docker.io/triliumnext/trilium:v0.104.1 linux/amd64

docker.io/triliumnext/trilium:v0.104.1 - Trivy安全扫描结果扫描时间: 2026-07-27 08:40

全部漏洞信息

低危漏洞:2

中危漏洞:5

高危漏洞:4

严重漏洞:1

系统OS: alpine 3.23.5 扫描引擎: Trivy 扫描时间: 2026-07-27 08:40

docker.io/triliumnext/trilium:v0.104.1 (alpine 3.23.5) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:2

中危漏洞:5

高危漏洞:4

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
tar	CVE-2026-59873	严重	7.5.15	7.5.19	tar: node-tar: Denial of Service via crafted gzip bomb 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873 镜像层: sha256:dc92897b8f79f2f6820a0f6a9da9fa7a585fc4d23e8281897182dfc47bb21b06 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
brace-expansion	CVE-2026-14257	高危	5.0.6	5.0.8	brace-expansion through 5.0.7 is vulnerable to denial of service via m ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257 镜像层: sha256:dc92897b8f79f2f6820a0f6a9da9fa7a585fc4d23e8281897182dfc47bb21b06 发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion	CVE-2026-13149	高危	5.0.6	5.0.7, 1.1.16, 2.1.2	brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149 镜像层: sha256:dc92897b8f79f2f6820a0f6a9da9fa7a585fc4d23e8281897182dfc47bb21b06 发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
tar	CVE-2026-59874	高危	7.5.15	7.5.18	tar: Node-tar: Denial of Service via malformed tar archive header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874 镜像层: sha256:dc92897b8f79f2f6820a0f6a9da9fa7a585fc4d23e8281897182dfc47bb21b06 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
undici	CVE-2026-12151	高危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151 镜像层: sha256:dc92897b8f79f2f6820a0f6a9da9fa7a585fc4d23e8281897182dfc47bb21b06 发布日期: 2026-06-17 17:16 修改: 2026-07-21 12:17
tar	CVE-2026-59871	中危	7.5.15	7.5.18	node-tar: node-tar: Denial of Service due to incorrect PAX path handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871 镜像层: sha256:dc92897b8f79f2f6820a0f6a9da9fa7a585fc4d23e8281897182dfc47bb21b06 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar	CVE-2026-59875	中危	7.5.15	7.5.17	node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875 镜像层: sha256:dc92897b8f79f2f6820a0f6a9da9fa7a585fc4d23e8281897182dfc47bb21b06 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar	GHSA-r292-9mhp-454m	中危	7.5.15	7.5.21	node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection 漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m 镜像层: sha256:dc92897b8f79f2f6820a0f6a9da9fa7a585fc4d23e8281897182dfc47bb21b06 发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
tar	CVE-2026-53655	中危	7.5.15	7.5.16	node-tar: node-tar: File smuggling due to inconsistent tar archive parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655 镜像层: sha256:dc92897b8f79f2f6820a0f6a9da9fa7a585fc4d23e8281897182dfc47bb21b06 发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
undici	CVE-2026-9679	中危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679 镜像层: sha256:dc92897b8f79f2f6820a0f6a9da9fa7a585fc4d23e8281897182dfc47bb21b06 发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
undici	CVE-2026-11525	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525 镜像层: sha256:dc92897b8f79f2f6820a0f6a9da9fa7a585fc4d23e8281897182dfc47bb21b06 发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici	CVE-2026-6733	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733 镜像层: sha256:dc92897b8f79f2f6820a0f6a9da9fa7a585fc4d23e8281897182dfc47bb21b06 发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46

/usr/src/app/public/src/EditableText-Bk4mS7Zf.js ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息