docker.io/streamnative/sn-platform:4.0.12.3 linux/amd64

docker.io/streamnative/sn-platform:4.0.12.3 - Trivy安全扫描结果 扫描时间: 2026-08-17 00:11
全部漏洞信息
低危漏洞:0 中危漏洞:16 高危漏洞:37 严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-17 00:11

docker.io/streamnative/sn-platform:4.0.12.3 (alpine 3.24.1) (alpine)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Java (jar)
低危漏洞:0 中危漏洞:16 高危漏洞:11 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.18.6 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.19.2 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.18.6 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.18.6 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.19.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.19.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
io.netty:netty-codec CVE-2026-59901 高危 4.1.135.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-haproxy CVE-2026-55851 高危 4.1.135.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55851

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:48
org.eclipse.jetty:jetty-http CVE-2026-2332 高危 9.4.58.v20250814 12.1.7, 12.0.33, 11.0.29, 10.0.28, 9.4.60 org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-04-14 12:16 修改: 2026-08-14 13:17
org.jline:jline-remote-telnet CVE-2026-56740 高危 3.9.0 4.2.1 JLine is a Java library for handling console input. Prior to 3.30.14, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56740

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-07-17 22:17 修改: 2026-07-23 17:57
org.jline:jline-remote-telnet CVE-2026-56741 高危 3.9.0 4.2.1 JLine is a Java library for handling console input. Prior to 3.30.14, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56741

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-07-17 22:17 修改: 2026-07-23 17:57
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.18.6 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.19.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.19.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.19.2 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.18.6 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-codec-dns CVE-2026-73508 中危 4.1.135.Final 4.2.16.Final, 4.1.136.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.18.6 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
io.netty:netty-codec-haproxy CVE-2026-59919 中危 4.1.135.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-haproxy: Netty: Improper CR/LF neutralization in netty-codec-haproxy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59919

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:33
org.apache.commons:commons-configuration2 CVE-2026-45205 中危 2.10.1 2.15.0 commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45205

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-05-14 12:16 修改: 2026-06-17 10:51
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.4.4 5.6.3 Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.25.4 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:89cf47eee89bae1f3e30cd7dfca93fd7ada0b5f58b579ae445337a1c9dbd2a44

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.25.4 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:89cf47eee89bae1f3e30cd7dfca93fd7ada0b5f58b579ae445337a1c9dbd2a44

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.18.6 2.21.5, 2.18.9, 2.22.1 jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
org.eclipse.jetty:jetty-http CVE-2024-6763 中危 9.4.58.v20250814 12.0.12 org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.18.6 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.19.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:3a537e1b9bd2adaf9a99f187b063b3dd5dec79257a535ddfdd34f2e40c7f47d0

发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
Python (python-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
pulsar/bin/pulsar-detector (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-05-22 16:16 修改: 2026-08-14 13:18
stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/sys CVE-2026-39824 未知 v0.32.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
golang.org/x/mod CVE-2026-56864 未知 v0.24.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
golang.org/x/mod CVE-2026-56865 未知 v0.24.0 0.40.0 A malicious GOPROXY was previously capable of forging up to two sumdb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
pulsar/bin/pulsarctl (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:83f242d378cb871302062ef4edde2a8c5054e52a398c27c35012b5d0aac8a9af

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:83f242d378cb871302062ef4edde2a8c5054e52a398c27c35012b5d0aac8a9af

发布日期: 2026-05-22 16:16 修改: 2026-08-14 13:18
stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:83f242d378cb871302062ef4edde2a8c5054e52a398c27c35012b5d0aac8a9af

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:83f242d378cb871302062ef4edde2a8c5054e52a398c27c35012b5d0aac8a9af

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:83f242d378cb871302062ef4edde2a8c5054e52a398c27c35012b5d0aac8a9af

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:83f242d378cb871302062ef4edde2a8c5054e52a398c27c35012b5d0aac8a9af

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:83f242d378cb871302062ef4edde2a8c5054e52a398c27c35012b5d0aac8a9af

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:83f242d378cb871302062ef4edde2a8c5054e52a398c27c35012b5d0aac8a9af

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/sys CVE-2026-39824 未知 v0.39.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:83f242d378cb871302062ef4edde2a8c5054e52a398c27c35012b5d0aac8a9af

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
pulsar/plugins/pulsarctl-kube (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:10 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/net CVE-2026-46600 高危 v0.55.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text CVE-2026-56852 高危 v0.37.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-05-22 16:16 修改: 2026-08-14 13:18
stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:3c383e66c94dc9c75dc59801d053729c2284646e33aedc0c4a13bde715bccee2

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×