ghcr.io/berriai/litellm-gateway:v1.99.0 linux/amd64

ghcr.io/berriai/litellm-gateway:v1.99.0 - Trivy安全扫描结果 扫描时间: 2026-09-02 23:40
全部漏洞信息
低危漏洞:3 中危漏洞:4 高危漏洞:2 严重漏洞:0

系统OS: wolfi 20230201 扫描引擎: Trivy 扫描时间: 2026-09-02 23:40

ghcr.io/berriai/litellm-gateway:v1.99.0 (wolfi 20230201) (wolfi)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Node.js (node-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Python (python-pkg)
低危漏洞:1 中危漏洞:4 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
RestrictedPython CVE-2026-55830 高危 8.1 8.3 RestrictedPython guard hooks can be shadowed via positional-only arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55830

镜像层: sha256:9ec21cf1b92e9fb9688676ae32a4d6e3ad02cf585d46376b905efca64bc9dfdb

发布日期: 2026-07-08 22:17 修改: 2026-07-10 19:06
pypdf CVE-2026-84309 中危 6.15.0 6.16.0 pypdf: Possible infinite loop for TreeObject.insert_child

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84309

镜像层: sha256:9ec21cf1b92e9fb9688676ae32a4d6e3ad02cf585d46376b905efca64bc9dfdb

发布日期: 2026-09-01 20:17 修改: 2026-09-01 20:17
pypdf CVE-2026-84310 中危 6.15.0 6.16.1 pypdf: pypdf: Denial of Service via crafted PDF outlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84310

镜像层: sha256:9ec21cf1b92e9fb9688676ae32a4d6e3ad02cf585d46376b905efca64bc9dfdb

发布日期: 2026-09-01 21:18 修改: 2026-09-01 21:18
pypdf CVE-2026-84311 中危 6.15.0 6.16.1 pypdf: pypdf: Denial of Service via crafted PDF XForm objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84311

镜像层: sha256:9ec21cf1b92e9fb9688676ae32a4d6e3ad02cf585d46376b905efca64bc9dfdb

发布日期: 2026-09-01 21:18 修改: 2026-09-01 21:18
tornado GHSA-8423-8fgw-73vq 中危 6.5.7 6.5.8 tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)

漏洞详情: https://github.com/advisories/GHSA-8423-8fgw-73vq

镜像层: sha256:9ec21cf1b92e9fb9688676ae32a4d6e3ad02cf585d46376b905efca64bc9dfdb

发布日期: 2026-09-01 20:17 修改: 2026-09-01 20:17
tornado GHSA-wwv5-g3v4-889x 低危 6.5.7 6.5.8 Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`

漏洞详情: https://github.com/advisories/GHSA-wwv5-g3v4-889x

镜像层: sha256:9ec21cf1b92e9fb9688676ae32a4d6e3ad02cf585d46376b905efca64bc9dfdb

发布日期: 2026-09-01 20:17 修改: 2026-09-01 20:17
app/litellm-rust/Cargo.lock (cargo)
低危漏洞:2 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.101.7 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:9ec21cf1b92e9fb9688676ae32a4d6e3ad02cf585d46376b905efca64bc9dfdb

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20
rustls-webpki GHSA-965h-392x-2mh5 低危 0.101.7 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:9ec21cf1b92e9fb9688676ae32a4d6e3ad02cf585d46376b905efca64bc9dfdb

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16
rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.101.7 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:9ec21cf1b92e9fb9688676ae32a4d6e3ad02cf585d46376b905efca64bc9dfdb

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×