docker.io/portainer/portainer-ce:2.39.6 linux/amd64

docker.io/portainer/portainer-ce:2.39.6 - Trivy安全扫描结果扫描时间: 2026-08-13 11:23

全部漏洞信息

低危漏洞:0

中危漏洞:3

高危漏洞:6

严重漏洞:0

系统OS: 扫描引擎: Trivy 扫描时间: 2026-08-13 11:23

portainer (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:6

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/cli	CVE-2025-15558	高危	v28.5.1+incompatible	29.2.0	docker/cli: Docker CLI for Windows: Privilege escalation via malicious plugin binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15558 镜像层: sha256:9bdc6921f27b39ac83f3ab17bd4bb1c2d82c163fbabeaac83c2a358c44b19dcb 发布日期: 2026-03-04 17:16 修改: 2026-07-15 02:17
github.com/docker/docker	CVE-2026-34040	高危	v28.5.1+incompatible	29.3.1	Moby: Moby: Authorization bypass vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34040 镜像层: sha256:9bdc6921f27b39ac83f3ab17bd4bb1c2d82c163fbabeaac83c2a358c44b19dcb 发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
github.com/docker/docker	CVE-2026-41567	高危	v28.5.1+incompatible		docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567 镜像层: sha256:9bdc6921f27b39ac83f3ab17bd4bb1c2d82c163fbabeaac83c2a358c44b19dcb 发布日期: 2026-06-05 02:17 修改: 2026-08-10 13:19
github.com/docker/docker	CVE-2026-42306	高危	v28.5.1+incompatible		github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306 镜像层: sha256:9bdc6921f27b39ac83f3ab17bd4bb1c2d82c163fbabeaac83c2a358c44b19dcb 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47
github.com/moby/buildkit	CVE-2026-33747	高危	v0.25.1	0.28.1	BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33747 镜像层: sha256:9bdc6921f27b39ac83f3ab17bd4bb1c2d82c163fbabeaac83c2a358c44b19dcb 发布日期: 2026-03-27 01:16 修改: 2026-06-17 10:38
github.com/moby/buildkit	CVE-2026-33748	高危	v0.25.1	0.28.1	github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33748 镜像层: sha256:9bdc6921f27b39ac83f3ab17bd4bb1c2d82c163fbabeaac83c2a358c44b19dcb 发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
github.com/gorilla/csrf	CVE-2025-47909	中危	v1.7.3		Hosts listed in TrustedOrigins implicitly allow requests from the corr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47909 镜像层: sha256:9bdc6921f27b39ac83f3ab17bd4bb1c2d82c163fbabeaac83c2a358c44b19dcb 发布日期: 2025-08-29 16:15 修改: 2026-06-17 09:28
github.com/docker/docker	CVE-2026-33997	中危	v28.5.1+incompatible	29.3.1	moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997 镜像层: sha256:9bdc6921f27b39ac83f3ab17bd4bb1c2d82c163fbabeaac83c2a358c44b19dcb 发布日期: 2026-03-31 03:15 修改: 2026-08-10 13:19
github.com/docker/docker	CVE-2026-41568	中危	v28.5.1+incompatible		github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568 镜像层: sha256:9bdc6921f27b39ac83f3ab17bd4bb1c2d82c163fbabeaac83c2a358c44b19dcb 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:9bdc6921f27b39ac83f3ab17bd4bb1c2d82c163fbabeaac83c2a358c44b19dcb 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00