ghcr.io/red5d/docker-autocompose:latest linux/arm64

ghcr.io/red5d/docker-autocompose:latest - Trivy安全扫描结果扫描时间: 2026-07-27 09:49 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:1

中危漏洞:10

高危漏洞:4

严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-07-27 09:49

ghcr.io/red5d/docker-autocompose:latest (alpine 3.24.1) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Python (python-pkg)

低危漏洞:1

中危漏洞:10

高危漏洞:4

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
urllib3	CVE-2025-66418	高危	2.2.3	2.6.0	urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66418 镜像层: sha256:64641902a11fe0b6b20e6e8b3335da689a7a1ad6b0e1a90346364c667c5e017c 发布日期: 2025-12-05 16:15 修改: 2026-06-17 09:56
urllib3	CVE-2025-66471	高危	2.2.3	2.6.0	urllib3: urllib3 Streaming API improperly handles highly compressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66471 镜像层: sha256:64641902a11fe0b6b20e6e8b3335da689a7a1ad6b0e1a90346364c667c5e017c 发布日期: 2025-12-05 17:16 修改: 2026-06-17 09:56
urllib3	CVE-2026-21441	高危	2.2.3	2.6.3	urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21441 镜像层: sha256:64641902a11fe0b6b20e6e8b3335da689a7a1ad6b0e1a90346364c667c5e017c 发布日期: 2026-01-07 22:15 修改: 2026-07-24 13:17
urllib3	CVE-2026-44431	高危	2.2.3	2.7.0	urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44431 镜像层: sha256:64641902a11fe0b6b20e6e8b3335da689a7a1ad6b0e1a90346364c667c5e017c 发布日期: 2026-05-13 16:16 修改: 2026-06-26 12:16
pip	CVE-2026-8643	中危	26.1.1	26.1.2	python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643 镜像层: sha256:64641902a11fe0b6b20e6e8b3335da689a7a1ad6b0e1a90346364c667c5e017c 发布日期: 2026-06-01 17:17 修改: 2026-07-22 12:18
pip	CVE-2026-8643	中危	26.1.1	26.1.2	python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643 镜像层: sha256:64641902a11fe0b6b20e6e8b3335da689a7a1ad6b0e1a90346364c667c5e017c 发布日期: 2026-06-01 17:17 修改: 2026-07-22 12:18
requests	CVE-2024-47081	中危	2.32.3	2.32.4	requests: Requests vulnerable to .netrc credentials leak via malicious URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47081 镜像层: sha256:64641902a11fe0b6b20e6e8b3335da689a7a1ad6b0e1a90346364c667c5e017c 发布日期: 2025-06-09 18:15 修改: 2026-06-17 07:56
requests	CVE-2026-25645	中危	2.32.3	2.33.0	requests: Requests: Security bypass due to predictable temporary file creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645 镜像层: sha256:64641902a11fe0b6b20e6e8b3335da689a7a1ad6b0e1a90346364c667c5e017c 发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25
pip	CVE-2025-8869	中危	25.0.1	25.3	pip: pip missing checks on symbolic link extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869 镜像层: sha256:2e72e5b4c789876e0f5545e4ce390a258517950cbee95066933aba9d17f4725b 发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
pip	CVE-2026-3219	中危	25.0.1	26.1	pip: pip: Incorrect file installation due to improper archive handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219 镜像层: sha256:2e72e5b4c789876e0f5545e4ce390a258517950cbee95066933aba9d17f4725b 发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
pip	CVE-2026-6357	中危	25.0.1	26.1	pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357 镜像层: sha256:2e72e5b4c789876e0f5545e4ce390a258517950cbee95066933aba9d17f4725b 发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
pip	CVE-2026-8643	中危	25.0.1	26.1.2	python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643 镜像层: sha256:2e72e5b4c789876e0f5545e4ce390a258517950cbee95066933aba9d17f4725b 发布日期: 2026-06-01 17:17 修改: 2026-07-22 12:18
urllib3	CVE-2025-50181	中危	2.2.3	2.5.0	urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50181 镜像层: sha256:64641902a11fe0b6b20e6e8b3335da689a7a1ad6b0e1a90346364c667c5e017c 发布日期: 2025-06-19 01:15 修改: 2026-06-17 09:34
urllib3	CVE-2025-50182	中危	2.2.3	2.5.0	urllib3: urllib3 does not control redirects in browsers and Node.js 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50182 镜像层: sha256:64641902a11fe0b6b20e6e8b3335da689a7a1ad6b0e1a90346364c667c5e017c 发布日期: 2025-06-19 02:15 修改: 2026-06-17 09:34
pip	CVE-2026-1703	低危	25.0.1	26.0	pip: pip: Information disclosure via path traversal when installing crafted wheel archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703 镜像层: sha256:2e72e5b4c789876e0f5545e4ce390a258517950cbee95066933aba9d17f4725b 发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16