docker.io/rancher/fleet:v0.15.4 linux/amd64

docker.io/rancher/fleet:v0.15.4 - Trivy安全扫描结果 扫描时间: 2026-08-26 10:35
全部漏洞信息
低危漏洞:3 中危漏洞:16 高危漏洞:40 严重漏洞:0

系统OS: sles 15.7 扫描引擎: Trivy 扫描时间: 2026-08-26 10:35

docker.io/rancher/fleet:v0.15.4 (sles 15.7) (sles)
低危漏洞:1 中危漏洞:8 高危漏洞:14 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl SUSE-SU-2026:2925-1 高危 8.14.1-150700.7.14.1 8.14.1-150700.7.20.1 Security update for curl

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
gzip SUSE-SU-2026:3269-1 高危 1.10-150200.10.1 1.10-150200.13.1 Security update for gzip

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
krb5 SUSE-SU-2026:2848-1 高危 1.20.1-150600.11.14.1 1.20.1-150600.11.19.1 Security update for krb5, krb5-mini

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl4 SUSE-SU-2026:2925-1 高危 8.14.1-150700.7.14.1 8.14.1-150700.7.20.1 Security update for curl

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libglib-2_0-0 SUSE-SU-2026:3341-1 高危 2.78.6-150600.4.35.1 2.78.6-150600.4.38.1 Security update for glib2

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libopenssl-3-fips-provider SUSE-SU-2026:2648-1 高危 3.2.3-150700.5.31.1 3.2.3-150700.5.36.1 Security update for openssl-3

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libopenssl3 SUSE-SU-2026:2648-1 高危 3.2.3-150700.5.31.1 3.2.3-150700.5.36.1 Security update for openssl-3

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libxml2-2 SUSE-SU-2026:3097-1 高危 2.12.10-150700.4.11.1 2.12.10-150700.4.14.1 Security update for libxml2

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssh-clients SUSE-SU-2026:3605-1 高危 9.6p1-150600.6.42.1 9.6p1-150600.6.49.1 Security update for openssh

漏洞详情:

镜像层: sha256:182ff4f7fce0b65ffcbfff026f6d78480b503467f41e5809ad54aa603dacde5e

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssh-common SUSE-SU-2026:3605-1 高危 9.6p1-150600.6.42.1 9.6p1-150600.6.49.1 Security update for openssh

漏洞详情:

镜像层: sha256:182ff4f7fce0b65ffcbfff026f6d78480b503467f41e5809ad54aa603dacde5e

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssh-fips SUSE-SU-2026:3605-1 高危 9.6p1-150600.6.42.1 9.6p1-150600.6.49.1 Security update for openssh

漏洞详情:

镜像层: sha256:182ff4f7fce0b65ffcbfff026f6d78480b503467f41e5809ad54aa603dacde5e

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl-3 SUSE-SU-2026:2648-1 高危 3.2.3-150700.5.31.1 3.2.3-150700.5.36.1 Security update for openssl-3

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
perl-base SUSE-SU-2026:3558-1 高危 5.26.1-150300.17.20.1 5.26.1-150300.17.23.1 Security update for perl

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
rpm-ndb SUSE-SU-2026:3600-1 高危 4.14.3-150400.59.16.1 4.14.3-150400.59.19.1 Security update for rpm

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
gzip SUSE-SU-2026:3592-1 中危 1.10-150200.10.1 1.10-150200.16.1 Security update for gzip

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libgcrypt20 SUSE-SU-2026:3182-1 中危 1.11.0-150700.5.7.1 1.11.0-150700.5.10.1 Security update for libgcrypt

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssh-config SUSE-SU-2026:3330-1 中危 0.9.8-150600.11.12.1 0.9.8-150600.11.15.1 Security update for libssh

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssh4 SUSE-SU-2026:3330-1 中危 0.9.8-150600.11.12.1 0.9.8-150600.11.15.1 Security update for libssh

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
pam SUSE-SU-2026:3163-1 中危 1.3.0-150000.6.86.1 1.3.0-150000.6.89.1 Security update for pam

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libudev1 SUSE-SU-2026:3244-1 中危 254.27-150600.4.62.1 254.27-150600.4.71.2 Security update for systemd

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
glibc SUSE-SU-2026:3030-1 中危 2.38-150600.14.49.1 2.38-150600.14.52.1 Security update for glibc

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tar SUSE-SU-2026:2714-1 中危 1.34-150000.3.37.1 1.34-150000.3.42.1 Security update for tar

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
gpg2 SUSE-SU-2026:3243-1 低危 2.4.4-150600.3.15.1 2.4.4-150600.3.18.1 Security update for gpg2

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libopenssl3 SUSE-SU-2026:3444-1 未知 3.2.3-150700.5.31.1 3.2.3-150700.5.40.1 Security update for openssl-3

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl-3 SUSE-SU-2026:3444-1 未知 3.2.3-150700.5.31.1 3.2.3-150700.5.40.1 Security update for openssl-3

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libopenssl-3-fips-provider SUSE-SU-2026:3444-1 未知 3.2.3-150700.5.31.1 3.2.3-150700.5.40.1 Security update for openssl-3

漏洞详情:

镜像层: sha256:e7ead9c7a4a00691b3a558e3b4bb2bc3e0a56fe9c7cb5ea1daf86ed3831db2ad

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/bin/fleet (gobinary)
低危漏洞:1 中危漏洞:4 高危漏洞:13 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/go-git/go-git/v5 CVE-2026-71556 高危 v5.19.1 5.19.2 github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71556

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-08-07 17:17 修改: 2026-08-07 17:17
golang.org/x/net CVE-2026-46600 高危 v0.55.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text CVE-2026-56852 高危 v0.37.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
oras.land/oras-go/v2 CVE-2026-50151 高危 v2.6.0 2.6.1 oras-go: oras-go: Credential forwarding via unvalidated Location header during blob upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50151

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-07-17 20:17 修改: 2026-07-23 16:15
oras.land/oras-go/v2 CVE-2026-50163 高危 v2.6.0 2.6.2 oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50163

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:02
stdlib CVE-2026-33818 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-05-22 16:16 修改: 2026-08-24 13:18
stdlib CVE-2026-39822 高危 v1.25.11 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib CVE-2026-56853 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
oras.land/oras-go/v2 GHSA-vh4v-2xq2-g5cg 中危 v2.6.0 2.6.1 ORAS Go forwards registry credentials across registry redirects

漏洞详情: https://github.com/advisories/GHSA-vh4v-2xq2-g5cg

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-07-01 21:54 修改: 2026-07-01 21:54
github.com/go-git/go-git/v5 CVE-2026-71557 中危 v5.19.1 5.19.2 go-git is an extensible git implementation library written in pure Go. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71557

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-08-07 17:17 修改: 2026-08-07 18:17
oras.land/oras-go/v2 CVE-2026-50162 中危 v2.6.0 2.6.1 oras-go: oras-go: File store write outside working directory via symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50162

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:08
stdlib CVE-2026-42505 中危 v1.25.11 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
oras.land/oras-go/v2 CVE-2026-48978 低危 v2.6.0 2.6.1 oras-go: oras-go: Information disclosure and TLS downgrade via malicious registry realm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48978

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:08
golang.org/x/crypto GO-2026-5932 未知 v0.52.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:7bb88a3723ab86dc967fccc7f835e464cf14e7e66e72aabf4a008a5661957b20

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/bin/fleetcontroller (gobinary)
低危漏洞:1 中危漏洞:4 高危漏洞:13 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/go-git/go-git/v5 CVE-2026-71556 高危 v5.19.1 5.19.2 github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71556

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-08-07 17:17 修改: 2026-08-07 17:17
golang.org/x/net CVE-2026-46600 高危 v0.55.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text CVE-2026-56852 高危 v0.37.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
oras.land/oras-go/v2 CVE-2026-50151 高危 v2.6.0 2.6.1 oras-go: oras-go: Credential forwarding via unvalidated Location header during blob upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50151

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-07-17 20:17 修改: 2026-07-23 16:15
oras.land/oras-go/v2 CVE-2026-50163 高危 v2.6.0 2.6.2 oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50163

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:02
stdlib CVE-2026-33818 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-05-22 16:16 修改: 2026-08-24 13:18
stdlib CVE-2026-39822 高危 v1.25.11 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib CVE-2026-56853 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.25.11 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
oras.land/oras-go/v2 GHSA-vh4v-2xq2-g5cg 中危 v2.6.0 2.6.1 ORAS Go forwards registry credentials across registry redirects

漏洞详情: https://github.com/advisories/GHSA-vh4v-2xq2-g5cg

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-07-01 21:54 修改: 2026-07-01 21:54
github.com/go-git/go-git/v5 CVE-2026-71557 中危 v5.19.1 5.19.2 go-git is an extensible git implementation library written in pure Go. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71557

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-08-07 17:17 修改: 2026-08-07 18:17
oras.land/oras-go/v2 CVE-2026-50162 中危 v2.6.0 2.6.1 oras-go: oras-go: File store write outside working directory via symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50162

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:08
stdlib CVE-2026-42505 中危 v1.25.11 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
oras.land/oras-go/v2 CVE-2026-48978 低危 v2.6.0 2.6.1 oras-go: oras-go: Information disclosure and TLS downgrade via malicious registry realm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48978

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:08
golang.org/x/crypto GO-2026-5932 未知 v0.52.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:bc3db8f0a04b67ad9f6908f19f44a84ca41c689026f0a2d779091c6c91d10614

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×