docker.io/sonatype/nexus3:3.94.2 linux/amd64

docker.io/sonatype/nexus3:3.94.2 - Trivy安全扫描结果 扫描时间: 2026-09-01 16:46
全部漏洞信息
低危漏洞:1 中危漏洞:14 高危漏洞:8 严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-09-01 16:46

docker.io/sonatype/nexus3:3.94.2 (alpine 3.24.1) (alpine)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
giflib CVE-2026-26740 高危 5.2.2-r1 5.2.2-r2 giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26740

镜像层: sha256:582115ef6c2ac60b08543a6c9ef797b90ea33c4d0233560a854531feceea14aa

发布日期: 2026-03-18 18:16 修改: 2026-07-23 12:17
Java (jar)
低危漏洞:1 中危漏洞:14 高危漏洞:7 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
io.netty:netty-codec-compression CVE-2026-59901 高危 4.2.15.Final 4.2.16.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-http CVE-2026-55831 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http CVE-2026-55833 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http CVE-2026-56745 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2 CVE-2026-56819 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http3 CVE-2026-56816 高危 4.2.15.Final 4.2.16.Final Netty is a network application framework for development of protocol s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56816

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-21 22:17 修改: 2026-08-07 20:47
org.apache.shiro:shiro-core CVE-2026-49268 高危 1.13.0 2.2.1, 3.0.0-alpha-2 A remote attacker can inject LDAP special characters into the Distingu ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49268

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-06-17 14:17 修改: 2026-06-18 14:45
io.netty:netty-codec-http CVE-2026-59899 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http CVE-2026-59903 中危 4.2.15.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
io.netty:netty-codec-http CVE-2026-59921 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
io.netty:netty-codec-dns CVE-2026-73508 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18
io.netty:netty-codec-http2 CVE-2026-59900 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-http CVE-2026-56746 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.19.0 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
io.netty:netty-codec-http CVE-2026-59898 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
org.apache.shiro:shiro-core CVE-2026-43827 中危 1.13.0 2.2.0, 3.0.0-alpha-2 apache-shiro: Apache Shiro: Session fixation vulnerability due to improper session invalidation upon login

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43827

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-05-25 21:16 修改: 2026-07-24 10:10
org.apache.shiro:shiro-spring CVE-2026-23903 中危 1.13.0 2.1.0 org.apache.shiro/shiro-web: Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23903

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-02-09 10:15 修改: 2026-08-20 10:16
org.apache.shiro:shiro-web CVE-2026-43828 中危 1.13.0 2.2.0, 3.0.0-alpha-2 apache-shiro: Apache Shiro: Information disclosure via insecure cookie handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43828

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-05-25 21:16 修改: 2026-07-24 10:10
org.eclipse.jetty:jetty-util CVE-2026-8384 中危 12.0.33 12.0.35, 12.1.9 jetty: Eclipse Jetty: Path confusion vulnerability may lead to information disclosure in web applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8384

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:39
org.jsoup:jsoup CVE-2026-71497 中危 1.15.3 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-08-06 22:18 修改: 2026-08-07 15:17
tools.jackson.core:jackson-databind CVE-2026-59889 中危 3.2.0 3.1.5, 3.2.1 jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
org.apache.shiro:shiro-core CVE-2026-23901 低危 1.13.0 2.1.0 org.apache.shiro/shiro-core: Apache Shiro: Brute force attack possible to determine valid user names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23901

镜像层: sha256:3c64ae71d837022a5cd8687a59c2cb99afa10911c2d6911de56077b6be0238bf

发布日期: 2026-02-10 10:15 修改: 2026-06-17 10:22
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×