ghcr.io/berriai/litellm:v1.99.1 linux/amd64

ghcr.io/berriai/litellm:v1.99.1 - Trivy安全扫描结果 扫描时间: 2026-09-04 22:57
全部漏洞信息
低危漏洞:1 中危漏洞:6 高危漏洞:1 严重漏洞:0

系统OS: wolfi 20230201 扫描引擎: Trivy 扫描时间: 2026-09-04 22:57

ghcr.io/berriai/litellm:v1.99.1 (wolfi 20230201) (wolfi)
低危漏洞:0 中危漏洞:2 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
python-3.13 CVE-2026-15806 中危 3.13.15-r4 3.13.15-r5 The HTTPPasswordMgr class in the urllib.request module, along with its ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15806

镜像层: sha256:fe979428c04c62e78788b232ebce3914eb2f47149a9358353804f62c292d9da5

发布日期: 2026-08-18 16:17 修改: 2026-09-02 01:17
python-3.13-base CVE-2026-15806 中危 3.13.15-r4 3.13.15-r5 The HTTPPasswordMgr class in the urllib.request module, along with its ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15806

镜像层: sha256:fe979428c04c62e78788b232ebce3914eb2f47149a9358353804f62c292d9da5

发布日期: 2026-08-18 16:17 修改: 2026-09-02 01:17
Node.js (node-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Python (python-pkg)
低危漏洞:1 中危漏洞:4 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
tornado CVE-2026-82397 高危 6.5.7 6.5.8 Tornado is a Python web framework and asynchronous networking library. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82397

镜像层: sha256:a1e6c96453612b67e7d8e0659ae4357392fd68a8e49ad5b104b128480f7ff744

发布日期: 2026-08-31 22:17 修改: 2026-09-02 18:21
pypdf CVE-2026-84310 中危 6.15.0 6.16.1 pypdf: pypdf: Denial of Service via crafted PDF outlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84310

镜像层: sha256:a1e6c96453612b67e7d8e0659ae4357392fd68a8e49ad5b104b128480f7ff744

发布日期: 2026-09-01 21:18 修改: 2026-09-01 21:18
pypdf CVE-2026-84311 中危 6.15.0 6.16.1 pypdf: pypdf: Denial of Service via crafted PDF XForm objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84311

镜像层: sha256:a1e6c96453612b67e7d8e0659ae4357392fd68a8e49ad5b104b128480f7ff744

发布日期: 2026-09-01 21:18 修改: 2026-09-02 16:17
pypdf CVE-2026-84309 中危 6.15.0 6.16.0 pypdf: pypdf: Denial of Service via crafted PDF with cyclic tree structure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84309

镜像层: sha256:a1e6c96453612b67e7d8e0659ae4357392fd68a8e49ad5b104b128480f7ff744

发布日期: 2026-09-01 20:17 修改: 2026-09-02 14:17
tornado GHSA-8423-8fgw-73vq 中危 6.5.7 6.5.8 tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)

漏洞详情: https://github.com/advisories/GHSA-8423-8fgw-73vq

镜像层: sha256:a1e6c96453612b67e7d8e0659ae4357392fd68a8e49ad5b104b128480f7ff744

发布日期: 2026-09-01 20:17 修改: 2026-09-01 20:17
tornado GHSA-wwv5-g3v4-889x 低危 6.5.7 6.5.8 Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`

漏洞详情: https://github.com/advisories/GHSA-wwv5-g3v4-889x

镜像层: sha256:a1e6c96453612b67e7d8e0659ae4357392fd68a8e49ad5b104b128480f7ff744

发布日期: 2026-09-01 20:17 修改: 2026-09-01 20:17
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×