registry.k8s.io/kube-apiserver:v1.35.5 linux/amd64

registry.k8s.io/kube-apiserver:v1.35.5 - Trivy安全扫描结果扫描时间: 2026-05-18 17:48

全部漏洞信息

低危漏洞:0

中危漏洞:6

高危漏洞:12

严重漏洞:1

系统OS: debian 12.13 扫描引擎: Trivy 扫描时间: 2026-05-18 17:48

registry.k8s.io/kube-apiserver:v1.35.5 (debian 12.13) (debian)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

go-runner (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:5

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-33811	高危	v1.25.9	1.25.10, 1.26.3	When using LookupCNAME with the cgo DNS resolver, a very long CNAME re ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:7547bf90fb82caaf9ce1be801f121e4875181139e609d9136ec70cbd81c32e49 发布日期: 2026-05-07 20:16 修改: 2026-05-12 20:23
stdlib	CVE-2026-33814	高危	v1.25.9	1.25.10, 1.26.3	When processing HTTP/2 SETTINGS frames, transport will enter an infini ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:7547bf90fb82caaf9ce1be801f121e4875181139e609d9136ec70cbd81c32e49 发布日期: 2026-05-07 20:16 修改: 2026-05-08 19:16
stdlib	CVE-2026-39820	高危	v1.25.9	1.25.10, 1.26.3	Well-crafted inputs reaching ParseAddress, ParseAddressList, and Parse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:7547bf90fb82caaf9ce1be801f121e4875181139e609d9136ec70cbd81c32e49 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39836	高危	v1.25.9	1.25.10, 1.26.3	Panic in Dial and LookupPort when handling NUL byte on Windows in net 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:7547bf90fb82caaf9ce1be801f121e4875181139e609d9136ec70cbd81c32e49 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-42499	高危	v1.25.9	1.25.10, 1.26.3	Pathological inputs could cause DoS through consumePhrase when parsing ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:7547bf90fb82caaf9ce1be801f121e4875181139e609d9136ec70cbd81c32e49 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39823	中危	v1.25.9	1.25.10, 1.26.3	CVE-2026-27142 fixed a vulnerability in which URLs were not correctly ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:7547bf90fb82caaf9ce1be801f121e4875181139e609d9136ec70cbd81c32e49 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39825	中危	v1.25.9	1.25.10, 1.26.3	ReverseProxy can forward queries containing parameters not visible to ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:7547bf90fb82caaf9ce1be801f121e4875181139e609d9136ec70cbd81c32e49 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39826	中危	v1.25.9	1.25.10, 1.26.3	If a trusted template author were to write a <script> tag containing a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:7547bf90fb82caaf9ce1be801f121e4875181139e609d9136ec70cbd81c32e49 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16

usr/local/bin/kube-apiserver (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:7

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
google.golang.org/grpc	CVE-2026-33186	严重	v1.72.2	1.79.3	google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33186 镜像层: sha256:9d89715b6a7716239bb5f1171c099c598015b2e0afdb71e810a2185d09447177 发布日期: 2026-03-20 23:16 修改: 2026-04-10 20:49
go.opentelemetry.io/otel/sdk	CVE-2026-39883	高危	v1.36.0	1.43.0	opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39883 镜像层: sha256:9d89715b6a7716239bb5f1171c099c598015b2e0afdb71e810a2185d09447177 发布日期: 2026-04-08 21:17 修改: 2026-04-10 21:16
go.opentelemetry.io/otel/sdk	CVE-2026-24051	高危	v1.36.0	1.40.0	OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24051 镜像层: sha256:9d89715b6a7716239bb5f1171c099c598015b2e0afdb71e810a2185d09447177 发布日期: 2026-02-02 23:16 修改: 2026-02-27 20:32
stdlib	CVE-2026-33811	高危	v1.25.9	1.25.10, 1.26.3	When using LookupCNAME with the cgo DNS resolver, a very long CNAME re ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:9d89715b6a7716239bb5f1171c099c598015b2e0afdb71e810a2185d09447177 发布日期: 2026-05-07 20:16 修改: 2026-05-12 20:23
stdlib	CVE-2026-33814	高危	v1.25.9	1.25.10, 1.26.3	When processing HTTP/2 SETTINGS frames, transport will enter an infini ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:9d89715b6a7716239bb5f1171c099c598015b2e0afdb71e810a2185d09447177 发布日期: 2026-05-07 20:16 修改: 2026-05-08 19:16
stdlib	CVE-2026-39820	高危	v1.25.9	1.25.10, 1.26.3	Well-crafted inputs reaching ParseAddress, ParseAddressList, and Parse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:9d89715b6a7716239bb5f1171c099c598015b2e0afdb71e810a2185d09447177 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39836	高危	v1.25.9	1.25.10, 1.26.3	Panic in Dial and LookupPort when handling NUL byte on Windows in net 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:9d89715b6a7716239bb5f1171c099c598015b2e0afdb71e810a2185d09447177 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-42499	高危	v1.25.9	1.25.10, 1.26.3	Pathological inputs could cause DoS through consumePhrase when parsing ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:9d89715b6a7716239bb5f1171c099c598015b2e0afdb71e810a2185d09447177 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39823	中危	v1.25.9	1.25.10, 1.26.3	CVE-2026-27142 fixed a vulnerability in which URLs were not correctly ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:9d89715b6a7716239bb5f1171c099c598015b2e0afdb71e810a2185d09447177 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39825	中危	v1.25.9	1.25.10, 1.26.3	ReverseProxy can forward queries containing parameters not visible to ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:9d89715b6a7716239bb5f1171c099c598015b2e0afdb71e810a2185d09447177 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39826	中危	v1.25.9	1.25.10, 1.26.3	If a trusted template author were to write a <script> tag containing a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:9d89715b6a7716239bb5f1171c099c598015b2e0afdb71e810a2185d09447177 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16