ghcr.io/apache/skywalking-horizon-ui:1.0.0 linux/arm64

ghcr.io/apache/skywalking-horizon-ui:1.0.0 - Trivy安全扫描结果扫描时间: 2026-09-04 10:21 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:12

中危漏洞:10

高危漏洞:10

严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-09-04 10:21

ghcr.io/apache/skywalking-horizon-ui:1.0.0 (alpine 3.24.1) (alpine)

低危漏洞:12

中危漏洞:6

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libcrypto3	CVE-2026-14456	高危	3.5.7-r0	3.5.8-r0	openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-14456	高危	3.5.7-r0	3.5.8-r0	openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-63072	中危	3.5.7-r0	3.5.8-r0	openssl: heap buffer overflow in CMS key unwrapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-63076	中危	3.5.7-r0	3.5.8-r0	openssl: invalid pointer dereference in CMP server via crafted protectionAlg 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-18798	中危	3.5.7-r0	3.5.8-r0	openssl: QUIC server may trigger double free when processing INITIAL packet 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3	CVE-2026-18798	中危	3.5.7-r0	3.5.8-r0	openssl: QUIC server may trigger double free when processing INITIAL packet 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3	CVE-2026-63072	中危	3.5.7-r0	3.5.8-r0	openssl: heap buffer overflow in CMS key unwrapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-63076	中危	3.5.7-r0	3.5.8-r0	openssl: invalid pointer dereference in CMP server via crafted protectionAlg 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-63075	低危	3.5.7-r0	3.5.8-r0	openssl: QUIC ACK-only packet retention can cause memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-75803	低危	3.5.7-r0	3.5.8-r0	Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
libcrypto3	CVE-2026-14457	低危	3.5.7-r0	3.5.8-r0	openssl: RPK server signature algorithm selection can dereference a missing certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-54874	低危	3.5.7-r0	3.5.8-r0	openssl: excessive memory use buffering DTLS records for a future epoch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-63073	低危	3.5.7-r0	3.5.8-r0	openssl: untrusted sender DN used as format string in CMP response validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
libcrypto3	CVE-2026-63074	低危	3.5.7-r0	3.5.8-r0	openssl: CMP indefinite cache growth of ExtraCerts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-14457	低危	3.5.7-r0	3.5.8-r0	openssl: RPK server signature algorithm selection can dereference a missing certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3	CVE-2026-54874	低危	3.5.7-r0	3.5.8-r0	openssl: excessive memory use buffering DTLS records for a future epoch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-63073	低危	3.5.7-r0	3.5.8-r0	openssl: untrusted sender DN used as format string in CMP response validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
libssl3	CVE-2026-63074	低危	3.5.7-r0	3.5.8-r0	openssl: CMP indefinite cache growth of ExtraCerts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-63075	低危	3.5.7-r0	3.5.8-r0	openssl: QUIC ACK-only packet retention can cause memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-75803	低危	3.5.7-r0	3.5.8-r0	Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17

Node.js (node-pkg)

低危漏洞:0

中危漏洞:4

高危漏洞:8

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
fast-uri	CVE-2026-75899	高危	3.1.5	2.4.5, 3.1.6, 4.1.3	fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75899 镜像层: sha256:f87a081e24a311a5e1a204ebf7ce07f9bb67a9911400e8d202e5876c9a6d5649 发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:43
fast-uri	CVE-2026-75931	高危	3.1.5	2.4.5, 3.1.6, 4.1.3	fast-uri: fast-uri: Host confusion via skipped IDN canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75931 镜像层: sha256:f87a081e24a311a5e1a204ebf7ce07f9bb67a9911400e8d202e5876c9a6d5649 发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:44
fast-uri	CVE-2026-75975	高危	3.1.5	2.4.5, 3.1.6, 4.1.3	fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75975 镜像层: sha256:f87a081e24a311a5e1a204ebf7ce07f9bb67a9911400e8d202e5876c9a6d5649 发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:44
fast-uri	CVE-2026-76172	高危	3.1.5	2.4.5, 3.1.6, 4.1.3	fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76172 镜像层: sha256:f87a081e24a311a5e1a204ebf7ce07f9bb67a9911400e8d202e5876c9a6d5649 发布日期: 2026-08-24 11:16 修改: 2026-09-02 14:43
fast-uri	CVE-2026-75899	高危	4.1.2	2.4.5, 3.1.6, 4.1.3	fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75899 镜像层: sha256:f87a081e24a311a5e1a204ebf7ce07f9bb67a9911400e8d202e5876c9a6d5649 发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:43
fast-uri	CVE-2026-75931	高危	4.1.2	2.4.5, 3.1.6, 4.1.3	fast-uri: fast-uri: Host confusion via skipped IDN canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75931 镜像层: sha256:f87a081e24a311a5e1a204ebf7ce07f9bb67a9911400e8d202e5876c9a6d5649 发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:44
fast-uri	CVE-2026-75975	高危	4.1.2	2.4.5, 3.1.6, 4.1.3	fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75975 镜像层: sha256:f87a081e24a311a5e1a204ebf7ce07f9bb67a9911400e8d202e5876c9a6d5649 发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:44
fast-uri	CVE-2026-76172	高危	4.1.2	2.4.5, 3.1.6, 4.1.3	fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76172 镜像层: sha256:f87a081e24a311a5e1a204ebf7ce07f9bb67a9911400e8d202e5876c9a6d5649 发布日期: 2026-08-24 11:16 修改: 2026-09-02 14:43
fastify	CVE-2026-16732	中危	5.11.0	5.12.1	fastify: fastify: Request spoofing via numeric trustProxy configuration 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16732 镜像层: sha256:f87a081e24a311a5e1a204ebf7ce07f9bb67a9911400e8d202e5876c9a6d5649 发布日期: 2026-08-18 21:16 修改: 2026-09-02 14:39
fastify	CVE-2026-18504	中危	5.11.0	5.12.1	fastify: fastify: Schema validation bypass via root primitive coercion mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18504 镜像层: sha256:f87a081e24a311a5e1a204ebf7ce07f9bb67a9911400e8d202e5876c9a6d5649 发布日期: 2026-08-18 21:16 修改: 2026-09-02 14:30
qs	CVE-2026-82417	中危	6.15.3	6.16.0	### Summary `qs.stringify` throws a `TypeError` when it serializes ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82417 镜像层: sha256:f87a081e24a311a5e1a204ebf7ce07f9bb67a9911400e8d202e5876c9a6d5649 发布日期: 2026-08-30 00:16 修改: 2026-08-31 18:17
qs	CVE-2026-82562	中危	6.15.3	6.16.0	qs: qs: Denial of Service via array limit bypass in query string parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82562 镜像层: sha256:f87a081e24a311a5e1a204ebf7ce07f9bb67a9911400e8d202e5876c9a6d5649 发布日期: 2026-08-30 01:20 修改: 2026-08-31 18:17