ghcr.io/hascheksolutions/pictshare:latest linux/amd64

ghcr.io/hascheksolutions/pictshare:latest - Trivy安全扫描结果扫描时间: 2026-09-11 14:09

全部漏洞信息

低危漏洞:0

中危漏洞:5

高危漏洞:5

严重漏洞:2

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-09-11 14:09

ghcr.io/hascheksolutions/pictshare:latest (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
curl	CVE-2026-13608	未知	8.21.0-r0	8.22.0-r0	A flaw in the libcurl SASL negotiation for LDAP authentication allows ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 16:18
curl	CVE-2026-18924	未知	8.21.0-r0	8.22.0-r0	A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 16:18
curl	CVE-2026-19931	未知	8.21.0-r0	8.22.0-r0	A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 16:18
curl	CVE-2026-80229	未知	8.21.0-r0	8.22.0-r0	When performing transfers via libcurl\u2019s multi interface, pooled T ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 16:18
curl	CVE-2026-80230	未知	8.21.0-r0	8.22.0-r0	When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 19:19
curl	CVE-2026-80231	未知	8.21.0-r0	8.22.0-r0	A flaw in libcurl makes it wrongly reuse an existing HTTPS connec ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80231 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 19:19
curl	CVE-2026-80255	未知	8.21.0-r0	8.22.0-r0	A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 19:19
curl	CVE-2026-80256	未知	8.21.0-r0	8.22.0-r0	漏洞详情: 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl	CVE-2026-82208	未知	8.21.0-r0	8.22.0-r0	With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_S ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82208 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 19:20
curl	CVE-2026-82209	未知	8.21.0-r0	8.22.0-r0	When libpsl support is enabled, libcurl fails to enforce the Public Su ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 19:20
libcurl	CVE-2026-13608	未知	8.21.0-r0	8.22.0-r0	A flaw in the libcurl SASL negotiation for LDAP authentication allows ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 16:18
libcurl	CVE-2026-18924	未知	8.21.0-r0	8.22.0-r0	A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 16:18
libcurl	CVE-2026-19931	未知	8.21.0-r0	8.22.0-r0	A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 16:18
libcurl	CVE-2026-80229	未知	8.21.0-r0	8.22.0-r0	When performing transfers via libcurl\u2019s multi interface, pooled T ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 16:18
libcurl	CVE-2026-80230	未知	8.21.0-r0	8.22.0-r0	When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 19:19
libcurl	CVE-2026-80231	未知	8.21.0-r0	8.22.0-r0	A flaw in libcurl makes it wrongly reuse an existing HTTPS connec ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80231 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 19:19
libcurl	CVE-2026-80255	未知	8.21.0-r0	8.22.0-r0	A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 19:19
libcurl	CVE-2026-80256	未知	8.21.0-r0	8.22.0-r0	漏洞详情: 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl	CVE-2026-82208	未知	8.21.0-r0	8.22.0-r0	With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_S ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82208 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 19:20
libcurl	CVE-2026-82209	未知	8.21.0-r0	8.22.0-r0	When libpsl support is enabled, libcurl fails to enforce the Public Su ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209 镜像层: sha256:6cbcc217b9bb8fd42ed56b23dfe3cc15840ff7338d9b462564a815ad5d07404d 发布日期: 2026-09-06 18:17 修改: 2026-09-08 19:20

app/public/src/lib/vendor/composer/installed.json (composer-vendor)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

usr/local/bin/frankenphp (gobinary)

低危漏洞:0

中危漏洞:5

高危漏洞:5

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/getkin/kin-openapi	GHSA-r277-6w6q-xmqw	严重	v0.140.0	0.144.0	kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default 漏洞详情: https://github.com/advisories/GHSA-r277-6w6q-xmqw 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 2026-07-24 16:52 修改: 2026-07-24 16:52
golang.org/x/crypto	CVE-2026-56854	严重	v0.54.0	0.55.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
github.com/getkin/kin-openapi	CVE-2026-77354	高危	v0.140.0	0.142.0	github.com/getkin/kin-openapi: kin-openapi: Denial of Service via uncontrolled resource consumption in deepObject query parameter decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77354 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 2026-08-21 21:17 修改: 2026-09-09 21:06
github.com/getkin/kin-openapi	CVE-2026-76905	高危	v0.140.0	0.141.0	github.com/getkin/kin-openapi: kin-openapi: Denial of Service via malformed multipart/form-data body 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76905 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 2026-08-21 21:17 修改: 2026-09-09 21:06
google.golang.org/grpc	CVE-2026-84304	高危	v1.81.1	1.83.1	gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc	CVE-2026-84445	高危	v1.81.1	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.81.1	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
golang.org/x/crypto	CVE-2026-78662	中危	v0.54.0	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
github.com/google/cel-go	GHSA-gcjh-h69q-9w9g	中危	v0.28.1	0.29.0	cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag 漏洞详情: https://github.com/advisories/GHSA-gcjh-h69q-9w9g 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 2026-07-24 16:48 修改: 2026-07-24 16:48
github.com/getkin/kin-openapi	CVE-2026-73502	中危	v0.140.0	0.144.0	github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unauthenticated nil-pointer dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73502 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 2026-08-18 18:19 修改: 2026-08-18 19:17
golang.org/x/crypto	CVE-2026-56855	中危	v0.54.0	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
google.golang.org/grpc	CVE-2026-84303	中危	v1.81.1	1.83.1	gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:841193aef2247429c79ff0d1adaad1a32be1ef01a735bd0878cc94cdec914975 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00