ghcr.io/netalertx/netalertx:latest linux/amd64

ghcr.io/netalertx/netalertx:latest - Trivy安全扫描结果扫描时间: 2026-09-18 22:57

全部漏洞信息

低危漏洞:4

中危漏洞:4

高危漏洞:6

严重漏洞:0

系统OS: alpine 3.22.5 扫描引擎: Trivy 扫描时间: 2026-09-18 22:57

ghcr.io/netalertx/netalertx:latest (alpine 3.22.5) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Python (python-pkg)

低危漏洞:4

中危漏洞:4

高危漏洞:6

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
cryptography	CVE-2023-50782	高危	39.0.2	42.0.0	python-cryptography: Bleichenbacher timing oracle attack against RSA decryption - incomplete fix for CVE-2020-25659 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50782 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2024-02-05 21:15 修改: 2026-06-17 06:39
cryptography	CVE-2024-26130	高危	39.0.2	42.0.4	python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26130 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2024-02-21 17:15 修改: 2026-06-17 07:17
cryptography	CVE-2026-26007	高危	39.0.2	46.0.5	cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26007 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2026-02-10 22:17 修改: 2026-09-10 13:17
cryptography	GHSA-537c-gmf6-5ccf	高危	39.0.2	48.0.1	Vulnerable OpenSSL included in cryptography wheels 漏洞详情: https://github.com/advisories/GHSA-537c-gmf6-5ccf 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2026-06-15 20:12 修改: 2026-06-15 20:12
msgpack	GHSA-6v7p-g79w-8964	高危	1.1.2	1.2.1	MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error 漏洞详情: https://github.com/advisories/GHSA-6v7p-g79w-8964 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2026-06-19 21:42 修改: 2026-06-19 21:42
setuptools	CVE-2025-47273	高危	70.3.0	78.1.1	setuptools: Path Traversal Vulnerability in setuptools PackageIndex 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27
cryptography	GHSA-h4gh-qq45-vh27	中危	39.0.2	43.0.1	pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels 漏洞详情: https://github.com/advisories/GHSA-h4gh-qq45-vh27 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2024-09-03 21:59 修改: 2024-09-03 21:59
cryptography	CVE-2023-49083	中危	39.0.2	41.0.6	python-cryptography: NULL-dereference when loading PKCS7 certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-49083 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2023-11-29 19:15 修改: 2026-06-17 06:35
cryptography	CVE-2024-0727	中危	39.0.2	42.0.2	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54
setuptools	CVE-2026-59890	中危	70.3.0	83.0.0	setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
cryptography	GHSA-v8gr-m533-ghj9	低危	39.0.2	41.0.4	Vulnerable OpenSSL included in cryptography wheels 漏洞详情: https://github.com/advisories/GHSA-v8gr-m533-ghj9 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2023-09-21 17:07 修改: 2023-09-21 17:07
cryptography	CVE-2026-34073	低危	39.0.2	46.0.6	python-cryptography: Cryptography: Security bypass due to improper DNS name constraint validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34073 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
cryptography	GHSA-5cpq-8wj7-hf2v	低危	39.0.2	41.0.0	Vulnerable OpenSSL included in cryptography wheels 漏洞详情: https://github.com/advisories/GHSA-5cpq-8wj7-hf2v 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2023-06-02 17:13 修改: 2023-06-02 17:13
cryptography	GHSA-jm77-qphf-c4w8	低危	39.0.2	41.0.3	pyca/cryptography's wheels include vulnerable OpenSSL 漏洞详情: https://github.com/advisories/GHSA-jm77-qphf-c4w8 镜像层: sha256:f35ef25e8145c6d8b083965be4e9bd904f82c97f26514accb4ee634636bf33b9 发布日期: 2023-08-01 22:34 修改: 2023-08-01 22:34