docker.io/smp46/pingvin-share-x:latest linux/amd64

docker.io/smp46/pingvin-share-x:latest - Trivy安全扫描结果 扫描时间: 2026-07-29 16:46
全部漏洞信息
低危漏洞:2 中危漏洞:11 高危漏洞:11 严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-07-29 16:46

docker.io/smp46/pingvin-share-x:latest (alpine 3.24.1) (alpine)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Node.js (node-pkg)
低危漏洞:2 中危漏洞:11 高危漏洞:11 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
brace-expansion CVE-2026-14257 高危 2.1.2 5.0.8 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:a472d138bc0d4d3df7879545e60a2dfca5359cd3cce11ca6b4ffdf453f55e9b4

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-14257 高危 5.0.7 5.0.8 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:a472d138bc0d4d3df7879545e60a2dfca5359cd3cce11ca6b4ffdf453f55e9b4

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
next CVE-2026-44573 高危 14.2.35 15.5.16, 16.2.5 next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44573

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-05-13 17:16 修改: 2026-07-16 12:17
next CVE-2026-44578 高危 14.2.35 15.5.16, 16.2.5 Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44578

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-05-13 18:16 修改: 2026-07-16 12:17
next CVE-2026-64641 高危 14.2.35 15.5.21, 16.2.11 Next.js: Denial of Service in App Router using Server Actions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64641

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-07-27 18:16 修改: 2026-07-27 19:17
next CVE-2026-64645 高危 14.2.35 15.5.21, 16.2.11 Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64645

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-07-27 18:16 修改: 2026-07-27 18:16
next CVE-2026-64649 高危 14.2.35 15.5.21, 16.2.11 Next.js: Server-Side Request Forgery in Server Actions on custom servers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64649

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-07-27 20:16 修改: 2026-07-27 20:16
next GHSA-8h8q-6873-q5fj 高危 14.2.35 15.5.16, 16.2.5 Next.js Vulnerable to Denial of Service with Server Components

漏洞详情: https://github.com/advisories/GHSA-8h8q-6873-q5fj

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-05-11 14:50 修改: 2026-05-11 14:50
next GHSA-h25m-26qc-wcjf 高危 14.2.35 15.0.8, 15.1.12, 15.2.9, 15.3.9, 15.4.11, 15.5.10, 15.6.0-canary.61, 16.0.11, 16.1.5 Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components

漏洞详情: https://github.com/advisories/GHSA-h25m-26qc-wcjf

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-01-28 15:38 修改: 2026-01-28 15:38
next GHSA-q4gf-8mx6-v5v3 高危 14.2.35 15.5.15, 16.2.3 Next.js has a Denial of Service with Server Components

漏洞详情: https://github.com/advisories/GHSA-q4gf-8mx6-v5v3

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-04-10 15:35 修改: 2026-04-10 15:35
postcss GHSA-r28c-9q8g-f849 高危 8.5.15 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24
next CVE-2026-27980 中危 14.2.35 16.1.7, 15.5.14 next.js: Next.js: Unbounded next/image disk cache growth can exhaust storage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27980

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-03-18 01:16 修改: 2026-06-17 10:28
next CVE-2026-29057 中危 14.2.35 16.1.7, 15.5.13 next.js: Next.js: HTTP request smuggling in rewrites

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29057

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-03-18 01:16 修改: 2026-06-17 10:29
next CVE-2026-44576 中危 14.2.35 15.5.16, 16.2.5 Next.js: Next.js: Cache poisoning vulnerability in React Server Components

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44576

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-05-13 17:16 修改: 2026-06-17 10:50
next CVE-2026-44577 中危 14.2.35 15.5.16, 16.2.5 Next.js: Next.js: Denial of Service via Image Optimization API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44577

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-05-13 17:16 修改: 2026-07-16 12:17
next CVE-2026-44580 中危 14.2.35 15.5.16, 16.2.5 next.js: Next.js: Cross-site scripting allows arbitrary code execution via untrusted script content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44580

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-05-13 18:16 修改: 2026-06-17 10:50
next CVE-2026-44581 中危 14.2.35 15.5.16, 16.2.5 next.js: Next.js: Stored Cross-Site Scripting via malformed nonce values in cached responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44581

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-05-13 18:16 修改: 2026-06-17 10:50
next CVE-2026-64643 中危 14.2.35 15.5.21, 16.2.11 Next.js: Unauthenticated disclosure of internal Server Function endpoints

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64643

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-07-27 18:16 修改: 2026-07-27 19:17
next CVE-2026-64646 中危 14.2.35 15.5.21, 16.2.11 Next.js: Unbounded Server Action payload in Edge runtime

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64646

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-07-27 19:17 修改: 2026-07-27 21:17
next CVE-2026-64647 中危 14.2.35 15.5.21, 16.2.11 Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64647

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-07-27 19:17 修改: 2026-07-27 20:16
next CVE-2026-64648 中危 14.2.35 15.5.21, 16.2.11 Next.js: Cache confusion of response bodies for requests with bodies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64648

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-07-27 20:16 修改: 2026-07-27 20:16
next CVE-2025-59471 中危 14.2.35 15.5.10, 16.1.5 next: NextJS Denial of Service in Image Optimizer

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59471

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-01-26 22:15 修改: 2026-06-17 09:46
next CVE-2026-44582 低危 14.2.35 15.5.16, 16.2.5 Next.js: Next.js: Cache poisoning allows incorrect response delivery

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44582

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-05-13 18:16 修改: 2026-06-17 10:50
next CVE-2026-44572 低危 14.2.35 15.5.16, 16.2.5 next.js: Next.js: Denial of Service due to improper handling of x-nextjs-data header with redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44572

镜像层: sha256:87e41b340f808187ec052b838e1e8ad63c484570e7a2b183acb6268a8f8bafa7

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×