docker.io/rancher/mirrored-library-traefik:3.7.8 linux/amd64

docker.io/rancher/mirrored-library-traefik:3.7.8 - Trivy安全扫描结果扫描时间: 2026-08-08 15:53

全部漏洞信息

低危漏洞:1

中危漏洞:1

高危漏洞:4

严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-08 15:53

docker.io/rancher/mirrored-library-traefik:3.7.8 (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

usr/local/bin/traefik (gobinary)

低危漏洞:1

中危漏洞:1

高危漏洞:4

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/traefik/traefik/v3	CVE-2026-71324	高危	v3.7.8	3.6.24, 3.7.9	Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71324 镜像层: sha256:903fa47512b09b5f3beaec50798d9de61fb0821bef4a30ca0453c79d064b6186 发布日期: 2026-08-06 22:18 修改: 2026-08-07 16:17
github.com/traefik/traefik/v3	CVE-2026-71327	高危	v3.7.8	3.6.25, 3.7.10	Traefik: Gateway API route identity collision allows cross-namespace backend hijacking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71327 镜像层: sha256:903fa47512b09b5f3beaec50798d9de61fb0821bef4a30ca0453c79d064b6186 发布日期: 2026-08-06 22:18 修改: 2026-08-07 16:17
golang.org/x/text	CVE-2026-56852	高危	v0.37.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:903fa47512b09b5f3beaec50798d9de61fb0821bef4a30ca0453c79d064b6186 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.81.1	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:903fa47512b09b5f3beaec50798d9de61fb0821bef4a30ca0453c79d064b6186 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
github.com/traefik/traefik/v3	CVE-2026-71325	中危	v3.7.8	3.6.25, 3.7.10	Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71325 镜像层: sha256:903fa47512b09b5f3beaec50798d9de61fb0821bef4a30ca0453c79d064b6186 发布日期: 2026-08-06 22:18 修改: 2026-08-07 18:17
github.com/traefik/traefik/v3	CVE-2026-71326	低危	v3.7.8	3.6.25, 3.7.10	Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71326 镜像层: sha256:903fa47512b09b5f3beaec50798d9de61fb0821bef4a30ca0453c79d064b6186 发布日期: 2026-08-06 22:18 修改: 2026-08-06 22:18
golang.org/x/crypto	GO-2026-5932	未知	v0.52.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:903fa47512b09b5f3beaec50798d9de61fb0821bef4a30ca0453c79d064b6186 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/net	CVE-2026-46600	未知	v0.55.0	0.56.0	Parsing an invalid SVCB or HTTPS RR can panic when the size of a param ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:903fa47512b09b5f3beaec50798d9de61fb0821bef4a30ca0453c79d064b6186 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27