ghcr.io/getwud/wud:8.4.0 linux/amd64

ghcr.io/getwud/wud:8.4.0 - Trivy安全扫描结果 扫描时间: 2026-09-10 16:02
全部漏洞信息
低危漏洞:2 中危漏洞:12 高危漏洞:8 严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-09-10 16:02

ghcr.io/getwud/wud:8.4.0 (alpine 3.24.1) (alpine)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Node.js (node-pkg)
低危漏洞:2 中危漏洞:12 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
brace-expansion CVE-2026-14257 高危 1.1.16 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-69152 高危 1.1.16 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-14257 高危 5.0.7 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-69152 高危 5.0.7 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
ip-address CVE-2026-69192 高危 10.2.0 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
ip-address CVE-2026-69192 高危 10.2.0 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
nodemailer GHSA-2x7j-588g-ccc2 高危 9.0.3 9.1.0 Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list

漏洞详情: https://github.com/advisories/GHSA-2x7j-588g-ccc2

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-09-08 21:33 修改: 2026-09-08 21:33
tar CVE-2026-73566 高危 7.5.19 7.5.21 tar: node-tar: Denial of Service via crafted long-path tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566

镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668

发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
ip-address CVE-2026-69198 中危 10.2.0 10.2.2 ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69198

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-08-03 20:17 修改: 2026-08-04 18:16
ip-address CVE-2026-69198 中危 10.2.0 10.2.2 ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69198

镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668

发布日期: 2026-08-03 20:17 修改: 2026-08-04 18:16
ip-address CVE-2026-54272 中危 10.2.0 10.2.1 ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54272

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-07-27 18:16 修改: 2026-07-27 18:16
nodemailer GHSA-8m3c-c648-2xjj 中危 9.0.3 9.1.1 Nodemailer: resolveContent() on a MailMessage bypasses disableFileAccess/disableUrlAccess when called with the legacy signature

漏洞详情: https://github.com/advisories/GHSA-8m3c-c648-2xjj

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-09-08 21:16 修改: 2026-09-08 21:16
nodemailer GHSA-cc9r-2j5m-2m83 中危 9.0.3 9.1.0 Nodemailer: Recipient-domain validation bypass via RFC 5322 comment mis-parsing leads to email delivery to an attacker-controlled domain

漏洞详情: https://github.com/advisories/GHSA-cc9r-2j5m-2m83

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-09-08 21:32 修改: 2026-09-08 21:32
nodemailer GHSA-wmmp-3585-3rmp 中危 9.0.3 9.1.0 Nodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domain

漏洞详情: https://github.com/advisories/GHSA-wmmp-3585-3rmp

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-09-08 21:33 修改: 2026-09-08 21:33
qs CVE-2026-82417 中危 6.15.3 6.16.0 qs: qs: Denial of Service via improper validation in stringify function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82417

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-08-30 00:16 修改: 2026-09-03 18:00
qs CVE-2026-82562 中危 6.15.3 6.16.0 qs: qs: Denial of Service via array limit bypass in query string parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82562

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-08-30 01:20 修改: 2026-09-03 18:00
ip-address CVE-2026-54272 中危 10.2.0 10.2.1 ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54272

镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668

发布日期: 2026-07-27 18:16 修改: 2026-07-27 18:16
undici CVE-2026-15157 中危 6.27.0 6.28.0, 7.29.0, 8.9.0 undici: undici: HTTP header injection via unvalidated blob-like body type property

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157

镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668

发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
undici CVE-2026-16728 中危 6.27.0 6.28.0, 7.29.0, 8.9.0 undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728

镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668

发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
undici CVE-2026-16729 中危 6.27.0 6.28.0, 7.29.0, 8.9.0 undici: Undici: Cookie attribute injection allows bypassing security protections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729

镜像层: sha256:f467b00ca3efcb5b6a186b885b2f953ebcaafe718037830678307fd49e9ea668

发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18
joi CVE-2026-84367 低危 17.13.4 17.13.5, 18.2.4 joi: object().rename() with a template target can set the validated object's prototype

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84367

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-09-01 21:18 修改: 2026-09-03 16:18
joi CVE-2026-84368 低危 17.13.4 17.13.6, 18.2.5 joi: @hapi/joi: joi: Prototype pollution via untrusted input in schema configuration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84368

镜像层: sha256:010bd1d666b1fd0f7180a26dad6ad630359f82d422f2416fc5cd9415e5dd9652

发布日期: 2026-09-01 21:18 修改: 2026-09-02 13:18
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×