docker.io/verdaccio/verdaccio:latest linux/arm64

docker.io/verdaccio/verdaccio:latest - Trivy安全扫描结果扫描时间: 2026-07-22 10:58 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:0

中危漏洞:12

高危漏洞:5

严重漏洞:1

系统OS: alpine 3.23.4 扫描引擎: Trivy 扫描时间: 2026-07-22 10:58

docker.io/verdaccio/verdaccio:latest (alpine 3.23.4) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:0

中危漏洞:12

高危漏洞:5

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
tar	CVE-2026-59873	严重	7.5.11	7.5.19	tar: node-tar: Denial of Service via crafted gzip bomb 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
js-yaml	CVE-2026-59869	高危	4.1.1	3.15.0, 4.3.0	js-yaml: js-yaml: Denial of Service via crafted YAML documents 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59869 镜像层: sha256:061c2a351485e1bb7f0d69b8a18c93732564691e42153846c096789a86a5b57b 发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:05
picomatch	CVE-2026-33671	高危	4.0.3	4.0.4, 3.0.2, 2.3.2	picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
sigstore	CVE-2026-48815	高危	4.1.0	4.1.1	sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
brace-expansion	CVE-2026-13149	高危	5.0.4	5.0.7, 1.1.16, 2.1.2	brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
tar	CVE-2026-59874	高危	7.5.11	7.5.18	tar: Node-tar: Denial of Service via malformed tar archive header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
@sigstore/verify	CVE-2026-48816	中危	3.1.0	3.1.1	sigstore-js: github.com/sigstore/sigstore-js: sigstore-js: Insufficient verification of data authenticity allows timestamp manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48816 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
js-yaml	CVE-2026-53550	中危	4.1.1	4.2.0, 3.15.0	js-yaml: js-yaml: Denial of Service via crafted YAML merge keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53550 镜像层: sha256:061c2a351485e1bb7f0d69b8a18c93732564691e42153846c096789a86a5b57b 发布日期: 2026-06-22 16:16 修改: 2026-07-09 20:33
@sigstore/core	CVE-2026-48758	中危	3.2.0	3.2.1	sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
picomatch	CVE-2026-33672	中危	4.0.3	4.0.4, 3.0.2, 2.3.2	picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
qs	CVE-2026-8723	中危	6.14.2	6.15.2	### Summary `qs.stringify` throws `TypeError` when called with `arr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723 镜像层: sha256:061c2a351485e1bb7f0d69b8a18c93732564691e42153846c096789a86a5b57b 发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
brace-expansion	CVE-2026-33750	中危	5.0.4	5.0.5, 3.0.2, 2.0.3, 1.1.13	brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
brace-expansion	CVE-2026-45149	中危	5.0.4	5.0.6	brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-05-29 20:16 修改: 2026-06-17 10:51
ip-address	CVE-2026-42338	中危	10.1.0	10.1.1	ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-05-12 20:16 修改: 2026-07-20 12:19
tar	CVE-2026-53655	中危	7.5.11	7.5.16	node-tar: node-tar: File smuggling due to inconsistent tar archive parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar	CVE-2026-59871	中危	7.5.11	7.5.18	node-tar: node-tar: Denial of Service due to incorrect PAX path handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar	CVE-2026-59875	中危	7.5.11	7.5.17	node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875 镜像层: sha256:195a10e5dea5b21d9fc36b174e1c858bbde5edcdda37d59300483bf045147ff8 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
uuid	CVE-2026-41907	中危	8.3.2	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:061c2a351485e1bb7f0d69b8a18c93732564691e42153846c096789a86a5b57b 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47