registry.k8s.io/kube-controller-manager:v1.36.1 linux/amd64

registry.k8s.io/kube-controller-manager:v1.36.1 - Trivy安全扫描结果扫描时间: 2026-05-13 11:55

全部漏洞信息

低危漏洞:0

中危漏洞:9

高危漏洞:16

严重漏洞:0

系统OS: debian 12.13 扫描引擎: Trivy 扫描时间: 2026-05-13 11:55

registry.k8s.io/kube-controller-manager:v1.36.1 (debian 12.13) (debian)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

go-runner (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:5

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-33811	高危	v1.26.2	1.25.10, 1.26.3	When using LookupCNAME with the cgo DNS resolver, a very long CNAME re ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:187e45a961ddf5d3ff84d08e51f99c80166f36608cde209c295f93120514506c 发布日期: 2026-05-07 20:16 修改: 2026-05-12 20:23
stdlib	CVE-2026-33814	高危	v1.26.2	1.25.10, 1.26.3	When processing HTTP/2 SETTINGS frames, transport will enter an infini ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:187e45a961ddf5d3ff84d08e51f99c80166f36608cde209c295f93120514506c 发布日期: 2026-05-07 20:16 修改: 2026-05-08 19:16
stdlib	CVE-2026-39820	高危	v1.26.2	1.25.10, 1.26.3	Well-crafted inputs reaching ParseAddress, ParseAddressList, and Parse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:187e45a961ddf5d3ff84d08e51f99c80166f36608cde209c295f93120514506c 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39836	高危	v1.26.2	1.25.10, 1.26.3	Panic in Dial and LookupPort when handling NUL byte on Windows in net 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:187e45a961ddf5d3ff84d08e51f99c80166f36608cde209c295f93120514506c 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-42499	高危	v1.26.2	1.25.10, 1.26.3	Pathological inputs could cause DoS through consumePhrase when parsing ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:187e45a961ddf5d3ff84d08e51f99c80166f36608cde209c295f93120514506c 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39823	中危	v1.26.2	1.25.10, 1.26.3	CVE-2026-27142 fixed a vulnerability in which URLs were not correctly ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:187e45a961ddf5d3ff84d08e51f99c80166f36608cde209c295f93120514506c 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39825	中危	v1.26.2	1.25.10, 1.26.3	ReverseProxy can forward queries containing parameters not visible to ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:187e45a961ddf5d3ff84d08e51f99c80166f36608cde209c295f93120514506c 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39826	中危	v1.26.2	1.25.10, 1.26.3	If a trusted template author were to write a <script> tag containing a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:187e45a961ddf5d3ff84d08e51f99c80166f36608cde209c295f93120514506c 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16

usr/local/bin/kube-controller-manager (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:6

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
go.opentelemetry.io/otel/sdk	CVE-2026-39883	高危	v1.40.0	1.43.0	opentelemetry-go: BSD kenv command not using absolute path enables PATH hijacking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39883 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-04-08 21:17 修改: 2026-04-10 21:16
stdlib	CVE-2026-33811	高危	v1.26.2	1.25.10, 1.26.3	When using LookupCNAME with the cgo DNS resolver, a very long CNAME re ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-12 20:23
stdlib	CVE-2026-33814	高危	v1.26.2	1.25.10, 1.26.3	When processing HTTP/2 SETTINGS frames, transport will enter an infini ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 19:16
stdlib	CVE-2026-39820	高危	v1.26.2	1.25.10, 1.26.3	Well-crafted inputs reaching ParseAddress, ParseAddressList, and Parse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39836	高危	v1.26.2	1.25.10, 1.26.3	Panic in Dial and LookupPort when handling NUL byte on Windows in net 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-42499	高危	v1.26.2	1.25.10, 1.26.3	Pathological inputs could cause DoS through consumePhrase when parsing ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39823	中危	v1.26.2	1.25.10, 1.26.3	CVE-2026-27142 fixed a vulnerability in which URLs were not correctly ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39825	中危	v1.26.2	1.25.10, 1.26.3	ReverseProxy can forward queries containing parameters not visible to ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39826	中危	v1.26.2	1.25.10, 1.26.3	If a trusted template author were to write a <script> tag containing a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16

usr/local/bin/kube-log-runner (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:5

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-33811	高危	v1.26.2	1.25.10, 1.26.3	When using LookupCNAME with the cgo DNS resolver, a very long CNAME re ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-12 20:23
stdlib	CVE-2026-33814	高危	v1.26.2	1.25.10, 1.26.3	When processing HTTP/2 SETTINGS frames, transport will enter an infini ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 19:16
stdlib	CVE-2026-39820	高危	v1.26.2	1.25.10, 1.26.3	Well-crafted inputs reaching ParseAddress, ParseAddressList, and Parse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39836	高危	v1.26.2	1.25.10, 1.26.3	Panic in Dial and LookupPort when handling NUL byte on Windows in net 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-42499	高危	v1.26.2	1.25.10, 1.26.3	Pathological inputs could cause DoS through consumePhrase when parsing ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39823	中危	v1.26.2	1.25.10, 1.26.3	CVE-2026-27142 fixed a vulnerability in which URLs were not correctly ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16
stdlib	CVE-2026-39825	中危	v1.26.2	1.25.10, 1.26.3	ReverseProxy can forward queries containing parameters not visible to ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 22:16
stdlib	CVE-2026-39826	中危	v1.26.2	1.25.10, 1.26.3	If a trusted template author were to write a <script> tag containing a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:66ab497f94d7cdb6d7223296b9c509b6eb9e08f4e14f0f77791eba5f233aa44f 发布日期: 2026-05-07 20:16 修改: 2026-05-08 15:16