docker.io/streamnative/sn-platform:4.2.1.11 linux/amd64

docker.io/streamnative/sn-platform:4.2.1.11 - Trivy安全扫描结果 扫描时间: 2026-08-18 01:36
全部漏洞信息
低危漏洞:0 中危漏洞:19 高危漏洞:33 严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-18 01:36

docker.io/streamnative/sn-platform:4.2.1.11 (alpine 3.24.1) (alpine)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Java (jar)
低危漏洞:0 中危漏洞:19 高危漏洞:15 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.18.6 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.19.2 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.18.6 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.18.6 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.19.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.19.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.squareup.wire:wire-runtime-jvm CVE-2026-45799 高危 5.5.0 6.3.0, 7.0.0-alpha03 Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45799

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-17 20:17 修改: 2026-08-12 19:04
io.netty:netty-codec CVE-2026-59901 高危 4.1.135.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-haproxy CVE-2026-55851 高危 4.1.135.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55851

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:48
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.3.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.3.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.eclipse.jetty:jetty-http CVE-2026-2332 高危 9.4.58.v20250814 12.1.7, 12.0.33, 11.0.29, 10.0.28, 9.4.60 org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-04-14 12:16 修改: 2026-08-14 13:17
org.eclipse.jetty:jetty-security CVE-2026-10050 高危 12.1.8 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-08-04 11:22 修改: 2026-08-08 00:38
org.jline:jline-remote-telnet CVE-2026-56740 高危 3.9.0 4.2.1 JLine is a Java library for handling console input. Prior to 3.30.14, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56740

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-17 22:17 修改: 2026-07-23 17:57
org.jline:jline-remote-telnet CVE-2026-56741 高危 3.9.0 4.2.1 JLine is a Java library for handling console input. Prior to 3.30.14, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56741

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-17 22:17 修改: 2026-07-23 17:57
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.18.6 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.18.6 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
io.netty:netty-codec-dns CVE-2026-73508 中危 4.1.135.Final 4.2.16.Final, 4.1.136.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.18.6 2.21.5, 2.18.9, 2.22.1 jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
io.netty:netty-codec-haproxy CVE-2026-59919 中危 4.1.135.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-haproxy: Netty: Improper CR/LF neutralization in netty-codec-haproxy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59919

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:33
org.apache.commons:commons-configuration2 CVE-2026-45205 中危 2.10.1 2.15.0 commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45205

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-05-14 12:16 修改: 2026-06-17 10:51
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.4.4 5.6.3 Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.18.6 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.19.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.25.4 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:0fdcf236233ccd94b60c14ad3bc4a13bab5856cf3bf3b916b8e83cd2129b7d1d

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.25.4 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:0fdcf236233ccd94b60c14ad3bc4a13bab5856cf3bf3b916b8e83cd2129b7d1d

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.18.6 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.eclipse.jetty:jetty-http CVE-2024-6763 中危 9.4.58.v20250814 12.0.12 org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.19.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.eclipse.jetty:jetty-server CVE-2026-10051 中危 12.1.8 12.0.36, 12.1.10 jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10051

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:41
org.eclipse.jetty:jetty-server CVE-2026-6790 中危 12.1.8 12.0.35, 12.1.9 jetty: Jetty: Improper Host header validation can lead to request routing issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6790

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:35
org.eclipse.jetty:jetty-util CVE-2026-8384 中危 12.1.8 12.0.35, 12.1.9 jetty: Eclipse Jetty: Path confusion vulnerability may lead to information disclosure in web applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8384

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:39
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.19.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.19.2 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:c08a54c17449982f9afa7c51bb8050f71ffd96e06fa946918faf180a218fb0ff

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
Python (python-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
pulsar/bin/pulsar-detector (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/mod CVE-2026-56864 未知 v0.24.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
golang.org/x/mod CVE-2026-56865 未知 v0.24.0 0.40.0 A malicious GOPROXY was previously capable of forging up to two sumdb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/sys CVE-2026-39824 未知 v0.32.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
pulsar/bin/pulsarctl (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:46aae75ec7aaa4b715b9e937e233190253b6d92b66dd7f6f970ec2f9fe0d663c

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:46aae75ec7aaa4b715b9e937e233190253b6d92b66dd7f6f970ec2f9fe0d663c

发布日期: 2026-05-22 16:16 修改: 2026-08-14 13:18
stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:46aae75ec7aaa4b715b9e937e233190253b6d92b66dd7f6f970ec2f9fe0d663c

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:46aae75ec7aaa4b715b9e937e233190253b6d92b66dd7f6f970ec2f9fe0d663c

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:46aae75ec7aaa4b715b9e937e233190253b6d92b66dd7f6f970ec2f9fe0d663c

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:46aae75ec7aaa4b715b9e937e233190253b6d92b66dd7f6f970ec2f9fe0d663c

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:46aae75ec7aaa4b715b9e937e233190253b6d92b66dd7f6f970ec2f9fe0d663c

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:46aae75ec7aaa4b715b9e937e233190253b6d92b66dd7f6f970ec2f9fe0d663c

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/sys CVE-2026-39824 未知 v0.39.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:46aae75ec7aaa4b715b9e937e233190253b6d92b66dd7f6f970ec2f9fe0d663c

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
pulsar/plugins/pulsarctl-kube (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:10 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/net CVE-2026-46600 高危 v0.55.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text CVE-2026-56852 高危 v0.37.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-05-22 16:16 修改: 2026-08-14 13:18
stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:6733404ac78a76f816478a8caf0c81c4b39c79c8d9094ed676ae81284730f4e5

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×