| libcrypto3 |
CVE-2026-31789 |
严重 |
3.4.1-r2 |
3.6.2-r0 |
openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libssl3 |
CVE-2026-31789 |
严重 |
3.4.1-r2 |
3.6.2-r0 |
openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| binutils |
CVE-2025-69649 |
高危 |
2.44-r1 |
2.46-r0 |
binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69649
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
|
| binutils |
CVE-2025-69650 |
高危 |
2.44-r1 |
2.46-r0 |
binutils: double free in readelf via crafted ELF binary with malformed relocation data
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69650
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
|
| binutils |
CVE-2025-7545 |
高危 |
2.44-r1 |
2.45.1-r1 |
binutils: Binutils: Heap Buffer Overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7545
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05
|
| binutils |
CVE-2025-7546 |
高危 |
2.44-r1 |
2.45.1-r1 |
binutils: Binutils: Out-of-bounds Write Vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7546
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-13 22:15 修改: 2026-06-17 10:05
|
| binutils |
CVE-2026-3441 |
高危 |
2.44-r1 |
2.46.1-r2 |
binutils: GNU Binutils: Information disclosure via specially crafted XCOFF object file
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3441
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 14:19 修改: 2026-09-01 13:19
|
| binutils |
CVE-2026-3442 |
高危 |
2.44-r1 |
2.46.1-r2 |
binutils: GNU Binutils: Information disclosure or denial of service via out-of-bounds read in bfd linker
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3442
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 14:19 修改: 2026-09-01 13:19
|
| binutils |
CVE-2026-6846 |
高危 |
2.44-r1 |
2.46-r2 |
binutils: Binutils: Arbitrary code execution via malformed XCOFF object file processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6846
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-22 09:16 修改: 2026-09-01 12:17
|
| busybox |
CVE-2023-39810 |
高危 |
1.37.0-r30 |
1.37.0-r58 |
busybox: CPIO command of Busybox allows attackers to execute a directory traversal
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39810
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2023-08-28 19:15 修改: 2026-07-09 01:18
|
| busybox |
CVE-2026-26157 |
高危 |
1.37.0-r30 |
1.37.0-r58 |
busybox: BusyBox: Arbitrary file overwrite and potential code execution via incomplete path sanitization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26157
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-02-11 21:16 修改: 2026-07-15 02:19
|
| busybox |
CVE-2026-26158 |
高危 |
1.37.0-r30 |
1.37.0-r58 |
busybox: BusyBox: Arbitrary file modification and privilege escalation via unvalidated tar archive entries
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26158
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-02-11 21:16 修改: 2026-07-15 02:19
|
| busybox |
CVE-2026-38754 |
高危 |
1.37.0-r30 |
1.38.0-r0 |
busybox: Busybox: Denial of Service via heap overflow in ifsbreakup() function
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-38754
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-15 22:16 修改: 2026-07-22 15:16
|
| git |
CVE-2024-52005 |
高危 |
2.48.1-r2 |
2.49.0-r0 |
git: The sideband payload is passed unfiltered to the terminal in git
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
|
| binutils |
CVE-2025-11082 |
高危 |
2.44-r1 |
2.45.1-r1 |
binutils: GNU Binutils Linker heap-based overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11082
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29
|
| libcrypto3 |
CVE-2025-15467 |
高危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17
|
| libcrypto3 |
CVE-2025-69421 |
高危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| libcrypto3 |
CVE-2026-14456 |
高危 |
3.4.1-r2 |
3.6.3-r5 |
openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
|
| libcrypto3 |
CVE-2026-28386 |
高危 |
3.4.1-r2 |
3.6.2-r0 |
openssl: openssl: Denial of Service due to out-of-bounds read in AES-CFB128
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28386
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libcrypto3 |
CVE-2026-28387 |
高危 |
3.4.1-r2 |
3.6.2-r0 |
openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libcrypto3 |
CVE-2026-28388 |
高危 |
3.4.1-r2 |
3.6.2-r0 |
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libcrypto3 |
CVE-2026-28389 |
高危 |
3.4.1-r2 |
3.6.2-r0 |
openssl: OpenSSL: Denial of Service vulnerability in CMS processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libcrypto3 |
CVE-2026-28390 |
高危 |
3.4.1-r2 |
3.6.2-r0 |
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libcrypto3 |
CVE-2026-45447 |
高危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-09-11 13:18
|
| libexpat1 |
CVE-2025-59375 |
高危 |
2.7.0-r0 |
2.7.2-r0 |
firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46
|
| libexpat1 |
CVE-2026-25210 |
高危 |
2.7.0-r0 |
2.7.4-r0 |
libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25210
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-30 07:16 修改: 2026-06-17 10:24
|
| libexpat1 |
CVE-2026-45186 |
高危 |
2.7.0-r0 |
2.8.1-r0 |
libexpat: denial of service via crafted XML input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-05-10 07:16 修改: 2026-08-25 13:19
|
| binutils |
CVE-2025-11083 |
高危 |
2.44-r1 |
2.45.1-r1 |
binutils: GNU Binutils Linker heap-based overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29
|
| libssl3 |
CVE-2025-15467 |
高危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17
|
| libssl3 |
CVE-2025-69421 |
高危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| libssl3 |
CVE-2026-14456 |
高危 |
3.4.1-r2 |
3.6.3-r5 |
openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-28386 |
高危 |
3.4.1-r2 |
3.6.2-r0 |
openssl: openssl: Denial of Service due to out-of-bounds read in AES-CFB128
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28386
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libssl3 |
CVE-2026-28387 |
高危 |
3.4.1-r2 |
3.6.2-r0 |
openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libssl3 |
CVE-2026-28388 |
高危 |
3.4.1-r2 |
3.6.2-r0 |
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libssl3 |
CVE-2026-28389 |
高危 |
3.4.1-r2 |
3.6.2-r0 |
openssl: OpenSSL: Denial of Service vulnerability in CMS processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libssl3 |
CVE-2026-28390 |
高危 |
3.4.1-r2 |
3.6.2-r0 |
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libssl3 |
CVE-2026-45447 |
高危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-09-11 13:18
|
| py3-pip-wheel |
CVE-2025-66418 |
高危 |
25.0.1-r0 |
26.1.1-r0 |
urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66418
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-05 16:15 修改: 2026-06-17 09:56
|
| py3-pip-wheel |
CVE-2025-66471 |
高危 |
25.0.1-r0 |
26.1.1-r0 |
urllib3: urllib3 Streaming API improperly handles highly compressed data
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66471
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-05 17:16 修改: 2026-06-17 09:56
|
| py3-pip-wheel |
CVE-2026-21441 |
高危 |
25.0.1-r0 |
26.1.1-r0 |
urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21441
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-07 22:15 修改: 2026-09-15 12:16
|
| py3-pip-wheel |
CVE-2026-44432 |
高危 |
25.0.1-r0 |
26.1.2-r1 |
urllib3: urllib3: Denial of Service due to excessive HTTP response decompression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44432
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-05-13 16:16 修改: 2026-09-10 13:20
|
| py3.11-pip |
CVE-2025-66418 |
高危 |
25.0.1-r0 |
26.1.1-r0 |
urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66418
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-05 16:15 修改: 2026-06-17 09:56
|
| py3.11-pip |
CVE-2025-66471 |
高危 |
25.0.1-r0 |
26.1.1-r0 |
urllib3: urllib3 Streaming API improperly handles highly compressed data
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66471
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-05 17:16 修改: 2026-06-17 09:56
|
| py3.11-pip |
CVE-2026-21441 |
高危 |
25.0.1-r0 |
26.1.1-r0 |
urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21441
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-07 22:15 修改: 2026-09-15 12:16
|
| py3.11-pip |
CVE-2026-44432 |
高危 |
25.0.1-r0 |
26.1.2-r1 |
urllib3: urllib3: Denial of Service due to excessive HTTP response decompression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44432
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-05-13 16:16 修改: 2026-09-10 13:20
|
| py3.11-pip-base |
CVE-2025-66418 |
高危 |
25.0.1-r0 |
26.1.1-r0 |
urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66418
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-05 16:15 修改: 2026-06-17 09:56
|
| py3.11-pip-base |
CVE-2025-66471 |
高危 |
25.0.1-r0 |
26.1.1-r0 |
urllib3: urllib3 Streaming API improperly handles highly compressed data
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66471
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-05 17:16 修改: 2026-06-17 09:56
|
| py3.11-pip-base |
CVE-2026-21441 |
高危 |
25.0.1-r0 |
26.1.1-r0 |
urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21441
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-07 22:15 修改: 2026-09-15 12:16
|
| py3.11-pip-base |
CVE-2026-44432 |
高危 |
25.0.1-r0 |
26.1.2-r1 |
urllib3: urllib3: Denial of Service due to excessive HTTP response decompression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44432
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-05-13 16:16 修改: 2026-09-10 13:20
|
| py3.11-setuptools |
CVE-2026-23949 |
高危 |
76.0.0-r0 |
80.10.1-r0 |
jaraco.context: jaraco.context: Path traversal via malicious tar archives
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23949
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 01:15 修改: 2026-06-17 10:22
|
| python-3.11 |
CVE-2025-13836 |
高危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Excessive read buffering DoS in http.client
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15
|
| python-3.11 |
CVE-2026-11940 |
高危 |
3.11.11-r3 |
3.11.15-r8 |
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-15308 |
高危 |
3.11.11-r3 |
3.11.16-r1 |
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
|
| python-3.11 |
CVE-2026-3644 |
高危 |
3.11.11-r3 |
3.11.15-r9 |
cpython: Incomplete control character validation in http.cookies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-4224 |
高危 |
3.11.11-r3 |
3.11.15-r9 |
cpython: Stack overflow parsing XML with deeply nested DTD content models
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-4786 |
高危 |
3.11.11-r3 |
3.11.15-r2 |
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-6100 |
高危 |
3.11.11-r3 |
3.11.15-r2 |
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2025-13836 |
高危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Excessive read buffering DoS in http.client
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15
|
| python-3.11-base |
CVE-2026-11940 |
高危 |
3.11.11-r3 |
3.11.15-r8 |
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2026-15308 |
高危 |
3.11.11-r3 |
3.11.16-r1 |
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
|
| python-3.11-base |
CVE-2026-3644 |
高危 |
3.11.11-r3 |
3.11.15-r9 |
cpython: Incomplete control character validation in http.cookies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2026-4224 |
高危 |
3.11.11-r3 |
3.11.15-r9 |
cpython: Stack overflow parsing XML with deeply nested DTD content models
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2026-4786 |
高危 |
3.11.11-r3 |
3.11.15-r2 |
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2026-6100 |
高危 |
3.11.11-r3 |
3.11.15-r2 |
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2025-13836 |
高危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Excessive read buffering DoS in http.client
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15
|
| python-3.11-base-dev |
CVE-2026-11940 |
高危 |
3.11.11-r3 |
3.11.15-r8 |
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-15308 |
高危 |
3.11.11-r3 |
3.11.16-r1 |
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
|
| python-3.11-base-dev |
CVE-2026-3644 |
高危 |
3.11.11-r3 |
3.11.15-r9 |
cpython: Incomplete control character validation in http.cookies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-4224 |
高危 |
3.11.11-r3 |
3.11.15-r9 |
cpython: Stack overflow parsing XML with deeply nested DTD content models
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-4786 |
高危 |
3.11.11-r3 |
3.11.15-r2 |
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-6100 |
高危 |
3.11.11-r3 |
3.11.15-r2 |
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2025-13836 |
高危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Excessive read buffering DoS in http.client
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15
|
| python-3.11-dev |
CVE-2026-11940 |
高危 |
3.11.11-r3 |
3.11.15-r8 |
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-15308 |
高危 |
3.11.11-r3 |
3.11.16-r1 |
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
|
| python-3.11-dev |
CVE-2026-3644 |
高危 |
3.11.11-r3 |
3.11.15-r9 |
cpython: Incomplete control character validation in http.cookies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-4224 |
高危 |
3.11.11-r3 |
3.11.15-r9 |
cpython: Stack overflow parsing XML with deeply nested DTD content models
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-4786 |
高危 |
3.11.11-r3 |
3.11.15-r2 |
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-6100 |
高危 |
3.11.11-r3 |
3.11.15-r2 |
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16
|
| uv |
CVE-2026-25537 |
高危 |
0.6.6-r1 |
0.10.2-r1 |
jsonwebtoken: jsonwebtoken has Type Confusion that leads to potential authorization bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25537
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-02-04 22:15 修改: 2026-06-17 10:24
|
| uv |
CVE-2026-25541 |
高危 |
0.6.6-r1 |
0.9.29-r1 |
Bytes is a utility library for working with bytes. From version 1.2.1 ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24
|
| uv |
CVE-2026-31812 |
高危 |
0.6.6-r1 |
0.10.9-r1 |
quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31812
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-10 22:16 修改: 2026-08-25 13:18
|
| wget |
CVE-2026-58471 |
高危 |
1.25.0-r0 |
1.25.0-r15 |
wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58471
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:02
|
| wget |
CVE-2026-58472 |
高危 |
1.25.0-r0 |
1.25.0-r15 |
wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58472
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:58
|
| libcrypto3 |
CVE-2026-34183 |
中危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-35188 |
中危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Double-free When Checking OCSP Stapled Response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35188
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-42764 |
中危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: NULL pointer dereference in QUIC server initial packet handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-45445 |
中危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: AES-OCB IV Ignored on EVP_Cipher() Path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcurl-openssl4 |
CVE-2026-13608 |
中危 |
8.12.1-r0 |
8.22.0-r0 |
A flaw in the libcurl SASL negotiation for LDAP authentication allows ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| libcurl-openssl4 |
CVE-2026-18924 |
中危 |
8.12.1-r0 |
8.22.0-r0 |
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| libcurl-openssl4 |
CVE-2026-19931 |
中危 |
8.12.1-r0 |
8.22.0-r0 |
A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| libcurl-openssl4 |
CVE-2026-80229 |
中危 |
8.12.1-r0 |
8.22.0-r0 |
When performing transfers via libcurl\u2019s multi interface, pooled T ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| libcurl-openssl4 |
CVE-2026-80230 |
中危 |
8.12.1-r0 |
8.22.0-r0 |
When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| libcurl-openssl4 |
CVE-2026-82209 |
中危 |
8.12.1-r0 |
8.22.0-r2 |
When libpsl support is enabled, libcurl fails to enforce the Public Su ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| binutils |
CVE-2025-11414 |
中危 |
2.44-r1 |
2.45.1-r1 |
binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11414
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-07 23:15 修改: 2026-06-17 08:30
|
| busybox |
CVE-2024-58251 |
中危 |
1.37.0-r30 |
1.37.0-r49 |
In netstat in BusyBox through 1.37.0, local users can launch of networ ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
|
| busybox |
CVE-2026-38752 |
中危 |
1.37.0-r30 |
1.38.0-r1 |
busybox: BusyBox: Denial of Service via crafted AWK script
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-38752
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-15 22:16 修改: 2026-07-20 16:16
|
| libexpat1 |
CVE-2026-32776 |
中危 |
2.7.0-r0 |
2.7.5-r0 |
libexpat: libexpat: Denial of Service due to NULL pointer dereference
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
|
| libexpat1 |
CVE-2026-32777 |
中危 |
2.7.0-r0 |
2.7.5-r0 |
libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
|
| libexpat1 |
CVE-2026-32778 |
中危 |
2.7.0-r0 |
2.7.5-r0 |
libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
|
| libexpat1 |
CVE-2026-50219 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
|
| libexpat1 |
CVE-2026-56131 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
|
| libexpat1 |
CVE-2026-56132 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
|
| libexpat1 |
CVE-2026-56403 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
|
| libexpat1 |
CVE-2026-56404 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
|
| libexpat1 |
CVE-2026-56405 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
|
| libexpat1 |
CVE-2026-56406 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
|
| libexpat1 |
CVE-2026-56407 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
libexpat: libexpat: Arbitrary code execution due to integer overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
|
| libexpat1 |
CVE-2026-56408 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
libexpat before 2.8.2 has an integer overflow in copyString.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
|
| libexpat1 |
CVE-2026-56409 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
|
| libexpat1 |
CVE-2026-56410 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
|
| libexpat1 |
CVE-2026-56411 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
|
| libexpat1 |
CVE-2026-56412 |
中危 |
2.7.0-r0 |
2.8.2-r0 |
libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
|
| libnghttp2-14 |
CVE-2026-58055 |
中危 |
1.65.0-r0 |
1.70.0-r0 |
nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
|
| busybox |
CVE-2026-38753 |
中危 |
1.37.0-r30 |
1.38.0-r0 |
busybox: Busybox: Denial of Service via crafted AWK script in awk_sub() function
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-38753
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-15 21:16 修改: 2026-07-20 16:16
|
| busybox |
CVE-2026-38755 |
中危 |
1.37.0-r30 |
1.38.0-r0 |
busybox: Busybox: Denial of Service via heap overflow in evalcommand() function
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-38755
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-15 22:16 修改: 2026-07-20 16:16
|
| binutils |
CVE-2025-11494 |
中危 |
2.44-r1 |
2.45.1-r1 |
binutils: GNU Binutils Linker out-of-bounds read
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11494
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30
|
| glibc |
CVE-2025-8058 |
中危 |
2.40-r23 |
2.41-r56 |
glibc: Double free in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
|
| glibc |
CVE-2026-0915 |
中危 |
2.40-r23 |
2.42-r6 |
glibc: glibc: Information disclosure via zero-valued network query
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
|
| glibc |
CVE-2026-4046 |
中危 |
2.40-r23 |
2.43-r6 |
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
|
| glibc |
CVE-2026-4437 |
中危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| glibc |
CVE-2026-5450 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| glibc |
CVE-2026-5928 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| glibc |
CVE-2026-6791 |
中危 |
2.40-r23 |
2.43-r10 |
glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
|
| libssl3 |
CVE-2025-11187 |
中危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11187
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:29
|
| libssl3 |
CVE-2025-4575 |
中危 |
3.4.1-r2 |
3.5.1-r0 |
Issue summary: Use of -addreject option with the openssl x509 applicat ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4575
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-05-22 14:16 修改: 2026-06-17 09:33
|
| libssl3 |
CVE-2025-69419 |
中危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| libssl3 |
CVE-2025-9230 |
中危 |
3.4.1-r2 |
3.5.4-r0 |
openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
|
| libssl3 |
CVE-2025-9231 |
中危 |
3.4.1-r2 |
3.5.4-r0 |
openssl: Timing side-channel in SM2 algorithm on 64 bit ARM
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
|
| libssl3 |
CVE-2026-2673 |
中危 |
3.4.1-r2 |
3.6.1-r3 |
openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31
|
| libssl3 |
CVE-2026-31790 |
中危 |
3.4.1-r2 |
3.6.2-r0 |
openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libssl3 |
CVE-2026-34182 |
中危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-34183 |
中危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-35188 |
中危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Double-free When Checking OCSP Stapled Response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35188
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-42764 |
中危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: NULL pointer dereference in QUIC server initial packet handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-45445 |
中危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: AES-OCB IV Ignored on EVP_Cipher() Path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| nss-db |
CVE-2025-8058 |
中危 |
2.40-r23 |
2.41-r56 |
glibc: Double free in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
|
| nss-db |
CVE-2026-0915 |
中危 |
2.40-r23 |
2.42-r6 |
glibc: glibc: Information disclosure via zero-valued network query
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
|
| nss-db |
CVE-2026-4046 |
中危 |
2.40-r23 |
2.43-r6 |
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
|
| nss-db |
CVE-2026-4437 |
中危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| nss-db |
CVE-2026-5450 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| nss-db |
CVE-2026-5928 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| nss-db |
CVE-2026-6791 |
中危 |
2.40-r23 |
2.43-r10 |
glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
|
| nss-hesiod |
CVE-2025-8058 |
中危 |
2.40-r23 |
2.41-r56 |
glibc: Double free in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
|
| nss-hesiod |
CVE-2026-0915 |
中危 |
2.40-r23 |
2.42-r6 |
glibc: glibc: Information disclosure via zero-valued network query
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
|
| nss-hesiod |
CVE-2026-4046 |
中危 |
2.40-r23 |
2.43-r6 |
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
|
| nss-hesiod |
CVE-2026-4437 |
中危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| nss-hesiod |
CVE-2026-5450 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| nss-hesiod |
CVE-2026-5928 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| nss-hesiod |
CVE-2026-6791 |
中危 |
2.40-r23 |
2.43-r10 |
glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
|
| glibc-dev |
CVE-2025-8058 |
中危 |
2.40-r23 |
2.41-r56 |
glibc: Double free in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
|
| glibc-dev |
CVE-2026-0915 |
中危 |
2.40-r23 |
2.42-r6 |
glibc: glibc: Information disclosure via zero-valued network query
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
|
| glibc-dev |
CVE-2026-4046 |
中危 |
2.40-r23 |
2.43-r6 |
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
|
| glibc-dev |
CVE-2026-4437 |
中危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| py3-pip-wheel |
CVE-2025-50181 |
中危 |
25.0.1-r0 |
26.1.1-r0 |
urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50181
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-06-19 01:15 修改: 2026-06-17 09:34
|
| py3-pip-wheel |
CVE-2025-50182 |
中危 |
25.0.1-r0 |
25.3-r1 |
urllib3: urllib3 does not control redirects in browsers and Node.js
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50182
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-06-19 02:15 修改: 2026-06-17 09:34
|
| py3-pip-wheel |
CVE-2025-8869 |
中危 |
25.0.1-r0 |
25.2-r2 |
pip: pip missing checks on symbolic link extraction
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
|
| py3-pip-wheel |
CVE-2026-25645 |
中危 |
25.0.1-r0 |
26.1.1-r0 |
requests: Requests: Security bypass due to predictable temporary file creation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25
|
| py3-pip-wheel |
CVE-2026-3219 |
中危 |
25.0.1-r0 |
26.1.1-r0 |
pip: pip: Incorrect file installation due to improper archive handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
|
| py3-pip-wheel |
CVE-2026-44431 |
中危 |
25.0.1-r0 |
26.1.2-r1 |
urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44431
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-05-13 16:16 修改: 2026-06-26 12:16
|
| py3-pip-wheel |
CVE-2026-45409 |
中危 |
25.0.1-r0 |
26.1.2-r1 |
python-idna: idna: Denial of Service via specially crafted long inputs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10
|
| py3-pip-wheel |
CVE-2026-6357 |
中危 |
25.0.1-r0 |
26.1.1-r0 |
pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
|
| glibc-dev |
CVE-2026-5450 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| glibc-dev |
CVE-2026-5928 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| glibc-dev |
CVE-2026-6791 |
中危 |
2.40-r23 |
2.43-r10 |
glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
|
| glibc-locale-posix |
CVE-2025-8058 |
中危 |
2.40-r23 |
2.41-r56 |
glibc: Double free in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
|
| py3.11-pip |
CVE-2025-50181 |
中危 |
25.0.1-r0 |
26.1.1-r0 |
urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50181
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-06-19 01:15 修改: 2026-06-17 09:34
|
| py3.11-pip |
CVE-2025-50182 |
中危 |
25.0.1-r0 |
25.3-r1 |
urllib3: urllib3 does not control redirects in browsers and Node.js
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50182
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-06-19 02:15 修改: 2026-06-17 09:34
|
| py3.11-pip |
CVE-2025-8869 |
中危 |
25.0.1-r0 |
25.2-r2 |
pip: pip missing checks on symbolic link extraction
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
|
| py3.11-pip |
CVE-2026-25645 |
中危 |
25.0.1-r0 |
26.1.1-r0 |
requests: Requests: Security bypass due to predictable temporary file creation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25
|
| py3.11-pip |
CVE-2026-3219 |
中危 |
25.0.1-r0 |
26.1.1-r0 |
pip: pip: Incorrect file installation due to improper archive handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
|
| py3.11-pip |
CVE-2026-44431 |
中危 |
25.0.1-r0 |
26.1.2-r1 |
urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44431
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-05-13 16:16 修改: 2026-06-26 12:16
|
| py3.11-pip |
CVE-2026-45409 |
中危 |
25.0.1-r0 |
26.1.2-r1 |
python-idna: idna: Denial of Service via specially crafted long inputs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10
|
| py3.11-pip |
CVE-2026-6357 |
中危 |
25.0.1-r0 |
26.1.1-r0 |
pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
|
| glibc-locale-posix |
CVE-2026-0915 |
中危 |
2.40-r23 |
2.42-r6 |
glibc: glibc: Information disclosure via zero-valued network query
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
|
| glibc-locale-posix |
CVE-2026-4046 |
中危 |
2.40-r23 |
2.43-r6 |
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
|
| glibc-locale-posix |
CVE-2026-4437 |
中危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| glibc-locale-posix |
CVE-2026-5450 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| py3.11-pip-base |
CVE-2025-50181 |
中危 |
25.0.1-r0 |
26.1.1-r0 |
urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50181
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-06-19 01:15 修改: 2026-06-17 09:34
|
| py3.11-pip-base |
CVE-2025-50182 |
中危 |
25.0.1-r0 |
25.3-r1 |
urllib3: urllib3 does not control redirects in browsers and Node.js
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50182
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-06-19 02:15 修改: 2026-06-17 09:34
|
| py3.11-pip-base |
CVE-2025-8869 |
中危 |
25.0.1-r0 |
25.2-r2 |
pip: pip missing checks on symbolic link extraction
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
|
| py3.11-pip-base |
CVE-2026-25645 |
中危 |
25.0.1-r0 |
26.1.1-r0 |
requests: Requests: Security bypass due to predictable temporary file creation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25
|
| py3.11-pip-base |
CVE-2026-3219 |
中危 |
25.0.1-r0 |
26.1.1-r0 |
pip: pip: Incorrect file installation due to improper archive handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
|
| py3.11-pip-base |
CVE-2026-44431 |
中危 |
25.0.1-r0 |
26.1.2-r1 |
urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44431
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-05-13 16:16 修改: 2026-06-26 12:16
|
| py3.11-pip-base |
CVE-2026-45409 |
中危 |
25.0.1-r0 |
26.1.2-r1 |
python-idna: idna: Denial of Service via specially crafted long inputs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10
|
| py3.11-pip-base |
CVE-2026-6357 |
中危 |
25.0.1-r0 |
26.1.1-r0 |
pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
|
| glibc-locale-posix |
CVE-2026-5928 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| py3.11-setuptools |
CVE-2026-24049 |
中危 |
76.0.0-r0 |
80.10.2-r0 |
wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24049
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-22 05:16 修改: 2026-09-10 13:17
|
| py3.11-setuptools |
CVE-2026-59890 |
中危 |
76.0.0-r0 |
83.0.0-r0 |
setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
|
| glibc-locale-posix |
CVE-2026-6791 |
中危 |
2.40-r23 |
2.43-r10 |
glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
|
| ld-linux |
CVE-2025-8058 |
中危 |
2.40-r23 |
2.41-r56 |
glibc: Double free in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
|
| ld-linux |
CVE-2026-0915 |
中危 |
2.40-r23 |
2.42-r6 |
glibc: glibc: Information disclosure via zero-valued network query
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
|
| ld-linux |
CVE-2026-4046 |
中危 |
2.40-r23 |
2.43-r6 |
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
|
| ld-linux |
CVE-2026-4437 |
中危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| ld-linux |
CVE-2026-5450 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| ld-linux |
CVE-2026-5928 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| python-3.11 |
CVE-2025-0938 |
中危 |
3.11.11-r3 |
3.11.14-r0 |
python: cpython: URL parser allowed square brackets in domain names
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-01-31 18:15 修改: 2026-07-31 14:16
|
| python-3.11 |
CVE-2025-11468 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Missing character filtering in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30
|
| python-3.11 |
CVE-2025-12084 |
中危 |
3.11.11-r3 |
3.11.15-r0 |
cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31
|
| python-3.11 |
CVE-2025-13837 |
中危 |
3.11.11-r3 |
3.11.15-r0 |
cpython: Out-of-memory when loading Plist
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15
|
| python-3.11 |
CVE-2025-15282 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Header injection via newlines in data URL mediatype in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
|
| python-3.11 |
CVE-2025-4516 |
中危 |
3.11.11-r3 |
3.11.14-r0 |
cpython: python: CPython DecodeError Handling Vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-05-15 14:15 修改: 2026-07-31 14:16
|
| python-3.11 |
CVE-2025-6069 |
中危 |
3.11.11-r3 |
3.11.13-r1 |
cpython: Python HTMLParser quadratic complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-06-17 14:15 修改: 2026-07-31 14:16
|
| python-3.11 |
CVE-2025-6075 |
中危 |
3.11.11-r3 |
3.11.14-r2 |
python: Quadratic complexity in os.path.expandvars() with user-controlled template
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-31 17:15 修改: 2026-07-31 14:16
|
| python-3.11 |
CVE-2025-8194 |
中危 |
3.11.11-r3 |
3.11.13-r4 |
cpython: Cpython infinite loop when parsing a tarfile
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-28 19:15 修改: 2026-07-31 14:16
|
| python-3.11 |
CVE-2025-8291 |
中危 |
3.11.11-r3 |
3.11.14-r0 |
cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-07 18:16 修改: 2026-07-31 14:16
|
| python-3.11 |
CVE-2026-0672 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Header injection in http.cookies.Morsel in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
|
| python-3.11 |
CVE-2026-0864 |
中危 |
3.11.11-r3 |
3.11.15-r8 |
python: cpython: Python configparser: Configuration injection via crafted multi-line input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52
|
| python-3.11 |
CVE-2026-0865 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: wsgiref.headers.Headers allows header newline injection in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
|
| python-3.11 |
CVE-2026-11972 |
中危 |
3.11.11-r3 |
3.11.15-r8 |
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-1299 |
中危 |
3.11.11-r3 |
3.11.14-r6 |
cpython: email header injection due to unquoted newlines
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15
|
| python-3.11 |
CVE-2026-1502 |
中危 |
3.11.11-r3 |
3.11.15-r9 |
python: Python: HTTP header injection via CR/LF in proxy tunnel headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-15806 |
中危 |
3.11.11-r3 |
3.11.16-r4 |
python: Python: Information disclosure due to incorrect URL scheme matching
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15806
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-18 16:17 修改: 2026-09-02 01:17
|
| python-3.11 |
CVE-2026-17084 |
中危 |
3.11.11-r3 |
3.11.16-r5 |
python: Python stringprep module: Incorrect domain name processing breaks IDNA interoperability
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-17084
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-18 14:16 修改: 2026-09-10 01:16
|
| python-3.11 |
CVE-2026-3276 |
中危 |
3.11.11-r3 |
3.11.15-r6 |
python: Python unicodedata: Denial of Service due to excessive CPU consumption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-4360 |
中危 |
3.11.11-r3 |
3.11.15-r8 |
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-7774 |
中危 |
3.11.11-r3 |
3.11.15-r9 |
python: CPython: Python tarfile: Arbitrary file write via crafted link entries
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-8328 |
中危 |
3.11.11-r3 |
3.11.15-r5 |
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-9669 |
中危 |
3.11.11-r3 |
3.11.16-r1 |
python: Python: Denial of Service via out-of-bounds write in BZ2 decompression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16
|
| ld-linux |
CVE-2026-6791 |
中危 |
2.40-r23 |
2.43-r10 |
glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
|
| libcrypt1 |
CVE-2025-8058 |
中危 |
2.40-r23 |
2.41-r56 |
glibc: Double free in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
|
| libcrypt1 |
CVE-2026-0915 |
中危 |
2.40-r23 |
2.42-r6 |
glibc: glibc: Information disclosure via zero-valued network query
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
|
| libcrypt1 |
CVE-2026-4046 |
中危 |
2.40-r23 |
2.43-r6 |
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
|
| libcrypt1 |
CVE-2026-4437 |
中危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| libcrypt1 |
CVE-2026-5450 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| libcrypt1 |
CVE-2026-5928 |
中危 |
2.40-r23 |
2.43-r7 |
glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
|
| python-3.11-base |
CVE-2025-0938 |
中危 |
3.11.11-r3 |
3.11.14-r0 |
python: cpython: URL parser allowed square brackets in domain names
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-01-31 18:15 修改: 2026-07-31 14:16
|
| python-3.11-base |
CVE-2025-11468 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Missing character filtering in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30
|
| python-3.11-base |
CVE-2025-12084 |
中危 |
3.11.11-r3 |
3.11.15-r0 |
cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31
|
| python-3.11-base |
CVE-2025-13837 |
中危 |
3.11.11-r3 |
3.11.15-r0 |
cpython: Out-of-memory when loading Plist
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15
|
| python-3.11-base |
CVE-2025-15282 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Header injection via newlines in data URL mediatype in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
|
| python-3.11-base |
CVE-2025-4516 |
中危 |
3.11.11-r3 |
3.11.14-r0 |
cpython: python: CPython DecodeError Handling Vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-05-15 14:15 修改: 2026-07-31 14:16
|
| python-3.11-base |
CVE-2025-6069 |
中危 |
3.11.11-r3 |
3.11.13-r1 |
cpython: Python HTMLParser quadratic complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-06-17 14:15 修改: 2026-07-31 14:16
|
| python-3.11-base |
CVE-2025-6075 |
中危 |
3.11.11-r3 |
3.11.14-r2 |
python: Quadratic complexity in os.path.expandvars() with user-controlled template
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-31 17:15 修改: 2026-07-31 14:16
|
| python-3.11-base |
CVE-2025-8194 |
中危 |
3.11.11-r3 |
3.11.13-r4 |
cpython: Cpython infinite loop when parsing a tarfile
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-28 19:15 修改: 2026-07-31 14:16
|
| python-3.11-base |
CVE-2025-8291 |
中危 |
3.11.11-r3 |
3.11.14-r0 |
cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-07 18:16 修改: 2026-07-31 14:16
|
| python-3.11-base |
CVE-2026-0672 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Header injection in http.cookies.Morsel in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
|
| python-3.11-base |
CVE-2026-0864 |
中危 |
3.11.11-r3 |
3.11.15-r8 |
python: cpython: Python configparser: Configuration injection via crafted multi-line input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52
|
| python-3.11-base |
CVE-2026-0865 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: wsgiref.headers.Headers allows header newline injection in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
|
| python-3.11-base |
CVE-2026-11972 |
中危 |
3.11.11-r3 |
3.11.15-r8 |
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2026-1299 |
中危 |
3.11.11-r3 |
3.11.14-r6 |
cpython: email header injection due to unquoted newlines
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15
|
| python-3.11-base |
CVE-2026-1502 |
中危 |
3.11.11-r3 |
3.11.15-r9 |
python: Python: HTTP header injection via CR/LF in proxy tunnel headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2026-15806 |
中危 |
3.11.11-r3 |
3.11.16-r4 |
python: Python: Information disclosure due to incorrect URL scheme matching
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15806
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-18 16:17 修改: 2026-09-02 01:17
|
| python-3.11-base |
CVE-2026-17084 |
中危 |
3.11.11-r3 |
3.11.16-r5 |
python: Python stringprep module: Incorrect domain name processing breaks IDNA interoperability
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-17084
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-18 14:16 修改: 2026-09-10 01:16
|
| python-3.11-base |
CVE-2026-3276 |
中危 |
3.11.11-r3 |
3.11.15-r6 |
python: Python unicodedata: Denial of Service due to excessive CPU consumption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2026-4360 |
中危 |
3.11.11-r3 |
3.11.15-r8 |
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2026-7774 |
中危 |
3.11.11-r3 |
3.11.15-r9 |
python: CPython: Python tarfile: Arbitrary file write via crafted link entries
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2026-8328 |
中危 |
3.11.11-r3 |
3.11.15-r5 |
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2026-9669 |
中危 |
3.11.11-r3 |
3.11.16-r1 |
python: Python: Denial of Service via out-of-bounds write in BZ2 decompression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16
|
| libcrypt1 |
CVE-2026-6791 |
中危 |
2.40-r23 |
2.43-r10 |
glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
|
| binutils |
CVE-2025-11495 |
中危 |
2.44-r1 |
2.45.1-r1 |
binutils: GNU Binutils Linker heap-based overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11495
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-08 20:15 修改: 2026-06-17 08:30
|
| binutils |
CVE-2025-1153 |
中危 |
2.44-r1 |
2.45-r0 |
binutils: GNU Binutils format.c bfd_set_format memory corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1153
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-02-10 19:15 修改: 2026-06-17 08:38
|
| binutils |
CVE-2025-11839 |
中危 |
2.44-r1 |
2.45.1-r1 |
binutils: GNU Binutils prdbg.c tg_tag_type return value
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11839
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-16 14:15 修改: 2026-06-17 08:31
|
| binutils |
CVE-2025-11840 |
中危 |
2.44-r1 |
2.45.1-r1 |
binutils: GNU Binutils out-of-bounds read
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11840
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-16 16:15 修改: 2026-06-17 08:31
|
| binutils |
CVE-2025-3198 |
中危 |
2.44-r1 |
2.45-r0 |
binutils: GNU Binutils objdump bucomm.c display_info memory leak
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3198
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-04-04 02:15 修改: 2026-06-17 09:19
|
| binutils |
CVE-2025-69651 |
中危 |
2.44-r1 |
2.46.1-r0 |
binutils: Binutils: Denial of Service via crafted ELF binary processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
|
| python-3.11-base-dev |
CVE-2025-0938 |
中危 |
3.11.11-r3 |
3.11.14-r0 |
python: cpython: URL parser allowed square brackets in domain names
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-01-31 18:15 修改: 2026-07-31 14:16
|
| python-3.11-base-dev |
CVE-2025-11468 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Missing character filtering in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30
|
| python-3.11-base-dev |
CVE-2025-12084 |
中危 |
3.11.11-r3 |
3.11.15-r0 |
cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31
|
| python-3.11-base-dev |
CVE-2025-13837 |
中危 |
3.11.11-r3 |
3.11.15-r0 |
cpython: Out-of-memory when loading Plist
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15
|
| python-3.11-base-dev |
CVE-2025-15282 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Header injection via newlines in data URL mediatype in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
|
| python-3.11-base-dev |
CVE-2025-4516 |
中危 |
3.11.11-r3 |
3.11.14-r0 |
cpython: python: CPython DecodeError Handling Vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-05-15 14:15 修改: 2026-07-31 14:16
|
| python-3.11-base-dev |
CVE-2025-6069 |
中危 |
3.11.11-r3 |
3.11.13-r1 |
cpython: Python HTMLParser quadratic complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-06-17 14:15 修改: 2026-07-31 14:16
|
| python-3.11-base-dev |
CVE-2025-6075 |
中危 |
3.11.11-r3 |
3.11.14-r2 |
python: Quadratic complexity in os.path.expandvars() with user-controlled template
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-31 17:15 修改: 2026-07-31 14:16
|
| python-3.11-base-dev |
CVE-2025-8194 |
中危 |
3.11.11-r3 |
3.11.13-r4 |
cpython: Cpython infinite loop when parsing a tarfile
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-28 19:15 修改: 2026-07-31 14:16
|
| python-3.11-base-dev |
CVE-2025-8291 |
中危 |
3.11.11-r3 |
3.11.14-r0 |
cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-07 18:16 修改: 2026-07-31 14:16
|
| python-3.11-base-dev |
CVE-2026-0672 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Header injection in http.cookies.Morsel in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
|
| python-3.11-base-dev |
CVE-2026-0864 |
中危 |
3.11.11-r3 |
3.11.15-r8 |
python: cpython: Python configparser: Configuration injection via crafted multi-line input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52
|
| python-3.11-base-dev |
CVE-2026-0865 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: wsgiref.headers.Headers allows header newline injection in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
|
| python-3.11-base-dev |
CVE-2026-11972 |
中危 |
3.11.11-r3 |
3.11.15-r8 |
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-1299 |
中危 |
3.11.11-r3 |
3.11.14-r6 |
cpython: email header injection due to unquoted newlines
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15
|
| python-3.11-base-dev |
CVE-2026-1502 |
中危 |
3.11.11-r3 |
3.11.15-r9 |
python: Python: HTTP header injection via CR/LF in proxy tunnel headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-15806 |
中危 |
3.11.11-r3 |
3.11.16-r4 |
python: Python: Information disclosure due to incorrect URL scheme matching
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15806
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-18 16:17 修改: 2026-09-02 01:17
|
| python-3.11-base-dev |
CVE-2026-17084 |
中危 |
3.11.11-r3 |
3.11.16-r5 |
python: Python stringprep module: Incorrect domain name processing breaks IDNA interoperability
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-17084
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-18 14:16 修改: 2026-09-10 01:16
|
| python-3.11-base-dev |
CVE-2026-3276 |
中危 |
3.11.11-r3 |
3.11.15-r6 |
python: Python unicodedata: Denial of Service due to excessive CPU consumption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-4360 |
中危 |
3.11.11-r3 |
3.11.15-r8 |
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-7774 |
中危 |
3.11.11-r3 |
3.11.15-r9 |
python: CPython: Python tarfile: Arbitrary file write via crafted link entries
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-8328 |
中危 |
3.11.11-r3 |
3.11.15-r5 |
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-9669 |
中危 |
3.11.11-r3 |
3.11.16-r1 |
python: Python: Denial of Service via out-of-bounds write in BZ2 decompression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16
|
| binutils |
CVE-2026-4647 |
中危 |
2.44-r1 |
2.46.1-r2 |
binutils: Out-of-Bounds Read in XCOFF Relocation Processing in GNU Binutils BFD Library
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4647
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-23 14:16 修改: 2026-09-01 13:19
|
| binutils |
CVE-2025-11081 |
中危 |
2.44-r1 |
2.45.1-r1 |
binutils: GNU Binutils out-of-bounds read
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11081
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-27 22:15 修改: 2026-06-17 08:29
|
| binutils |
CVE-2025-11412 |
中危 |
2.44-r1 |
2.45.1-r1 |
binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11412
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30
|
| binutils |
CVE-2025-11413 |
中危 |
2.44-r1 |
2.45.1-r1 |
binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11413
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-07 22:15 修改: 2026-06-17 08:30
|
| libcrypto3 |
CVE-2025-11187 |
中危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11187
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:29
|
| libcrypto3 |
CVE-2025-4575 |
中危 |
3.4.1-r2 |
3.5.1-r0 |
Issue summary: Use of -addreject option with the openssl x509 applicat ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4575
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-05-22 14:16 修改: 2026-06-17 09:33
|
| libcrypto3 |
CVE-2025-69419 |
中危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| python-3.11-dev |
CVE-2025-0938 |
中危 |
3.11.11-r3 |
3.11.14-r0 |
python: cpython: URL parser allowed square brackets in domain names
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-01-31 18:15 修改: 2026-07-31 14:16
|
| python-3.11-dev |
CVE-2025-11468 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Missing character filtering in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30
|
| python-3.11-dev |
CVE-2025-12084 |
中危 |
3.11.11-r3 |
3.11.15-r0 |
cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31
|
| python-3.11-dev |
CVE-2025-13837 |
中危 |
3.11.11-r3 |
3.11.15-r0 |
cpython: Out-of-memory when loading Plist
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15
|
| python-3.11-dev |
CVE-2025-15282 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Header injection via newlines in data URL mediatype in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
|
| python-3.11-dev |
CVE-2025-4516 |
中危 |
3.11.11-r3 |
3.11.14-r0 |
cpython: python: CPython DecodeError Handling Vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-05-15 14:15 修改: 2026-07-31 14:16
|
| python-3.11-dev |
CVE-2025-6069 |
中危 |
3.11.11-r3 |
3.11.13-r1 |
cpython: Python HTMLParser quadratic complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-06-17 14:15 修改: 2026-07-31 14:16
|
| python-3.11-dev |
CVE-2025-6075 |
中危 |
3.11.11-r3 |
3.11.14-r2 |
python: Quadratic complexity in os.path.expandvars() with user-controlled template
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-31 17:15 修改: 2026-07-31 14:16
|
| python-3.11-dev |
CVE-2025-8194 |
中危 |
3.11.11-r3 |
3.11.13-r4 |
cpython: Cpython infinite loop when parsing a tarfile
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-07-28 19:15 修改: 2026-07-31 14:16
|
| python-3.11-dev |
CVE-2025-8291 |
中危 |
3.11.11-r3 |
3.11.14-r0 |
cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-10-07 18:16 修改: 2026-07-31 14:16
|
| python-3.11-dev |
CVE-2026-0672 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: Header injection in http.cookies.Morsel in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
|
| python-3.11-dev |
CVE-2026-0864 |
中危 |
3.11.11-r3 |
3.11.15-r8 |
python: cpython: Python configparser: Configuration injection via crafted multi-line input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52
|
| python-3.11-dev |
CVE-2026-0865 |
中危 |
3.11.11-r3 |
3.11.14-r5 |
cpython: wsgiref.headers.Headers allows header newline injection in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
|
| python-3.11-dev |
CVE-2026-11972 |
中危 |
3.11.11-r3 |
3.11.15-r8 |
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-1299 |
中危 |
3.11.11-r3 |
3.11.14-r6 |
cpython: email header injection due to unquoted newlines
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15
|
| python-3.11-dev |
CVE-2026-1502 |
中危 |
3.11.11-r3 |
3.11.15-r9 |
python: Python: HTTP header injection via CR/LF in proxy tunnel headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-15806 |
中危 |
3.11.11-r3 |
3.11.16-r4 |
python: Python: Information disclosure due to incorrect URL scheme matching
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15806
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-18 16:17 修改: 2026-09-02 01:17
|
| python-3.11-dev |
CVE-2026-17084 |
中危 |
3.11.11-r3 |
3.11.16-r5 |
python: Python stringprep module: Incorrect domain name processing breaks IDNA interoperability
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-17084
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-18 14:16 修改: 2026-09-10 01:16
|
| python-3.11-dev |
CVE-2026-3276 |
中危 |
3.11.11-r3 |
3.11.15-r6 |
python: Python unicodedata: Denial of Service due to excessive CPU consumption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-4360 |
中危 |
3.11.11-r3 |
3.11.15-r8 |
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-7774 |
中危 |
3.11.11-r3 |
3.11.15-r9 |
python: CPython: Python tarfile: Arbitrary file write via crafted link entries
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-8328 |
中危 |
3.11.11-r3 |
3.11.15-r5 |
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-9669 |
中危 |
3.11.11-r3 |
3.11.16-r1 |
python: Python: Denial of Service via out-of-bounds write in BZ2 decompression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16
|
| libcrypto3 |
CVE-2025-9230 |
中危 |
3.4.1-r2 |
3.5.4-r0 |
openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
|
| libcrypto3 |
CVE-2025-9231 |
中危 |
3.4.1-r2 |
3.5.4-r0 |
openssl: Timing side-channel in SM2 algorithm on 64 bit ARM
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
|
| libcrypto3 |
CVE-2026-2673 |
中危 |
3.4.1-r2 |
3.6.1-r3 |
openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31
|
| uv |
CVE-2025-55159 |
中危 |
0.6.6-r1 |
0.8.9-r1 |
slab: Slab: Out-of-bounds Memory Access Vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55159
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-08-11 23:15 修改: 2026-06-17 09:41
|
| uv |
CVE-2026-21895 |
中危 |
0.6.6-r1 |
0.9.27-r4 |
RSA: RSA crate: Denial of Service due to malformed prime in private key generation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21895
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-08 14:15 修改: 2026-06-17 10:19
|
| uv |
CVE-2026-25727 |
中危 |
0.6.6-r1 |
0.10.2-r1 |
time: time affected by a stack exhaustion denial of service attack
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25727
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-02-06 20:16 修改: 2026-06-17 10:25
|
| uv |
CVE-2026-32766 |
中危 |
0.6.6-r1 |
0.10.12-r0 |
astral-tokio-tar: astral-tokio-tar: Potential archive misinterpretation via malformed PAX extensions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32766
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:36
|
| libcrypto3 |
CVE-2026-31790 |
中危 |
3.4.1-r2 |
3.6.2-r0 |
openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
|
| libcrypto3 |
CVE-2026-34182 |
中危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| wget |
CVE-2026-16599 |
中危 |
1.25.0-r0 |
1.25.0-r17 |
wget: wget: Denial of Service via crafted FTP OPIE/S-KEY authentication challenge
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16599
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-25 15:16 修改: 2026-08-28 15:26
|
| wget |
CVE-2026-58469 |
中危 |
1.25.0-r0 |
1.25.0-r15 |
wget: GNU Wget: Memory corruption via crafted Metalink URL
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58469
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:59
|
| wget |
CVE-2026-58470 |
中危 |
1.25.0-r0 |
1.25.0-r15 |
wget: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58470
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:01
|
| zlib |
CVE-2026-27171 |
中危 |
1.3.1-r6 |
1.3.2-r0 |
zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
|
| zlib |
CVE-2026-85091 |
中危 |
1.3.1-r6 |
1.3.3-r0 |
zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41
|
| python-3.11-base |
CVE-2026-18503 |
低危 |
3.11.11-r3 |
3.11.16-r0 |
python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18503
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-10 14:17 修改: 2026-08-18 15:04
|
| python-3.11-base |
CVE-2026-2297 |
低危 |
3.11.11-r3 |
3.11.16-r1 |
cpython: CPython: Logging Bypass in Legacy .pyc File Handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2026-4519 |
低危 |
3.11.11-r3 |
3.11.15-r1 |
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16
|
| python-3.11-base |
CVE-2026-6879 |
低危 |
3.11.11-r3 |
3.11.16-r0 |
python: Python: Performance degradation in XML processing due to quadratic time complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16
|
| libssl3 |
CVE-2025-69418 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| libssl3 |
CVE-2025-69420 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service via malformed TimeStamp Response
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| libssl3 |
CVE-2025-9232 |
低危 |
3.4.1-r2 |
3.5.4-r0 |
openssl: Out-of-bounds read in HTTP client no_proxy handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
|
| libssl3 |
CVE-2026-22795 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
|
| libssl3 |
CVE-2026-22796 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
|
| libssl3 |
CVE-2026-34180 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-34181 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-42765 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: NULL Dereference in Certificate Verification with OCSP Checking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42765
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-42766 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Possible NULL Dereference in Password-Based CMS Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-42767 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-42768 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-42769 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-42770 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-45446 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-54876 |
低危 |
3.4.1-r2 |
3.6.3-r4 |
openssl: OpenSSL: Memory leak leads to Denial of Service in OCSP response checking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54876
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-05 15:16 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-7383 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libssl3 |
CVE-2026-9076 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| glibc-dev |
CVE-2026-0861 |
低危 |
2.40-r23 |
2.42-r6 |
glibc: Integer overflow in memalign leads to heap corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
|
| glibc-dev |
CVE-2026-4438 |
低危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| libcrypt1 |
CVE-2025-15281 |
低危 |
2.40-r23 |
2.42-r7 |
glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
|
| libcrypt1 |
CVE-2026-0861 |
低危 |
2.40-r23 |
2.42-r6 |
glibc: Integer overflow in memalign leads to heap corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
|
| libcrypt1 |
CVE-2026-4438 |
低危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| binutils |
CVE-2025-69652 |
低危 |
2.44-r1 |
2.46.1-r0 |
binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
|
| busybox |
CVE-2025-46394 |
低危 |
1.37.0-r30 |
1.37.0-r50 |
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
|
| nss-db |
CVE-2025-15281 |
低危 |
2.40-r23 |
2.42-r7 |
glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
|
| nss-db |
CVE-2026-0861 |
低危 |
2.40-r23 |
2.42-r6 |
glibc: Integer overflow in memalign leads to heap corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
|
| nss-db |
CVE-2026-4438 |
低危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| glibc |
CVE-2025-15281 |
低危 |
2.40-r23 |
2.42-r7 |
glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
|
| glibc |
CVE-2026-0861 |
低危 |
2.40-r23 |
2.42-r6 |
glibc: Integer overflow in memalign leads to heap corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
|
| libcrypto3 |
CVE-2025-15468 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
|
| python-3.11-base-dev |
CVE-2025-13462 |
低危 |
3.11.11-r3 |
3.11.15-r9 |
cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-18503 |
低危 |
3.11.11-r3 |
3.11.16-r0 |
python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18503
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-10 14:17 修改: 2026-08-18 15:04
|
| python-3.11-base-dev |
CVE-2026-2297 |
低危 |
3.11.11-r3 |
3.11.16-r1 |
cpython: CPython: Logging Bypass in Legacy .pyc File Handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-4519 |
低危 |
3.11.11-r3 |
3.11.15-r1 |
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16
|
| python-3.11-base-dev |
CVE-2026-6879 |
低危 |
3.11.11-r3 |
3.11.16-r0 |
python: Python: Performance degradation in XML processing due to quadratic time complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16
|
| libcrypto3 |
CVE-2025-15469 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
|
| libcrypto3 |
CVE-2025-66199 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
|
| libcrypto3 |
CVE-2025-68160 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
|
| libcrypto3 |
CVE-2025-69418 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| nss-hesiod |
CVE-2025-15281 |
低危 |
2.40-r23 |
2.42-r7 |
glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
|
| nss-hesiod |
CVE-2026-0861 |
低危 |
2.40-r23 |
2.42-r6 |
glibc: Integer overflow in memalign leads to heap corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
|
| nss-hesiod |
CVE-2026-4438 |
低危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| libcrypto3 |
CVE-2025-69420 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service via malformed TimeStamp Response
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| python-3.11 |
CVE-2025-13462 |
低危 |
3.11.11-r3 |
3.11.15-r9 |
cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-18503 |
低危 |
3.11.11-r3 |
3.11.16-r0 |
python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18503
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-10 14:17 修改: 2026-08-18 15:04
|
| python-3.11 |
CVE-2026-2297 |
低危 |
3.11.11-r3 |
3.11.16-r1 |
cpython: CPython: Logging Bypass in Legacy .pyc File Handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-4519 |
低危 |
3.11.11-r3 |
3.11.15-r1 |
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16
|
| python-3.11 |
CVE-2026-6879 |
低危 |
3.11.11-r3 |
3.11.16-r0 |
python: Python: Performance degradation in XML processing due to quadratic time complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16
|
| libcrypto3 |
CVE-2025-9232 |
低危 |
3.4.1-r2 |
3.5.4-r0 |
openssl: Out-of-bounds read in HTTP client no_proxy handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
|
| libexpat1 |
CVE-2026-24515 |
低危 |
2.7.0-r0 |
2.7.4-r0 |
libexpat: libexpat null pointer dereference
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-23 08:16 修改: 2026-06-17 10:23
|
| libexpat1 |
CVE-2026-41080 |
低危 |
2.7.0-r0 |
2.8.0-r0 |
libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
|
| libcrypto3 |
CVE-2026-22795 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
|
| libcrypto3 |
CVE-2026-22796 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
|
| libcrypto3 |
CVE-2026-34180 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-34181 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-42765 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: NULL Dereference in Certificate Verification with OCSP Checking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42765
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-42766 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Possible NULL Dereference in Password-Based CMS Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-42767 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-42768 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-42769 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-42770 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-45446 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-54876 |
低危 |
3.4.1-r2 |
3.6.3-r4 |
openssl: OpenSSL: Memory leak leads to Denial of Service in OCSP response checking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54876
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-05 15:16 修改: 2026-08-28 19:46
|
| libcrypto3 |
CVE-2026-7383 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| libcrypto3 |
CVE-2026-9076 |
低危 |
3.4.1-r2 |
3.6.3-r0 |
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| python-3.11-dev |
CVE-2025-13462 |
低危 |
3.11.11-r3 |
3.11.15-r9 |
cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-18503 |
低危 |
3.11.11-r3 |
3.11.16-r0 |
python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18503
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-08-10 14:17 修改: 2026-08-18 15:04
|
| python-3.11-dev |
CVE-2026-2297 |
低危 |
3.11.11-r3 |
3.11.16-r1 |
cpython: CPython: Logging Bypass in Legacy .pyc File Handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-4519 |
低危 |
3.11.11-r3 |
3.11.15-r1 |
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16
|
| python-3.11-dev |
CVE-2026-6879 |
低危 |
3.11.11-r3 |
3.11.16-r0 |
python: Python: Performance degradation in XML processing due to quadratic time complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16
|
| glibc |
CVE-2026-4438 |
低危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| ld-linux |
CVE-2025-15281 |
低危 |
2.40-r23 |
2.42-r7 |
glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
|
| ld-linux |
CVE-2026-0861 |
低危 |
2.40-r23 |
2.42-r6 |
glibc: Integer overflow in memalign leads to heap corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
|
| ld-linux |
CVE-2026-4438 |
低危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| busybox |
CVE-2025-60876 |
低危 |
1.37.0-r30 |
1.37.0-r52 |
busybox: BusyBox wget: HTTP request-target allows header injection
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-60876
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-11-10 20:15 修改: 2026-06-17 09:50
|
| glibc-dev |
CVE-2025-15281 |
低危 |
2.40-r23 |
2.42-r7 |
glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
|
| glibc-locale-posix |
CVE-2025-15281 |
低危 |
2.40-r23 |
2.42-r7 |
glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
|
| uv |
CVE-2025-58160 |
低危 |
0.6.6-r1 |
0.8.14-r1 |
tracing-subscriber: Tracing log pollution
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58160
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2025-08-29 22:15 修改: 2026-06-17 09:44
|
| glibc-locale-posix |
CVE-2026-0861 |
低危 |
2.40-r23 |
2.42-r6 |
glibc: Integer overflow in memalign leads to heap corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
|
| glibc-locale-posix |
CVE-2026-4438 |
低危 |
2.40-r23 |
2.43-r4 |
glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
|
| libssl3 |
CVE-2025-15468 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
|
| libssl3 |
CVE-2025-15469 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
|
| libssl3 |
CVE-2025-66199 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
|
| libssl3 |
CVE-2025-68160 |
低危 |
3.4.1-r2 |
3.6.1-r0 |
openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
|
| python-3.11-base |
CVE-2025-13462 |
低危 |
3.11.11-r3 |
3.11.15-r9 |
cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16
|
| git |
CVE-2026-32631 |
未知 |
2.48.1-r2 |
2.54.0-r0 |
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32631
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-04-15 18:17 修改: 2026-06-17 10:36
|
| libcurl-openssl4 |
CVE-2026-80231 |
未知 |
8.12.1-r0 |
8.22.0-r0 |
native CA store conn reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80231
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|
| libcurl-openssl4 |
CVE-2026-82208 |
未知 |
8.12.1-r0 |
8.22.0-r0 |
With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_S ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82208
镜像层: sha256:9598a35a93f1241839a6b8959e1f25fbf5091c5c1b823b776d0c8b59d978c4b4
发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
|