ghcr.io/usestrix/strix-sandbox:1.3.0 - Trivy镜像安全扫描结果

全部漏洞信息

低危漏洞:4

中危漏洞:63

高危漏洞:167

严重漏洞:3

系统OS: debian kali-rolling 扫描引擎: Trivy 扫描时间: 2026-08-29 17:44

ghcr.io/usestrix/strix-sandbox:1.3.0 (debian kali-rolling) (debian)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Node.js (node-pkg)

低危漏洞:0

中危漏洞:1

高危漏洞:4

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
lodash	CVE-2026-4800	高危	4.17.23	4.18.0	lodash: lodash: Arbitrary code execution via untrusted input in template imports 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4800 镜像层: sha256:7739a2cef96ed0007382b45ffdfd8681eb4685e0385ff119ea63ffaf0352f75f 发布日期: 2026-03-31 20:16 修改: 2026-08-27 13:18
minimatch	CVE-2026-26996	高危	3.0.8	10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3	minimatch: minimatch: Denial of Service via specially crafted glob patterns 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996 镜像层: sha256:7739a2cef96ed0007382b45ffdfd8681eb4685e0385ff119ea63ffaf0352f75f 发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch	CVE-2026-27903	高危	3.0.8	10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3	minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903 镜像层: sha256:7739a2cef96ed0007382b45ffdfd8681eb4685e0385ff119ea63ffaf0352f75f 发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch	CVE-2026-27904	高危	3.0.8	10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4	minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904 镜像层: sha256:7739a2cef96ed0007382b45ffdfd8681eb4685e0385ff119ea63ffaf0352f75f 发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
lodash	CVE-2026-2950	中危	4.17.23	4.18.0	lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2950 镜像层: sha256:7739a2cef96ed0007382b45ffdfd8681eb4685e0385ff119ea63ffaf0352f75f 发布日期: 2026-03-31 20:16 修改: 2026-07-24 20:10

Python (python-pkg)

低危漏洞:0

中危漏洞:1

高危漏洞:3

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
mcp	CVE-2026-52869	高危	1.23.3	1.27.2	MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52869 镜像层: sha256:784c50942b566166225b7599d0f68fe36e3aad8b5301af4d3ead8e16bfef8164 发布日期: 2026-07-15 20:17 修改: 2026-07-17 18:06
mcp	CVE-2026-52870	高危	1.23.3	1.27.2	MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52870 镜像层: sha256:784c50942b566166225b7599d0f68fe36e3aad8b5301af4d3ead8e16bfef8164 发布日期: 2026-07-15 20:17 修改: 2026-07-17 18:07
mcp	CVE-2026-59950	高危	1.23.3	1.28.1	MCP Python SDK: WebSocket server transport does not support Host/Origin validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59950 镜像层: sha256:784c50942b566166225b7599d0f68fe36e3aad8b5301af4d3ead8e16bfef8164 发布日期: 2026-07-15 21:16 修改: 2026-07-17 18:07
setuptools	CVE-2026-59890	中危	80.10.2	83.0.0	setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890 镜像层: sha256:8864018b8d8ea9e690181a5a3786289ce77d4bd81ab369980d0824f9edc3f62a 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04

home/pentester/.tree-sitter/parsers/tree-sitter-bash/Cargo.lock (cargo)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

home/pentester/.tree-sitter/parsers/tree-sitter-go/Cargo.lock (cargo)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

home/pentester/.tree-sitter/parsers/tree-sitter-java/Cargo.lock (cargo)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

home/pentester/.tree-sitter/parsers/tree-sitter-javascript/Cargo.lock (cargo)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

home/pentester/.tree-sitter/parsers/tree-sitter-json/Cargo.lock (cargo)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

home/pentester/.tree-sitter/parsers/tree-sitter-python/Cargo.lock (cargo)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

home/pentester/.tree-sitter/parsers/tree-sitter-typescript/Cargo.lock (cargo)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

home/pentester/.tree-sitter/parsers/tree-sitter-yaml/Cargo.lock (cargo)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

home/pentester/go/bin/gospider (gobinary)

低危漏洞:0

中危漏洞:18

高危漏洞:40

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/antchfx/xmlquery	CVE-2020-25614	高危	v1.2.4	1.3.1	xmlquery before 1.3.1 lacks a check for whether a LoadURL response is ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25614 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2020-09-16 15:15 修改: 2026-06-17 03:06
github.com/antchfx/xpath	CVE-2026-32287	高危	v1.1.8	1.3.6	github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32287 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-03-26 20:16 修改: 2026-06-17 10:35
github.com/sirupsen/logrus	CVE-2025-65637	高危	v1.8.1	1.8.3, 1.9.1, 1.9.3	github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65637 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-12-04 19:16 修改: 2026-06-17 09:55
golang.org/x/crypto	CVE-2020-29652	高危	v0.0.0-20200622213623-75b288015ac9	0.0.0-20201216223049-8b5274cf687f	golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29652 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2020-12-17 05:15 修改: 2026-06-17 03:11
golang.org/x/crypto	CVE-2021-43565	高危	v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e	golang.org/x/crypto: empty plaintext packet causes panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43565 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2022-09-06 18:15 修改: 2026-06-17 04:11
golang.org/x/crypto	CVE-2022-27191	高危	v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b	golang: crash in a golang.org/x/crypto/ssh server 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27191 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2022-03-18 07:15 修改: 2026-06-17 04:36
golang.org/x/crypto	CVE-2024-45337	高危	v0.0.0-20200622213623-75b288015ac9	0.31.0	golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45337 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2024-12-12 02:02 修改: 2026-06-17 07:54
golang.org/x/crypto	CVE-2025-22869	高危	v0.0.0-20200622213623-75b288015ac9	0.35.0	golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22869 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-02-26 08:14 修改: 2026-06-17 08:50
golang.org/x/crypto	CVE-2025-47913	高危	v0.0.0-20200622213623-75b288015ac9	0.43.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47913 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-11-13 22:15 修改: 2026-06-17 09:28
golang.org/x/crypto	CVE-2026-39828	高危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39829	高危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39830	高危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39831	高危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39832	高危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39835	高危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-42508	高危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:19
golang.org/x/crypto	CVE-2026-46595	高危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:19
golang.org/x/crypto	CVE-2026-46597	高危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2021-44716	高危	v0.0.0-20210614182718-04defd469f4e	0.0.0-20211209124913-491a49abca63	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2022-01-01 05:15 修改: 2026-06-17 04:12
golang.org/x/net	CVE-2022-27664	高危	v0.0.0-20210614182718-04defd469f4e	0.0.0-20220906165146-f3363e06e74c	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2022-09-06 18:15 修改: 2026-06-17 04:37
golang.org/x/net	CVE-2022-41723	高危	v0.0.0-20210614182718-04defd469f4e	0.7.0	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
golang.org/x/net	CVE-2023-39325	高危	v0.0.0-20210614182718-04defd469f4e	0.17.0	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2023-10-11 22:15 修改: 2026-06-17 06:12
golang.org/x/net	CVE-2023-45288	高危	v0.0.0-20210614182718-04defd469f4e	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2024-04-04 21:15 修改: 2026-06-17 06:28
golang.org/x/net	CVE-2024-45338	高危	v0.0.0-20210614182718-04defd469f4e	0.33.0	golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45338 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2024-12-18 21:15 修改: 2026-06-17 07:54
golang.org/x/net	CVE-2026-25681	高危	v0.0.0-20210614182718-04defd469f4e	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-27136	高危	v0.0.0-20210614182718-04defd469f4e	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-33814	高危	v0.0.0-20210614182718-04defd469f4e	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-07 20:16 修改: 2026-08-27 13:17
golang.org/x/net	CVE-2026-39821	高危	v0.0.0-20210614182718-04defd469f4e	0.55.0	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-08-27 13:17
golang.org/x/net	CVE-2026-46600	高危	v0.0.0-20210614182718-04defd469f4e	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text	CVE-2021-38561	高危	v0.3.6	0.3.7	golang: out-of-bounds read in golang.org/x/text/language leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-38561 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2022-12-26 06:15 修改: 2026-06-17 04:02
golang.org/x/text	CVE-2022-32149	高危	v0.3.6	0.3.8	golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32149 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2022-10-14 15:15 修改: 2026-06-17 04:46
golang.org/x/text	CVE-2026-56852	高危	v0.3.6	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/net	CVE-2025-47911	中危	v0.0.0-20210614182718-04defd469f4e	0.45.0	golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47911 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:28
golang.org/x/net	CVE-2025-58190	中危	v0.0.0-20210614182718-04defd469f4e	0.45.0	golang.org/x/net/html: Infinite parsing loop in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58190 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:44
golang.org/x/net	CVE-2026-25680	中危	v0.0.0-20210614182718-04defd469f4e	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42502	中危	v0.0.0-20210614182718-04defd469f4e	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42506	中危	v0.0.0-20210614182718-04defd469f4e	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/sys	CVE-2022-29526	中危	v0.0.0-20210423082822-04245dca01da	0.0.0-20220412211240-33da011f77ad	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2022-06-23 17:15 修改: 2026-06-17 04:40
golang.org/x/crypto	CVE-2026-39833	中危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-11 22:17
golang.org/x/crypto	CVE-2026-39834	中危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-46598	中危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
google.golang.org/protobuf	CVE-2024-24786	中危	v1.26.0	1.33.0	golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2024-03-05 23:15 修改: 2026-06-17 07:14
golang.org/x/crypto	CVE-2023-48795	中危	v0.0.0-20200622213623-75b288015ac9	0.17.0	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2023-12-18 16:15 修改: 2026-06-17 06:34
golang.org/x/crypto	CVE-2025-47914	中危	v0.0.0-20200622213623-75b288015ac9	0.45.0	golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47914 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-11-19 21:15 修改: 2026-06-17 09:28
golang.org/x/crypto	CVE-2025-58181	中危	v0.0.0-20200622213623-75b288015ac9	0.45.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58181 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-11-19 21:15 修改: 2026-06-17 09:44
golang.org/x/crypto	CVE-2026-39827	中危	v0.0.0-20200622213623-75b288015ac9	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2022-41717	中危	v0.0.0-20210614182718-04defd469f4e	0.4.0	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2022-12-08 20:15 修改: 2026-06-17 05:03
golang.org/x/net	CVE-2023-3978	中危	v0.0.0-20210614182718-04defd469f4e	0.13.0	golang.org/x/net/html: Cross site scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3978 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2023-08-02 20:15 修改: 2026-06-17 06:15
golang.org/x/net	CVE-2025-22870	中危	v0.0.0-20210614182718-04defd469f4e	0.36.0	golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50
golang.org/x/net	CVE-2025-22872	中危	v0.0.0-20210614182718-04defd469f4e	0.38.0	golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22872 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-04-16 18:16 修改: 2026-06-17 08:50
golang.org/x/crypto	CVE-2026-56854	未知	v0.0.0-20200622213623-75b288015ac9	0.55.0	Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/crypto	CVE-2022-30636	未知	v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e	httpTokenCacheKey uses path.Base to extract the expected HTTP-01 token ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30636 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2024-07-02 20:15 修改: 2026-06-17 04:43
golang.org/x/sys	CVE-2026-39824	未知	v0.0.0-20210423082822-04245dca01da	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10

home/pentester/go/bin/govulncheck (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:10

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/mod	CVE-2026-56864	高危	v0.38.0	0.40.0	A malicious GOSUMDB was capable of serving arbitrary module content no ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
golang.org/x/mod	CVE-2026-56865	高危	v0.38.0	0.40.0	golang.org/x/mod/sumdb/tlog: golang.org/x/mod/sumdb/tlog: Supply chain compromise via transparency log tile verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16

home/pentester/go/bin/httpx (gobinary)

低危漏洞:0

中危漏洞:0

高危漏洞:9

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/text	CVE-2026-56852	高危	v0.38.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/crypto	GO-2026-5932	未知	v0.53.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/crypto	CVE-2026-56854	未知	v0.53.0	0.55.0	Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

home/pentester/go/bin/interactsh-client (gobinary)

低危漏洞:0

中危漏洞:7

高危漏洞:23

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/crypto	CVE-2026-39828	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39829	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39830	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39831	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39832	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39835	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-42508	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:19
golang.org/x/crypto	CVE-2026-46595	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:19
golang.org/x/crypto	CVE-2026-46597	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-25681	高危	v0.48.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-27136	高危	v0.48.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-33814	高危	v0.48.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-07 20:16 修改: 2026-08-27 13:17
golang.org/x/net	CVE-2026-39821	高危	v0.48.0	0.55.0	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-08-27 13:17
golang.org/x/net	CVE-2026-46600	高危	v0.48.0	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text	CVE-2026-56852	高危	v0.32.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/crypto	CVE-2026-46598	中危	v0.46.0	0.52.0	golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39827	中危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-25680	中危	v0.48.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42502	中危	v0.48.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42506	中危	v0.48.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39833	中危	v0.46.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-11 22:17
golang.org/x/crypto	CVE-2026-39834	中危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-56854	未知	v0.46.0	0.55.0	Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/crypto	GO-2026-5932	未知	v0.46.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/sys	CVE-2026-39824	未知	v0.39.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10

home/pentester/go/bin/katana (gobinary)

低危漏洞:1

中危漏洞:0

高危漏洞:10

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/jackc/pgx/v5	CVE-2026-33815	严重	v5.7.2	5.9.0	github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33815 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-04-07 16:16 修改: 2026-08-27 13:17
github.com/jackc/pgx/v5	CVE-2026-33816	严重	v5.7.2	5.9.0	github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33816 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-04-07 16:16 修改: 2026-08-26 13:18
golang.org/x/net	CVE-2026-46600	高危	v0.55.0	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text	CVE-2026-56852	高危	v0.37.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
github.com/jackc/pgx/v5	CVE-2026-41889	低危	v5.7.2	5.9.2	github.com/jackc/pgx: golang: pgx: SQL injection via specific SQL query conditions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41889 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-08 17:16 修改: 2026-06-17 10:47
golang.org/x/crypto	CVE-2026-56854	未知	v0.52.0	0.55.0	Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/crypto	GO-2026-5932	未知	v0.52.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

home/pentester/go/bin/vulnx (gobinary)

低危漏洞:2

中危漏洞:16

高危漏洞:25

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/crypto	CVE-2025-22869	高危	v0.31.0	0.35.0	golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22869 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-02-26 08:14 修改: 2026-06-17 08:50
golang.org/x/crypto	CVE-2025-47913	高危	v0.31.0	0.43.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47913 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-11-13 22:15 修改: 2026-06-17 09:28
golang.org/x/crypto	CVE-2026-39828	高危	v0.31.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39829	高危	v0.31.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39830	高危	v0.31.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39831	高危	v0.31.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39832	高危	v0.31.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39835	高危	v0.31.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-42508	高危	v0.31.0	0.52.0	golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:19
golang.org/x/crypto	CVE-2026-46595	高危	v0.31.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:19
golang.org/x/crypto	CVE-2026-46597	高危	v0.31.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-25681	高危	v0.33.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-27136	高危	v0.33.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-33814	高危	v0.33.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-07 20:16 修改: 2026-08-27 13:17
golang.org/x/net	CVE-2026-39821	高危	v0.33.0	0.55.0	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-08-27 13:17
golang.org/x/net	CVE-2026-46600	高危	v0.33.0	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text	CVE-2026-56852	高危	v0.22.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/net	CVE-2025-22870	中危	v0.33.0	0.36.0	golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50
golang.org/x/net	CVE-2025-22872	中危	v0.33.0	0.38.0	golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22872 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-04-16 18:16 修改: 2026-06-17 08:50
golang.org/x/net	CVE-2025-47911	中危	v0.33.0	0.45.0	golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47911 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:28
golang.org/x/net	CVE-2025-58190	中危	v0.33.0	0.45.0	golang.org/x/net/html: Infinite parsing loop in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58190 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:44
golang.org/x/net	CVE-2026-25680	中危	v0.33.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42502	中危	v0.33.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42506	中危	v0.33.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39827	中危	v0.31.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39833	中危	v0.31.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-08-11 22:17
golang.org/x/crypto	CVE-2026-39834	中危	v0.31.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-46598	中危	v0.31.0	0.52.0	golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
github.com/ulikunitz/xz	CVE-2025-58058	中危	v0.5.12	0.5.15	github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58058 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-08-28 22:15 修改: 2026-06-17 09:43
github.com/nwaples/rardecode/v2	CVE-2025-11579	中危	v2.0.0-beta.4.0.20241112120701-034e449c6e78	2.2.0	github.com/nwaples/rardecode: RarDecode Out Of Memory Crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11579 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-10-10 12:15 修改: 2026-06-17 08:30
github.com/refraction-networking/utls	CVE-2026-26994	中危	v1.6.7	1.7.0	uTLS is a fork of crypto/tls, created to customize ClientHello for fin ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26994 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
golang.org/x/crypto	CVE-2025-47914	中危	v0.31.0	0.45.0	golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47914 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-11-19 21:15 修改: 2026-06-17 09:28
golang.org/x/crypto	CVE-2025-58181	中危	v0.31.0	0.45.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58181 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2025-11-19 21:15 修改: 2026-06-17 09:44
github.com/refraction-networking/utls	CVE-2026-27017	低危	v1.6.7	1.8.1	uTLS has a fingerprint vulnerability from GREASE ECH mismatch for Chrome parrots 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27017 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
github.com/cloudflare/circl	CVE-2026-1229	低危	v1.6.1	1.6.3	CIRCL has an incorrect calculation in secp384r1 CombinedMult 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1229 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-02-24 08:16 修改: 2026-06-17 10:15
golang.org/x/crypto	CVE-2026-56854	未知	v0.31.0	0.55.0	Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/crypto	GO-2026-5932	未知	v0.31.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/sys	CVE-2026-39824	未知	v0.33.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba 发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10

usr/local/bin/gitleaks (gobinary)

低危漏洞:1

中危漏洞:19

高危漏洞:31

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2025-68121	严重	v1.24.11	1.24.13, 1.25.7, 1.26.0-rc.3	crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58
golang.org/x/crypto	CVE-2026-39828	高危	v0.35.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39829	高危	v0.35.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39830	高危	v0.35.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39831	高危	v0.35.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39832	高危	v0.35.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-39835	高危	v0.35.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:18
golang.org/x/crypto	CVE-2026-42508	高危	v0.35.0	0.52.0	golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:19
golang.org/x/crypto	CVE-2026-46595	高危	v0.35.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-08-26 13:19
golang.org/x/crypto	CVE-2026-46597	高危	v0.35.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/text	CVE-2026-56852	高危	v0.22.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
golang.org/x/crypto	CVE-2025-47913	高危	v0.35.0	0.43.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47913 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2025-11-13 22:15 修改: 2026-06-17 09:28
stdlib	CVE-2025-61726	高危	v1.24.11	1.24.12, 1.25.6	golang: net/url: Memory exhaustion in query parameter parsing in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-01-28 20:16 修改: 2026-08-27 13:16
stdlib	CVE-2026-25679	高危	v1.24.11	1.25.8, 1.26.1	net/url: Incorrect parsing of IPv6 host literals in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-03-06 22:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-27145	高危	v1.24.11	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-06-02 23:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-32280	高危	v1.24.11	1.25.9, 1.26.2	crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-04-08 02:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-32281	高危	v1.24.11	1.25.9, 1.26.2	crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32283	高危	v1.24.11	1.25.9, 1.26.2	crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-04-08 02:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-33811	高危	v1.24.11	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-07 20:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-33814	高危	v1.24.11	1.25.10, 1.26.3	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-07 20:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-33818	高危	v1.24.11	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39820	高危	v1.24.11	1.25.10, 1.26.3	net/mail: golang: Go net/mail: Denial of Service via crafted email inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-07 20:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-39821	高危	v1.24.11	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 16:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-39822	高危	v1.24.11	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-39836	高危	v1.24.11	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42499	高危	v1.24.11	1.25.10, 1.26.3	net/mail: golang: net/mail: Denial of Service via pathological email address parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-07 20:16 修改: 2026-08-27 13:18
stdlib	CVE-2026-42504	高危	v1.24.11	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-56853	高危	v1.24.11	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.24.11	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.24.11	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.24.11	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.24.11	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/crypto	CVE-2026-39834	中危	v0.35.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-46598	中危	v0.35.0	0.52.0	golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
github.com/nwaples/rardecode/v2	CVE-2025-11579	中危	v2.1.0	2.2.0	github.com/nwaples/rardecode: RarDecode Out Of Memory Crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11579 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2025-10-10 12:15 修改: 2026-06-17 08:30
github.com/ulikunitz/xz	CVE-2025-58058	中危	v0.5.12	0.5.15	github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58058 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2025-08-28 22:15 修改: 2026-06-17 09:43
golang.org/x/crypto	CVE-2025-47914	中危	v0.35.0	0.45.0	golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47914 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2025-11-19 21:15 修改: 2026-06-17 09:28
golang.org/x/crypto	CVE-2025-58181	中危	v0.35.0	0.45.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58181 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2025-11-19 21:15 修改: 2026-06-17 09:44
golang.org/x/crypto	CVE-2026-39827	中危	v0.35.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39833	中危	v0.35.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 04:16 修改: 2026-08-11 22:17
stdlib	CVE-2025-61728	中危	v1.24.11	1.24.12, 1.25.6	golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61730	中危	v1.24.11	1.24.12, 1.25.6	crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib	CVE-2026-27142	中危	v1.24.11	1.25.8, 1.26.1	html/template: URLs in meta content attribute actions are not escaped in html/template 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
stdlib	CVE-2026-32282	中危	v1.24.11	1.25.9, 1.26.2	golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32288	中危	v1.24.11	1.25.9, 1.26.2	archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32289	中危	v1.24.11	1.25.9, 1.26.2	html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-39823	中危	v1.24.11	1.25.10, 1.26.3	html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39825	中危	v1.24.11	1.25.10, 1.26.3	net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39826	中危	v1.24.11	1.25.10, 1.26.3	html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42505	中危	v1.24.11	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.24.11	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-27139	低危	v1.24.11	1.25.8, 1.26.1	os: FileInfo can escape from a Root in golang os module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
golang.org/x/crypto	GO-2026-5932	未知	v0.35.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/sys	CVE-2026-39824	未知	v0.30.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-56854	未知	v0.35.0	0.55.0	Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854 镜像层: sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/local/bin/trivy (gobinary)

低危漏洞:0

中危漏洞:1

高危漏洞:12

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/go-git/go-git/v5	CVE-2026-71556	高危	v5.19.1	5.19.2	github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71556 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-08-07 17:17 修改: 2026-08-07 17:17
golang.org/x/mod	CVE-2026-56864	高危	v0.38.0	0.40.0	A malicious GOSUMDB was capable of serving arbitrary module content no ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
golang.org/x/mod	CVE-2026-56865	高危	v0.38.0	0.40.0	golang.org/x/mod/sumdb/tlog: golang.org/x/mod/sumdb/tlog: Supply chain compromise via transparency log tile verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
oras.land/oras-go/v2	CVE-2026-50163	高危	v2.6.1	2.6.2	oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50163 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:02
stdlib	CVE-2026-33818	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39821	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-05-22 16:16 修改: 2026-08-27 13:17
stdlib	CVE-2026-46600	高危	v1.26.5	1.26.6, 1.27.0-rc.3	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56853	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.26.5	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
github.com/go-git/go-git/v5	CVE-2026-71557	中危	v5.19.1	5.19.2	go-git is an extensible git implementation library written in pure Go. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71557 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 2026-08-07 17:17 修改: 2026-08-07 18:17
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/crypto	CVE-2026-56854	未知	v0.54.0	0.55.0	Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854 镜像层: sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/local/bin/uv (rustbinary)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

usr/local/bin/uvx (rustbinary)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/app/certs/ca.key ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.0.0_platform ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.0.0_proxy ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.1.0_platform ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.1.0_proxy ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.10.0_collector ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.10.0_platform ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.2.0_collector ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.2.0_platform ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.3.0_collector ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.3.0_platform ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.4.0_collector ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.4.0_platform ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.5.0_collector ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.5.0_platform ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.6.0_collector ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.6.0_platform ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.7.0_collector ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.7.0_platform ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.8.0_collector ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.8.0_platform ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.9.0_collector ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.9.0_platform ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/cves/2021/CVE-2021-37580.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/cves/2021/CVE-2021-44910.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/cves/2022/CVE-2022-32430.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/cves/2023/CVE-2023-22463.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/cves/2023/CVE-2023-5074.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/cves/2024/CVE-2024-43441.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/cves/2025/CVE-2025-49001.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/cves/2025/CVE-2025-49002.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/cves/2025/CVE-2025-69971.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/global-matchers/secrets-patterns-rules.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/misconfiguration/genieacs-default-jwt.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/misconfiguration/nacos-authentication-bypass.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/misconfiguration/nacos/nacos-create-user.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/.local/nuclei-templates/http/misconfiguration/symfony/symfony-default-key-rce.yaml ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/home/pentester/tools/jwt_tool/jwt_tool.py ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

ghcr.io/usestrix/strix-sandbox:1.3.0 linux/amd64

全部漏洞信息

ghcr.io/usestrix/strix-sandbox:1.3.0 (debian kali-rolling) (debian)

Node.js (node-pkg)

Python (python-pkg)

home/pentester/.tree-sitter/parsers/tree-sitter-bash/Cargo.lock (cargo)

home/pentester/.tree-sitter/parsers/tree-sitter-go/Cargo.lock (cargo)

home/pentester/.tree-sitter/parsers/tree-sitter-java/Cargo.lock (cargo)

home/pentester/.tree-sitter/parsers/tree-sitter-javascript/Cargo.lock (cargo)

home/pentester/.tree-sitter/parsers/tree-sitter-json/Cargo.lock (cargo)

home/pentester/.tree-sitter/parsers/tree-sitter-python/Cargo.lock (cargo)

home/pentester/.tree-sitter/parsers/tree-sitter-typescript/Cargo.lock (cargo)

home/pentester/.tree-sitter/parsers/tree-sitter-yaml/Cargo.lock (cargo)

home/pentester/go/bin/gospider (gobinary)

home/pentester/go/bin/govulncheck (gobinary)

home/pentester/go/bin/httpx (gobinary)

home/pentester/go/bin/interactsh-client (gobinary)

home/pentester/go/bin/katana (gobinary)

home/pentester/go/bin/vulnx (gobinary)

usr/local/bin/gitleaks (gobinary)

usr/local/bin/trivy (gobinary)

usr/local/bin/uv (rustbinary)

usr/local/bin/uvx (rustbinary)

/app/certs/ca.key ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.0.0_platform ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.0.0_proxy ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.1.0_platform ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.1.0_proxy ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.10.0_collector ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.10.0_platform ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.2.0_collector ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.2.0_platform ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.3.0_collector ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.3.0_platform ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.4.0_collector ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.4.0_platform ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.5.0_collector ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.5.0_platform ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.6.0_collector ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.6.0_platform ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.7.0_collector ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.7.0_platform ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.8.0_collector ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.8.0_platform ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.9.0_collector ()

/home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.9.0_platform ()

/home/pentester/.local/nuclei-templates/http/cves/2021/CVE-2021-37580.yaml ()

/home/pentester/.local/nuclei-templates/http/cves/2021/CVE-2021-44910.yaml ()

/home/pentester/.local/nuclei-templates/http/cves/2022/CVE-2022-32430.yaml ()

/home/pentester/.local/nuclei-templates/http/cves/2023/CVE-2023-22463.yaml ()

/home/pentester/.local/nuclei-templates/http/cves/2023/CVE-2023-5074.yaml ()

/home/pentester/.local/nuclei-templates/http/cves/2024/CVE-2024-43441.yaml ()

/home/pentester/.local/nuclei-templates/http/cves/2025/CVE-2025-49001.yaml ()

/home/pentester/.local/nuclei-templates/http/cves/2025/CVE-2025-49002.yaml ()

/home/pentester/.local/nuclei-templates/http/cves/2025/CVE-2025-69971.yaml ()

/home/pentester/.local/nuclei-templates/http/global-matchers/secrets-patterns-rules.yaml ()

/home/pentester/.local/nuclei-templates/http/misconfiguration/genieacs-default-jwt.yaml ()

/home/pentester/.local/nuclei-templates/http/misconfiguration/nacos-authentication-bypass.yaml ()

/home/pentester/.local/nuclei-templates/http/misconfiguration/nacos/nacos-create-user.yaml ()

/home/pentester/.local/nuclei-templates/http/misconfiguration/symfony/symfony-default-key-rce.yaml ()

/home/pentester/tools/jwt_tool/jwt_tool.py ()