<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Docker漏洞预警 on 轩源的网络日志</title><link>https://blog.xuanyuan.me/categories/docker%E6%BC%8F%E6%B4%9E%E9%A2%84%E8%AD%A6/</link><description>Recent content in Docker漏洞预警 on 轩源的网络日志</description><generator>Hugo -- gohugo.io</generator><language>zh-CN</language><lastBuildDate>Fri, 23 Oct 2026 15:31:29 +0800</lastBuildDate><atom:link href="https://blog.xuanyuan.me/categories/docker%E6%BC%8F%E6%B4%9E%E9%A2%84%E8%AD%A6/index.xml" rel="self" type="application/rss+xml"/><item><title>【漏洞预警】Oracle Java 爆严重漏洞，未登录就能改关键数据（CVE-2026-91403）</title><link>https://blog.xuanyuan.me/archives/2476/</link><pubDate>Fri, 23 Oct 2026 13:02:25 +0800</pubDate><guid>https://blog.xuanyuan.me/archives/2476/</guid><description>&lt;p&gt;&lt;strong&gt;发布日期：&lt;/strong&gt; 2026 年 10 月 22 日&#10;&lt;strong&gt;风险等级：&lt;/strong&gt; 严重（Critical）&#10;&lt;strong&gt;漏洞编号：&lt;/strong&gt; CVE-2026-91403&#10;&lt;strong&gt;涉及镜像：&lt;/strong&gt; library/openjdk — &lt;a class="link" href="https://xuanyuan.cloud/r/library/openjdk" target="_blank" rel="noopener"&#10; &gt;轩辕镜像&lt;/a&gt; · &lt;a class="link" href="https://hub.docker.com/_/openjdk" target="_blank" rel="noopener"&#10; &gt;Docker Hub&lt;/a&gt; · library/eclipse-temurin — &lt;a class="link" href="https://xuanyuan.cloud/r/library/eclipse-temurin" target="_blank" rel="noopener"&#10; &gt;轩辕镜像&lt;/a&gt; · &lt;a class="link" href="https://hub.docker.com/_/eclipse-temurin" target="_blank" rel="noopener"&#10; &gt;Docker Hub&lt;/a&gt;&#10;&lt;strong&gt;CVSS：&lt;/strong&gt; &lt;strong&gt;9.1&lt;/strong&gt;（Critical，CVSS 3.1）&#10;&lt;strong&gt;披露时间：&lt;/strong&gt; 2026 年 10 月 21 日（Oracle Security Alert Rev 1）&#10;&lt;strong&gt;相关公告：&lt;/strong&gt; &lt;a class="link" href="https://www.oracle.com/security-alerts/alert-cve-2026-91403.html" target="_blank" rel="noopener"&#10; &gt;Oracle Security Alert CVE-2026-91403&lt;/a&gt;&lt;/p&gt;</description></item></channel></rss>