https://txtmix.com/tags/cve/Recent content in CVE on Text MatrixHugozh-cnTue, 21 Jul 2026 20:06:14 +0800https://txtmix.com/posts/tech/nginx-1-31-security-and-modern-deployment/Sun, 07 Jun 2026 12:56:00 +0800https://txtmix.com/posts/tech/nginx-1-31-security-and-modern-deployment/<h1 id="nginx-131-安全修复与现代部署30-岁反向代理的常青之道">Nginx 1.31 安全修复与现代部署：30 岁反向代理的常青之道</h1> <blockquote> <p><strong>目标读者</strong>：运维 / SRE；架构师；评估 API gateway / 反向代理方案的人 <strong>核心问题</strong>：Nginx 1.31.1 修复了哪些安全问题？在容器化、Kubernetes、Service Mesh 时代，Nginx 还有什么不可替代的位置？ <strong>难度</strong>：⭐⭐（中级） <strong>来源</strong>：<a href="https://nginx.org/" target="_blank" rel="noopener noreffer ">Nginx 官方公告</a> + <a href="https://github.com/nginx/nginx" target="_blank" rel="noopener noreffer ">nginx/nginx</a>，30k+ ★ / BSD-2-Clause / 2026-06-07</p>https://txtmix.com/posts/tech/trivy-aquasecurity-security-scanner-guide/Thu, 04 Jun 2026 15:00:00 +0800https://txtmix.com/posts/tech/trivy-aquasecurity-security-scanner-guide/<h1 id="trivy-实战指南aqua-security-开源的全能安全扫描器">Trivy 实战指南：Aqua Security 开源的「全能」安全扫描器</h1> <h2 id="核心判断">核心判断</h2> <p><code>Trivy</code>（仓库 <a href="https://github.com/aquasecurity/trivy" target="_blank" rel="noopener noreffer ">aquasecurity/trivy</a>）不是&quot;又一款&quot;漏洞扫描器，而是把 <strong>CVE 漏洞、SBOM 软件物料清单、IaC 错误配置、敏感密钥、License 风险</strong> 五类扫描压进同一把 CLI 刀的工具。它能在容器镜像、文件系统、Git 远程仓库、虚拟机镜像、Kubernetes 集群这 5 种目标上做同一种事——告诉你哪儿不安全、为什么、怎么修。</p>