ghcr.io/berriai/litellm-backend:v1.92.0 linux/amd64

ghcr.io/berriai/litellm-backend:v1.92.0 - Trivy安全扫描结果 扫描时间: 2026-07-31 18:52
全部漏洞信息
低危漏洞:1 中危漏洞:3 高危漏洞:11 严重漏洞:0

系统OS: wolfi 20230201 扫描引擎: Trivy 扫描时间: 2026-07-31 18:52

ghcr.io/berriai/litellm-backend:v1.92.0 (wolfi 20230201) (wolfi)
低危漏洞:0 中危漏洞:0 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
python-3.13 CVE-2026-15308 高危 3.13.14-r2 3.13.14-r3 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:3eba5803f0a785e6f76320865d1e743db1144effdd9cfd21ef063c1de4a4e40f

发布日期: 2026-07-09 17:16 修改: 2026-07-23 19:16
python-3.13-base CVE-2026-15308 高危 3.13.14-r2 3.13.14-r3 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:3eba5803f0a785e6f76320865d1e743db1144effdd9cfd21ef063c1de4a4e40f

发布日期: 2026-07-09 17:16 修改: 2026-07-23 19:16
Node.js (node-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Python (python-pkg)
低危漏洞:0 中危漏洞:2 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
ddtrace CVE-2026-50271 高危 2.19.0 4.8.2 dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50271

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2026-07-17 21:17 修改: 2026-07-23 18:06
mcp CVE-2026-52869 高危 1.26.0 1.27.2 MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52869

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2026-07-15 20:17 修改: 2026-07-17 18:06
mcp CVE-2026-52870 高危 1.26.0 1.27.2 MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52870

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2026-07-15 20:17 修改: 2026-07-17 18:07
mcp CVE-2026-59950 高危 1.26.0 1.28.1 MCP Python SDK: WebSocket server transport does not support Host/Origin validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59950

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2026-07-15 21:16 修改: 2026-07-17 18:07
pyasn1 CVE-2026-59885 高危 0.6.3 0.6.4 pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59885

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:38
pyasn1 CVE-2026-59886 高危 0.6.3 0.6.4 pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59886

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:38
pypdf CVE-2026-59935 高危 6.13.3 6.14.2 pypdf: pypdf: Denial of Service via crafted PDF with unterminated inline image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59935

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2026-07-08 20:16 修改: 2026-07-09 20:42
pypdf CVE-2026-59936 高危 6.13.3 6.14.1 pypdf: pypdf: Denial of Service via crafted PDF inline image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59936

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2026-07-08 20:16 修改: 2026-07-09 20:41
pypdf CVE-2026-59937 中危 6.13.3 6.14.0 pypdf: pypdf: Denial of Service via crafted PDF with malformed cross-reference streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59937

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2026-07-08 18:16 修改: 2026-07-09 20:39
pypdf CVE-2026-59938 中危 6.13.3 6.14.0 pypdf: pypdf: Possible large memory usage for wrong image dimensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59938

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2026-07-08 18:16 修改: 2026-07-09 20:41
app/litellm-rust/Cargo.lock (cargo)
低危漏洞:1 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
pyo3 GHSA-36hh-v3qg-5jq4 高危 0.23.5 0.29.0 PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators

漏洞详情: https://github.com/advisories/GHSA-36hh-v3qg-5jq4

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2026-06-12 19:32 修改: 2026-06-12 19:32
pyo3 GHSA-chgr-c6px-7xpp 中危 0.23.5 0.29.0 PyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures

漏洞详情: https://github.com/advisories/GHSA-chgr-c6px-7xpp

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2026-06-12 20:09 修改: 2026-06-12 20:09
pyo3 GHSA-pph8-gcv7-4qj5 低危 0.23.5 0.24.1 PyO3 Risk of buffer overflow in `PyString::from_object`

漏洞详情: https://github.com/advisories/GHSA-pph8-gcv7-4qj5

镜像层: sha256:d9e67f10fc89556f84bfd813ad503dba7f17017b24b9f2054cd1642ae74e4cbf

发布日期: 2025-04-02 13:19 修改: 2025-04-02 13:19
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×