a9b39 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:0975f35a101c064cced9bac339b0c3b195713d24cd26640a4eaa5a9dd78a9b39 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:0975f35a101c064cced9bac339b0c3b195713d24cd26640a4eaa5a9dd78a9b39 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:0975f35a101c064cced9bac339b0c3b195713d24cd26640a4eaa5a9dd78a9b39 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:0975f35a101c064cced9bac339b0c3b195713d24cd26640a4eaa5a9dd78a9b39 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:0975f35a101c064cced9bac339b0c3b195713d24cd26640a4eaa5a9dd78a9b39 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00