docker.io/anoxis/registry-cli:latest linux/amd64

docker.io/anoxis/registry-cli:latest - Trivy安全扫描结果 扫描时间: 2026-08-25 11:45
全部漏洞信息
低危漏洞:3 中危漏洞:26 高危漏洞:43 严重漏洞:4

系统OS: alpine 3.11.5 扫描引擎: Trivy 扫描时间: 2026-08-25 11:45

docker.io/anoxis/registry-cli:latest (alpine 3.11.5) (alpine)
低危漏洞:2 中危漏洞:10 高危漏洞:31 严重漏洞:4
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
apk-tools CVE-2021-36159 严重 2.10.4-r3 2.10.7-r0 libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36159

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-08-03 14:15 修改: 2026-06-17 03:58
libcrypto1.1 CVE-2021-3711 严重 1.1.1d-r3 1.1.1l-r0 openssl: SM2 Decryption Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05
libssl1.1 CVE-2021-3711 严重 1.1.1d-r3 1.1.1l-r0 openssl: SM2 Decryption Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05
zlib CVE-2022-37434 严重 1.2.11-r3 1.2.11-r4 zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2022-08-05 07:15 修改: 2026-07-14 12:16
busybox CVE-2021-42379 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42379

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2021-42380 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42380

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2021-42381 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42381

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2021-42382 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42382

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2021-42383 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42383

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2021-42384 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42384

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2021-42385 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42385

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2021-42386 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42386

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
krb5-libs CVE-2020-28196 高危 1.17.1-r0 1.17.2-r0 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:20a7b70bdf2f892df2bb8ae82023723a6ff1c48595cd4407f4696d4315f76e8b

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10
apk-tools CVE-2021-30139 高危 2.10.4-r3 2.10.6-r0

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-30139

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-04-21 16:15 修改: 2026-06-17 03:49
libcrypto1.1 CVE-2020-1967 高危 1.1.1d-r3 1.1.1g-r0 openssl: Segmentation fault in SSL_check_chain causes denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1967

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2020-04-21 14:15 修改: 2026-06-17 03:02
libcrypto1.1 CVE-2021-23840 高危 1.1.1d-r3 1.1.1j-r0 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libcrypto1.1 CVE-2021-3450 高危 1.1.1d-r3 1.1.1k-r0 openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libcrypto1.1 CVE-2021-3712 高危 1.1.1d-r3 1.1.1l-r0 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05
busybox CVE-2021-28831 高危 1.31.1-r9 1.31.1-r10 busybox: invalid free or segmentation fault via malformed gzip data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28831

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-03-19 05:15 修改: 2026-06-17 03:46
libssl1.1 CVE-2020-1967 高危 1.1.1d-r3 1.1.1g-r0 openssl: Segmentation fault in SSL_check_chain causes denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1967

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2020-04-21 14:15 修改: 2026-06-17 03:02
libssl1.1 CVE-2021-23840 高危 1.1.1d-r3 1.1.1j-r0 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libssl1.1 CVE-2021-3450 高危 1.1.1d-r3 1.1.1k-r0 openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libssl1.1 CVE-2021-3712 高危 1.1.1d-r3 1.1.1l-r0 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05
sqlite-libs CVE-2020-11655 高危 3.30.1-r1 3.30.1-r2 sqlite: malformed window-function query leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11655

镜像层: sha256:20a7b70bdf2f892df2bb8ae82023723a6ff1c48595cd4407f4696d4315f76e8b

发布日期: 2020-04-09 03:15 修改: 2026-06-17 02:50
ssl_client CVE-2021-28831 高危 1.31.1-r9 1.31.1-r10 busybox: invalid free or segmentation fault via malformed gzip data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28831

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-03-19 05:15 修改: 2026-06-17 03:46
ssl_client CVE-2021-42378 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42378

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42379 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42379

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42380 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42380

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42381 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42381

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42382 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42382

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42383 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42383

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42384 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42384

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42385 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42385

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
ssl_client CVE-2021-42386 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42386

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2021-42378 高危 1.31.1-r9 1.31.1-r11 busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42378

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
busybox CVE-2021-42374 中危 1.31.1-r9 1.31.1-r11 busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42374

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
libssl1.1 CVE-2020-1971 中危 1.1.1d-r3 1.1.1i-r0 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02
libssl1.1 CVE-2021-23841 中危 1.1.1d-r3 1.1.1j-r0 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libssl1.1 CVE-2021-3449 中危 1.1.1d-r3 1.1.1k-r0 openssl: NULL pointer dereference in signature_algorithms processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
musl CVE-2020-28928 中危 1.1.24-r2 1.1.24-r3 In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2020-11-24 18:15 修改: 2026-06-17 03:10
musl-utils CVE-2020-28928 中危 1.1.24-r2 1.1.24-r3 In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2020-11-24 18:15 修改: 2026-06-17 03:10
libcrypto1.1 CVE-2020-1971 中危 1.1.1d-r3 1.1.1i-r0 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02
libcrypto1.1 CVE-2021-23841 中危 1.1.1d-r3 1.1.1j-r0 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
ssl_client CVE-2021-42374 中危 1.31.1-r9 1.31.1-r11 busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42374

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-11-15 21:15 修改: 2026-06-17 04:09
libcrypto1.1 CVE-2021-3449 中危 1.1.1d-r3 1.1.1k-r0 openssl: NULL pointer dereference in signature_algorithms processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libssl1.1 CVE-2021-23839 低危 1.1.1d-r3 1.1.1j-r0 openssl: incorrect SSLv2 rollback protection

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libcrypto1.1 CVE-2021-23839 低危 1.1.1d-r3 1.1.1j-r0 openssl: incorrect SSLv2 rollback protection

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839

镜像层: sha256:beee9f30bc1f711043e78d4a2be0668955d4b761d587d6f60c2c8dc081efb203

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
Python (python-pkg)
低危漏洞:1 中危漏洞:16 高危漏洞:12 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
certifi CVE-2023-37920 高危 2017.7.27.1 2023.7.22 python-certifi: Removal of e-Tugra root certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37920

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2023-07-25 21:15 修改: 2026-06-17 06:08
pip CVE-2021-3572 高危 20.0.2 21.1 python-pip: Incorrect handling of unicode separators in git references

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3572

镜像层: sha256:879c0d8666e3b7c43215762f0874265111f59c1c06054f9c6626be33e830d352

发布日期: 2021-11-10 18:15 修改: 2026-06-17 04:05
setuptools CVE-2022-40897 高危 44.1.0 65.5.1 pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40897

镜像层: sha256:879c0d8666e3b7c43215762f0874265111f59c1c06054f9c6626be33e830d352

发布日期: 2022-12-23 00:15 修改: 2026-06-17 05:02
setuptools CVE-2024-6345 高危 44.1.0 70.0.0 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:879c0d8666e3b7c43215762f0874265111f59c1c06054f9c6626be33e830d352

发布日期: 2024-07-15 01:15 修改: 2026-06-17 08:17
setuptools CVE-2025-47273 高危 44.1.0 78.1.1 setuptools: Path Traversal Vulnerability in setuptools PackageIndex

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273

镜像层: sha256:879c0d8666e3b7c43215762f0874265111f59c1c06054f9c6626be33e830d352

发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27
urllib3 CVE-2021-33503 高危 1.26.3 1.26.5 python-urllib3: ReDoS in the parsing of authority part of URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33503

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2021-06-29 11:15 修改: 2026-06-17 03:54
urllib3 CVE-2023-43804 高危 1.26.3 2.0.6, 1.26.17 python-urllib3: Cookie request header isn't stripped during cross-origin redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43804

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2023-10-04 17:15 修改: 2026-06-17 06:26
urllib3 CVE-2025-66418 高危 1.26.3 2.6.0 urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66418

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2025-12-05 16:15 修改: 2026-06-17 09:56
urllib3 CVE-2025-66471 高危 1.26.3 2.6.0 urllib3: urllib3 Streaming API improperly handles highly compressed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66471

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2025-12-05 17:16 修改: 2026-06-17 09:56
urllib3 CVE-2026-21441 高危 1.26.3 2.6.3 urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21441

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2026-01-07 22:15 修改: 2026-08-20 13:16
urllib3 CVE-2026-44431 高危 1.26.3 2.7.0 urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44431

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2026-05-13 16:16 修改: 2026-06-26 12:16
wheel CVE-2022-40898 高危 0.34.2 0.38.1 python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40898

镜像层: sha256:879c0d8666e3b7c43215762f0874265111f59c1c06054f9c6626be33e830d352

发布日期: 2022-12-23 00:15 修改: 2026-06-17 05:02
requests CVE-2026-25645 中危 2.25.1 2.33.0 requests: Requests: Security bypass due to predictable temporary file creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25
idna CVE-2026-45409 中危 2.10 3.15 python-idna: idna: Denial of Service via specially crafted long inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10
idna CVE-2024-3651 中危 2.10 3.7 python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3651

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2024-07-07 18:15 修改: 2026-06-17 07:44
pip CVE-2023-5752 中危 20.0.2 23.3 pip: Mercurial configuration injectable in repo revision when installing via pip

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5752

镜像层: sha256:879c0d8666e3b7c43215762f0874265111f59c1c06054f9c6626be33e830d352

发布日期: 2023-10-25 18:17 修改: 2026-06-17 06:49
setuptools CVE-2026-59890 中危 44.1.0 83.0.0 setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:879c0d8666e3b7c43215762f0874265111f59c1c06054f9c6626be33e830d352

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
pip CVE-2025-8869 中危 20.0.2 25.3 pip: pip missing checks on symbolic link extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869

镜像层: sha256:879c0d8666e3b7c43215762f0874265111f59c1c06054f9c6626be33e830d352

发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
pip CVE-2026-3219 中危 20.0.2 26.1 pip: pip: Incorrect file installation due to improper archive handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219

镜像层: sha256:879c0d8666e3b7c43215762f0874265111f59c1c06054f9c6626be33e830d352

发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
pip CVE-2026-6357 中危 20.0.2 26.1 pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357

镜像层: sha256:879c0d8666e3b7c43215762f0874265111f59c1c06054f9c6626be33e830d352

发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
pip CVE-2026-8643 中危 20.0.2 26.1.2 python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643

镜像层: sha256:879c0d8666e3b7c43215762f0874265111f59c1c06054f9c6626be33e830d352

发布日期: 2026-06-01 17:17 修改: 2026-08-19 12:18
requests CVE-2023-32681 中危 2.25.1 2.31.0 python-requests: Unintended leak of Proxy-Authorization header

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32681

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2023-05-26 18:15 修改: 2026-06-17 05:59
requests CVE-2024-35195 中危 2.25.1 2.32.0 requests: subsequent requests to the same host ignore cert verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35195

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2024-05-20 21:15 修改: 2026-06-17 07:34
urllib3 CVE-2021-28363 中危 1.26.3 1.26.4 python-urllib3: HTTPS proxy host name not validated when using default SSLContext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28363

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2021-03-15 18:15 修改: 2026-06-17 03:46
urllib3 CVE-2023-45803 中危 1.26.3 2.0.7, 1.26.18 urllib3: Request body not stripped after redirect from 303 status changes request method to GET

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45803

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2023-10-17 20:15 修改: 2026-06-17 06:29
urllib3 CVE-2024-37891 中危 1.26.3 1.26.19, 2.2.2 urllib3: proxy-authorization request header is not stripped during cross-origin redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37891

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2024-06-17 20:15 修改: 2026-06-17 07:38
urllib3 CVE-2025-50181 中危 1.26.3 2.5.0 urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50181

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2025-06-19 01:15 修改: 2026-06-17 09:34
requests CVE-2024-47081 中危 2.25.1 2.32.4 requests: Requests vulnerable to .netrc credentials leak via malicious URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47081

镜像层: sha256:9642a619f53488f399727e4cff66edef39094bf4012e2850bf3670663a83dcd6

发布日期: 2025-06-09 18:15 修改: 2026-06-17 07:56
pip CVE-2026-1703 低危 20.0.2 26.0 pip: pip: Information disclosure via path traversal when installing crafted wheel archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703

镜像层: sha256:879c0d8666e3b7c43215762f0874265111f59c1c06054f9c6626be33e830d352

发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×