docker.elastic.co/logstash/logstash:8.19.21 linux/amd64

docker.elastic.co/logstash/logstash:8.19.21 - Trivy安全扫描结果 扫描时间: 2026-09-04 08:57
全部漏洞信息
低危漏洞:31 中危漏洞:92 高危漏洞:9 严重漏洞:1

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-04 08:57

docker.elastic.co/logstash/logstash:8.19.21 (ubuntu 24.04) (ubuntu)
低危漏洞:21 中危漏洞:67 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-13595 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
bsdutils CVE-2026-27456 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
bsdutils CVE-2026-53612 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53613 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53614 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53615 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
diffutils CVE-2026-53910 中危 1:3.10-1build1 1:3.10-1ubuntu0.1 diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
libattr1 CVE-2026-54371 中危 1:2.5.2-1build1.1 1:2.5.2-1ubuntu0.1 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 14:16 修改: 2026-09-02 13:18
libblkid1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libblkid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libmount1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libp11-kit0 CVE-2026-13757 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
libp11-kit0 CVE-2026-18938 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07
libsmartcols1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libsmartcols1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsmartcols1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssh-4 CVE-2026-59843 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: denial of service via zero advertised channel packet size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59843

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-07-21 12:18 修改: 2026-09-01 21:18
libssh-4 CVE-2026-59845 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: denial of service via unchecked ProxyCommand fork() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59845

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-07-21 12:18 修改: 2026-09-01 21:18
libssh-4 CVE-2026-59846 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: information disclosure via ProxyCommand %r username expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59846

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-07-21 13:17 修改: 2026-09-01 21:18
libssh-4 CVE-2026-59847 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59847

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-07-21 14:16 修改: 2026-09-01 21:18
libssh-4 CVE-2026-59848 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: denial of service via SFTP responses with unknown request IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59848

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-07-21 14:16 修改: 2026-09-01 21:18
libssh-4 CVE-2026-59850 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: use-after-free via data callbacks on closed channels

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59850

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-07-21 15:16 修改: 2026-09-01 21:18
libssl3t64 CVE-2026-63072 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63076 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libuuid1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libuuid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
mount CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl CVE-2026-63072 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63076 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
perl-base CVE-2025-15649 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base CVE-2026-12087 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl-base CVE-2026-13221 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
perl-base CVE-2026-48959 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base CVE-2026-48962 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
perl-base CVE-2026-57432 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
perl-base CVE-2026-57433 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
perl-base CVE-2026-7017 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
perl-base CVE-2026-9538 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-03 17:16 修改: 2026-09-01 15:17
tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-03 16:16 修改: 2026-09-01 15:17
util-linux CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
util-linux CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
util-linux CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl CVE-2026-63074 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-75803 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libbz2-1.0 CVE-2026-42250 低危 1.0.8-5.1build0.1 1.0.8-5.1ubuntu0.1 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
libcurl4t64 CVE-2026-8932 低危 8.5.0-2ubuntu10.12 8.5.0-2ubuntu10.13 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
libgcrypt20 CVE-2024-2236 低危 1.10.3-2ubuntu0.1 1.10.3-2ubuntu0.2 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
libncursesw6 CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
coreutils CVE-2025-5278 低危 9.4-3ubuntu6.2 9.4-3ubuntu6.3 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2025-05-27 21:15 修改: 2026-09-01 12:17
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
gpgv CVE-2026-57062 低危 2.4.4-2ubuntu17.4 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16
libssl3t64 CVE-2026-54874 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63074 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-75803 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libtinfo6 CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
ncurses-base CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
ncurses-bin CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
curl CVE-2026-8932 低危 8.5.0-2ubuntu10.12 8.5.0-2ubuntu10.13 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
openssl CVE-2026-54874 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:933cb4d9fed862c05a342286e8e024a89267b11c0b9922fc0c7b1053e86e2fbd

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
zlib1g CVE-2026-27171 低危 1:1.3.dfsg-3.1ubuntu2.1 1:1.3.dfsg-3.1ubuntu2.2 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
Java (jar)
低危漏洞:1 中危漏洞:16 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
com.rabbitmq:amqp-client CVE-2026-63337 高危 5.26.0 5.33.0 The RabbitMQ Java client library allows Java and JVM-based application ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63337

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-08-18 17:17 修改: 2026-08-18 20:17
com.rabbitmq:amqp-client CVE-2026-69219 高危 5.26.0 5.33.1 The RabbitMQ Java client library allows Java and JVM-based application ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69219

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-08-18 17:17 修改: 2026-08-19 15:17
com.rabbitmq:amqp-client CVE-2026-69220 高危 5.26.0 5.33.1 The RabbitMQ Java client library allows Java and JVM-based application ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69220

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-08-18 17:17 修改: 2026-08-18 18:19
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.18.8 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.21.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.21.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.21.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.21.4 2.21.5, 2.18.9, 2.22.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.21.4 2.21.5, 2.18.9, 2.22.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.21.4 2.21.5, 2.18.9, 2.22.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.21.4 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.21.4 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.21.4 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
at.yawk.lz4:lz4-java CVE-2026-59949 中危 1.10.1 1.11.1 lz4-java: lz4-java: Denial of Service via insufficient validation in XXHash JNI implementations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-08-18 15:16 修改: 2026-08-18 18:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.18.8 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.18.8 2.21.5, 2.18.9, 2.22.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.rabbitmq:amqp-client CVE-2026-63335 中危 5.26.0 5.31.0 The RabbitMQ Java client library allows Java and JVM-based application ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63335

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-08-18 17:17 修改: 2026-08-18 18:19
com.rabbitmq:amqp-client CVE-2026-63336 中危 5.26.0 5.33.0 The RabbitMQ Java client library allows Java and JVM-based application ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63336

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-08-18 17:17 修改: 2026-08-18 18:19
tools.jackson.core:jackson-databind CVE-2026-59889 中危 3.1.4 3.1.5, 3.2.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.rabbitmq:amqp-client CVE-2026-61634 低危 5.26.0 5.33.0 The RabbitMQ Java client library allows Java and JVM-based application ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-61634

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-08-18 17:16 修改: 2026-08-18 18:18
Ruby (gemspec)
低危漏洞:9 中危漏洞:9 高危漏洞:6 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
net-imap CVE-2026-42257 严重 0.2.5 ~> 0.4.24, ~> 0.5.14, >= 0.6.4 net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42257

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-05-09 20:16 修改: 2026-07-24 21:10
net-imap CVE-2026-42245 高危 0.2.5 ~> 0.4.24, ~> 0.5.14, >= 0.6.4 ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42245

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-05-09 20:16 修改: 2026-07-24 19:10
net-imap CVE-2026-42246 高危 0.2.5 ~> 0.3.10, ~> 0.4.24, ~> 0.5.14, >= 0.6.4 net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42246

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-05-09 20:16 修改: 2026-08-24 13:18
net-imap CVE-2026-42258 高危 0.2.5 ~> 0.4.24, ~> 0.5.14, >= 0.6.4 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42258

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-05-09 20:16 修改: 2026-08-24 13:18
nokogiri CVE-2026-79770 高危 1.18.10 1.19.3 nokogiri: Nokogiri: Denial of Service via crafted CSS selectors

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-79770

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-08-25 16:17 修改: 2026-09-01 14:56
nokogiri GHSA-c4rq-3m3g-8wgx 高危 1.18.10 >= 1.19.3 Nokogiri CSS selector tokenizer has regular expression backtracking

漏洞详情: https://github.com/advisories/GHSA-c4rq-3m3g-8wgx

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
uri CVE-2025-61594 高危 0.12.4 ~> 0.12.5, ~> 0.13.3, >= 1.0.4 uri: URI module: Credential exposure via URI + operator

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61594

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2025-12-30 21:15 修改: 2026-06-17 09:50
net-imap CVE-2026-47242 中危 0.2.5 ~> 0.5.15, >= 0.6.4.1 net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47242

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-22 21:16 修改: 2026-06-23 15:03
mail CVE-2026-63435 中危 2.8.1 2.9.1 Mail: Email address spoofing via malformed RFC 2047 encoded-words

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63435

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-09-01 21:18 修改: 2026-09-02 16:17
mail GHSA-mvxr-6m87-mv2q 中危 2.8.1 >= 2.9.1 Email address spoofing via malformed RFC 2047 encoded-words in mail

漏洞详情: https://github.com/advisories/GHSA-mvxr-6m87-mv2q

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
nokogiri CVE-2026-79771 中危 1.18.10 1.19.3 nokogiri: Nokogiri: Denial of Service via XSLT transform memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-79771

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-08-25 16:17 修改: 2026-09-01 14:55
nokogiri CVE-2026-79772 中危 1.18.10 1.19.1 nokogiri: Nokogiri: Signature validation bypass via unchecked return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-79772

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-08-25 16:17 修改: 2026-09-01 14:54
nokogiri GHSA-5prr-v3j2-97mh 中危 1.18.10 >= 1.19.4 Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`

漏洞详情: https://github.com/advisories/GHSA-5prr-v3j2-97mh

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-19 16:36 修改: 2026-06-19 16:36
nokogiri GHSA-v2fc-qm4h-8hqv 中危 1.18.10 >= 1.19.3 Nokogiri XSLT transform has a memory leak

漏洞详情: https://github.com/advisories/GHSA-v2fc-qm4h-8hqv

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
nokogiri GHSA-wx95-c6cv-8532 中危 1.18.10 >= 1.19.1 Nokogiri does not check the return value from xmlC14NExecute

漏洞详情: https://github.com/advisories/GHSA-wx95-c6cv-8532

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
net-imap CVE-2026-47240 中危 0.2.5 ~> 0.5.15, >= 0.6.4.1 net-imap: Net::IMAP: Command injection via non-synchronizing literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47240

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-22 21:16 修改: 2026-06-23 16:16
json CVE-2026-54696 低危 2.12.2 >= 2.19.9 json: Ruby JSON: Denial of service via heap buffer overflow with oversized streamed objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54696

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-30 23:17 修改: 2026-07-02 17:54
nokogiri GHSA-5v8h-3h3q-446p 低危 1.18.10 >= 1.19.4 Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

漏洞详情: https://github.com/advisories/GHSA-5v8h-3h3q-446p

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-19 16:35 修改: 2026-06-19 16:35
nokogiri GHSA-8678-w3jw-xfc2 低危 1.18.10 >= 1.19.4 Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247

漏洞详情: https://github.com/advisories/GHSA-8678-w3jw-xfc2

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-19 16:36 修改: 2026-06-19 16:36
nokogiri GHSA-9cv2-cfxc-v4v2 低危 1.18.10 >= 1.19.4 Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

漏洞详情: https://github.com/advisories/GHSA-9cv2-cfxc-v4v2

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-19 16:36 修改: 2026-06-19 16:36
nokogiri GHSA-p67v-3w7g-wjg7 低危 1.18.10 >= 1.19.4 Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

漏洞详情: https://github.com/advisories/GHSA-p67v-3w7g-wjg7

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-19 16:37 修改: 2026-06-19 16:37
nokogiri GHSA-phwj-rprq-35pp 低危 1.18.10 >= 1.19.4 Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

漏洞详情: https://github.com/advisories/GHSA-phwj-rprq-35pp

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-19 16:37 修改: 2026-06-19 16:37
nokogiri GHSA-wfpw-mmfh-qq69 低危 1.18.10 >= 1.19.4 Nokogiri: Possible Use-After-Free in XInclude Processing

漏洞详情: https://github.com/advisories/GHSA-wfpw-mmfh-qq69

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-19 16:37 修改: 2026-06-19 16:37
nokogiri GHSA-wjv4-x9w8-wm3h 低危 1.18.10 >= 1.19.4 Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

漏洞详情: https://github.com/advisories/GHSA-wjv4-x9w8-wm3h

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-19 16:36 修改: 2026-06-19 16:36
net-imap CVE-2026-47241 低危 0.2.5 ~> 0.5.15, >= 0.6.4.1 net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47241

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 2026-06-22 21:16 修改: 2026-06-23 15:16
nokogiri GHSA-g9g8-vgvw-g3vf 未知 1.18.10 >= 1.19.4 Possible invalid memory read when calling `Nokogiri::XML::Node#initialize_copy_with_args` with incorrect argument type

漏洞详情: https://github.com/advisories/GHSA-g9g8-vgvw-g3vf

镜像层: sha256:6ab1c319e0edceb8af986c62a4db741f0a3180e8995afee694c14c5d57dc6148

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×