docker.io/portainer/portainer-ce:2.45.1 linux/amd64

docker.io/portainer/portainer-ce:2.45.1 - Trivy安全扫描结果扫描时间: 2026-09-17 16:56

全部漏洞信息

低危漏洞:1

中危漏洞:5

高危漏洞:6

严重漏洞:0

系统OS: 扫描引擎: Trivy 扫描时间: 2026-09-17 16:56

portainer (gobinary)

低危漏洞:1

中危漏洞:5

高危漏洞:6

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/cli	CVE-2025-15558	高危	v28.5.1+incompatible	29.2.0	docker/cli: Docker CLI for Windows: Privilege escalation via malicious plugin binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15558 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 2026-03-04 17:16 修改: 2026-07-15 02:17
github.com/docker/docker	CVE-2026-41567	高危	v28.5.2+incompatible		docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 2026-06-05 02:17 修改: 2026-09-09 13:19
github.com/docker/docker	CVE-2026-42306	高危	v28.5.2+incompatible		github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47
github.com/moby/buildkit	CVE-2026-33747	高危	v0.25.1	0.28.1	BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33747 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 2026-03-27 01:16 修改: 2026-06-17 10:38
github.com/moby/buildkit	CVE-2026-33748	高危	v0.25.1	0.28.1	github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33748 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
github.com/moby/go-archive	CVE-2026-17106	高危	v0.1.0	0.3.0	github.com/moby/go-archive: moby/go-archive: Arbitrary file write via link following in tar extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-17106 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 2026-08-18 19:16 修改: 2026-08-28 15:29
github.com/docker/docker	CVE-2026-41568	中危	v28.5.2+incompatible		github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46
github.com/containerd/containerd/v2	CVE-2026-53495	中危	v2.2.5	2.0.12, 2.2.8, 2.3.5	github.com/containerd/containerd: containerd: Denial of Service via CRI ExecSync goroutine leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53495 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 2026-09-14 18:17 修改: 2026-09-14 18:17
github.com/containerd/containerd	CVE-2026-53495	中危	v1.7.33	1.7.35	github.com/containerd/containerd: containerd: Denial of Service via CRI ExecSync goroutine leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53495 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 2026-09-14 18:17 修改: 2026-09-14 18:17
github.com/moby/buildkit	CVE-2026-61711	中危	v0.25.1	0.31.1	github.com/moby/buildkit: BuildKit: Security bypass allows disabling container protections 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-61711 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 2026-08-19 20:17 修改: 2026-09-09 21:15
github.com/docker/docker	CVE-2026-33997	中危	v28.5.2+incompatible	29.3.1	moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 2026-03-31 03:15 修改: 2026-09-09 13:19
github.com/moby/buildkit	CVE-2026-61712	低危	v0.25.1	0.31.1	github.com/moby/buildkit: BuildKit: Denial of Service via unbounded group parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-61712 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 2026-08-19 20:17 修改: 2026-09-09 21:15
golang.org/x/crypto	GO-2026-5932	未知	v0.56.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:cb0935793abd9d08e6e1c78d7137d84e0528dfde7e552f2108f6c17fb733c82f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00