docker.io/apache/dolphinscheduler-tools:3.4.2 linux/amd64

docker.io/apache/dolphinscheduler-tools:3.4.2 - Trivy安全扫描结果扫描时间: 2026-07-30 00:51

全部漏洞信息

低危漏洞:102

中危漏洞:517

高危漏洞:334

严重漏洞:18

系统OS: ubuntu 26.04 扫描引擎: Trivy 扫描时间: 2026-07-30 00:51

docker.io/apache/dolphinscheduler-tools:3.4.2 (ubuntu 26.04) (ubuntu)

低危漏洞:60

中危漏洞:170

高危漏洞:3

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libssl3t64	CVE-2026-45447	高危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-27 13:18
openssl	CVE-2026-45447	高危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-27 13:18
openssl-provider-legacy	CVE-2026-45447	高危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-27 13:18
curl	CVE-2026-8927	中危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	curl: Information disclosure due to uncleared proxy authentication state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
curl	CVE-2026-9079	中危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
gzip	CVE-2026-41991	中危	1.14-1~exp2ubuntu1	1.14-1~exp2ubuntu1.1	gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
gzip	CVE-2026-41992	中危	1.14-1~exp2ubuntu1	1.14-1~exp2ubuntu1.1	GNU gzip contains a global buffer overflow vulnerability in the LZH de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
libblkid1	CVE-2026-27456	中危	2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1	CVE-2026-3184	中危	2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
libc-bin	CVE-2026-4046	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc-bin	CVE-2026-5435	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc-bin	CVE-2026-5450	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin	CVE-2026-5928	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin	CVE-2026-6238	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc-gconv-modules-extra	CVE-2026-4046	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc-gconv-modules-extra	CVE-2026-5435	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc-gconv-modules-extra	CVE-2026-5450	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-gconv-modules-extra	CVE-2026-5928	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-gconv-modules-extra	CVE-2026-6238	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6	CVE-2026-4046	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc6	CVE-2026-5435	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6	CVE-2026-5450	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-5928	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-6238	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libcurl4t64	CVE-2026-8925	中危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	curl: curl: Double-free vulnerability in SASL authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
libcurl4t64	CVE-2026-8927	中危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	curl: Information disclosure due to uncleared proxy authentication state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
libcurl4t64	CVE-2026-9079	中危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
libexpat1	CVE-2025-66382	中危	2.7.4-1		libexpat: libexpat: Denial of service via crafted file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libfreetype6	CVE-2026-50811	中危	2.14.2+dfsg-1	2.14.2+dfsg-1ubuntu0.1	An out-of-bounds read vulnerability exists in FreeType 2.14.3 and vers ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50811 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-07 23:16 修改: 2026-07-09 17:02
libgcrypt20	CVE-2026-41989	中危	1.12.0-2	1.12.0-2ubuntu0.1	Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-23 05:16 修改: 2026-07-14 13:18
libgcrypt20	CVE-2026-41990	中危	1.12.0-2	1.12.0-2ubuntu0.1	Libgcrypt: Libgcrypt: Denial of Service or data integrity issues from missing bounds check during Dilithium signing. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41990 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-23 05:16 修改: 2026-06-17 10:47
libgnutls30t64	CVE-2026-33845	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-30 18:16 修改: 2026-07-20 12:18
libgnutls30t64	CVE-2026-33846	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-05-04 10:15 修改: 2026-07-20 12:18
libgnutls30t64	CVE-2026-3832	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-30 18:16 修改: 2026-07-13 17:17
libgnutls30t64	CVE-2026-3833	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-30 18:16 修改: 2026-07-22 16:17
libgnutls30t64	CVE-2026-42009	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-05-18 13:16 修改: 2026-07-23 12:17
libgnutls30t64	CVE-2026-42010	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: gnutls: Authentication Bypass via NUL Character in Username 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-05-07 12:16 修改: 2026-07-23 12:17
libgnutls30t64	CVE-2026-42011	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: gnutls: Security bypass due to incorrect name constraint handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-05-07 15:16 修改: 2026-07-22 16:17
libgnutls30t64	CVE-2026-42012	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-05-26 22:16 修改: 2026-07-24 11:10
libgnutls30t64	CVE-2026-42013	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-05-26 22:16 修改: 2026-07-24 11:10
libgnutls30t64	CVE-2026-42014	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-16 02:16 修改: 2026-07-22 16:17
libgnutls30t64	CVE-2026-42015	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-05-26 22:16 修改: 2026-07-24 11:10
libgnutls30t64	CVE-2026-5260	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: gnutls: Information disclosure via heap overread in RSA key exchange 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-05-26 22:16 修改: 2026-07-24 12:10
libgnutls30t64	CVE-2026-5419	中危	3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-01 21:16 修改: 2026-07-22 08:10
libgssapi-krb5-2	CVE-2026-11850	中危	1.22.1-2ubuntu4	1.22.1-2ubuntu4.1	krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libgssapi-krb5-2	CVE-2026-40355	中危	1.22.1-2ubuntu4	1.22.1-2ubuntu4.1	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libgssapi-krb5-2	CVE-2026-40356	中危	1.22.1-2ubuntu4	1.22.1-2ubuntu4.1	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libk5crypto3	CVE-2026-11850	中危	1.22.1-2ubuntu4	1.22.1-2ubuntu4.1	krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libk5crypto3	CVE-2026-40355	中危	1.22.1-2ubuntu4	1.22.1-2ubuntu4.1	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libk5crypto3	CVE-2026-40356	中危	1.22.1-2ubuntu4	1.22.1-2ubuntu4.1	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libkrb5-3	CVE-2026-11850	中危	1.22.1-2ubuntu4	1.22.1-2ubuntu4.1	krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libkrb5-3	CVE-2026-40355	中危	1.22.1-2ubuntu4	1.22.1-2ubuntu4.1	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5-3	CVE-2026-40356	中危	1.22.1-2ubuntu4	1.22.1-2ubuntu4.1	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libkrb5support0	CVE-2026-11850	中危	1.22.1-2ubuntu4	1.22.1-2ubuntu4.1	krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libkrb5support0	CVE-2026-40355	中危	1.22.1-2ubuntu4	1.22.1-2ubuntu4.1	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5support0	CVE-2026-40356	中危	1.22.1-2ubuntu4	1.22.1-2ubuntu4.1	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libmount1	CVE-2026-27456	中危	2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1	CVE-2026-3184	中危	2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
libnghttp2-14	CVE-2026-58055	中危	1.68.0-2ubuntu0.1	1.68.0-2ubuntu0.2	nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
libp11-kit0	CVE-2026-13757	中危	0.26.2-2		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
libpam-modules	CVE-2026-54411	中危	1.7.0-5ubuntu3	1.7.0-5ubuntu3.1	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-14 18:17 修改: 2026-07-24 12:10
libpam-modules-bin	CVE-2026-54411	中危	1.7.0-5ubuntu3	1.7.0-5ubuntu3.1	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-14 18:17 修改: 2026-07-24 12:10
libpam-runtime	CVE-2026-54411	中危	1.7.0-5ubuntu3	1.7.0-5ubuntu3.1	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-14 18:17 修改: 2026-07-24 12:10
libpam0g	CVE-2026-54411	中危	1.7.0-5ubuntu3	1.7.0-5ubuntu3.1	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-14 18:17 修改: 2026-07-24 12:10
libpython3.14-minimal	CVE-2026-1502	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: HTTP header injection via CR/LF in proxy tunnel headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16
libpython3.14-minimal	CVE-2026-3276	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python unicodedata: Denial of Service due to excessive CPU consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-06-03 16:16 修改: 2026-07-22 19:10
libpython3.14-minimal	CVE-2026-4786	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-13 22:16 修改: 2026-07-15 02:22
libpython3.14-minimal	CVE-2026-5713	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5713 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-14 16:16 修改: 2026-06-17 10:59
libpython3.14-minimal	CVE-2026-6019	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34
libpython3.14-minimal	CVE-2026-6100	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-13 18:16 修改: 2026-07-15 01:16
libpython3.14-minimal	CVE-2026-7774	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: CPython: Python tarfile: Arbitrary file write via crafted link entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-06-04 16:16 修改: 2026-07-22 20:10
libpython3.14-minimal	CVE-2026-8328	中危	3.14.4-1	3.14.4-1ubuntu0.1	The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-05-13 21:16 修改: 2026-06-30 16:16
libpython3.14-minimal	CVE-2026-9669	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Denial of Service via out-of-bounds write in BZ2 decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-06-08 23:17 修改: 2026-07-23 08:10
libpython3.14-stdlib	CVE-2026-1502	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: HTTP header injection via CR/LF in proxy tunnel headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16
libpython3.14-stdlib	CVE-2026-3276	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python unicodedata: Denial of Service due to excessive CPU consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-06-03 16:16 修改: 2026-07-22 19:10
libpython3.14-stdlib	CVE-2026-4786	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-13 22:16 修改: 2026-07-15 02:22
libpython3.14-stdlib	CVE-2026-5713	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5713 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-14 16:16 修改: 2026-06-17 10:59
libpython3.14-stdlib	CVE-2026-6019	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34
libpython3.14-stdlib	CVE-2026-6100	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-13 18:16 修改: 2026-07-15 01:16
libpython3.14-stdlib	CVE-2026-7774	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: CPython: Python tarfile: Arbitrary file write via crafted link entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-06-04 16:16 修改: 2026-07-22 20:10
libpython3.14-stdlib	CVE-2026-8328	中危	3.14.4-1	3.14.4-1ubuntu0.1	The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-05-13 21:16 修改: 2026-06-30 16:16
libpython3.14-stdlib	CVE-2026-9669	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Denial of Service via out-of-bounds write in BZ2 decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-06-08 23:17 修改: 2026-07-23 08:10
libsmartcols1	CVE-2026-27456	中危	2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsmartcols1	CVE-2026-3184	中危	2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
libsqlite3-0	CVE-2026-11822	中危	3.46.1-9	3.46.1-9ubuntu0.1	SQLite before 3.53.2 contains memory corruption vulnerabilities in the ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libsqlite3-0	CVE-2026-11824	中危	3.46.1-9	3.46.1-9ubuntu0.1	SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libsqlite3-0	CVE-2026-50812	中危	3.46.1-9	3.46.1-9ubuntu0.2	A NULL pointer dereference in the SQLite Session Extension in SQLite 3 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50812 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libsqlite3-0	CVE-2026-50813	中危	3.46.1-9	3.46.1-9ubuntu0.2	An issue in SQLite before Fossil check-in 869a51ae84df allows a local ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50813 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libssh2-1t64	CVE-2025-15661	中危	1.11.1-1build2	1.11.1-1ubuntu0.26.04.2	libssh2: libssh2: Information disclosure and denial of service via crafted SFTP response 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15661 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-18 21:16 修改: 2026-07-14 23:17
libssh2-1t64	CVE-2026-55199	中危	1.11.1-1build2	1.11.1-1ubuntu0.26.04.2	libssh2: libssh2: Denial of Service via crafted SSH_MSG_EXT_INFO message 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55199 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-17 20:17 修改: 2026-07-14 22:17
libssh2-1t64	CVE-2026-55200	中危	1.11.1-1build2	1.11.1-1ubuntu0.26.04.2	libssh2: libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55200 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-17 20:17 修改: 2026-07-14 22:17
libssh2-1t64	CVE-2026-58050	中危	1.11.1-1build2	1.11.1-1ubuntu0.26.04.3	libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58050 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-28 02:16 修改: 2026-06-30 20:27
libssh2-1t64	CVE-2026-58051	中危	1.11.1-1build2	1.11.1-1ubuntu0.26.04.3	libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58051 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:42
libssh2-1t64	CVE-2026-7598	中危	1.11.1-1build2	1.11.1-1ubuntu0.26.04.1	libssh2: integer overflow via large username or password arguments 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7598 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-05-01 22:16 修改: 2026-07-15 01:17
bsdutils	CVE-2026-27456	中危	1:2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libssl3t64	CVE-2026-34182	中危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-34183	中危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-42764	中危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: NULL pointer dereference in QUIC server initial packet handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-45445	中危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: AES-OCB IV Ignored on EVP_Cipher() Path 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libuuid1	CVE-2026-27456	中危	2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1	CVE-2026-3184	中危	2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
locales	CVE-2026-4046	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
locales	CVE-2026-5435	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
locales	CVE-2026-5450	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
locales	CVE-2026-5928	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
locales	CVE-2026-6238	中危	2.43-2ubuntu2	2.43-2ubuntu2.3	glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
login	CVE-2026-27456	中危	1:4.16.0-2+really2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
login	CVE-2026-3184	中危	1:4.16.0-2+really2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
mount	CVE-2026-27456	中危	2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount	CVE-2026-3184	中危	2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
bsdutils	CVE-2026-3184	中危	1:2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
openssl	CVE-2026-34182	中危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-34183	中危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-42764	中危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: NULL pointer dereference in QUIC server initial packet handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-45445	中危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: AES-OCB IV Ignored on EVP_Cipher() Path 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
curl	CVE-2026-8925	中危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	curl: curl: Double-free vulnerability in SASL authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
openssl-provider-legacy	CVE-2026-34182	中危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-provider-legacy	CVE-2026-34183	中危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-provider-legacy	CVE-2026-42764	中危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: NULL pointer dereference in QUIC server initial packet handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-provider-legacy	CVE-2026-45445	中危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: AES-OCB IV Ignored on EVP_Cipher() Path 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
p11-kit	CVE-2026-13757	中危	0.26.2-2		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
p11-kit-modules	CVE-2026-13757	中危	0.26.2-2		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
perl-base	CVE-2026-42496	中危	5.40.1-7build1	5.40.1-7ubuntu0.1	perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10
perl-base	CVE-2026-8376	中危	5.40.1-7build1	5.40.1-7ubuntu0.1	perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
python3.14	CVE-2026-1502	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: HTTP header injection via CR/LF in proxy tunnel headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16
python3.14	CVE-2026-3276	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python unicodedata: Denial of Service due to excessive CPU consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-06-03 16:16 修改: 2026-07-22 19:10
python3.14	CVE-2026-4786	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-13 22:16 修改: 2026-07-15 02:22
python3.14	CVE-2026-5713	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5713 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-14 16:16 修改: 2026-06-17 10:59
python3.14	CVE-2026-6019	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34
python3.14	CVE-2026-6100	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-13 18:16 修改: 2026-07-15 01:16
python3.14	CVE-2026-7774	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: CPython: Python tarfile: Arbitrary file write via crafted link entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-06-04 16:16 修改: 2026-07-22 20:10
python3.14	CVE-2026-8328	中危	3.14.4-1	3.14.4-1ubuntu0.1	The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-05-13 21:16 修改: 2026-06-30 16:16
python3.14	CVE-2026-9669	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Denial of Service via out-of-bounds write in BZ2 decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-06-08 23:17 修改: 2026-07-23 08:10
python3.14-minimal	CVE-2026-1502	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: HTTP header injection via CR/LF in proxy tunnel headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16
python3.14-minimal	CVE-2026-3276	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python unicodedata: Denial of Service due to excessive CPU consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-06-03 16:16 修改: 2026-07-22 19:10
python3.14-minimal	CVE-2026-4786	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-13 22:16 修改: 2026-07-15 02:22
python3.14-minimal	CVE-2026-5713	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5713 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-14 16:16 修改: 2026-06-17 10:59
python3.14-minimal	CVE-2026-6019	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34
python3.14-minimal	CVE-2026-6100	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-04-13 18:16 修改: 2026-07-15 01:16
python3.14-minimal	CVE-2026-7774	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: CPython: Python tarfile: Arbitrary file write via crafted link entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-06-04 16:16 修改: 2026-07-22 20:10
python3.14-minimal	CVE-2026-8328	中危	3.14.4-1	3.14.4-1ubuntu0.1	The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-05-13 21:16 修改: 2026-06-30 16:16
python3.14-minimal	CVE-2026-9669	中危	3.14.4-1	3.14.4-1ubuntu0.1	python: Python: Denial of Service via out-of-bounds write in BZ2 decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669 镜像层: sha256:c2f1af94e9edb1149e6ffb25daefee4cac184982e4e2288ca2b18869a861dc78 发布日期: 2026-06-08 23:17 修改: 2026-07-23 08:10
rust-coreutils	CVE-2026-35341	中危	0.8.0-0ubuntu3		A vulnerability in uutils coreutils mkfifo allows for the unauthorized ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35341 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35344	中危	0.8.0-0ubuntu3		The dd utility in uutils coreutils suppresses errors during file trunc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35344 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35345	中危	0.8.0-0ubuntu3		A vulnerability in the tail utility of uutils coreutils allows for the ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35345 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35348	中危	0.8.0-0ubuntu3		The sort utility in uutils coreutils is vulnerable to a process panic ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35348 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35350	中危	0.8.0-0ubuntu3		The cp utility in uutils coreutils fails to properly handle setuid and ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35350 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35351	中危	0.8.0-0ubuntu3		The mv utility in uutils coreutils fails to preserve file ownership du ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35351 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35352	中危	0.8.0-0ubuntu3		A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35352 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35354	中危	0.8.0-0ubuntu3		A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35354 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35357	中危	0.8.0-0ubuntu3		The cp utility in uutils coreutils is vulnerable to an information dis ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35357 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35359	中危	0.8.0-0ubuntu3		A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utilit ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35359 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35360	中危	0.8.0-0ubuntu3		The touch utility in uutils coreutils is vulnerable to a Time-of-Check ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35360 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35363	中危	0.8.0-0ubuntu3		A vulnerability in the rm utility of uutils coreutils allows the bypas ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35363 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35364	中危	0.8.0-0ubuntu3		A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35364 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35367	中危	0.8.0-0ubuntu3		The nohup utility in uutils coreutils creates its default output file, ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35367 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35368	中危	0.8.0-0ubuntu3		A vulnerability exists in the chroot utility of uutils coreutils when ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35368 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35370	中危	0.8.0-0ubuntu3		The id utility in uutils coreutils miscalculates the groups= section o ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35370 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35371	中危	0.8.0-0ubuntu3		The id utility in uutils coreutils exhibits incorrect behavior in its ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35371 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35373	中危	0.8.0-0ubuntu3		A logic error in the ln utility of uutils coreutils causes the program ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35373 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35374	中危	0.8.0-0ubuntu3		A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35374 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils	CVE-2026-35377	中危	0.8.0-0ubuntu3		A logic error in the env utility of uutils coreutils causes a failure ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35377 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
sed	CVE-2026-5958	中危	4.9-2build3	4.9-2ubuntu1	sed: GNU sed TOCTOU race condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-20 12:16 修改: 2026-06-17 10:59
tar	CVE-2025-45582	中危	1.35+dfsg-4	1.35+dfsg-4ubuntu0.2	tar: Tar path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25
tar	CVE-2026-5704	中危	1.35+dfsg-4	1.35+dfsg-4ubuntu0.4	tar: tar: Hidden file injection via crafted archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59
util-linux	CVE-2026-27456	中危	2.41.3-3ubuntu2		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
util-linux	CVE-2026-3184	中危	2.41.3-3ubuntu2		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
wget	CVE-2021-31879	中危	1.25.0-2ubuntu4		wget: authorization header disclosure on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
wget	CVE-2026-15146	中危	1.25.0-2ubuntu4	1.25.0-2ubuntu4.3	wget: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15146 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-10 19:17 修改: 2026-07-15 19:16
wget	CVE-2026-58469	中危	1.25.0-2ubuntu4	1.25.0-2ubuntu4.2	wget: GNU Wget: Memory corruption via crafted Metalink URL 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58469 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:59
wget	CVE-2026-58470	中危	1.25.0-2ubuntu4	1.25.0-2ubuntu4.2	wget: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58470 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:01
wget	CVE-2026-58471	中危	1.25.0-2ubuntu4	1.25.0-2ubuntu4.2	wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58471 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:02
wget	CVE-2026-58472	中危	1.25.0-2ubuntu4	1.25.0-2ubuntu4.2	wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58472 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:58
openssl-provider-legacy	CVE-2026-42769	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-provider-legacy	CVE-2026-42770	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: FFC-DH Peer Validation Uses Attacker-Supplied q 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-provider-legacy	CVE-2026-45446	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-provider-legacy	CVE-2026-7383	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-provider-legacy	CVE-2026-9076	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcurl4t64	CVE-2026-8458	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	libcurl might in some circumstances reuse the wrong connection when as ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
libcurl4t64	CVE-2026-8924	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	curl: curl: Cookie injection via malicious HTTP server using super cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
passwd	CVE-2024-56433	低危	1:4.17.4-2ubuntu3		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libcurl4t64	CVE-2026-8926	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	curl: curl: Information disclosure via incorrect .netrc password lookup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
libcurl4t64	CVE-2026-9080	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
libssl3t64	CVE-2026-34180	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-34181	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-42766	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Possible NULL Dereference in Password-Based CMS Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-42767	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-42768	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-42769	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-42770	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: FFC-DH Peer Validation Uses Attacker-Supplied q 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-45446	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-7383	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-9076	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libsystemd0	CVE-2026-40228	低危	259.5-0ubuntu3		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1	CVE-2026-40228	低危	259.5-0ubuntu3		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libcurl4t64	CVE-2026-9545	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	libcurl: libcurl: Information disclosure via cached SSL session and early data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
libcurl4t64	CVE-2026-9547	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	curl: curl: Man-in-the-middle attack via SSH host key bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
curl	CVE-2026-9545	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	libcurl: libcurl: Information disclosure via cached SSL session and early data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
curl	CVE-2026-9547	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	curl: curl: Man-in-the-middle attack via SSH host key bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
curl	CVE-2026-10536	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.3	libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
curl	CVE-2026-11352	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.3	curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:01
libgcrypt20	CVE-2024-2236	低危	1.12.0-2		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
curl	CVE-2026-11564	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.3	libcurl: libcurl: Certificate validation bypass due to incorrect connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11564 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:00
curl	CVE-2026-11586	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.3	curl: curl: Denial of Service via WebSocket PING flood 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 17:59
login.defs	CVE-2024-56433	低危	1:4.17.4-2ubuntu3		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
curl	CVE-2026-12064	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.3	curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
curl	CVE-2026-8286	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	curl: curl: Insecure connection establishment due to TLS configuration mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
curl	CVE-2026-8458	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	libcurl might in some circumstances reuse the wrong connection when as ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
curl	CVE-2026-8924	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	curl: curl: Cookie injection via malicious HTTP server using super cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
curl	CVE-2026-8926	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	curl: curl: Information disclosure via incorrect .netrc password lookup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
curl	CVE-2026-9080	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
libcurl4t64	CVE-2026-10536	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.3	libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
openssl	CVE-2026-34180	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-34181	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-42766	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Possible NULL Dereference in Password-Based CMS Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-42767	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-42768	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-42769	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-42770	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: FFC-DH Peer Validation Uses Attacker-Supplied q 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-45446	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-7383	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-9076	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcurl4t64	CVE-2026-11352	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.3	curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:01
libcurl4t64	CVE-2026-11564	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.3	libcurl: libcurl: Certificate validation bypass due to incorrect connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11564 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:00
libcurl4t64	CVE-2026-11586	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.3	curl: curl: Denial of Service via WebSocket PING flood 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 17:59
libcurl4t64	CVE-2026-12064	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.3	curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl4t64	CVE-2026-8286	低危	8.18.0-1ubuntu2.1	8.18.0-1ubuntu2.2	curl: curl: Insecure connection establishment due to TLS configuration mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286 镜像层: sha256:89287363658963ec36327e39d137db977e5676ac1effd80f30b04880080f298d 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
openssl-provider-legacy	CVE-2026-34180	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-provider-legacy	CVE-2026-34181	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-provider-legacy	CVE-2026-42766	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Possible NULL Dereference in Password-Based CMS Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-provider-legacy	CVE-2026-42767	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-provider-legacy	CVE-2026-42768	低危	3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
zlib1g	CVE-2026-27171	低危	1:1.3.dfsg+really1.3.1-1ubuntu3		zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

Java (jar)

低危漏洞:42

中危漏洞:337

高危漏洞:319

严重漏洞:18

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
com.azure:azure-security-keyvault-keys	CVE-2026-33117	严重	4.5.4	4.10.6	Security feature bypass vulnerability in Azure Key Vault Keys library for Java 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33117 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-12 18:17 修改: 2026-06-17 10:36
com.baomidou:mybatis-plus	CVE-2023-25330	严重	3.5.2	3.5.3.1	MyBatis-Plus vulnerable to SQL injection via TenantPlugin 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25330 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-04-05 14:15 修改: 2026-06-17 05:41
org.apache.avro:avro	CVE-2024-47561	严重	1.7.7	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-03 11:15 修改: 2026-06-17 07:57
org.apache.avro:avro	CVE-2024-47561	严重	1.7.7	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-03 11:15 修改: 2026-06-17 07:57
org.apache.avro:avro	CVE-2024-47561	严重	1.7.7	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-03 11:15 修改: 2026-06-17 07:57
org.apache.avro:avro	CVE-2024-47561	严重	1.7.7	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-03 11:15 修改: 2026-06-17 07:57
org.apache.avro:avro	CVE-2024-47561	严重	1.7.7	1.11.4	apache-avro: Schema parsing may trigger Remote Code Execution (RCE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47561 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-03 11:15 修改: 2026-06-17 07:57
org.apache.sshd:sshd-common	CVE-2022-45047	严重	2.8.0	2.9.2	mina-sshd: Java unsafe deserialization vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45047 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-11-16 09:15 修改: 2026-06-17 05:09
org.apache.sshd:sshd-common	CVE-2022-45047	严重	2.8.0	2.9.2	mina-sshd: Java unsafe deserialization vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45047 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-11-16 09:15 修改: 2026-06-17 05:09
org.apache.sshd:sshd-common	CVE-2022-45047	严重	2.8.0	2.9.2	mina-sshd: Java unsafe deserialization vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45047 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-11-16 09:15 修改: 2026-06-17 05:09
org.apache.sshd:sshd-core	CVE-2022-45047	严重	2.8.0	2.9.2	mina-sshd: Java unsafe deserialization vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45047 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-11-16 09:15 修改: 2026-06-17 05:09
org.apache.sshd:sshd-core	CVE-2022-45047	严重	2.8.0	2.9.2	mina-sshd: Java unsafe deserialization vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45047 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-11-16 09:15 修改: 2026-06-17 05:09
org.apache.sshd:sshd-core	CVE-2022-45047	严重	2.8.0	2.9.2	mina-sshd: Java unsafe deserialization vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45047 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-11-16 09:15 修改: 2026-06-17 05:09
org.codehaus.jackson:jackson-mapper-asl	CVE-2019-10202	严重	1.9.13		codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10202 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2019-10-01 15:15 修改: 2026-06-17 02:10
org.springframework.security:spring-security-config	CVE-2023-34034	严重	5.7.8	5.6.12, 5.7.10, 5.8.5, 6.0.5, 6.1.2	spring-security-webflux: path wildcard leads to security bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34034 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-07-19 15:15 修改: 2026-06-17 06:02
org.springframework.security:spring-security-web	CVE-2024-38821	严重	5.7.8	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4	Spring-WebFlux: Authorization Bypass of Static Resources in WebFlux Applications 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38821 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-28 07:15 修改: 2026-06-17 07:41
org.springframework.security:spring-security-web	CVE-2026-22732	严重	5.7.8	6.5.9, 7.0.4	Spring Security: Spring Security: Security policy bypass and information disclosure due to unwritten HTTP headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22732 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-19 23:16 修改: 2026-06-17 10:20
org.springframework:spring-web	CVE-2016-1000027	严重	5.3.27	6.0.0	spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.4	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.15.2	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.15.2	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4.1	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.13.4.1	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4.1	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.13.4.1	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4.1	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.13.4.1	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.15.2	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.15.2	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.15.2	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.15.2	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	3.17.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	3.17.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	3.17.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	3.17.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	3.17.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	3.17.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	3.17.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	3.17.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	3.17.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	3.17.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	3.17.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	3.17.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.17.2	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.17.2	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.17.2	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.17.2	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.17.2	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.17.2	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
com.microsoft.sqlserver:mssql-jdbc	CVE-2025-59250	高危	11.2.1	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11	JDBC Driver for SQL Server has improper input validation issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
com.microsoft.sqlserver:mssql-jdbc	CVE-2025-59250	高危	11.2.1	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11	JDBC Driver for SQL Server has improper input validation issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
com.microsoft.sqlserver:mssql-jdbc	CVE-2025-59250	高危	11.2.1	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11	JDBC Driver for SQL Server has improper input validation issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	9.10	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-02-11 05:15 修改: 2026-06-17 06:42
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	9.22	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-02-11 05:15 修改: 2026-06-17 06:42
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	9.22	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-02-11 05:15 修改: 2026-06-17 06:42
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	9.8.1	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-02-11 05:15 修改: 2026-06-17 06:42
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	9.8.1	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-02-11 05:15 修改: 2026-06-17 06:42
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	9.8.1	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-02-11 05:15 修改: 2026-06-17 06:42
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	9.8.1	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-02-11 05:15 修改: 2026-06-17 06:42
com.nimbusds:nimbus-jose-jwt	CVE-2023-52428	高危	9.8.1	9.37.2	nimbus-jose-jwt: large JWE p2c header value causes Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52428 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-02-11 05:15 修改: 2026-06-17 06:42
com.thoughtworks.xstream:xstream	CVE-2024-47072	高危	1.4.20	1.4.21	com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47072 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-11-08 00:15 修改: 2026-06-17 07:56
com.thoughtworks.xstream:xstream	CVE-2024-47072	高危	1.4.20	1.4.21	com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47072 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-11-08 00:15 修改: 2026-06-17 07:56
commons-beanutils:commons-beanutils	CVE-2025-48734	高危	1.9.4	1.11.0	commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-beanutils:commons-beanutils	CVE-2025-48734	高危	1.9.4	1.11.0	commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-beanutils:commons-beanutils	CVE-2025-48734	高危	1.9.4	1.11.0	commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-beanutils:commons-beanutils	CVE-2025-48734	高危	1.9.4	1.11.0	commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-beanutils:commons-beanutils	CVE-2025-48734	高危	1.9.4	1.11.0	commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
dnsjava:dnsjava	CVE-2024-25638	高危	2.1.7	3.6.0	dnsjava: Improper response validation allowing DNSSEC bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25638 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-07-22 14:15 修改: 2026-06-17 07:16
dnsjava:dnsjava	CVE-2024-25638	高危	2.1.7	3.6.0	dnsjava: Improper response validation allowing DNSSEC bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25638 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-07-22 14:15 修改: 2026-06-17 07:16
dnsjava:dnsjava	CVE-2024-25638	高危	2.1.7	3.6.0	dnsjava: Improper response validation allowing DNSSEC bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25638 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-07-22 14:15 修改: 2026-06-17 07:16
dnsjava:dnsjava	CVE-2024-25638	高危	2.1.7	3.6.0	dnsjava: Improper response validation allowing DNSSEC bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25638 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-07-22 14:15 修改: 2026-06-17 07:16
dnsjava:dnsjava	CVE-2024-25638	高危	2.1.7	3.6.0	dnsjava: Improper response validation allowing DNSSEC bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25638 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-07-22 14:15 修改: 2026-06-17 07:16
io.grpc:grpc-netty-shaded	CVE-2025-55163	高危	1.41.0	1.75.0	netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec	CVE-2021-37136	高危	4.1.53.Final	4.1.68.Final	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37136	高危	4.1.53.Final	4.1.68.Final	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37136	高危	4.1.53.Final	4.1.68.Final	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37136	高危	4.1.53.Final	4.1.68.Final	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37136	高危	4.1.53.Final	4.1.68.Final	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37136	高危	4.1.53.Final	4.1.68.Final	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37137	高危	4.1.53.Final	4.1.68.Final	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37137	高危	4.1.53.Final	4.1.68.Final	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37137	高危	4.1.53.Final	4.1.68.Final	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37137	高危	4.1.53.Final	4.1.68.Final	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37137	高危	4.1.53.Final	4.1.68.Final	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37137	高危	4.1.53.Final	4.1.68.Final	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2026-42583	高危	4.1.53.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec	CVE-2026-42583	高危	4.1.53.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec	CVE-2026-42583	高危	4.1.53.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec	CVE-2026-42583	高危	4.1.53.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec	CVE-2026-42583	高危	4.1.53.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec	CVE-2026-42583	高危	4.1.53.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec	CVE-2026-59901	高危	4.1.53.Final	4.1.136.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec	CVE-2026-59901	高危	4.1.53.Final	4.1.136.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec	CVE-2026-59901	高危	4.1.53.Final	4.1.136.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec	CVE-2026-59901	高危	4.1.53.Final	4.1.136.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec	CVE-2026-59901	高危	4.1.53.Final	4.1.136.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec	CVE-2026-59901	高危	4.1.53.Final	4.1.136.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-dns	CVE-2026-42579	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec-dns	CVE-2026-42579	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec-dns	CVE-2026-42579	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec-dns	CVE-2026-42579	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec-dns	CVE-2026-42579	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec-http	CVE-2026-33870	高危	4.1.53.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http	CVE-2026-33870	高危	4.1.53.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http	CVE-2026-33870	高危	4.1.53.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http	CVE-2026-33870	高危	4.1.53.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http	CVE-2026-33870	高危	4.1.53.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http	CVE-2026-33870	高危	4.1.53.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http	CVE-2026-42584	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http	CVE-2026-42584	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http	CVE-2026-42584	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http	CVE-2026-42584	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http	CVE-2026-42584	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http	CVE-2026-42584	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http	CVE-2026-42587	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-22 12:17
io.netty:netty-codec-http	CVE-2026-42587	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-22 12:17
io.netty:netty-codec-http	CVE-2026-42587	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-22 12:17
io.netty:netty-codec-http	CVE-2026-42587	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-22 12:17
io.netty:netty-codec-http	CVE-2026-42587	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-22 12:17
io.netty:netty-codec-http	CVE-2026-42587	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-22 12:17
io.netty:netty-codec-http	CVE-2026-55831	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http	CVE-2026-55831	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http	CVE-2026-55831	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http	CVE-2026-55831	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http	CVE-2026-55831	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http	CVE-2026-55831	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http	CVE-2026-55833	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http	CVE-2026-55833	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http	CVE-2026-55833	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http	CVE-2026-55833	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http	CVE-2026-55833	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http	CVE-2026-55833	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http	CVE-2026-56745	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http	CVE-2026-56745	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http	CVE-2026-56745	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http	CVE-2026-56745	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http	CVE-2026-56745	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http	CVE-2026-56745	高危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http2	CVE-2025-55163	高危	4.1.53.Final	4.2.4.Final, 4.1.124.Final	netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2	CVE-2025-55163	高危	4.1.53.Final	4.2.4.Final, 4.1.124.Final	netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2	CVE-2025-55163	高危	4.1.53.Final	4.2.4.Final, 4.1.124.Final	netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2	CVE-2025-55163	高危	4.1.53.Final	4.2.4.Final, 4.1.124.Final	netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2	CVE-2025-55163	高危	4.1.53.Final	4.2.4.Final, 4.1.124.Final	netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2	CVE-2025-55163	高危	4.1.53.Final	4.2.4.Final, 4.1.124.Final	netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2	CVE-2026-33871	高危	4.1.53.Final	4.1.132.Final, 4.2.11.Final	netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http2	CVE-2026-33871	高危	4.1.53.Final	4.1.132.Final, 4.2.11.Final	netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http2	CVE-2026-33871	高危	4.1.53.Final	4.1.132.Final, 4.2.11.Final	netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http2	CVE-2026-33871	高危	4.1.53.Final	4.1.132.Final, 4.2.11.Final	netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http2	CVE-2026-33871	高危	4.1.53.Final	4.1.132.Final, 4.2.11.Final	netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http2	CVE-2026-33871	高危	4.1.53.Final	4.1.132.Final, 4.2.11.Final	netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http2	CVE-2026-42587	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-22 12:17
io.netty:netty-codec-http2	CVE-2026-42587	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-22 12:17
io.netty:netty-codec-http2	CVE-2026-42587	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-22 12:17
io.netty:netty-codec-http2	CVE-2026-42587	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-22 12:17
io.netty:netty-codec-http2	CVE-2026-42587	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-22 12:17
io.netty:netty-codec-http2	CVE-2026-42587	高危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-22 12:17
io.netty:netty-codec-http2	GHSA-xpw8-rcwv-8f8p	高危	4.1.53.Final	4.1.100.Final	io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack 漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08
io.netty:netty-codec-http2	GHSA-xpw8-rcwv-8f8p	高危	4.1.53.Final	4.1.100.Final	io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack 漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08
io.netty:netty-codec-http2	GHSA-xpw8-rcwv-8f8p	高危	4.1.53.Final	4.1.100.Final	io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack 漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08
io.netty:netty-codec-http2	GHSA-xpw8-rcwv-8f8p	高危	4.1.53.Final	4.1.100.Final	io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack 漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08
io.netty:netty-codec-http2	GHSA-xpw8-rcwv-8f8p	高危	4.1.53.Final	4.1.100.Final	io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack 漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08
io.netty:netty-codec-http2	GHSA-xpw8-rcwv-8f8p	高危	4.1.53.Final	4.1.100.Final	io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack 漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08
io.netty:netty-handler	CVE-2026-44249	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-11 22:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-44249	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-11 22:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-44249	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-11 22:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-44249	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-11 22:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-44249	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-11 22:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-44249	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-11 22:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-45416	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-45416	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-45416	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-45416	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-45416	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-45416	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-50010	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-50010	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-50010	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-50010	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-50010	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-23 12:18
io.netty:netty-handler	CVE-2026-50010	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-23 12:18
io.netty:netty-resolver-dns	CVE-2026-45674	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-07-21 12:18
io.netty:netty-resolver-dns	CVE-2026-45674	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-07-21 12:18
io.netty:netty-resolver-dns	CVE-2026-45674	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-07-21 12:18
io.netty:netty-resolver-dns	CVE-2026-45674	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-07-21 12:18
io.netty:netty-resolver-dns	CVE-2026-45674	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-07-21 12:18
io.netty:netty-resolver-dns	CVE-2026-47691	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18
io.netty:netty-resolver-dns	CVE-2026-47691	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18
io.netty:netty-resolver-dns	CVE-2026-47691	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18
io.netty:netty-resolver-dns	CVE-2026-47691	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18
io.netty:netty-resolver-dns	CVE-2026-47691	高危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18
io.projectreactor.netty:reactor-netty-core	CVE-2023-34054	高危	1.0.31	1.1.13, 1.0.39	Reactor Netty HTTP Server denial of service vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34054 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-11-28 09:15 修改: 2026-06-17 06:02
io.projectreactor.netty:reactor-netty-http	CVE-2023-34062	高危	1.0.31	1.1.13, 1.0.39	reactor-netty-http: directory traversal vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34062 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-11-15 10:15 修改: 2026-06-17 06:02
net.minidev:json-smart	CVE-2021-31684	高危	1.3.2	1.3.3, 2.4.4	json-smart: Denial of Service in JSONParserByteArray function 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31684 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-06-01 20:15 修改: 2026-06-17 03:52
net.minidev:json-smart	CVE-2021-31684	高危	1.3.2	1.3.3, 2.4.4	json-smart: Denial of Service in JSONParserByteArray function 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31684 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-06-01 20:15 修改: 2026-06-17 03:52
net.minidev:json-smart	CVE-2021-31684	高危	1.3.2	1.3.3, 2.4.4	json-smart: Denial of Service in JSONParserByteArray function 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31684 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-06-01 20:15 修改: 2026-06-17 03:52
net.minidev:json-smart	CVE-2021-31684	高危	1.3.2	1.3.3, 2.4.4	json-smart: Denial of Service in JSONParserByteArray function 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31684 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-06-01 20:15 修改: 2026-06-17 03:52
net.minidev:json-smart	CVE-2023-1370	高危	1.3.2	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
net.minidev:json-smart	CVE-2023-1370	高危	1.3.2	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
net.minidev:json-smart	CVE-2023-1370	高危	1.3.2	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
net.minidev:json-smart	CVE-2023-1370	高危	1.3.2	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
net.minidev:json-smart	CVE-2023-1370	高危	2.4.7	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
net.minidev:json-smart	CVE-2023-1370	高危	2.4.8	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
net.minidev:json-smart	CVE-2023-1370	高危	2.4.8	2.4.9	json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1370 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
ch.qos.logback:logback-classic	CVE-2023-6378	高危	1.2.11	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
ch.qos.logback:logback-core	CVE-2023-6378	高危	1.2.11	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.2	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.2	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.3	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
org.apache.avro:avro	CVE-2023-39410	高危	1.7.7	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-09-29 17:15 修改: 2026-06-17 06:12
org.apache.avro:avro	CVE-2023-39410	高危	1.7.7	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-09-29 17:15 修改: 2026-06-17 06:12
org.apache.avro:avro	CVE-2023-39410	高危	1.7.7	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-09-29 17:15 修改: 2026-06-17 06:12
org.apache.avro:avro	CVE-2023-39410	高危	1.7.7	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-09-29 17:15 修改: 2026-06-17 06:12
org.apache.avro:avro	CVE-2023-39410	高危	1.7.7	1.11.3	apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39410 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-09-29 17:15 修改: 2026-06-17 06:12
org.apache.hive:hive-service	CVE-2024-23945	高危	2.3.9	4.0.0	Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23945 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-12-23 16:15 修改: 2026-06-17 07:13
org.apache.hive:hive-service	CVE-2024-23945	高危	2.3.9	4.0.0	Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23945 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-12-23 16:15 修改: 2026-06-17 07:13
org.apache.hive:hive-service	CVE-2024-23945	高危	2.3.9	4.0.0	Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23945 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-12-23 16:15 修改: 2026-06-17 07:13
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.3	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.3	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.13.3	2.18.8, 2.21.4, 2.22.1	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
org.apache.sshd:sshd-common	CVE-2024-41909	高危	2.8.0	2.12.0	mina-sshd: integrity check bypass vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41909 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-08-12 16:15 修改: 2026-06-17 07:48
org.apache.sshd:sshd-common	CVE-2024-41909	高危	2.8.0	2.12.0	mina-sshd: integrity check bypass vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41909 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-08-12 16:15 修改: 2026-06-17 07:48
org.apache.sshd:sshd-common	CVE-2024-41909	高危	2.8.0	2.12.0	mina-sshd: integrity check bypass vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41909 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-08-12 16:15 修改: 2026-06-17 07:48
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
org.apache.zookeeper:zookeeper	CVE-2026-24281	高危	3.8.3	3.8.6, 3.9.5	Apache ZooKeeper: Apache ZooKeeper: Impersonation of servers or clients via reverse DNS spoofing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24281 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-07 09:16 修改: 2026-07-15 02:18
org.apache.zookeeper:zookeeper	CVE-2026-24308	高危	3.8.3	3.9.5, 3.8.6	Apache ZooKeeper: Apache ZooKeeper: Information disclosure via improper handling of configuration values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24308 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-07 09:16 修改: 2026-07-15 02:18
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
org.codehaus.jackson:jackson-mapper-asl	CVE-2019-10172	高危	1.9.13		jackson-mapper-asl: XML external entity similar to CVE-2016-3720 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10172 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2019-11-18 17:15 修改: 2026-06-17 02:10
org.codehaus.jettison:jettison	CVE-2022-40150	高危	1.1	1.5.2	jettison: memory exhaustion via user-supplied XML or JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40150 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
org.codehaus.jettison:jettison	CVE-2022-40150	高危	1.1	1.5.2	jettison: memory exhaustion via user-supplied XML or JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40150 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
org.codehaus.jettison:jettison	CVE-2022-45685	高危	1.1	1.5.2	jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45685 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10
org.codehaus.jettison:jettison	CVE-2022-45685	高危	1.1	1.5.2	jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45685 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10
org.codehaus.jettison:jettison	CVE-2022-45693	高危	1.1	1.5.2	jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45693 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10
org.codehaus.jettison:jettison	CVE-2022-45693	高危	1.1	1.5.2	jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45693 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10
org.codehaus.jettison:jettison	CVE-2023-1436	高危	1.1	1.5.4	jettison: Uncontrolled Recursion in JSONArray 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1436 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
org.codehaus.jettison:jettison	CVE-2023-1436	高危	1.1	1.5.4	jettison: Uncontrolled Recursion in JSONArray 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1436 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
org.eclipse.jetty:jetty-http	CVE-2026-2332	高危	9.4.51.v20230217	12.1.7, 12.0.33	org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-14 12:16 修改: 2026-07-23 12:17
org.eclipse.jetty:jetty-http	CVE-2026-2332	高危	9.4.51.v20230217	12.1.7, 12.0.33	org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-14 12:16 修改: 2026-07-23 12:17
org.eclipse.jetty:jetty-http	CVE-2026-2332	高危	9.4.51.v20230217	12.1.7, 12.0.33	org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-14 12:16 修改: 2026-07-23 12:17
org.eclipse.jetty:jetty-http	CVE-2026-2332	高危	9.4.51.v20230217	12.1.7, 12.0.33	org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-14 12:16 修改: 2026-07-23 12:17
org.eclipse.jetty:jetty-security	CVE-2026-10050	高危	9.4.51.v20230217	9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10	Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
org.eclipse.jetty:jetty-security	CVE-2026-10050	高危	9.4.51.v20230217	9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10	Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
org.eclipse.jetty:jetty-security	CVE-2026-10050	高危	9.4.51.v20230217	9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10	Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
org.eclipse.jetty:jetty-security	CVE-2026-10050	高危	9.4.51.v20230217	9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10	Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
org.eclipse.jetty:jetty-security	CVE-2026-10050	高危	9.4.51.v20230217	9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10	Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
org.eclipse.jetty:jetty-server	CVE-2024-13009	高危	9.4.51.v20230217	9.4.57.v20241219	jetty-server: Jetty: Gzip Request Body Buffer Corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13009 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-05-08 18:15 修改: 2026-06-17 07:00
org.ini4j:ini4j	CVE-2022-41404	高危	0.5.4		org.ini4j: unspecified DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41404 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-11 23:15 修改: 2026-06-17 05:03
org.ini4j:ini4j	CVE-2022-41404	高危	0.5.4		org.ini4j: unspecified DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41404 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-11 23:15 修改: 2026-06-17 05:03
org.json:json	CVE-2022-45688	高危	20140107	20230227	json stack overflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45688 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10
org.json:json	CVE-2023-5072	高危	20140107	20231013	JSON-java: parser confusion leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5072 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-10-12 17:15 修改: 2026-06-17 06:47
org.postgresql:postgresql	CVE-2026-42198	高危	42.4.4	42.7.11	jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-29 16:16 修改: 2026-07-15 02:21
org.springframework.boot:spring-boot	CVE-2025-22235	高危	2.7.11	3.3.11, 3.4.5	org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45
org.springframework.boot:spring-boot	CVE-2026-40973	高危	2.7.11	4.0.6, 3.5.14	Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10
org.springframework.boot:spring-boot-autoconfigure	CVE-2023-20883	高危	2.7.11	3.0.7, 2.7.12, 2.6.15, 2.5.15	spring-boot: Spring Boot Welcome Page DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-05-26 17:15 修改: 2026-06-17 05:31
org.springframework.boot:spring-boot-starter-actuator	CVE-2026-22733	高危	2.7.11	4.0.4, 3.5.12	Spring Boot has an Authentication Bypass under Actuator CloudFoundry endpoints 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22733 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
org.springframework.security:spring-security-core	CVE-2024-22257	高危	5.7.8	5.7.12, 5.8.11, 6.1.8, 6.2.3	spring-security: Broken Access Control With Direct Use of AuthenticatedVoter 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22257 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-18 15:15 修改: 2026-06-30 13:16
org.springframework.security:spring-security-crypto	CVE-2025-22228	高危	5.7.8	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16	spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22228 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-03-20 06:15 修改: 2026-06-17 08:45
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
org.springframework:spring-core	CVE-2025-41249	高危	5.3.27	6.2.11	org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41249 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-16 11:15 修改: 2026-06-17 09:22
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.13.4	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
org.springframework:spring-web	CVE-2024-22243	高危	5.3.27	6.1.4, 6.0.17, 5.3.32	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web	CVE-2024-22259	高危	5.3.27	6.1.5, 6.0.18, 5.3.33	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web	CVE-2024-22262	高危	5.3.27	5.3.34, 6.0.19, 6.1.6	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11
org.springframework:spring-webmvc	CVE-2024-38816	高危	5.3.27	6.1.13	spring-webmvc: Path Traversal Vulnerability in Spring Applications Using RouterFunctions and FileSystemResource 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38816 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-13 06:15 修改: 2026-06-17 07:41
org.springframework:spring-webmvc	CVE-2024-38819	高危	5.3.27	6.1.14	org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41
org.xerial.snappy:snappy-java	CVE-2023-43642	高危	1.1.10.1	1.1.10.4	snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-09-25 20:15 修改: 2026-06-17 06:26
org.yaml:snakeyaml	CVE-2022-1471	高危	1.33	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22
org.yaml:snakeyaml	CVE-2022-1471	高危	1.33	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22
org.yaml:snakeyaml	CVE-2022-1471	高危	1.33	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22
org.yaml:snakeyaml	CVE-2022-1471	高危	1.33	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22
org.yaml:snakeyaml	CVE-2022-1471	高危	1.33	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22
software.amazon.ion:ion-java	CVE-2024-21634	高危	1.0.2	1.10.5	ion-java: ion-java: Ion Java StackOverflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21634 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-01-03 23:15 修改: 2026-06-17 07:09
software.amazon.ion:ion-java	CVE-2024-21634	高危	1.0.2	1.10.5	ion-java: ion-java: Ion Java StackOverflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21634 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-01-03 23:15 修改: 2026-06-17 07:09
software.amazon.ion:ion-java	CVE-2024-21634	高危	1.0.2	1.10.5	ion-java: ion-java: Ion Java StackOverflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21634 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-01-03 23:15 修改: 2026-06-17 07:09
software.amazon.ion:ion-java	CVE-2024-21634	高危	1.0.2	1.10.5	ion-java: ion-java: Ion Java StackOverflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21634 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-01-03 23:15 修改: 2026-06-17 07:09
software.amazon.ion:ion-java	CVE-2024-21634	高危	1.0.2	1.10.5	ion-java: ion-java: Ion Java StackOverflow vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21634 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-01-03 23:15 修改: 2026-06-17 07:09
io.netty:netty-codec-http	CVE-2024-29025	中危	4.1.53.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22
io.netty:netty-codec-http	CVE-2024-29025	中危	4.1.53.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22
io.netty:netty-codec-http	CVE-2024-29025	中危	4.1.53.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22
io.netty:netty-codec-http	CVE-2024-29025	中危	4.1.53.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22
io.netty:netty-codec-http	CVE-2025-67735	中危	4.1.53.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http	CVE-2025-67735	中危	4.1.53.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http	CVE-2025-67735	中危	4.1.53.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http	CVE-2025-67735	中危	4.1.53.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http	CVE-2025-67735	中危	4.1.53.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http	CVE-2025-67735	中危	4.1.53.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http	CVE-2026-41417	中危	4.1.53.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-41417	中危	4.1.53.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-41417	中危	4.1.53.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-41417	中危	4.1.53.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-41417	中危	4.1.53.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-41417	中危	4.1.53.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-42580	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42580	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42580	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42580	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42580	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42580	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42581	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http	CVE-2026-42581	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http	CVE-2026-42581	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http	CVE-2026-42581	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http	CVE-2026-42581	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http	CVE-2026-42581	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http	CVE-2026-42585	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42585	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42585	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42585	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42585	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42585	中危	4.1.53.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-50020	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http	CVE-2026-50020	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http	CVE-2026-50020	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http	CVE-2026-50020	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http	CVE-2026-50020	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http	CVE-2026-50020	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http	CVE-2026-56746	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http	CVE-2026-56746	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http	CVE-2026-56746	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http	CVE-2026-56746	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http	CVE-2026-56746	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http	CVE-2026-56746	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-21 22:17 修改: 2026-07-22 20:35
io.netty:netty-codec-http	CVE-2026-59898	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59898	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59898	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59898	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59898	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59898	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59899	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59899	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59899	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59899	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59899	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59899	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http	CVE-2026-59921	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-28 23:17 修改: 2026-07-28 23:17
io.netty:netty-codec-http	CVE-2026-59921	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-28 23:17 修改: 2026-07-28 23:17
io.netty:netty-codec-http	CVE-2026-59921	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-28 23:17 修改: 2026-07-28 23:17
io.netty:netty-codec-http	CVE-2026-59921	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-28 23:17 修改: 2026-07-28 23:17
io.netty:netty-codec-http	CVE-2026-59921	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-28 23:17 修改: 2026-07-28 23:17
io.netty:netty-codec-http	CVE-2026-59921	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-28 23:17 修改: 2026-07-28 23:17
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	3.17.2	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	3.17.2	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	3.17.2	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	3.17.2	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	3.17.2	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.nimbusds:nimbus-jose-jwt	CVE-2025-53864	中危	9.10	10.0.2, 9.37.4	com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.nimbusds:nimbus-jose-jwt	CVE-2025-53864	中危	9.22	10.0.2, 9.37.4	com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.nimbusds:nimbus-jose-jwt	CVE-2025-53864	中危	9.22	10.0.2, 9.37.4	com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.nimbusds:nimbus-jose-jwt	CVE-2025-53864	中危	9.8.1	10.0.2, 9.37.4	com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.nimbusds:nimbus-jose-jwt	CVE-2025-53864	中危	9.8.1	10.0.2, 9.37.4	com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.nimbusds:nimbus-jose-jwt	CVE-2025-53864	中危	9.8.1	10.0.2, 9.37.4	com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.nimbusds:nimbus-jose-jwt	CVE-2025-53864	中危	9.8.1	10.0.2, 9.37.4	com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.nimbusds:nimbus-jose-jwt	CVE-2025-53864	中危	9.8.1	10.0.2, 9.37.4	com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
io.netty:netty-codec-http2	CVE-2021-21295	中危	4.1.53.Final	4.1.60.Final	netty: possible request smuggling in HTTP/2 due missing validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-03-09 19:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21295	中危	4.1.53.Final	4.1.60.Final	netty: possible request smuggling in HTTP/2 due missing validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-03-09 19:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21295	中危	4.1.53.Final	4.1.60.Final	netty: possible request smuggling in HTTP/2 due missing validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-03-09 19:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21295	中危	4.1.53.Final	4.1.60.Final	netty: possible request smuggling in HTTP/2 due missing validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-03-09 19:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21295	中危	4.1.53.Final	4.1.60.Final	netty: possible request smuggling in HTTP/2 due missing validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-03-09 19:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21295	中危	4.1.53.Final	4.1.60.Final	netty: possible request smuggling in HTTP/2 due missing validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-03-09 19:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21409	中危	4.1.53.Final	4.1.61.Final	netty: Request smuggling via content-length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-03-30 15:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21409	中危	4.1.53.Final	4.1.61.Final	netty: Request smuggling via content-length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-03-30 15:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21409	中危	4.1.53.Final	4.1.61.Final	netty: Request smuggling via content-length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-03-30 15:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21409	中危	4.1.53.Final	4.1.61.Final	netty: Request smuggling via content-length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-03-30 15:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21409	中危	4.1.53.Final	4.1.61.Final	netty: Request smuggling via content-length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-03-30 15:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21409	中危	4.1.53.Final	4.1.61.Final	netty: Request smuggling via content-length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-03-30 15:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2026-47244	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2	CVE-2026-47244	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2	CVE-2026-47244	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2	CVE-2026-47244	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2	CVE-2026-47244	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2	CVE-2026-47244	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2	CVE-2026-48043	中危	4.1.53.Final	4.1.135.Final, 4.2.15.Final	netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18
io.netty:netty-codec-http2	CVE-2026-48043	中危	4.1.53.Final	4.1.135.Final, 4.2.15.Final	netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18
io.netty:netty-codec-http2	CVE-2026-48043	中危	4.1.53.Final	4.1.135.Final, 4.2.15.Final	netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18
io.netty:netty-codec-http2	CVE-2026-48043	中危	4.1.53.Final	4.1.135.Final, 4.2.15.Final	netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18
io.netty:netty-codec-http2	CVE-2026-48043	中危	4.1.53.Final	4.1.135.Final, 4.2.15.Final	netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18
io.netty:netty-codec-http2	CVE-2026-48043	中危	4.1.53.Final	4.1.135.Final, 4.2.15.Final	netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-07-21 12:18
io.netty:netty-codec-http2	CVE-2026-50560	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2	CVE-2026-50560	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2	CVE-2026-50560	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2	CVE-2026-50560	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2	CVE-2026-50560	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2	CVE-2026-50560	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2	CVE-2026-59900	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http2	CVE-2026-59900	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http2	CVE-2026-59900	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http2	CVE-2026-59900	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http2	CVE-2026-59900	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-codec-http2	CVE-2026-59900	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-common	CVE-2024-47535	中危	4.1.53.Final	4.1.115.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common	CVE-2024-47535	中危	4.1.53.Final	4.1.115.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common	CVE-2024-47535	中危	4.1.53.Final	4.1.115.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common	CVE-2024-47535	中危	4.1.53.Final	4.1.115.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common	CVE-2024-47535	中危	4.1.53.Final	4.1.115.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common	CVE-2024-47535	中危	4.1.53.Final	4.1.115.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common	CVE-2025-25193	中危	4.1.53.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
io.netty:netty-common	CVE-2025-25193	中危	4.1.53.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
io.netty:netty-common	CVE-2025-25193	中危	4.1.53.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
io.netty:netty-common	CVE-2025-25193	中危	4.1.53.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
io.netty:netty-common	CVE-2025-25193	中危	4.1.53.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
io.netty:netty-common	CVE-2025-25193	中危	4.1.53.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
commons-lang:commons-lang	CVE-2025-48924	中危	2.6		commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
commons-lang:commons-lang	CVE-2025-48924	中危	2.6		commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
commons-lang:commons-lang	CVE-2025-48924	中危	2.6		commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
commons-net:commons-net	CVE-2021-37533	中危	3.6	3.9.0	apache-commons-net: FTP client trusts the host from PASV response by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-03 15:15 修改: 2026-06-17 04:00
commons-net:commons-net	CVE-2021-37533	中危	3.6	3.9.0	apache-commons-net: FTP client trusts the host from PASV response by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-03 15:15 修改: 2026-06-17 04:00
commons-net:commons-net	CVE-2021-37533	中危	3.6	3.9.0	apache-commons-net: FTP client trusts the host from PASV response by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-03 15:15 修改: 2026-06-17 04:00
commons-net:commons-net	CVE-2021-37533	中危	3.6	3.9.0	apache-commons-net: FTP client trusts the host from PASV response by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-03 15:15 修改: 2026-06-17 04:00
commons-net:commons-net	CVE-2021-37533	中危	3.6	3.9.0	apache-commons-net: FTP client trusts the host from PASV response by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37533 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-12-03 15:15 修改: 2026-06-17 04:00
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
io.netty:netty-handler	CVE-2023-34462	中危	4.1.53.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03
io.netty:netty-handler	CVE-2023-34462	中危	4.1.53.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03
io.netty:netty-handler	CVE-2023-34462	中危	4.1.53.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03
io.netty:netty-handler	CVE-2023-34462	中危	4.1.53.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03
io.netty:netty-handler	CVE-2023-34462	中危	4.1.53.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03
io.netty:netty-handler	CVE-2023-34462	中危	4.1.53.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-resolver-dns	CVE-2026-45673	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-resolver-dns	CVE-2026-45673	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-resolver-dns	CVE-2026-45673	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-resolver-dns	CVE-2026-45673	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-resolver-dns	CVE-2026-45673	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll	CVE-2026-45536	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll	CVE-2026-45536	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll	CVE-2026-45536	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll	CVE-2026-45536	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll	CVE-2026-45536	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll	CVE-2026-45536	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-kqueue	CVE-2026-45536	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-kqueue	CVE-2026-45536	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-kqueue	CVE-2026-45536	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-kqueue	CVE-2026-45536	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-kqueue	CVE-2026-45536	中危	4.1.53.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.projectreactor.netty:reactor-netty-http	CVE-2025-22227	中危	1.0.31	1.3.0-M5, 1.2.8	io.projectreactor.netty/reactor-netty: Reactor Netty Credential Leak via Redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22227 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-16 10:15 修改: 2026-06-17 08:45
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4.1	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4.1	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4.1	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.13.4.1	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4.1	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.13.4.1	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-codec	CVE-2025-58057	中危	4.1.53.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
io.netty:netty-codec	CVE-2025-58057	中危	4.1.53.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
io.netty:netty-codec	CVE-2025-58057	中危	4.1.53.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
io.netty:netty-codec	CVE-2025-58057	中危	4.1.53.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
io.netty:netty-codec	CVE-2025-58057	中危	4.1.53.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
io.netty:netty-codec	CVE-2025-58057	中危	4.1.53.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
org.apache.commons:commons-configuration2	CVE-2024-29131	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-configuration2	CVE-2024-29131	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-configuration2	CVE-2024-29131	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-configuration2	CVE-2024-29131	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-configuration2	CVE-2024-29131	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29131 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-configuration2	CVE-2024-29133	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-configuration2	CVE-2024-29133	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-configuration2	CVE-2024-29133	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-configuration2	CVE-2024-29133	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-configuration2	CVE-2024-29133	中危	2.1.1	2.10.1	commons-configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29133 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-21 09:15 修改: 2026-06-17 07:22
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.13.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.13.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.17.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.17.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.17.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.17.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.17.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.17.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.17.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.azure:azure-identity	CVE-2024-35255	中危	1.7.1	1.12.2	azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35255 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-06-11 17:16 修改: 2026-07-20 16:16
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.2	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.5.11	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2020-12-02 17:15 修改: 2026-06-17 02:53
org.apache.logging.log4j:log4j-1.2-api	CVE-2026-34479	中危	2.17.2	2.25.4	org.apache.logging.log4j/log4j-1.2-api: Apache Log4j 1-to-Log4j 2 bridge: Log processing denial of service due to improper XML escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34479 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-1.2-api	CVE-2026-34479	中危	2.17.2	2.25.4	org.apache.logging.log4j/log4j-1.2-api: Apache Log4j 1-to-Log4j 2 bridge: Log processing denial of service due to improper XML escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34479 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-1.2-api	CVE-2026-34479	中危	2.17.2	2.25.4	org.apache.logging.log4j/log4j-1.2-api: Apache Log4j 1-to-Log4j 2 bridge: Log processing denial of service due to improper XML escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34479 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.15.2	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.15.2	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
io.netty:netty-codec-dns	GHSA-mfg7-5gfp-c4w3	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names 漏洞详情: https://github.com/advisories/GHSA-mfg7-5gfp-c4w3 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-24 16:52 修改: 2026-07-24 16:52
io.netty:netty-codec-dns	GHSA-mfg7-5gfp-c4w3	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names 漏洞详情: https://github.com/advisories/GHSA-mfg7-5gfp-c4w3 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-24 16:52 修改: 2026-07-24 16:52
io.netty:netty-codec-dns	GHSA-mfg7-5gfp-c4w3	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names 漏洞详情: https://github.com/advisories/GHSA-mfg7-5gfp-c4w3 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-24 16:52 修改: 2026-07-24 16:52
io.netty:netty-codec-dns	GHSA-mfg7-5gfp-c4w3	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names 漏洞详情: https://github.com/advisories/GHSA-mfg7-5gfp-c4w3 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-24 16:52 修改: 2026-07-24 16:52
org.apache.sshd:sshd-common	CVE-2023-35887	中危	2.8.0	2.9.3	apache-mina-sshd: information exposure in SFTP server implementations 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-35887 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-07-10 16:15 修改: 2026-06-17 06:05
org.apache.sshd:sshd-common	CVE-2023-35887	中危	2.8.0	2.9.3	apache-mina-sshd: information exposure in SFTP server implementations 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-35887 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-07-10 16:15 修改: 2026-06-17 06:05
org.apache.sshd:sshd-common	CVE-2023-35887	中危	2.8.0	2.9.3	apache-mina-sshd: information exposure in SFTP server implementations 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-35887 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-07-10 16:15 修改: 2026-06-17 06:05
io.netty:netty-codec-dns	GHSA-mfg7-5gfp-c4w3	中危	4.1.53.Final	4.2.16.Final, 4.1.136.Final	Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names 漏洞详情: https://github.com/advisories/GHSA-mfg7-5gfp-c4w3 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-24 16:52 修改: 2026-07-24 16:52
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.15.2	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.15.2	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
org.apache.sshd:sshd-sftp	CVE-2023-35887	中危	2.8.0	2.9.3	apache-mina-sshd: information exposure in SFTP server implementations 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-35887 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-07-10 16:15 修改: 2026-06-17 06:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.15.2	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59888	中危	2.15.2	2.18.8, 2.21.4	com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
org.apache.zookeeper:zookeeper	CVE-2024-23944	中危	3.8.3	3.8.4, 3.9.2	Apache-ZooKeeper: Apache ZooKeeper: Information disclosure in persistent watcher handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23944 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-15 11:15 修改: 2026-06-17 07:13
org.bouncycastle:bcpkix-jdk15on	CVE-2025-8916	中危	1.67	1.79	org.bouncycastle: BouncyCastle denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8916 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-08-13 10:15 修改: 2026-06-17 10:07
org.bouncycastle:bcpkix-jdk15on	CVE-2026-5588	中危	1.67	1.84	bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:18
org.bouncycastle:bcprov-jdk15on	CVE-2023-33201	中危	1.67		bouncycastle: potential blind LDAP injection attack using a self-signed certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33201 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-07-05 03:15 修改: 2026-06-17 06:01
org.bouncycastle:bcprov-jdk15on	CVE-2023-33202	中危	1.67	1.70	bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33202 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-11-23 16:15 修改: 2026-06-17 06:01
org.bouncycastle:bcprov-jdk15on	CVE-2024-29857	中危	1.67	1.78	org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-05-14 15:17 修改: 2026-06-17 07:23
org.bouncycastle:bcprov-jdk15on	CVE-2024-30171	中危	1.67	1.78	bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30171 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26
org.bouncycastle:bcprov-jdk15on	CVE-2024-34447	中危	1.67	1.78	org.bouncycastle: Use of Incorrectly-Resolved Name or Reference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34447 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-05-03 16:15 修改: 2026-06-17 07:33
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59888	中危	2.15.2	2.18.8, 2.21.4	com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.fasterxml.woodstox:woodstox-core	CVE-2022-40152	中危	5.3.0	6.4.0, 5.4.0	woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
com.fasterxml.woodstox:woodstox-core	CVE-2022-40152	中危	5.3.0	6.4.0, 5.4.0	woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
com.fasterxml.woodstox:woodstox-core	CVE-2022-40152	中危	5.3.0	6.4.0, 5.4.0	woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
com.fasterxml.woodstox:woodstox-core	CVE-2022-40152	中危	5.3.0	6.4.0, 5.4.0	woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
com.fasterxml.woodstox:woodstox-core	CVE-2022-40152	中危	5.3.0	6.4.0, 5.4.0	woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40152 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
com.google.guava:guava	CVE-2023-2976	中危	31.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.google.guava:guava	CVE-2023-2976	中危	31.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.google.guava:guava	CVE-2023-2976	中危	31.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.google.guava:guava	CVE-2023-2976	中危	31.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
org.codehaus.jettison:jettison	CVE-2022-40149	中危	1.1	1.5.1	jettison: parser crash by stackoverflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40149 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
org.codehaus.jettison:jettison	CVE-2022-40149	中危	1.1	1.5.1	jettison: parser crash by stackoverflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40149 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
com.google.guava:guava	CVE-2023-2976	中危	31.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.google.guava:guava	CVE-2023-2976	中危	31.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.google.guava:guava	CVE-2023-2976	中危	31.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.15.2	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.4.51.v20230217	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-09-15 20:15 修改: 2026-06-17 06:16
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.4.51.v20230217	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-09-15 20:15 修改: 2026-06-17 06:16
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.4.51.v20230217	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-09-15 20:15 修改: 2026-06-17 06:16
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.4.51.v20230217	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-09-15 20:15 修改: 2026-06-17 06:16
org.eclipse.jetty:jetty-http	CVE-2024-6763	中危	9.4.51.v20230217	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
org.eclipse.jetty:jetty-http	CVE-2024-6763	中危	9.4.51.v20230217	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
org.eclipse.jetty:jetty-http	CVE-2024-6763	中危	9.4.51.v20230217	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
org.eclipse.jetty:jetty-http	CVE-2024-6763	中危	9.4.51.v20230217	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
com.azure:azure-identity	CVE-2024-35255	中危	1.7.1	1.12.2	azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35255 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-06-11 17:16 修改: 2026-07-20 16:16
com.azure:azure-identity	CVE-2024-35255	中危	1.7.1	1.12.2	azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35255 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-06-11 17:16 修改: 2026-07-20 16:16
ch.qos.logback:logback-core	CVE-2024-12798	中危	1.2.11	1.5.13, 1.3.15	logback-core: arbitrary code execution via JaninoEventEvaluator 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00
ch.qos.logback:logback-core	CVE-2025-11226	中危	1.2.11	1.5.19, 1.3.16	ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.3	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.3	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
org.eclipse.jetty:jetty-server	CVE-2024-8184	中危	9.4.51.v20230217	12.0.9, 10.0.24, 11.0.24, 9.4.56	org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8184 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:22
org.eclipse.jetty:jetty-server	CVE-2026-6790	中危	9.4.51.v20230217	12.0.35, 12.1.9	In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6790 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:35
org.eclipse.jetty:jetty-servlets	CVE-2024-9823	中危	9.4.51.v20230217	9.4.54, 10.0.18, 11.0.18	org.eclipse.jetty:jetty-servlets: jetty: Jetty DOS vulnerability on DosFilter 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9823 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-14 15:15 修改: 2026-06-17 08:25
org.glassfish:javax.el	CVE-2021-28170	中危	3.0.0		jakarta-el: ELParserTokenManager enables invalid EL expressions to be evaluate 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28170 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-05-26 22:15 修改: 2026-06-17 03:45
com.azure:azure-identity	CVE-2024-35255	中危	1.7.1	1.12.2	azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35255 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-06-11 17:16 修改: 2026-07-20 16:16
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
org.springframework.boot:spring-boot-actuator	CVE-2023-34055	中危	2.7.11	2.7.18, 3.0.13, 3.1.6	spring-boot: org.springframework.boot: spring-boot-actuator class vulnerable to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34055 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-11-28 09:15 修改: 2026-06-17 06:02
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.13.4	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
org.springframework.ldap:spring-ldap-core	CVE-2024-38829	中危	2.4.1	3.2.8, 2.4.4	spring-ldap: Spring LDAP sensitive data exposure for case-sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38829 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-12-04 21:15 修改: 2026-06-17 07:41
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.13.4	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
org.springframework.security:spring-security-core	CVE-2024-38827	中危	5.7.8	5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5	spring-security: authorization bypass for case sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-12-02 15:15 修改: 2026-06-17 07:41
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	3.17.2	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58
io.netty:netty-codec-http	CVE-2021-21290	中危	4.1.53.Final	4.1.59.Final	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http	CVE-2021-21290	中危	4.1.53.Final	4.1.59.Final	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35
org.springframework.security:spring-security-web	CVE-2026-47838	中危	5.7.8	6.5.11	Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47838 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework:spring-context	CVE-2024-38820	中危	5.3.27	6.1.14	The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
io.netty:netty-codec-http	CVE-2021-21290	中危	4.1.53.Final	4.1.59.Final	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35
org.springframework:spring-expression	CVE-2024-38808	中危	5.3.27	5.3.39	spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41
io.netty:netty-codec-http	CVE-2021-21290	中危	4.1.53.Final	4.1.59.Final	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http	CVE-2021-21290	中危	4.1.53.Final	4.1.59.Final	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http	CVE-2021-21290	中危	4.1.53.Final	4.1.59.Final	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http	CVE-2021-43797	中危	4.1.53.Final	4.1.71.Final	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11
org.springframework:spring-web	CVE-2024-38809	中危	5.3.27	5.3.38, 6.0.23, 6.1.12	org.springframework:spring-web: Spring Framework DoS via conditional HTTP request 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41
org.springframework:spring-web	CVE-2024-38820	中危	5.3.27	6.1.14	The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
io.netty:netty-codec-http	CVE-2021-43797	中危	4.1.53.Final	4.1.71.Final	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11
io.netty:netty-codec-http	CVE-2021-43797	中危	4.1.53.Final	4.1.71.Final	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11
org.springframework:spring-webmvc	CVE-2024-38828	中危	5.3.27	5.3.42	org.springframework:spring-webmvc: DoS via Spring MVC controller method with byte[] parameter 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38828 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-11-18 04:15 修改: 2026-06-17 07:41
org.springframework:spring-webmvc	CVE-2025-41242	中危	5.3.27	6.2.10	org.springframework/spring-webmvc: Spring Framework MVC path traversal vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41242 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-08-18 09:15 修改: 2026-06-17 09:22
org.springframework:spring-webmvc	CVE-2026-22737	中危	5.3.27	7.0.6, 6.2.17	Spring Framework: Spring Framework: Information disclosure via Java scripting engine enabled template views 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22737 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc	CVE-2026-22745	中危	5.3.27	7.0.7, 6.2.18	spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
io.netty:netty-codec-http	CVE-2021-43797	中危	4.1.53.Final	4.1.71.Final	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11
io.netty:netty-codec-http	CVE-2021-43797	中危	4.1.53.Final	4.1.71.Final	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11
io.netty:netty-codec-http	CVE-2021-43797	中危	4.1.53.Final	4.1.71.Final	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11
io.netty:netty-codec-http	CVE-2022-24823	中危	4.1.53.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32
io.netty:netty-codec-http	CVE-2022-24823	中危	4.1.53.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32
io.netty:netty-codec-http	CVE-2022-24823	中危	4.1.53.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32
io.netty:netty-codec-http	CVE-2022-24823	中危	4.1.53.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32
io.netty:netty-codec-http	CVE-2022-24823	中危	4.1.53.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32
io.netty:netty-codec-http	CVE-2022-24823	中危	4.1.53.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32
io.netty:netty-codec-http	CVE-2024-29025	中危	4.1.53.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22
io.netty:netty-codec-http	CVE-2024-29025	中危	4.1.53.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22
ch.qos.logback:logback-core	CVE-2026-1225	低危	1.2.11	1.5.25	ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15
ch.qos.logback:logback-core	CVE-2026-9828	低危	1.2.11	1.5.33	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
ch.qos.logback:logback-core	CVE-2024-12801	低危	1.2.11	1.5.13, 1.3.15	logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00
io.netty:netty-handler-proxy	CVE-2026-42578	低危	4.1.53.Final	4.1.133.Final, 4.2.13.Final	netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-handler-proxy	CVE-2026-42578	低危	4.1.53.Final	4.1.133.Final, 4.2.13.Final	netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-handler-proxy	CVE-2026-42578	低危	4.1.53.Final	4.1.133.Final, 4.2.13.Final	netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-handler-proxy	CVE-2026-42578	低危	4.1.53.Final	4.1.133.Final, 4.2.13.Final	netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-handler-proxy	CVE-2026-42578	低危	4.1.53.Final	4.1.133.Final, 4.2.13.Final	netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
org.springframework.security:spring-security-core	CVE-2026-22746	低危	5.7.8	6.5.10, 7.0.5	Spring Security: Spring Security: Timing attack defense bypass allows information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22746 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-22 06:16 修改: 2026-06-17 10:20
io.netty:netty-handler-proxy	CVE-2026-42578	低危	4.1.53.Final	4.1.133.Final, 4.2.13.Final	netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
org.apache.hadoop:hadoop-common	CVE-2024-23454	低危	3.2.4	3.4.0	Apache Hadoop: Temporary File Local Information Disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23454 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-25 08:15 修改: 2026-06-17 07:12
org.apache.hadoop:hadoop-common	CVE-2024-23454	低危	3.2.4	3.4.0	Apache Hadoop: Temporary File Local Information Disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23454 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-25 08:15 修改: 2026-06-17 07:12
org.apache.hadoop:hadoop-common	CVE-2024-23454	低危	3.2.4	3.4.0	Apache Hadoop: Temporary File Local Information Disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23454 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-25 08:15 修改: 2026-06-17 07:12
org.eclipse.jetty:jetty-http	CVE-2025-11143	低危	9.4.51.v20230217	12.0.31, 12.1.5	org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11143 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-05 10:15 修改: 2026-06-17 08:29
org.springframework:spring-context	CVE-2025-22233	低危	5.3.27	6.2.7, 6.1.20	CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45
org.eclipse.jetty:jetty-http	CVE-2025-11143	低危	9.4.51.v20230217	12.0.31, 12.1.5	org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11143 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-05 10:15 修改: 2026-06-17 08:29
org.eclipse.jetty:jetty-http	CVE-2025-11143	低危	9.4.51.v20230217	12.0.31, 12.1.5	org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11143 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-05 10:15 修改: 2026-06-17 08:29
org.eclipse.jetty:jetty-http	CVE-2025-11143	低危	9.4.51.v20230217	12.0.31, 12.1.5	org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11143 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-05 10:15 修改: 2026-06-17 08:29
org.apache.hadoop:hadoop-common	CVE-2024-23454	低危	3.2.4	3.4.0	Apache Hadoop: Temporary File Local Information Disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23454 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-25 08:15 修改: 2026-06-17 07:12
org.apache.hadoop:hadoop-common	CVE-2024-23454	低危	3.2.4	3.4.0	Apache Hadoop: Temporary File Local Information Disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23454 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2024-09-25 08:15 修改: 2026-06-17 07:12
io.netty:netty-codec-http	CVE-2025-58056	低危	4.1.53.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
io.netty:netty-codec-http	CVE-2025-58056	低危	4.1.53.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
io.netty:netty-codec-http	CVE-2025-58056	低危	4.1.53.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
io.netty:netty-codec-http	CVE-2025-58056	低危	4.1.53.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
io.netty:netty-codec-http	CVE-2025-58056	低危	4.1.53.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
io.netty:netty-codec-http	CVE-2025-58056	低危	4.1.53.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
com.google.guava:guava	CVE-2020-8908	低危	31.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
org.eclipse.jetty:jetty-servlets	CVE-2023-36479	低危	9.4.51.v20230217	9.4.52, 10.0.16, 11.0.16	jetty: Improper addition of quotation marks to user inputs in CgiServlet 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36479 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-09-15 19:15 修改: 2026-06-17 06:06
org.eclipse.jetty:jetty-xml	GHSA-58qw-p7qm-5rvh	低危	9.4.51.v20230217	10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823	Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 漏洞详情: https://github.com/advisories/GHSA-58qw-p7qm-5rvh 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-07-10 21:52 修改: 2026-02-10 20:06
org.springframework:spring-webmvc	CVE-2026-22735	低危	5.3.27	7.0.6, 6.2.17	org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring MVC and WebFlux: Stream corruption vulnerability when using Server-Sent Events 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22735 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc	CVE-2026-22741	低危	5.3.27	7.0.7, 6.2.18	Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.eclipse.jetty:jetty-xml	GHSA-58qw-p7qm-5rvh	低危	9.4.51.v20230217	10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823	Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 漏洞详情: https://github.com/advisories/GHSA-58qw-p7qm-5rvh 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-07-10 21:52 修改: 2026-02-10 20:06
org.eclipse.jetty:jetty-xml	GHSA-58qw-p7qm-5rvh	低危	9.4.51.v20230217	10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823	Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 漏洞详情: https://github.com/advisories/GHSA-58qw-p7qm-5rvh 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-07-10 21:52 修改: 2026-02-10 20:06
org.eclipse.jetty:jetty-xml	GHSA-58qw-p7qm-5rvh	低危	9.4.51.v20230217	10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823	Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 漏洞详情: https://github.com/advisories/GHSA-58qw-p7qm-5rvh 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-07-10 21:52 修改: 2026-02-10 20:06
org.eclipse.jetty:jetty-xml	GHSA-58qw-p7qm-5rvh	低危	9.4.51.v20230217	10.0.16, 11.0.16, 12.0.0, 9.4.52.v20230823	Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 漏洞详情: https://github.com/advisories/GHSA-58qw-p7qm-5rvh 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2023-07-10 21:52 修改: 2026-02-10 20:06
com.google.guava:guava	CVE-2020-8908	低危	31.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
com.google.guava:guava	CVE-2020-8908	低危	31.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
com.google.guava:guava	CVE-2020-8908	低危	31.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
com.google.guava:guava	CVE-2020-8908	低危	31.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
com.google.guava:guava	CVE-2020-8908	低危	31.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
com.google.guava:guava	CVE-2020-8908	低危	31.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
ch.qos.logback:logback-core	CVE-2026-10532	低危	1.2.11	1.5.34	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532 镜像层: sha256:97379b3aaa70eb83e1cc67ace416df621a0ea71ce30138fa43cbcc480b389a0f 发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10

usr/bin/pebble (gobinary)

低危漏洞:0

中危漏洞:10

高危漏洞:12

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/net	CVE-2026-25681	高危	v0.40.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-27136	高危	v0.40.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-33814	高危	v0.40.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-07 20:16 修改: 2026-07-24 13:18
golang.org/x/net	CVE-2026-39821	高危	v0.40.0	0.55.0	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-22 16:16 修改: 2026-07-28 13:18
stdlib	CVE-2026-27145	高危	v1.26.2	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-02 23:16 修改: 2026-07-28 13:17
stdlib	CVE-2026-33811	高危	v1.26.2	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-07 20:16 修改: 2026-07-28 13:18
stdlib	CVE-2026-33814	高危	v1.26.2	1.25.10, 1.26.3	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-07 20:16 修改: 2026-07-24 13:18
stdlib	CVE-2026-39820	高危	v1.26.2	1.25.10, 1.26.3	net/mail: golang: Go net/mail: Denial of Service via crafted email inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-07 20:16 修改: 2026-07-27 13:17
stdlib	CVE-2026-39822	高危	v1.26.2	1.25.12, 1.26.5, 1.27.0-rc.2	os: golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-39836	高危	v1.26.2	1.25.10, 1.26.3	ELSA-2026-22121: golang security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42499	高危	v1.26.2	1.25.10, 1.26.3	net/mail: golang: net/mail: Denial of Service via pathological email address parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-07 20:16 修改: 2026-07-27 13:18
stdlib	CVE-2026-42504	高危	v1.26.2	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
golang.org/x/net	CVE-2026-42502	中危	v0.40.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42506	中危	v0.40.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2025-47911	中危	v0.40.0	0.45.0	golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47911 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:28
golang.org/x/net	CVE-2025-58190	中危	v0.40.0	0.45.0	golang.org/x/net/html: Infinite parsing loop in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58190 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:44
golang.org/x/net	CVE-2026-25680	中危	v0.40.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
stdlib	CVE-2026-39823	中危	v1.26.2	1.25.10, 1.26.3	html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39825	中危	v1.26.2	1.25.10, 1.26.3	net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39826	中危	v1.26.2	1.25.10, 1.26.3	html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42505	中危	v1.26.2	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.26.2	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
golang.org/x/sys	CVE-2026-39824	未知	v0.33.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-46600	未知	v0.40.0	0.56.0	Parsing an invalid SVCB or HTTPS RR can panic when the size of a param ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:0c3db79307ab91dad11fad2b136a2b56df6efeeb567c4c99e6e316b63885c9f6 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27