registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.0 linux/arm64

registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.0 - Trivy安全扫描结果扫描时间: 2026-09-21 16:53 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:3

中危漏洞:4

高危漏洞:4

严重漏洞:0

系统OS: debian 13.6 扫描引擎: Trivy 扫描时间: 2026-09-21 16:53

registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.0 (debian 13.6) (debian)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

kube-state-metrics (gobinary)

低危漏洞:3

中危漏洞:4

高危漏洞:4

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/crypto	CVE-2026-56854	高危	v0.54.0	0.55.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854 镜像层: sha256:2c773dad77cb7ffbd1692bda43e6727c87550d527296c83bbd85bb81802d44f9 发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
google.golang.org/grpc	CVE-2026-84304	高危	v1.79.3	1.83.1	gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304 镜像层: sha256:2c773dad77cb7ffbd1692bda43e6727c87550d527296c83bbd85bb81802d44f9 发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc	CVE-2026-84445	高危	v1.79.3	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445 镜像层: sha256:2c773dad77cb7ffbd1692bda43e6727c87550d527296c83bbd85bb81802d44f9 发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.79.3	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:2c773dad77cb7ffbd1692bda43e6727c87550d527296c83bbd85bb81802d44f9 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
github.com/google/cel-go	GHSA-gcjh-h69q-9w9g	中危	v0.26.0	0.29.0	cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag 漏洞详情: https://github.com/advisories/GHSA-gcjh-h69q-9w9g 镜像层: sha256:2c773dad77cb7ffbd1692bda43e6727c87550d527296c83bbd85bb81802d44f9 发布日期: 2026-07-24 16:48 修改: 2026-07-24 16:48
golang.org/x/crypto	CVE-2026-56855	中危	v0.54.0	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855 镜像层: sha256:2c773dad77cb7ffbd1692bda43e6727c87550d527296c83bbd85bb81802d44f9 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto	CVE-2026-78662	中危	v0.54.0	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662 镜像层: sha256:2c773dad77cb7ffbd1692bda43e6727c87550d527296c83bbd85bb81802d44f9 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
google.golang.org/grpc	CVE-2026-84303	中危	v1.79.3	1.83.1	gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303 镜像层: sha256:2c773dad77cb7ffbd1692bda43e6727c87550d527296c83bbd85bb81802d44f9 发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	CVE-2026-81870	低危	v1.40.0	1.45.0	OpenTelemetry-Go is the Go implementation of OpenTelemetry. From versi ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81870 镜像层: sha256:2c773dad77cb7ffbd1692bda43e6727c87550d527296c83bbd85bb81802d44f9 发布日期: 2026-09-16 20:17 修改: 2026-09-17 15:16
go.opentelemetry.io/otel/sdk	CVE-2026-81870	低危	v1.43.0	1.45.0	OpenTelemetry-Go is the Go implementation of OpenTelemetry. From versi ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81870 镜像层: sha256:2c773dad77cb7ffbd1692bda43e6727c87550d527296c83bbd85bb81802d44f9 发布日期: 2026-09-16 20:17 修改: 2026-09-17 15:16
go.opentelemetry.io/otel/exporters/otlp/otlptrace	CVE-2026-81870	低危	v1.40.0	1.45.0	OpenTelemetry-Go is the Go implementation of OpenTelemetry. From versi ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81870 镜像层: sha256:2c773dad77cb7ffbd1692bda43e6727c87550d527296c83bbd85bb81802d44f9 发布日期: 2026-09-16 20:17 修改: 2026-09-17 15:16
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:2c773dad77cb7ffbd1692bda43e6727c87550d527296c83bbd85bb81802d44f9 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00