ghcr.io/linuxserver/code-server:4.133.0 linux/amd64

ghcr.io/linuxserver/code-server:4.133.0 - Trivy安全扫描结果 扫描时间: 2026-08-21 09:38
全部漏洞信息
低危漏洞:12 中危漏洞:33 高危漏洞:1 严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-08-21 09:38

ghcr.io/linuxserver/code-server:4.133.0 (ubuntu 24.04) (ubuntu)
低危漏洞:11 中危漏洞:32 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-27456 中危 1:2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
curl CVE-2026-11856 中危 8.5.0-2ubuntu10.11 8.5.0-2ubuntu10.12 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
git CVE-2024-52005 中危 1:2.43.0-1ubuntu7.3 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
git-man CVE-2024-52005 中危 1:2.43.0-1ubuntu7.3 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
jq CVE-2026-41256 中危 1.7.1-3ubuntu0.24.04.2 jq: embedded NUL truncates top-level jq programs loaded with -f

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
jq CVE-2026-41257 中危 1.7.1-3ubuntu0.24.04.2 jq: signed-int overflow in stack_reallocate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
jq CVE-2026-43895 中危 1.7.1-3ubuntu0.24.04.2 jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq CVE-2026-43896 中危 1.7.1-3ubuntu0.24.04.2 jq: stack overflow in recursive object merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq CVE-2026-44777 中危 1.7.1-3ubuntu0.24.04.2 jq: stack overflow in module loading on mutual include

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
libblkid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libcurl3t64-gnutls CVE-2026-11856 中危 8.5.0-2ubuntu10.11 8.5.0-2ubuntu10.12 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl4t64 CVE-2026-11856 中危 8.5.0-2ubuntu10.11 8.5.0-2ubuntu10.12 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libjq1 CVE-2026-41256 中危 1.7.1-3ubuntu0.24.04.2 jq: embedded NUL truncates top-level jq programs loaded with -f

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
libjq1 CVE-2026-41257 中危 1.7.1-3ubuntu0.24.04.2 jq: signed-int overflow in stack_reallocate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
libjq1 CVE-2026-43895 中危 1.7.1-3ubuntu0.24.04.2 jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
libjq1 CVE-2026-43896 中危 1.7.1-3ubuntu0.24.04.2 jq: stack overflow in recursive object merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
libjq1 CVE-2026-44777 中危 1.7.1-3ubuntu0.24.04.2 jq: stack overflow in module loading on mutual include

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
libmount1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libp11-kit0 CVE-2026-13757 中危 0.25.3-4ubuntu2.1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-06-29 19:16 修改: 2026-08-13 21:17
libsmartcols1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsystemd0 CVE-2026-15059 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libsystemd0 CVE-2026-16742 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libudev1 CVE-2026-15059 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libudev1 CVE-2026-16742 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libuuid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
nano CVE-2026-6390 中危 7.2-2ubuntu0.2 nano: GNU nano: Arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6390

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2026-07-23 05:16 修改: 2026-07-23 15:33
openssh-client CVE-2026-55655 中危 1:9.6p1-3ubuntu13.18 openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55655

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2026-06-23 04:17 修改: 2026-08-12 16:17
systemd-standalone-sysusers CVE-2026-15059 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
systemd-standalone-sysusers CVE-2026-16742 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
util-linux CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libgcrypt20 CVE-2024-2236 低危 1.10.3-2ubuntu0.1 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
openssh-client CVE-2026-55654 低危 1:9.6p1-3ubuntu13.18 openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55654

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2026-06-23 04:17 修改: 2026-08-12 16:17
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
patch CVE-2018-6952 低危 2.7.6-7build3 patch: Double free of memory in pch.c:another_hunk() causes a crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6952

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2018-02-13 19:29 修改: 2026-06-17 02:02
patch CVE-2019-20633 低危 2.7.6-7build3 patch: double free in another_hunk function in pch.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20633

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2020-03-25 17:15 修改: 2026-06-17 02:30
patch CVE-2021-45261 低危 2.7.6-7build3 patch: Invalid Pointer via another_hunk function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45261

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2021-12-22 18:15 修改: 2026-06-17 04:13
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.16 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
systemd-standalone-sysusers CVE-2026-40228 低危 255.4-1ubuntu8.16 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:02463e55da70c5d5f87d681dbc8f7aa4c29c0cb0b71761fd0a19132b0e7a2ea2

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.16 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
zlib1g CVE-2026-27171 低危 1:1.3.dfsg-3.1ubuntu2.1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:72813780dd6c49c1c616ef655c38a5c459bb0d972e740421525a6224935e0cd0

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
Node.js (node-pkg)
低危漏洞:1 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
js-yaml GHSA-5p4m-2wfm-xmqj 高危 4.3.0 4.3.1, 3.15.1 JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27
tar GHSA-r292-9mhp-454m 中危 7.5.20 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
markdown GHSA-wx77-rp39-c6vg 低危 30.0.0 Regular Expression Denial of Service in markdown

漏洞详情: https://github.com/advisories/GHSA-wx77-rp39-c6vg

镜像层: sha256:c79d7d924d0bcbb907b6c4df5fdae8195d2c118c3746a3204f65f575fcd1cb9a

发布日期: 2020-09-04 15:11 修改: 2022-03-24 22:10
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×