ghcr.io/hoon-ch/harbor-core-arm64:latest linux/arm64

ghcr.io/hoon-ch/harbor-core-arm64:latest - Trivy安全扫描结果 扫描时间: 2026-08-02 10:51 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:0 中危漏洞:34 高危漏洞:19 严重漏洞:3

系统OS: photon 5.0 扫描引擎: Trivy 扫描时间: 2026-08-02 10:51

ghcr.io/hoon-ch/harbor-core-arm64:latest (photon 5.0) (photon)
低危漏洞:0 中危漏洞:28 高危漏洞:14 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libssh2 BDSA-2026-9020 严重 1.11.0-4.ph5 1.11.1-3.ph5

漏洞详情:

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssh2 CVE-2026-7598 严重 1.11.0-4.ph5 1.11.1-3.ph5 libssh2: integer overflow via large username or password arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7598

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-01 22:16 修改: 2026-07-15 01:17
nss-libs CVE-2026-2781 严重 3.78-11.ph5 3.78-12.ph5 firefox: thunderbird: Integer overflow in the Libraries component in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2781

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-02-24 14:16 修改: 2026-06-17 10:31
curl-libs CVE-2026-3805 高危 8.18.0-1.ph5 8.19.0-1.ph5 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl-libs CVE-2026-5773 高危 8.18.0-1.ph5 8.19.0-2.ph5 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
curl-libs CVE-2026-6276 高危 8.18.0-1.ph5 8.19.0-2.ph5 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
expat-libs CVE-2026-41080 高危 2.7.4-1.ph5 2.8.0-1.ph5 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
expat-libs CVE-2026-45186 高危 2.7.4-1.ph5 2.8.1-1.ph5 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-10 07:16 修改: 2026-07-24 20:10
curl CVE-2026-3805 高危 8.18.0-1.ph5 8.19.0-1.ph5 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl CVE-2026-5773 高危 8.18.0-1.ph5 8.19.0-2.ph5 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libssh2 CVE-2026-55199 高危 1.11.0-4.ph5 1.11.1-5.ph5 libssh2: libssh2: Denial of Service via crafted SSH_MSG_EXT_INFO message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55199

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-06-17 20:17 修改: 2026-07-14 22:17
libssh2 CVE-2026-55200 高危 1.11.0-4.ph5 1.11.1-4.ph5 libssh2: libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55200

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-06-17 20:17 修改: 2026-07-14 22:17
ncurses-libs CVE-2025-69720 高危 6.5-1.ph5 6.5-2.ph5 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
curl CVE-2026-6276 高危 8.18.0-1.ph5 8.19.0-2.ph5 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
sqlite-libs CVE-2025-70873 高危 3.43.2-5.ph5 3.43.2-6.ph5 sqlite: SQLite: Information Disclosure via Crafted ZIP File

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-12 19:16 修改: 2026-06-17 10:03
sqlite-libs CVE-2026-11822 高危 3.43.2-5.ph5 3.43.2-7.ph5 SQLite before 3.53.2 contains memory corruption vulnerabilities in the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
sqlite-libs CVE-2026-11824 高危 3.43.2-5.ph5 3.43.2-7.ph5 SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
curl-libs CVE-2026-1965 中危 8.18.0-1.ph5 8.19.0-1.ph5 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
curl-libs CVE-2026-3783 中危 8.18.0-1.ph5 8.19.0-1.ph5 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl-libs CVE-2026-3784 中危 8.18.0-1.ph5 8.19.0-1.ph5 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl-libs CVE-2026-4873 中危 8.18.0-1.ph5 8.19.0-2.ph5 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
curl-libs CVE-2026-5545 中危 8.18.0-1.ph5 8.19.0-2.ph5 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
curl-libs CVE-2026-6253 中危 8.18.0-1.ph5 8.19.0-2.ph5 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
curl-libs CVE-2026-6429 中危 8.18.0-1.ph5 8.19.0-2.ph5 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
curl-libs CVE-2026-7009 中危 8.18.0-1.ph5 8.20.0-1.ph5 curl: Curl: Certificate validation bypass due to OCSP stapling flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7009

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
curl-libs CVE-2026-7168 中危 8.18.0-1.ph5 8.20.0-1.ph5 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
curl CVE-2026-3784 中危 8.18.0-1.ph5 8.19.0-1.ph5 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl CVE-2026-4873 中危 8.18.0-1.ph5 8.19.0-2.ph5 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
expat-libs CVE-2026-32776 中危 2.7.4-1.ph5 2.7.5-1.ph5 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
expat-libs CVE-2026-32777 中危 2.7.4-1.ph5 2.7.5-1.ph5 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
expat-libs CVE-2026-32778 中危 2.7.4-1.ph5 2.7.5-1.ph5 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
krb5 CVE-2026-11850 中危 1.20.2-10.ph5 1.20.2-14.ph5 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libsolv CVE-2026-9149 中危 0.7.22-7.ph5 0.7.39-1.ph5 libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9149

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-21 00:16 修改: 2026-07-31 18:17
libsolv CVE-2026-9150 中危 0.7.22-7.ph5 0.7.39-1.ph5 libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9150

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-20 23:16 修改: 2026-07-31 18:17
curl CVE-2026-5545 中危 8.18.0-1.ph5 8.19.0-2.ph5 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
curl CVE-2026-6253 中危 8.18.0-1.ph5 8.19.0-2.ph5 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
curl CVE-2026-6429 中危 8.18.0-1.ph5 8.19.0-2.ph5 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
curl CVE-2026-7009 中危 8.18.0-1.ph5 8.20.0-1.ph5 curl: Curl: Certificate validation bypass due to OCSP stapling flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7009

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
curl CVE-2026-7168 中危 8.18.0-1.ph5 8.20.0-1.ph5 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
curl BDSA-2026-9096 中危 8.18.0-1.ph5 8.20.0-1.ph5

漏洞详情:

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl CVE-2026-1965 中危 8.18.0-1.ph5 8.19.0-1.ph5 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
curl CVE-2026-3783 中危 8.18.0-1.ph5 8.19.0-1.ph5 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl-libs BDSA-2026-9096 中危 8.18.0-1.ph5 8.20.0-1.ph5

漏洞详情:

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
xz-libs CVE-2026-34743 中危 5.4.0-5.ph5 5.4.0-6.ph5 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-04-02 19:21 修改: 2026-07-24 21:10
zlib CVE-2026-27171 中危 1.2.13-5.ph5 1.3.2-1.ph5 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:e33f7e82323cc64fef367bb406976b07c4fd7a8c7181d30c16e7ad0a7d6c88f3

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
harbor/harbor_core (gobinary)
低危漏洞:0 中危漏洞:6 高危漏洞:5 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/distribution/distribution CVE-2026-33540 高危 v2.8.2+incompatible github.com/distribution/distribution: Distribution: Information disclosure via improper validation of authentication realm URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33540

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 2026-04-06 15:17 修改: 2026-06-17 10:37
github.com/distribution/distribution CVE-2026-35172 高危 v2.8.2+incompatible github.com/distribution/distribution: Distribution: Information disclosure via stale references after content deletion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35172

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 2026-04-06 20:16 修改: 2026-07-24 21:10
golang.org/x/text CVE-2026-56852 高危 v0.37.0 0.39.0 A norm.Iter can enter an infinite loop when handling input containing ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.81.1 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
stdlib CVE-2026-39822 高危 v1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2 os: golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
github.com/gorilla/csrf CVE-2025-47909 中危 v1.7.2 Hosts listed in TrustedOrigins implicitly allow requests from the corr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47909

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 2025-08-29 16:15 修改: 2026-06-17 09:28
github.com/Azure/go-ntlmssp CVE-2026-32952 中危 v0.1.0 0.1.1 go-ntlmssp: go-ntlmssp: Denial of Service via malicious NTLM challenge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32952

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:36
github.com/distribution/distribution CVE-2026-41888 中危 v2.8.2+incompatible github.com/distribution/distribution: Distribution: Security bypass allows unauthorized tag deletion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41888

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 2026-05-14 18:16 修改: 2026-06-17 10:47
helm.sh/helm/v3 CVE-2026-35206 中危 v3.18.5 3.20.2 github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35206

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 2026-04-09 21:16 修改: 2026-06-17 10:40
github.com/gorilla/csrf CVE-2025-24358 中危 v1.7.2 1.7.3 gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention mid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24358

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 2025-04-15 19:16 修改: 2026-06-17 08:58
stdlib CVE-2026-42505 中危 v1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
golang.org/x/net CVE-2026-46600 未知 v0.55.0 0.56.0 Parsing an invalid SVCB or HTTPS RR can panic when the size of a param ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
golang.org/x/crypto GO-2026-5932 未知 v0.52.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:abc1b0e43bfee29d802d9ff8b199b7530433137d40e0f62cea685324281f4852

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×