分类： 系统运维
2024-07-02 18:17:02
下载：
anchore/grype
使用：
./grype emqx/emqx
结果如下：
-
[root@k8s01 ~]# ./grype emqx/emqx
-
? Vulnerability DB [updated]
-
? Pulled image
-
? Loaded image emqx/emqx:latest
-
? Parsed image sha256:0ef9bc19d70ec1e5d1a32ac2aa57eb2f1057e19c3f7bccb3c37b300b57480560
-
? Cataloged contents 06fcaf955f399828221cf2ff879aa4e831ef9c6464d6d16a0337cc45e2028db1
-
├── ? Packages [26 packages]
-
├── ? File digests [312 files]
-
├── ? File metadata [312 locations]
-
└── ? Executables [97 executables]
-
? Scanned for vulnerabilities [92 vulnerability matches]
-
├── by severity: 10 critical, 35 high, 41 medium, 2 low, 0 negligible (7 unknown)
-
└── by status: 15 fixed, 80 not-fixed, 0 ignored
-
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
-
busybox 1.31.1-r21 apk CVE-2022-48174 Critical
-
busybox 1.31.1-r21 1.31.1-r22 apk CVE-2022-28391 High
-
curl 7.79.1-r0 apk CVE-2023-23914 Critical
-
curl 7.79.1-r0 apk CVE-2022-32221 Critical
-
curl 7.79.1-r0 apk CVE-2022-32207 Critical
-
curl 7.79.1-r0 apk CVE-2023-28319 High
-
curl 7.79.1-r0 apk CVE-2023-27534 High
-
curl 7.79.1-r0 apk CVE-2023-27533 High
-
curl 7.79.1-r0 apk CVE-2022-43551 High
-
curl 7.79.1-r0 apk CVE-2022-42916 High
-
curl 7.79.1-r0 apk CVE-2022-42915 High
-
curl 7.79.1-r0 apk CVE-2022-27782 High
-
curl 7.79.1-r0 apk CVE-2022-27781 High
-
curl 7.79.1-r0 7.79.1-r1 apk CVE-2022-27775 High
-
curl 7.79.1-r0 7.79.1-r1 apk CVE-2022-22576 High
-
curl 7.79.1-r0 apk CVE-2023-46218 Medium
-
curl 7.79.1-r0 apk CVE-2023-28321 Medium
