registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.0 linux/amd64

registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.0 - Trivy安全扫描结果扫描时间: 2026-08-22 01:17

全部漏洞信息

低危漏洞:0

中危漏洞:1

高危漏洞:1

严重漏洞:0

系统OS: debian 13.6 扫描引擎: Trivy 扫描时间: 2026-08-22 01:17

registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.0 (debian 13.6) (debian)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

kube-state-metrics (gobinary)

低危漏洞:0

中危漏洞:1

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.79.3	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
github.com/google/cel-go	GHSA-gcjh-h69q-9w9g	中危	v0.26.0	0.29.0	cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag 漏洞详情: https://github.com/advisories/GHSA-gcjh-h69q-9w9g 镜像层: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f 发布日期: 2026-07-24 16:48 修改: 2026-07-24 16:48
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

软件包

漏洞

安全状态

安装版本

修复版本

漏洞信息

google.golang.org/grpc

GHSA-hrxh-6v49-42gf

高危

v1.79.3

1.82.1

gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03

github.com/google/cel-go

GHSA-gcjh-h69q-9w9g

中危

v0.26.0

0.29.0

cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag

漏洞详情: https://github.com/advisories/GHSA-gcjh-h69q-9w9g

镜像层: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f

发布日期: 2026-07-24 16:48 修改: 2026-07-24 16:48

golang.org/x/crypto

GO-2026-5932

未知

v0.54.0

The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00