ghcr.io/dougmaitelli/dockdash:latest linux/amd64

ghcr.io/dougmaitelli/dockdash:latest - Trivy安全扫描结果扫描时间: 2026-07-17 20:46

全部漏洞信息

低危漏洞:2

中危漏洞:4

高危漏洞:2

严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-07-17 20:46

ghcr.io/dougmaitelli/dockdash:latest (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:2

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
form-data	CVE-2026-12143	高危	4.0.5	2.5.6, 3.0.5, 4.0.6	form-data: form-data: Form field override via CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143 镜像层: sha256:a93183dcaaa56e9e5213b434aea9462a29dc317c654c73794bce6ec2a818407a 发布日期: 2026-06-12 19:16 修改: 2026-07-16 12:17
undici	CVE-2026-12151	高危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151 镜像层: sha256:e126d6928658db594619c6518154ab501cba0ccfbdfaeced48d532585b8dcd6c 发布日期: 2026-06-17 17:16 修改: 2026-07-16 12:17
qs	CVE-2026-8723	中危	6.15.1	6.15.2	### Summary `qs.stringify` throws `TypeError` when called with `arr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723 镜像层: sha256:a93183dcaaa56e9e5213b434aea9462a29dc317c654c73794bce6ec2a818407a 发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
protobufjs	CVE-2026-54269	中危	7.6.2	7.6.3, 8.6.0	protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54269 镜像层: sha256:a93183dcaaa56e9e5213b434aea9462a29dc317c654c73794bce6ec2a818407a 发布日期: 2026-06-22 18:16 修改: 2026-06-24 20:40
undici	CVE-2026-9679	中危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679 镜像层: sha256:e126d6928658db594619c6518154ab501cba0ccfbdfaeced48d532585b8dcd6c 发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
uuid	CVE-2026-41907	中危	10.0.0	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:a93183dcaaa56e9e5213b434aea9462a29dc317c654c73794bce6ec2a818407a 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
undici	CVE-2026-6733	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733 镜像层: sha256:e126d6928658db594619c6518154ab501cba0ccfbdfaeced48d532585b8dcd6c 发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
undici	CVE-2026-11525	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525 镜像层: sha256:e126d6928658db594619c6518154ab501cba0ccfbdfaeced48d532585b8dcd6c 发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46