ghcr.io/vllm-project/guidellm:v0.7.3 linux/amd64

ghcr.io/vllm-project/guidellm:v0.7.3 - Trivy安全扫描结果扫描时间: 2026-08-25 21:36

全部漏洞信息

低危漏洞:2

中危漏洞:8

高危漏洞:1

严重漏洞:0

系统OS: fedora 42 扫描引擎: Trivy 扫描时间: 2026-08-25 21:36

Python (python-pkg)

低危漏洞:2

中危漏洞:8

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
aiohttp	CVE-2026-69244	高危	3.14.1	3.14.3	aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69244 镜像层: sha256:55f8219292b164ba0ccfb323c4c76bb9a5c69407959cf29f16c57485de88d9db 发布日期: 2026-08-03 21:16 修改: 2026-08-04 15:16
aiohttp	CVE-2026-59881	中危	3.14.1	3.14.2	aiohttp: AIOHTTP: Denial of Service via unnegotiated WebSocket compression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59881 镜像层: sha256:55f8219292b164ba0ccfb323c4c76bb9a5c69407959cf29f16c57485de88d9db 发布日期: 2026-07-30 19:18 修改: 2026-07-30 20:03
aiohttp	CVE-2026-69243	中危	3.14.1	3.14.2	aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69243 镜像层: sha256:55f8219292b164ba0ccfb323c4c76bb9a5c69407959cf29f16c57485de88d9db 发布日期: 2026-08-03 21:16 修改: 2026-08-05 16:17
h2	CVE-2026-71554	中危	4.3.0	4.4.1	h2 is a pure-Python implementation of a HTTP/2 protocol stack. Version ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71554 镜像层: sha256:55f8219292b164ba0ccfb323c4c76bb9a5c69407959cf29f16c57485de88d9db 发布日期: 2026-08-06 22:18 修改: 2026-08-08 03:16
idna	CVE-2026-45409	中危	3.11	3.15	python-idna: idna: Denial of Service via specially crafted long inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409 镜像层: sha256:55f8219292b164ba0ccfb323c4c76bb9a5c69407959cf29f16c57485de88d9db 发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10
pip	CVE-2025-8869	中危	24.2	25.3	pip: pip missing checks on symbolic link extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869 镜像层: sha256:408d6abbcf640af58277527a6e205aeafc0c699928cafe53f6ceb187178755b2 发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
pip	CVE-2026-3219	中危	24.2	26.1	pip: pip: Incorrect file installation due to improper archive handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219 镜像层: sha256:408d6abbcf640af58277527a6e205aeafc0c699928cafe53f6ceb187178755b2 发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
pip	CVE-2026-6357	中危	24.2	26.1	pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357 镜像层: sha256:408d6abbcf640af58277527a6e205aeafc0c699928cafe53f6ceb187178755b2 发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
pip	CVE-2026-8643	中危	24.2	26.1.2	python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643 镜像层: sha256:408d6abbcf640af58277527a6e205aeafc0c699928cafe53f6ceb187178755b2 发布日期: 2026-06-01 17:17 修改: 2026-08-19 12:18
Pygments	CVE-2026-4539	低危	2.19.2	2.20.0	pygments: Pygments: Denial of Service via inefficient regular expression processing in AdlLexer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4539 镜像层: sha256:55f8219292b164ba0ccfb323c4c76bb9a5c69407959cf29f16c57485de88d9db 发布日期: 2026-03-22 06:16 修改: 2026-06-17 10:56
pip	CVE-2026-1703	低危	24.2	26.0	pip: pip: Information disclosure via path traversal when installing crafted wheel archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703 镜像层: sha256:408d6abbcf640af58277527a6e205aeafc0c699928cafe53f6ceb187178755b2 发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16