docker.io/temporalio/ui:2.49.1 - Trivy镜像安全扫描结果

全部漏洞信息

低危漏洞:0

中危漏洞:6

高危漏洞:12

严重漏洞:0

系统OS: alpine 3.23.3 扫描引擎: Trivy 扫描时间: 2026-05-20 16:37

docker.io/temporalio/ui:2.49.1 (alpine 3.23.3) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
nghttp2-libs	CVE-2026-27135	高危	1.68.0-r0	1.68.1	nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27135 镜像层: sha256:df057d92666c7ebb6077ad6825c656b631324cb698da465c2ced61984ee8b91f 发布日期: 2026-03-18 18:16 修改: 2026-03-23 17:51

软件包

漏洞

安全状态

安装版本

修复版本

漏洞信息

nghttp2-libs

CVE-2026-27135

高危

1.68.0-r0

1.68.1

nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27135

镜像层: sha256:df057d92666c7ebb6077ad6825c656b631324cb698da465c2ced61984ee8b91f

发布日期: 2026-03-18 18:16 修改: 2026-03-23 17:51

home/ui-server/ui-server (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:6

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/gomarkdown/markdown	CVE-2026-40890	高危	v0.0.0-20240729212818-a2a9c4f76ef5	0.0.0-20260411013819-759bbc3e3207	github.com/gomarkdown/markdown: github.com/gomarkdown/markdown: Denial of Service via malformed Markdown input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40890 镜像层: sha256:21df39934925f68ea6f9f7cfea6bf2cc5d0371ba30f51392c1b704e85b65a487 发布日期: 2026-04-21 20:17 修改: 2026-04-27 15:07
stdlib	CVE-2026-33811	高危	v1.26.2	1.25.10, 1.26.3	When using LookupCNAME with the cgo DNS resolver, a very long CNAME re ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:21df39934925f68ea6f9f7cfea6bf2cc5d0371ba30f51392c1b704e85b65a487 发布日期: 2026-05-07 20:16 修改: 2026-05-12 20:23
stdlib	CVE-2026-33814	高危	v1.26.2	1.25.10, 1.26.3	When processing HTTP/2 SETTINGS frames, transport will enter an infini ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:21df39934925f68ea6f9f7cfea6bf2cc5d0371ba30f51392c1b704e85b65a487 发布日期: 2026-05-07 20:16 修改: 2026-05-08 19:16
stdlib	CVE-2026-39820	高危	v1.26.2	1.25.10, 1.26.3	Well-crafted inputs reaching ParseAddress, ParseAddressList, and Parse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:21df39934925f68ea6f9f7cfea6bf2cc5d0371ba30f51392c1b704e85b65a487 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39836	高危	v1.26.2	1.25.10, 1.26.3	Panic in Dial and LookupPort when handling NUL byte on Windows in net 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:21df39934925f68ea6f9f7cfea6bf2cc5d0371ba30f51392c1b704e85b65a487 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-42499	高危	v1.26.2	1.25.10, 1.26.3	Pathological inputs could cause DoS through consumePhrase when parsing ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:21df39934925f68ea6f9f7cfea6bf2cc5d0371ba30f51392c1b704e85b65a487 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39823	中危	v1.26.2	1.25.10, 1.26.3	CVE-2026-27142 fixed a vulnerability in which URLs were not correctly ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:21df39934925f68ea6f9f7cfea6bf2cc5d0371ba30f51392c1b704e85b65a487 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39825	中危	v1.26.2	1.25.10, 1.26.3	ReverseProxy can forward queries containing parameters not visible to ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:21df39934925f68ea6f9f7cfea6bf2cc5d0371ba30f51392c1b704e85b65a487 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39826	中危	v1.26.2	1.25.10, 1.26.3	If a trusted template author were to write a <script> tag containing a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:21df39934925f68ea6f9f7cfea6bf2cc5d0371ba30f51392c1b704e85b65a487 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16

usr/local/bin/dockerize (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:5

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-33811	高危	v1.26.2	1.25.10, 1.26.3	When using LookupCNAME with the cgo DNS resolver, a very long CNAME re ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:32ccb0e174928fdd0b6bc81fe27b685372358a32abd062fa8a6eedb8334945f0 发布日期: 2026-05-07 20:16 修改: 2026-05-12 20:23
stdlib	CVE-2026-33814	高危	v1.26.2	1.25.10, 1.26.3	When processing HTTP/2 SETTINGS frames, transport will enter an infini ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:32ccb0e174928fdd0b6bc81fe27b685372358a32abd062fa8a6eedb8334945f0 发布日期: 2026-05-07 20:16 修改: 2026-05-08 19:16
stdlib	CVE-2026-39820	高危	v1.26.2	1.25.10, 1.26.3	Well-crafted inputs reaching ParseAddress, ParseAddressList, and Parse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:32ccb0e174928fdd0b6bc81fe27b685372358a32abd062fa8a6eedb8334945f0 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39836	高危	v1.26.2	1.25.10, 1.26.3	Panic in Dial and LookupPort when handling NUL byte on Windows in net 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:32ccb0e174928fdd0b6bc81fe27b685372358a32abd062fa8a6eedb8334945f0 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-42499	高危	v1.26.2	1.25.10, 1.26.3	Pathological inputs could cause DoS through consumePhrase when parsing ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:32ccb0e174928fdd0b6bc81fe27b685372358a32abd062fa8a6eedb8334945f0 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39823	中危	v1.26.2	1.25.10, 1.26.3	CVE-2026-27142 fixed a vulnerability in which URLs were not correctly ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:32ccb0e174928fdd0b6bc81fe27b685372358a32abd062fa8a6eedb8334945f0 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39825	中危	v1.26.2	1.25.10, 1.26.3	ReverseProxy can forward queries containing parameters not visible to ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:32ccb0e174928fdd0b6bc81fe27b685372358a32abd062fa8a6eedb8334945f0 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39826	中危	v1.26.2	1.25.10, 1.26.3	If a trusted template author were to write a <script> tag containing a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:32ccb0e174928fdd0b6bc81fe27b685372358a32abd062fa8a6eedb8334945f0 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16

docker.io/temporalio/ui:2.49.1 linux/amd64

全部漏洞信息

docker.io/temporalio/ui:2.49.1 (alpine 3.23.3) (alpine)

home/ui-server/ui-server (gobinary)

usr/local/bin/dockerize (gobinary)