ghcr.io/usekaneo/kaneo:2.22.0 linux/arm64

ghcr.io/usekaneo/kaneo:2.22.0 - Trivy安全扫描结果扫描时间: 2026-08-31 16:06 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:14

中危漏洞:14

高危漏洞:9

严重漏洞:1

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-31 16:06

ghcr.io/usekaneo/kaneo:2.22.0 (alpine 3.24.1) (alpine)

低危漏洞:12

中危漏洞:6

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libcrypto3	CVE-2026-14456	高危	3.5.7-r0	3.5.8-r0	openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-14456	高危	3.5.7-r0	3.5.8-r0	openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-63072	中危	3.5.7-r0	3.5.8-r0	openssl: heap buffer overflow in CMS key unwrapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-63076	中危	3.5.7-r0	3.5.8-r0	openssl: invalid pointer dereference in CMP server via crafted protectionAlg 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-18798	中危	3.5.7-r0	3.5.8-r0	openssl: QUIC server may trigger double free when processing INITIAL packet 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3	CVE-2026-18798	中危	3.5.7-r0	3.5.8-r0	openssl: QUIC server may trigger double free when processing INITIAL packet 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3	CVE-2026-63072	中危	3.5.7-r0	3.5.8-r0	openssl: heap buffer overflow in CMS key unwrapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-63076	中危	3.5.7-r0	3.5.8-r0	openssl: invalid pointer dereference in CMP server via crafted protectionAlg 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-63075	低危	3.5.7-r0	3.5.8-r0	openssl: QUIC ACK-only packet retention can cause memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-75803	低危	3.5.7-r0	3.5.8-r0	Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-14457	低危	3.5.7-r0	3.5.8-r0	openssl: RPK server signature algorithm selection can dereference a missing certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-54874	低危	3.5.7-r0	3.5.8-r0	openssl: excessive memory use buffering DTLS records for a future epoch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-63073	低危	3.5.7-r0	3.5.8-r0	openssl: untrusted sender DN used as format string in CMP response validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3	CVE-2026-63074	低危	3.5.7-r0	3.5.8-r0	openssl: CMP indefinite cache growth of ExtraCerts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-14457	低危	3.5.7-r0	3.5.8-r0	openssl: RPK server signature algorithm selection can dereference a missing certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3	CVE-2026-54874	低危	3.5.7-r0	3.5.8-r0	openssl: excessive memory use buffering DTLS records for a future epoch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-63073	低危	3.5.7-r0	3.5.8-r0	openssl: untrusted sender DN used as format string in CMP response validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-63074	低危	3.5.7-r0	3.5.8-r0	openssl: CMP indefinite cache growth of ExtraCerts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-63075	低危	3.5.7-r0	3.5.8-r0	openssl: QUIC ACK-only packet retention can cause memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3	CVE-2026-75803	低危	3.5.7-r0	3.5.8-r0	Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803 镜像层: sha256:b2848c02ac6ff53d265469b5b30f649f335e546a83330cd8916d54e65e640409 发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

Node.js (node-pkg)

低危漏洞:2

中危漏洞:8

高危漏洞:7

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
tar	CVE-2026-59873	严重	7.5.16	7.5.19	tar: node-tar: Denial of Service via crafted gzip bomb 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
brace-expansion	CVE-2026-14257	高危	5.0.6	5.0.8, 3.0.3, 2.1.3, 1.1.17	brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion	CVE-2026-69152	高危	5.0.6	1.1.18, 2.1.4, 3.0.6, 5.0.9	brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
ip-address	CVE-2026-69192	高危	10.2.0	10.3.1	ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
brace-expansion	CVE-2026-13149	高危	5.0.6	5.0.7, 1.1.16, 2.1.2	brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
tar	CVE-2026-59874	高危	7.5.16	7.5.18	tar: Node-tar: Denial of Service via malformed tar archive header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar	CVE-2026-73566	高危	7.5.16	7.5.21	tar: node-tar: Denial of Service via crafted long-path tar archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
undici	CVE-2026-12151	高危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-06-17 17:16 修改: 2026-08-28 16:17
ip-address	CVE-2026-54272	中危	10.2.0	10.2.1	ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54272 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-07-27 18:16 修改: 2026-07-27 18:16
tar	CVE-2026-59871	中危	7.5.16	7.5.18	node-tar: node-tar: Denial of Service due to incorrect PAX path handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar	CVE-2026-59875	中危	7.5.16	7.5.17	node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
ip-address	CVE-2026-69198	中危	10.2.0	10.2.2	ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69198 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-08-03 20:17 修改: 2026-08-04 18:16
undici	CVE-2026-15157	中危	6.26.0	6.28.0, 7.29.0, 8.9.0	undici: undici: HTTP header injection via unvalidated blob-like body type property 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
undici	CVE-2026-16728	中危	6.26.0	6.28.0, 7.29.0, 8.9.0	undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
undici	CVE-2026-16729	中危	6.26.0	6.28.0, 7.29.0, 8.9.0	undici: Undici: Cookie attribute injection allows bypassing security protections 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18
undici	CVE-2026-9679	中危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
undici	CVE-2026-11525	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici	CVE-2026-6733	低危	6.26.0	6.27.0, 7.28.0, 8.5.0	undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733 镜像层: sha256:71eea384332de48af7d0e2b5e5de2097a4a6ef3061bceb155ad2047b8787fd4b 发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46