docker.io/rancher/k3s:v1.37.0-k3s1 linux/amd64

docker.io/rancher/k3s:v1.37.0-k3s1 - Trivy安全扫描结果扫描时间: 2026-09-21 15:33

全部漏洞信息

低危漏洞:3

中危漏洞:15

高危漏洞:12

严重漏洞:0

系统OS: 扫描引擎: Trivy 扫描时间: 2026-09-21 15:33

bin/cni (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

bin/containerd-shim-runc-v2 (gobinary)

低危漏洞:1

中危漏洞:2

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
google.golang.org/grpc	CVE-2026-84304	高危	v1.82.1	1.83.1	gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc	CVE-2026-84445	高危	v1.82.1	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
github.com/containerd/containerd/v2	CVE-2026-53495	中危	v2.3.4-k3s1	2.0.12, 2.2.8, 2.3.5	github.com/containerd/containerd: containerd: Denial of Service via CRI ExecSync goroutine leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53495 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-09-14 18:17 修改: 2026-09-14 18:17
google.golang.org/grpc	CVE-2026-84303	中危	v1.82.1	1.83.1	gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
github.com/cilium/ebpf	CVE-2026-10722	低危	v0.16.0	0.22.0	github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10722 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-06-03 13:16 修改: 2026-07-22 19:10

bin/k3s (gobinary)

低危漏洞:1

中危漏洞:7

高危漏洞:5

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2026-41567	高危	v25.0.15-0.20260325154711-d2dbc0547253+incompatible		docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-06-05 02:17 修改: 2026-09-09 13:19
github.com/docker/docker	CVE-2026-42306	高危	v25.0.15-0.20260325154711-d2dbc0547253+incompatible		github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47
golang.org/x/crypto	CVE-2026-56854	高危	v0.54.0	0.55.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/mod	CVE-2026-56864	高危	v0.38.0	0.40.0	golang.org/x/mod/sumdb: golang.org/x/mod/sumdb: Integrity bypass via malicious GOSUMDB 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
golang.org/x/mod	CVE-2026-56865	高危	v0.38.0	0.40.0	golang.org/x/mod/sumdb/tlog: golang.org/x/mod/sumdb/tlog: Supply chain compromise via transparency log tile verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
github.com/pion/stun/v3	CVE-2026-54909	中危	v3.1.1	3.1.5	pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAdd ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54909 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-07-31 23:17 修改: 2026-09-10 20:30
github.com/quic-go/webtransport-go	CVE-2026-57497	中危	v0.10.0	0.11.1	webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57497 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-09-14 17:17 修改: 2026-09-14 20:16
github.com/docker/docker	CVE-2026-33997	中危	v25.0.15-0.20260325154711-d2dbc0547253+incompatible	29.3.1	moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-03-31 03:15 修改: 2026-09-09 13:19
golang.org/x/crypto	CVE-2026-56855	中危	v0.54.0	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto	CVE-2026-78662	中危	v0.54.0	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
github.com/docker/docker	CVE-2026-41568	中危	v25.0.15-0.20260325154711-d2dbc0547253+incompatible		github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46
github.com/pion/dtls/v3	CVE-2026-54908	中危	v3.1.2	3.1.4	Pion DTLS is a Go implementation of Datagram Transport Layer Security. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54908 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-07-01 20:17 修改: 2026-07-02 18:43
github.com/cilium/ebpf	CVE-2026-10722	低危	v0.12.3	0.22.0	github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10722 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-06-03 13:16 修改: 2026-07-22 19:10
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

bin/runc (gobinary)

低危漏洞:1

中危漏洞:6

高危漏洞:5

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/net	CVE-2026-25681	高危	v0.43.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-27136	高危	v0.43.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-33814	高危	v0.43.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-05-07 20:16 修改: 2026-09-18 13:17
golang.org/x/net	CVE-2026-39821	高危	v0.43.0	0.55.0	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-05-22 16:16 修改: 2026-09-17 12:18
golang.org/x/net	CVE-2026-46600	高危	v0.43.0	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
github.com/opencontainers/runc	CVE-2026-41579	中危	v1.4.2	1.3.6, 1.4.3, 1.5.0-rc.3	runc: runc: Host filesystem integrity compromised by malicious container images 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41579 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-07-01 02:17 修改: 2026-07-02 19:36
golang.org/x/net	CVE-2025-47911	中危	v0.43.0	0.45.0	golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47911 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:28
golang.org/x/net	CVE-2025-58190	中危	v0.43.0	0.45.0	golang.org/x/net/html: Infinite parsing loop in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58190 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:44
golang.org/x/net	CVE-2026-25680	中危	v0.43.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42502	中危	v0.43.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42506	中危	v0.43.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
github.com/cilium/ebpf	CVE-2026-10722	低危	v0.17.3	0.22.0	github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10722 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-06-03 13:16 修改: 2026-07-22 19:10
golang.org/x/sys	CVE-2026-39824	未知	v0.38.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:baeb1c61ab23c6a636429feab81da7cb615e9e7408ad2368b90e9175169674b3 发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10