docker.io/rancher/shell:v0.8.1 linux/amd64

docker.io/rancher/shell:v0.8.1 - Trivy安全扫描结果 扫描时间: 2026-08-26 11:08
全部漏洞信息
低危漏洞:0 中危漏洞:11 高危漏洞:39 严重漏洞:0

系统OS: sles 16.0 扫描引擎: Trivy 扫描时间: 2026-08-26 11:08

docker.io/rancher/shell:v0.8.1 (sles 16.0) (sles)
低危漏洞:0 中危漏洞:4 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libssh-config SUSE-SU-2026:22948-1 中危 0.11.4-160000.1.1 0.11.5-160000.1.1 Security update for libssh

漏洞详情:

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssh-config SUSE-SU-2026:22956-1 中危 0.11.4-160000.1.1 0.11.5-160000.1.1 Security update for libssh

漏洞详情:

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssh4 SUSE-SU-2026:22948-1 中危 0.11.4-160000.1.1 0.11.5-160000.1.1 Security update for libssh

漏洞详情:

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssh4 SUSE-SU-2026:22956-1 中危 0.11.4-160000.1.1 0.11.5-160000.1.1 Security update for libssh

漏洞详情:

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libopenssl3 SUSE-SU-2026:22947-1 未知 3.5.0-160000.8.1 3.5.0-160000.9.1 Security update for openssl-3

漏洞详情:

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libopenssl3 SUSE-SU-2026:22955-1 未知 3.5.0-160000.8.1 3.5.0-160000.9.1 Security update for openssl-3

漏洞详情:

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/bin/helm (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:9 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
oras.land/oras-go/v2 CVE-2026-50163 高危 v2.6.1 2.6.2 oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50163

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:02
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-05-22 16:16 修改: 2026-08-24 13:18
stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/crypto GO-2026-5932 未知 v0.54.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/bin/k9s (gobinary)
低危漏洞:0 中危漏洞:4 高危漏洞:16 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/containerd/containerd CVE-2026-53488 高危 v1.7.32 1.7.33 github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53488

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-01 02:17 修改: 2026-07-03 04:17
github.com/containerd/containerd/v2 CVE-2026-53488 高危 v2.2.4 2.0.10, 2.1.9, 2.2.5, 2.3.2 github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53488

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-01 02:17 修改: 2026-07-03 04:17
github.com/containerd/containerd/v2 CVE-2026-53489 高危 v2.2.4 2.1.9, 2.2.5, 2.3.2 github.com/containerd/containerd: containerd: Arbitrary host file read via symlink following in CRI checkpoint restore

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53489

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-01 19:16 修改: 2026-07-02 19:33
github.com/containerd/containerd/v2 CVE-2026-53492 高危 v2.2.4 2.1.9, 2.2.5, 2.3.2 github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53492

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-01 19:16 修改: 2026-07-02 19:33
github.com/go-git/go-git/v5 CVE-2026-71556 高危 v5.19.1 5.19.2 github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71556

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-07 17:17 修改: 2026-08-07 17:17
golang.org/x/mod CVE-2026-56864 高危 v0.37.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
golang.org/x/mod CVE-2026-56865 高危 v0.37.0 0.40.0 golang.org/x/mod/sumdb/tlog: golang.org/x/mod/sumdb/tlog: Supply chain compromise via transparency log tile verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.79.3 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
oras.land/oras-go/v2 CVE-2026-50163 高危 v2.6.1 2.6.2 oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50163

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:02
stdlib CVE-2026-33818 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-05-22 16:16 修改: 2026-08-24 13:18
stdlib CVE-2026-56853 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
github.com/go-git/go-git/v5 CVE-2026-71557 中危 v5.19.1 5.19.2 go-git is an extensible git implementation library written in pure Go. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71557

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-07 17:17 修改: 2026-08-07 18:17
github.com/containerd/containerd/v2 CVE-2026-47262 中危 v2.2.4 2.0.10, 2.1.9, 2.2.5, 2.3.2 github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47262

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-01 19:16 修改: 2026-07-02 19:40
github.com/containerd/containerd/v2 CVE-2026-50195 中危 v2.2.4 2.1.9, 2.2.5, 2.3.2 github.com/containerd/containerd: containerd: Arbitrary code execution via CRI checkpoint image tag poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50195

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-01 19:16 修改: 2026-07-02 19:43
github.com/containerd/containerd CVE-2026-47262 中危 v1.7.32 1.7.33 github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47262

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-01 19:16 修改: 2026-07-02 19:40
golang.org/x/crypto GO-2026-5932 未知 v0.52.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/bin/kubectl1.36 (gobinary)
低危漏洞:0 中危漏洞:3 高危漏洞:14 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/net CVE-2026-25681 高危 v0.49.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-27136 高危 v0.49.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-33814 高危 v0.49.0 0.53.0 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-05-07 20:16 修改: 2026-08-24 13:18
golang.org/x/net CVE-2026-39821 高危 v0.49.0 0.55.0 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-05-22 16:16 修改: 2026-08-24 13:18
golang.org/x/net CVE-2026-46600 高危 v0.49.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text CVE-2026-56852 高危 v0.33.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-05-22 16:16 修改: 2026-08-24 13:18
stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/net CVE-2026-25680 中危 v0.49.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-42502 中危 v0.49.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-42506 中危 v0.49.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/sys CVE-2026-39824 未知 v0.40.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:5b5c8586d8a4319c7660c70dd52d76e6c3380dafbea34a64751f7972d6608fff

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×