ghcr.io/dagucloud/dagu:2.16.2 linux/amd64

ghcr.io/dagucloud/dagu:2.16.2 - Trivy安全扫描结果 扫描时间: 2026-09-05 18:06
全部漏洞信息
低危漏洞:19 中危漏洞:68 高危漏洞:1 严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-05 18:06

ghcr.io/dagucloud/dagu:2.16.2 (ubuntu 24.04) (ubuntu)
低危漏洞:19 中危漏洞:67 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-13595 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
bsdutils CVE-2026-27456 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
bsdutils CVE-2026-53612 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53613 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53614 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53615 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
diffutils CVE-2026-53910 中危 1:3.10-1build1 1:3.10-1ubuntu0.1 diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
git CVE-2024-52005 中危 1:2.43.0-1ubuntu7.3 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
git-man CVE-2024-52005 中危 1:2.43.0-1ubuntu7.3 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
jq CVE-2026-41256 中危 1.7.1-3ubuntu0.24.04.2 jq: embedded NUL truncates top-level jq programs loaded with -f

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
jq CVE-2026-41257 中危 1.7.1-3ubuntu0.24.04.2 jq: signed-int overflow in stack_reallocate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
jq CVE-2026-43895 中危 1.7.1-3ubuntu0.24.04.2 jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq CVE-2026-43896 中危 1.7.1-3ubuntu0.24.04.2 jq: stack overflow in recursive object merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq CVE-2026-44777 中危 1.7.1-3ubuntu0.24.04.2 jq: stack overflow in module loading on mutual include

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
libattr1 CVE-2026-54371 中危 1:2.5.2-1build1.1 1:2.5.2-1ubuntu0.1 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 14:16 修改: 2026-09-02 13:18
libblkid1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libblkid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-bin CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6 CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libjq1 CVE-2026-41256 中危 1.7.1-3ubuntu0.24.04.2 jq: embedded NUL truncates top-level jq programs loaded with -f

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
libjq1 CVE-2026-41257 中危 1.7.1-3ubuntu0.24.04.2 jq: signed-int overflow in stack_reallocate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
libjq1 CVE-2026-43895 中危 1.7.1-3ubuntu0.24.04.2 jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
libjq1 CVE-2026-43896 中危 1.7.1-3ubuntu0.24.04.2 jq: stack overflow in recursive object merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
libjq1 CVE-2026-44777 中危 1.7.1-3ubuntu0.24.04.2 jq: stack overflow in module loading on mutual include

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
libmount1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libmount1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libp11-kit0 CVE-2026-13757 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
libp11-kit0 CVE-2026-18938 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07
libsmartcols1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libsmartcols1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsmartcols1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libuuid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
mount CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssh-client CVE-2026-55655 中危 1:9.6p1-3ubuntu13.18 openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55655

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-06-23 04:17 修改: 2026-09-01 09:16
openssh-client CVE-2026-73281 中危 1:9.6p1-3ubuntu13.18 1:9.6p1-3ubuntu13.19 openssh: OpenSSH: ssh-agent allows remote execution of local operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73281

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-08-11 20:18 修改: 2026-09-04 16:04
openssh-client CVE-2026-73282 中危 1:9.6p1-3ubuntu13.18 1:9.6p1-3ubuntu13.19 openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73282

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-08-11 20:18 修改: 2026-09-04 16:03
openssh-client CVE-2026-73283 中危 1:9.6p1-3ubuntu13.18 1:9.6p1-3ubuntu13.19 openssh: OpenSSH: Tunnel forwarding restriction bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73283

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-08-11 20:18 修改: 2026-09-04 16:01
tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-03 17:16 修改: 2026-09-01 15:17
tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-03 16:16 修改: 2026-09-01 15:17
util-linux CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
util-linux CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
util-linux CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libtinfo6 CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
openssh-client CVE-2026-55654 低危 1:9.6p1-3ubuntu13.18 openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55654

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-06-23 04:17 修改: 2026-09-01 09:16
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
patch CVE-2018-6952 低危 2.7.6-7build3 patch: Double free of memory in pch.c:another_hunk() causes a crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6952

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2018-02-13 19:29 修改: 2026-06-17 02:02
patch CVE-2019-20633 低危 2.7.6-7build3 patch: double free in another_hunk function in pch.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20633

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2020-03-25 17:15 修改: 2026-06-17 02:30
patch CVE-2021-45261 低危 2.7.6-7build3 patch: Invalid Pointer via another_hunk function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45261

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2021-12-22 18:15 修改: 2026-06-17 04:13
patch CVE-2026-56288 低危 2.7.6-7build3 patch: GNU patch: Denial of Service via specially crafted patch file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56288

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-07-09 11:16 修改: 2026-07-13 14:08
patch CVE-2026-56289 低危 2.7.6-7build3 patch: GNU patch: Denial of Service via crafted unified-diff input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56289

镜像层: sha256:14bb7a0dfdae8cb88ab04cfb08a635483640d835570cc2183f9365026fee8bfa

发布日期: 2026-07-09 11:16 修改: 2026-07-13 14:10
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libbz2-1.0 CVE-2026-42250 低危 1.0.8-5.1build0.1 1.0.8-5.1ubuntu0.1 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
libncursesw6 CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libgcrypt20 CVE-2024-2236 低危 1.10.3-2ubuntu0.1 1.10.3-2ubuntu0.2 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
coreutils CVE-2025-5278 低危 9.4-3ubuntu6.2 9.4-3ubuntu6.3 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2025-05-27 21:15 修改: 2026-09-01 12:17
ncurses-base CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
ncurses-bin CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
gpgv CVE-2026-57062 低危 2.4.4-2ubuntu17.4 2.4.4-2ubuntu17.6 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16
zlib1g CVE-2026-27171 低危 1:1.3.dfsg-3.1ubuntu2.1 1:1.3.dfsg-3.1ubuntu2.2 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
usr/local/bin/dagu (gobinary)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
google.golang.org/grpc CVE-2026-84304 高危 v1.82.2 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304

镜像层: sha256:87091f4d8477edf1de15909a22ea139218eef0b417c3d4f38ffafdbaf9fee0a0

发布日期: 2026-09-01 19:17 修改: 2026-09-01 20:17
github.com/aquaproj/aqua/v2 CVE-2026-55569 中危 v2.58.1 2.60.1 Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55569

镜像层: sha256:87091f4d8477edf1de15909a22ea139218eef0b417c3d4f38ffafdbaf9fee0a0

发布日期: 2026-08-28 20:18 修改: 2026-09-01 02:16
golang.org/x/crypto CVE-2026-78662 未知 v0.55.0 0.56.0 Previously, a channel registered in the mux's chanList is not usable u ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:87091f4d8477edf1de15909a22ea139218eef0b417c3d4f38ffafdbaf9fee0a0

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto GO-2026-5932 未知 v0.55.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:87091f4d8477edf1de15909a22ea139218eef0b417c3d4f38ffafdbaf9fee0a0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/crypto CVE-2026-56855 未知 v0.55.0 0.56.0 Previously, after a channel has been established, a malicious peer cou ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:87091f4d8477edf1de15909a22ea139218eef0b417c3d4f38ffafdbaf9fee0a0

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×