docker.io/rustrak/rustrak-ui:v0.14.3 linux/amd64

docker.io/rustrak/rustrak-ui:v0.14.3 - Trivy安全扫描结果扫描时间: 2026-08-13 16:02

全部漏洞信息

低危漏洞:2

中危漏洞:9

高危漏洞:6

严重漏洞:1

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-13 16:02

docker.io/rustrak/rustrak-ui:v0.14.3 (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:2

中危漏洞:9

高危漏洞:6

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
tar	CVE-2026-59873	严重	7.5.16	7.5.19	tar: node-tar: Denial of Service via crafted gzip bomb 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
brace-expansion	CVE-2026-14257	高危	5.0.6	5.0.8, 3.0.3, 2.1.3, 1.1.17	brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion	CVE-2026-69152	高危	5.0.6	1.1.18, 2.1.4, 3.0.6, 5.0.9	brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
ip-address	CVE-2026-69192	高危	10.2.0	10.3.1	ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
brace-expansion	CVE-2026-13149	高危	5.0.6	5.0.7, 1.1.16, 2.1.2	brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
tar	CVE-2026-59874	高危	7.5.16	7.5.18	tar: Node-tar: Denial of Service via malformed tar archive header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
undici	CVE-2026-12151	高危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-06-17 17:16 修改: 2026-08-10 13:17
ip-address	CVE-2026-69198	中危	10.2.0	10.2.2	ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69198 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-08-03 20:17 修改: 2026-08-04 18:16
tar	CVE-2026-59871	中危	7.5.16	7.5.18	node-tar: node-tar: Denial of Service due to incorrect PAX path handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar	CVE-2026-59875	中危	7.5.16	7.5.17	node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar	GHSA-r292-9mhp-454m	中危	7.5.16	7.5.21	node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection 漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
ip-address	CVE-2026-54272	中危	10.2.0	10.2.1	ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54272 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-07-27 18:16 修改: 2026-07-27 18:16
undici	CVE-2026-15157	中危	6.26.0	6.28.0, 7.29.0, 8.9.0	undici: undici: HTTP header injection via unvalidated blob-like body type property 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
undici	CVE-2026-16728	中危	6.26.0	6.28.0, 7.29.0, 8.9.0	undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
undici	CVE-2026-16729	中危	6.26.0	6.28.0, 7.29.0, 8.9.0	undici: Undici: Cookie attribute injection allows bypassing security protections 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18
undici	CVE-2026-9679	中危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
undici	CVE-2026-11525	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici	CVE-2026-6733	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733 镜像层: sha256:e1f5bc212f66ae7d84a2a7fe70a658e80ec21226c1fec757b86a5691cfd97683 发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46