ghcr.io/kite-org/kite:v0.14.0 linux/amd64

ghcr.io/kite-org/kite:v0.14.0 - Trivy安全扫描结果扫描时间: 2026-07-22 18:28

全部漏洞信息

低危漏洞:1

中危漏洞:1

高危漏洞:1

严重漏洞:0

系统OS: debian 13.6 扫描引擎: Trivy 扫描时间: 2026-07-22 18:28

ghcr.io/kite-org/kite:v0.14.0 (debian 13.6) (debian)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

app/kite (gobinary)

低危漏洞:1

中危漏洞:1

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
oras.land/oras-go/v2	CVE-2026-50163	高危	v2.6.1		oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50163 镜像层: sha256:6cd0c15b105f3caf209fd3a92e73aeba70f2a61b3a3e6aa1a26cfb3eb854322d 发布日期: 2026-07-17 20:17 修改: 2026-07-20 16:17
github.com/quic-go/quic-go	CVE-2026-40898	中危	v0.59.0	0.59.1	github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40898 镜像层: sha256:6cd0c15b105f3caf209fd3a92e73aeba70f2a61b3a3e6aa1a26cfb3eb854322d 发布日期: 2026-06-04 19:16 修改: 2026-06-17 10:45
filippo.io/edwards25519	CVE-2026-26958	低危	v1.1.0	1.1.1	filippo.io/edwards25519: filippo.io/edwards25519: Cryptographic integrity bypass due to incorrect MultiScalarMult results 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26958 镜像层: sha256:6cd0c15b105f3caf209fd3a92e73aeba70f2a61b3a3e6aa1a26cfb3eb854322d 发布日期: 2026-02-19 23:16 修改: 2026-06-17 10:26
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:6cd0c15b105f3caf209fd3a92e73aeba70f2a61b3a3e6aa1a26cfb3eb854322d 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00