docker.io/robustadev/holmes:0.40.0 linux/amd64

docker.io/robustadev/holmes:0.40.0 - Trivy安全扫描结果扫描时间: 2026-08-26 16:29

全部漏洞信息

低危漏洞:0

中危漏洞:8

高危漏洞:43

严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-26 16:29

docker.io/robustadev/holmes:0.40.0 (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Python (python-pkg)

低危漏洞:0

中危漏洞:4

高危漏洞:4

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
aiohttp	CVE-2026-69244	高危	3.14.1	3.14.3	aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69244 镜像层: sha256:cd6c473f5e40f464ab984b1cdb8114c09cb57f167733d56cc36d0ac0ce759b20 发布日期: 2026-08-03 21:16 修改: 2026-08-04 15:16
cryptography	CVE-2026-69247	高危	49.0.0	50.0.0	cryptography is a package designed to expose cryptographic primitives ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69247 镜像层: sha256:cd6c473f5e40f464ab984b1cdb8114c09cb57f167733d56cc36d0ac0ce759b20 发布日期: 2026-08-03 22:16 修改: 2026-08-04 15:16
msgpack	GHSA-6v7p-g79w-8964	高危	1.1.2	1.2.1	MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error 漏洞详情: https://github.com/advisories/GHSA-6v7p-g79w-8964 镜像层: sha256:7ce139e193a80fb76799245a4e88a96fee14f162b9bda65c5e8f7a6ea20ef71a 发布日期: 2026-06-19 21:42 修改: 2026-06-19 21:42
setuptools	CVE-2025-47273	高危	70.3.0	78.1.1	setuptools: Path Traversal Vulnerability in setuptools PackageIndex 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273 镜像层: sha256:cd6c473f5e40f464ab984b1cdb8114c09cb57f167733d56cc36d0ac0ce759b20 发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27
h2	CVE-2026-71554	中危	4.3.0	4.4.1	h2 is a pure-Python implementation of a HTTP/2 protocol stack. Version ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71554 镜像层: sha256:cd6c473f5e40f464ab984b1cdb8114c09cb57f167733d56cc36d0ac0ce759b20 发布日期: 2026-08-06 22:18 修改: 2026-08-08 03:16
aiohttp	CVE-2026-69243	中危	3.14.1	3.14.2	aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69243 镜像层: sha256:cd6c473f5e40f464ab984b1cdb8114c09cb57f167733d56cc36d0ac0ce759b20 发布日期: 2026-08-03 21:16 修改: 2026-08-05 16:17
aiohttp	CVE-2026-59881	中危	3.14.1	3.14.2	aiohttp: AIOHTTP: Denial of Service via unnegotiated WebSocket compression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59881 镜像层: sha256:cd6c473f5e40f464ab984b1cdb8114c09cb57f167733d56cc36d0ac0ce759b20 发布日期: 2026-07-30 19:18 修改: 2026-07-30 20:03
setuptools	CVE-2026-59890	中危	70.3.0	83.0.0	setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890 镜像层: sha256:cd6c473f5e40f464ab984b1cdb8114c09cb57f167733d56cc36d0ac0ce759b20 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04

usr/local/bin/argocd (gobinary)

低危漏洞:0

中危漏洞:1

高危漏洞:9

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/go-git/go-git/v5	CVE-2026-71556	高危	v5.19.1	5.19.2	github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71556 镜像层: sha256:1f49d96b1c2dbaa69c9a2dec1be31396cc7c400ec41ca8491c8bcbfbb9aafc54 发布日期: 2026-08-07 17:17 修改: 2026-08-07 17:17
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:1f49d96b1c2dbaa69c9a2dec1be31396cc7c400ec41ca8491c8bcbfbb9aafc54 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:1f49d96b1c2dbaa69c9a2dec1be31396cc7c400ec41ca8491c8bcbfbb9aafc54 发布日期: 2026-05-22 16:16 修改: 2026-08-24 13:18
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:1f49d96b1c2dbaa69c9a2dec1be31396cc7c400ec41ca8491c8bcbfbb9aafc54 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:1f49d96b1c2dbaa69c9a2dec1be31396cc7c400ec41ca8491c8bcbfbb9aafc54 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:1f49d96b1c2dbaa69c9a2dec1be31396cc7c400ec41ca8491c8bcbfbb9aafc54 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:1f49d96b1c2dbaa69c9a2dec1be31396cc7c400ec41ca8491c8bcbfbb9aafc54 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:1f49d96b1c2dbaa69c9a2dec1be31396cc7c400ec41ca8491c8bcbfbb9aafc54 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:1f49d96b1c2dbaa69c9a2dec1be31396cc7c400ec41ca8491c8bcbfbb9aafc54 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
github.com/go-git/go-git/v5	CVE-2026-71557	中危	v5.19.1	5.19.2	go-git is an extensible git implementation library written in pure Go. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71557 镜像层: sha256:1f49d96b1c2dbaa69c9a2dec1be31396cc7c400ec41ca8491c8bcbfbb9aafc54 发布日期: 2026-08-07 17:17 修改: 2026-08-07 18:17
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:1f49d96b1c2dbaa69c9a2dec1be31396cc7c400ec41ca8491c8bcbfbb9aafc54 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/local/bin/helm (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:8

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:80e9b181a1664623ce37775b85f38c00957d7414c6ff51e07db743e2f4c0f1aa 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:80e9b181a1664623ce37775b85f38c00957d7414c6ff51e07db743e2f4c0f1aa 发布日期: 2026-05-22 16:16 修改: 2026-08-24 13:18
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:80e9b181a1664623ce37775b85f38c00957d7414c6ff51e07db743e2f4c0f1aa 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:80e9b181a1664623ce37775b85f38c00957d7414c6ff51e07db743e2f4c0f1aa 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:80e9b181a1664623ce37775b85f38c00957d7414c6ff51e07db743e2f4c0f1aa 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:80e9b181a1664623ce37775b85f38c00957d7414c6ff51e07db743e2f4c0f1aa 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:80e9b181a1664623ce37775b85f38c00957d7414c6ff51e07db743e2f4c0f1aa 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:80e9b181a1664623ce37775b85f38c00957d7414c6ff51e07db743e2f4c0f1aa 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:80e9b181a1664623ce37775b85f38c00957d7414c6ff51e07db743e2f4c0f1aa 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/local/bin/kube-lineage (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:8

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:34e7afb4c258af0c7a13047e16150e744ccbc0486584672a73115f1cb124e002 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:34e7afb4c258af0c7a13047e16150e744ccbc0486584672a73115f1cb124e002 发布日期: 2026-05-22 16:16 修改: 2026-08-24 13:18
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:34e7afb4c258af0c7a13047e16150e744ccbc0486584672a73115f1cb124e002 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:34e7afb4c258af0c7a13047e16150e744ccbc0486584672a73115f1cb124e002 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:34e7afb4c258af0c7a13047e16150e744ccbc0486584672a73115f1cb124e002 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:34e7afb4c258af0c7a13047e16150e744ccbc0486584672a73115f1cb124e002 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:34e7afb4c258af0c7a13047e16150e744ccbc0486584672a73115f1cb124e002 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:34e7afb4c258af0c7a13047e16150e744ccbc0486584672a73115f1cb124e002 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:34e7afb4c258af0c7a13047e16150e744ccbc0486584672a73115f1cb124e002 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/local/bin/kubectl (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:14

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/net	CVE-2026-25681	高危	v0.49.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-27136	高危	v0.49.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-33814	高危	v0.49.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-05-07 20:16 修改: 2026-08-24 13:18
golang.org/x/net	CVE-2026-39821	高危	v0.49.0	0.55.0	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-05-22 16:16 修改: 2026-08-24 13:18
golang.org/x/net	CVE-2026-46600	高危	v0.49.0	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text	CVE-2026-56852	高危	v0.33.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-05-22 16:16 修改: 2026-08-24 13:18
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/net	CVE-2026-25680	中危	v0.49.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42502	中危	v0.49.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42506	中危	v0.49.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/sys	CVE-2026-39824	未知	v0.40.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:9899444f331d2943956645f9d2c720e6254d4f93356643eb03f872a555bfa70d 发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10