ghcr.io/berriai/litellm:1.99.0 linux/arm64

ghcr.io/berriai/litellm:1.99.0 - Trivy安全扫描结果扫描时间: 2026-09-03 15:18 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:1

中危漏洞:4

高危漏洞:1

严重漏洞:0

系统OS: wolfi 20230201 扫描引擎: Trivy 扫描时间: 2026-09-03 15:18

ghcr.io/berriai/litellm:1.99.0 (wolfi 20230201) (wolfi)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Python (python-pkg)

低危漏洞:1

中危漏洞:4

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
RestrictedPython	CVE-2026-55830	高危	8.1	8.3	RestrictedPython guard hooks can be shadowed via positional-only arguments 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55830 镜像层: sha256:16820cb802ab6f99d84abc4261f99b41b3de19a133a02f877c3930276b0752fe 发布日期: 2026-07-08 22:17 修改: 2026-07-10 19:06
pypdf	CVE-2026-84309	中危	6.15.0	6.16.0	pypdf: Possible infinite loop for TreeObject.insert_child 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84309 镜像层: sha256:16820cb802ab6f99d84abc4261f99b41b3de19a133a02f877c3930276b0752fe 发布日期: 2026-09-01 20:17 修改: 2026-09-01 20:17
pypdf	CVE-2026-84310	中危	6.15.0	6.16.1	pypdf: pypdf: Denial of Service via crafted PDF outlines 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84310 镜像层: sha256:16820cb802ab6f99d84abc4261f99b41b3de19a133a02f877c3930276b0752fe 发布日期: 2026-09-01 21:18 修改: 2026-09-01 21:18
pypdf	CVE-2026-84311	中危	6.15.0	6.16.1	pypdf: pypdf: Denial of Service via crafted PDF XForm objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84311 镜像层: sha256:16820cb802ab6f99d84abc4261f99b41b3de19a133a02f877c3930276b0752fe 发布日期: 2026-09-01 21:18 修改: 2026-09-01 21:18
tornado	GHSA-8423-8fgw-73vq	中危	6.5.7	6.5.8	tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34) 漏洞详情: https://github.com/advisories/GHSA-8423-8fgw-73vq 镜像层: sha256:16820cb802ab6f99d84abc4261f99b41b3de19a133a02f877c3930276b0752fe 发布日期: 2026-09-01 20:17 修改: 2026-09-01 20:17
tornado	GHSA-wwv5-g3v4-889x	低危	6.5.7	6.5.8	Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie` 漏洞详情: https://github.com/advisories/GHSA-wwv5-g3v4-889x 镜像层: sha256:16820cb802ab6f99d84abc4261f99b41b3de19a133a02f877c3930276b0752fe 发布日期: 2026-09-01 20:17 修改: 2026-09-01 20:17