Domain name for API request: csip.intl.tencentcloudapi.com.
Queries the list of vulnerabilities in an image layer
A maximum of 20 requests can be initiated per second for this API.
The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.
| Parameter Name | Required | Type | Description |
|---|---|---|---|
| Action | Yes | String | Common Params. The value used for this API: DescribeImageLayerVulList. |
| Version | Yes | String | Common Params. The value used for this API: 2022-11-21. |
| Region | No | String | Common Params. This parameter is not required. |
| MemberId.N | No | Array of String | Group account member id |
| Filter | No | Filter | Filter option |
| Id | No | String | Image layer id |
| Parameter Name | Type | Description |
|---|---|---|
| TotalCount | Integer | Total. |
| ImageLayerVulList | Array of ImageLayerVul | Image layer vulnerability list |
| RequestId | String | The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem. |
POST / HTTP/1.1
Host: csip.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeImageLayerVulList
<Common request parameters>
{
"MemberId": [
"mem-12e1se11"
],
"Filter": {
"Limit": 1,
"Offset": 2,
"Filters": [
{
"Name": "ComponentId",
"Values": [
"185391"
]
}
]
},
"Id": "913"
}{
"Response": {
"ImageLayerVulList": [
{
"FirstFoundTime": "2026-07-16T03:16:08+08:00",
"ID": 133,
"ImageId": "913",
"LatestFoundTime": "2026-07-20T11:37:15+08:00",
"LayerId": "sha256:f4af6e45a5238091268325f642727a3b8c521b25f42793a12d491930eba9e07a",
"OwnerAccountName": "***-pipe **",
"OwnerAppId": 260000000,
"OwnerUin": "70000*******",
"VulInfo": {
"AffectProduct": "pnpm",
"AffectVendor": "",
"CVEID": "CVE-2026-23890",
"CVSSLevel": "MEDIUM",
"Category": "APPLICATION",
"CheckMethod": "VersionCompare",
"CvssScore": "6.5",
"DefendStatus": "NOT_ENABLED",
"EPSSScore": 0.00438,
"FixSolution": "It is recommended to pay attention to vendor announcements or upgrade to the latest version.",
"KVERecord": false,
"Mechanism": "",
"Name": "pnpm security vulnerability (CVE-2026-23890)",
"PocId": "TVD-2026-4551",
"Precondition": "1. The victim system has a vulnerable version of pnpm installed (version less than 10.28.1)\n2. The attacker can induce the victim to install an npm package containing a malicious bin definition (for example, by installing a local or remote malicious package via the `pnpm add` command)\n3. The bin name of the malicious package must begin with '@' (such as '@scope/../../evil') to bypass pnpm's bin name validation logic",
"PublishTime": "2026-01-27 06:15:00",
"RefLink": "https://github.com/pnpm/pnpm/releases/tag/v10.28.1,https://github.com/pnpm/pnpm/security/advisories/GHSA-xpqm-wm3m-f34h,https://github.com/pnpm/pnpm/commit/8afbb1598445d37985d91fda18abb4795ae5062d",
"Remark": "",
"Summary": "pnpm is an open source package manager. Previous versions of pnpm before 10.28.1 have a security vulnerability. The vulnerability stems from path traversal in binary links, which may cause a malicious npm package to create executable files or symbolic links outside node_modules/.bin."
"SupportFix": false
}
}
],
"TotalCount": 10,
"RequestId": "470a3c93-6b62-4596-b1d0-7fa6e619f1b2"
}
}TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.
The following only lists the error codes related to the API business logic. For other error codes, see Common Error Codes.
| Error Code | Description |
|---|---|
| AuthFailure | CAM signature/authentication error. |
| FailedOperation | Operation failed. |
| InternalError | Internal error. |
| InvalidFilter | Invalid Filter |
| InvalidParameter | Parameter error. |
| InvalidParameter.ResourceId | InvalidParameter.ResourceId |
| InvalidParameterValue | Parameter value error. |
| LimitExceeded | The quota limit is exceeded. |
| MissingParameter | Parameters are missing. |
| OperationDenied | Operation denied. |
| RequestLimitExceeded | Number of requests exceeds the frequency limit. |
| ResourceInUse | The resource is occupied. |
| ResourceNotFound | The resource does not exist. |
| ResourceUnavailable | Resources are unavailable. |
| UnauthorizedOperation.NoPermission | UnauthorizedOperation.NoPermission |
| UnknownParameter | Unknown parameter error. |
Was this page helpful?
You can also Contact sales or Submit a Ticket for help.
Help us improve! Rate your documentation experience in 5 mins.
Feedback