ghcr.io/tektoncd/pipeline/controller-10a3e32792f33651396d02b6855a6e36:v1.14.1 linux/amd64

ghcr.io/tektoncd/pipeline/controller-10a3e32792f33651396d02b6855a6e36:v1.14.1 - Trivy安全扫描结果扫描时间: 2026-07-28 17:40

全部漏洞信息

低危漏洞:0

中危漏洞:2

高危漏洞:2

严重漏洞:0

系统OS: alpine 3.21 扫描引擎: Trivy 扫描时间: 2026-07-28 17:40

ghcr.io/tektoncd/pipeline/controller-10a3e32792f33651396d02b6855a6e36:v1.14.1 (alpine 3.21) (alpine)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

ko-app/controller (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.81.1	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:8a383d987be481ccd04fd4ac0281082a109262995d91792a647806a5287b9c81 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
stdlib	CVE-2026-39822	高危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	os: golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:8a383d987be481ccd04fd4ac0281082a109262995d91792a647806a5287b9c81 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
github.com/google/cel-go	GHSA-gcjh-h69q-9w9g	中危	v0.28.1	0.29.0	cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag 漏洞详情: https://github.com/advisories/GHSA-gcjh-h69q-9w9g 镜像层: sha256:8a383d987be481ccd04fd4ac0281082a109262995d91792a647806a5287b9c81 发布日期: 2026-07-24 16:48 修改: 2026-07-24 16:48
stdlib	CVE-2026-42505	中危	v1.26.4	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:8a383d987be481ccd04fd4ac0281082a109262995d91792a647806a5287b9c81 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
golang.org/x/text	CVE-2026-56852	未知	v0.38.0	0.39.0	A norm.Iter can enter an infinite loop when handling input containing ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:8a383d987be481ccd04fd4ac0281082a109262995d91792a647806a5287b9c81 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
golang.org/x/crypto	GO-2026-5932	未知	v0.53.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:8a383d987be481ccd04fd4ac0281082a109262995d91792a647806a5287b9c81 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00