ghcr.io/metacubex/metacubexd-server:latest linux/amd64

ghcr.io/metacubex/metacubexd-server:latest - Trivy安全扫描结果 扫描时间: 2026-06-29 18:26
全部漏洞信息
低危漏洞:0 中危漏洞:15 高危漏洞:20 严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-06-29 18:26

ghcr.io/metacubex/metacubexd-server:latest (alpine 3.24.1) (alpine)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Node.js (node-pkg)
低危漏洞:0 中危漏洞:5 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
picomatch CVE-2026-33671 高危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:94ba1b56d694c6431a993fcd1fb36ec47c38a313e32a3e3ca9eda71bc287e873

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
brace-expansion CVE-2026-33750 中危 2.0.2 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:94ba1b56d694c6431a993fcd1fb36ec47c38a313e32a3e3ca9eda71bc287e873

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
ip-address CVE-2026-42338 中危 10.1.0 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:94ba1b56d694c6431a993fcd1fb36ec47c38a313e32a3e3ca9eda71bc287e873

发布日期: 2026-05-12 20:16 修改: 2026-06-17 10:47
@sigstore/core CVE-2026-48758 中危 2.0.0 3.2.1 @sigstore/core has DSSE payloadType type-binding failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:94ba1b56d694c6431a993fcd1fb36ec47c38a313e32a3e3ca9eda71bc287e873

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
picomatch CVE-2026-33672 中危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:94ba1b56d694c6431a993fcd1fb36ec47c38a313e32a3e3ca9eda71bc287e873

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
tar CVE-2026-53655 中危 7.5.11 7.5.16 node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (nod ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:94ba1b56d694c6431a993fcd1fb36ec47c38a313e32a3e3ca9eda71bc287e873

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
usr/local/bin/mihomo (gobinary)
低危漏洞:0 中危漏洞:10 高危漏洞:19 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2025-22869 高危 v0.33.0 0.35.0 golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22869

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2025-02-26 08:14 修改: 2026-06-17 08:50
golang.org/x/crypto CVE-2025-47913 高危 v0.33.0 0.43.0 golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47913

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2025-11-13 22:15 修改: 2026-06-17 09:28
golang.org/x/crypto CVE-2026-39827 高危 v0.33.0 0.52.0 An authenticated SSH client that repeatedly opened channels which were ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39828 高危 v0.33.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39829 高危 v0.33.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39830 高危 v0.33.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39832 高危 v0.33.0 0.52.0 golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39835 高危 v0.33.0 0.52.0 SSH servers which use CertChecker as a public key callback without set ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-42508 高危 v0.33.0 0.52.0 golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:47
golang.org/x/crypto CVE-2026-46595 高危 v0.33.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
golang.org/x/crypto CVE-2026-46597 高危 v0.33.0 0.52.0 An incorrectly placed cast from bytes to int allowed for server-side p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
golang.org/x/net CVE-2026-25680 高危 v0.35.0 0.55.0 Parsing arbitrary HTML can consume excessive CPU time, possibly leadin ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net CVE-2026-25681 高危 v0.35.0 0.55.0 Parsing arbitrary HTML which is then rendered using Render can result ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net CVE-2026-27136 高危 v0.35.0 0.55.0 Parsing arbitrary HTML which is then rendered using Render can result ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:26
golang.org/x/net CVE-2026-33814 高危 v0.35.0 0.53.0 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:38
golang.org/x/net CVE-2026-39821 高危 v0.35.0 0.55.0 golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:42
golang.org/x/net CVE-2026-42502 高危 v0.35.0 0.55.0 Parsing arbitrary HTML which is then rendered using Render can result ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
golang.org/x/net CVE-2026-42506 高危 v0.35.0 0.55.0 Parsing arbitrary HTML which is then rendered using Render can result ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
golang.org/x/oauth2 CVE-2025-22868 高危 v0.24.0 0.27.0 golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22868

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2025-02-26 08:14 修改: 2026-06-17 08:50
golang.org/x/crypto CVE-2026-39831 中危 v0.33.0 0.52.0 The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nis ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39833 中危 v0.33.0 0.52.0 The in-memory keyring returned by NewKeyring() silently accepted keys ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39834 中危 v0.33.0 0.52.0 When writing data larger than 4GB in a single Write call on an SSH cha ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-46598 中危 v0.33.0 0.52.0 golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
golang.org/x/crypto CVE-2025-47914 中危 v0.33.0 0.45.0 golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47914

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2025-11-19 21:15 修改: 2026-06-17 09:28
golang.org/x/net CVE-2025-22870 中危 v0.35.0 0.36.0 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50
golang.org/x/net CVE-2025-22872 中危 v0.35.0 0.38.0 golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22872

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2025-04-16 18:16 修改: 2026-06-17 08:50
golang.org/x/net CVE-2025-47911 中危 v0.35.0 0.45.0 golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47911

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:28
golang.org/x/net CVE-2025-58190 中危 v0.35.0 0.45.0 golang.org/x/net/html: Infinite parsing loop in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58190

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:44
golang.org/x/crypto CVE-2025-58181 中危 v0.33.0 0.45.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58181

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2025-11-19 21:15 修改: 2026-06-17 09:44
golang.org/x/sys CVE-2026-39824 未知 v0.30.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:325fcc2c4c3e3ab02b4ce3c007fa898323308e2dcfe44bad9e34a6d47d1ad8c7

发布日期: 2026-05-22 20:16 修改: 2026-06-17 10:42
/app/ui-dist/_nuxt/fZK04_vl.js ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×