docker.io/trinodb/trino:482 linux/amd64

docker.io/trinodb/trino:482 - Trivy安全扫描结果扫描时间: 2026-07-01 15:04

全部漏洞信息

低危漏洞:1

中危漏洞:5

高危漏洞:1

严重漏洞:0

系统OS: redhat 10.2 扫描引擎: Trivy 扫描时间: 2026-07-01 15:04

docker.io/trinodb/trino:482 (redhat 10.2) (redhat)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Java (jar)

低危漏洞:1

中危漏洞:5

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
org.eclipse.jetty:jetty-http	CVE-2026-2332	高危	11.0.26	12.1.7, 12.0.33	org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332 镜像层: sha256:827c0a06880845cf0f9042950ad5e3b8e4224829f033400b86c67ed5236020a4 发布日期: 2026-04-14 12:16 修改: 2026-06-30 03:18
commons-lang:commons-lang	CVE-2025-48924	中危	2.6		commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:827c0a06880845cf0f9042950ad5e3b8e4224829f033400b86c67ed5236020a4 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.eclipse.jetty:jetty-http	CVE-2024-6763	中危	11.0.26	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:827c0a06880845cf0f9042950ad5e3b8e4224829f033400b86c67ed5236020a4 发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
org.elasticsearch:elasticsearch	CVE-2024-52980	中危	7.17.29	8.15.1	Elasticsearch Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52980 镜像层: sha256:827c0a06880845cf0f9042950ad5e3b8e4224829f033400b86c67ed5236020a4 发布日期: 2025-04-08 17:15 修改: 2026-06-17 08:07
org.elasticsearch:elasticsearch	CVE-2025-37727	中危	7.17.29	8.18.8, 8.19.5, 9.0.8, 9.1.5	org.elasticsearch/elasticsearch-core: Elasticsearch Insertion of sensitive information in log file 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37727 镜像层: sha256:827c0a06880845cf0f9042950ad5e3b8e4224829f033400b86c67ed5236020a4 发布日期: 2025-10-10 10:15 修改: 2026-06-17 09:15
org.elasticsearch:elasticsearch	CVE-2025-37731	中危	7.17.29	8.19.8, 9.1.8, 9.2.2	elasticsearch: Elasticsearch: User impersonation due to improper authentication in Public Key Infrastructure (PKI) realm 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37731 镜像层: sha256:827c0a06880845cf0f9042950ad5e3b8e4224829f033400b86c67ed5236020a4 发布日期: 2025-12-15 11:15 修改: 2026-06-17 09:15
org.eclipse.jetty:jetty-http	CVE-2025-11143	低危	11.0.26	12.0.31, 12.1.5	org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11143 镜像层: sha256:827c0a06880845cf0f9042950ad5e3b8e4224829f033400b86c67ed5236020a4 发布日期: 2026-03-05 10:15 修改: 2026-06-17 08:29

usr/lib/trino/bin/linux-amd64/launcher (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息