docker.io/apache/skywalking-base:8.1.0-es6 linux/amd64

docker.io/apache/skywalking-base:8.1.0-es6 - Trivy安全扫描结果扫描时间: 2026-09-21 15:51

全部漏洞信息

低危漏洞:126

中危漏洞:385

高危漏洞:372

严重漏洞:70

系统OS: alpine 3.9.4 扫描引擎: Trivy 扫描时间: 2026-09-21 15:51

docker.io/apache/skywalking-base:8.1.0-es6 (alpine 3.9.4) (alpine)

低危漏洞:94

中危漏洞:90

高危漏洞:27

严重漏洞:5

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
freetype	CVE-2020-15999	严重	2.9.1-r2	2.9.1-r3	freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15999 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-11-03 03:15 修改: 2026-06-17 02:57
libbz2	CVE-2019-12900	严重	1.0.6-r6	1.0.6-r7	bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-06-19 23:15 修改: 2026-06-17 02:15
musl	CVE-2019-14697	严重	1.1.20-r4	1.1.20-r5	musl libc through 1.1.23 has an x87 floating-point stack adjustment im ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14697 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2019-08-06 16:15 修改: 2026-06-17 02:18
musl-utils	CVE-2019-14697	严重	1.1.20-r4	1.1.20-r5	musl libc through 1.1.23 has an x87 floating-point stack adjustment im ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14697 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2019-08-06 16:15 修改: 2026-06-17 02:18
sqlite-libs	CVE-2019-8457	严重	3.26.0-r3	3.28.0-r0	sqlite: heap out-of-bound read in function rtreenode() 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42
libcrypto1.1	CVE-2021-3450	高危	1.1.1b-r1	1.1.1k-r0	openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libjpeg-turbo	CVE-2019-2201	高危	1.5.3-r4	1.5.3-r6	libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress gigapixel images 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2201 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-11-13 18:15 修改: 2026-06-17 02:33
libssl1.1	CVE-2020-1967	高危	1.1.1b-r1	1.1.1g-r0	openssl: Segmentation fault in SSL_check_chain causes denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1967 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2020-04-21 14:15 修改: 2026-06-17 03:02
libssl1.1	CVE-2021-23840	高危	1.1.1b-r1	1.1.1j-r0	openssl: integer overflow in CipherUpdate 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libssl1.1	CVE-2021-3450	高危	1.1.1b-r1	1.1.1k-r0	openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libx11	CVE-2020-14363	高危	1.6.7-r0	1.6.12-r0	libX11: integer overflow leads to double free in locale handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14363 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-09-11 18:15 修改: 2026-06-17 02:54
krb5-libs	CVE-2020-28196	高危	1.15.5-r0	1.15.5-r1	krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10
libcrypto1.1	CVE-2020-1967	高危	1.1.1b-r1	1.1.1g-r0	openssl: Segmentation fault in SSL_check_chain causes denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1967 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2020-04-21 14:15 修改: 2026-06-17 03:02
openjdk8-jre	CVE-2020-14583	高危	8.212.04-r0	8.272.10-r0	OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14583 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-14593	高危	8.212.04-r0	8.272.10-r0	OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14593 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-2604	高危	8.212.04-r0	8.242.08-r0	OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2604 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2803	高危	8.212.04-r0	8.252.09-r0	OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2803 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2805	高危	8.212.04-r0	8.252.09-r0	OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2805 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-14583	高危	8.212.04-r0	8.272.10-r0	OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14583 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-14593	高危	8.212.04-r0	8.272.10-r0	OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14593 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-2604	高危	8.212.04-r0	8.242.08-r0	OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2604 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2803	高危	8.212.04-r0	8.252.09-r0	OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2803 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2805	高危	8.212.04-r0	8.252.09-r0	OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2805 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-14583	高危	8.212.04-r0	8.272.10-r0	OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14583 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-14593	高危	8.212.04-r0	8.272.10-r0	OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14593 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-2604	高危	8.212.04-r0	8.242.08-r0	OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2604 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2803	高危	8.212.04-r0	8.252.09-r0	OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2803 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2805	高危	8.212.04-r0	8.252.09-r0	OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2805 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
libcrypto1.1	CVE-2021-23840	高危	1.1.1b-r1	1.1.1j-r0	openssl: integer overflow in CipherUpdate 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
sqlite-libs	CVE-2019-19244	高危	3.26.0-r3	3.28.0-r2	sqlite: allows a crash if a sub-select uses both DISTINCT and window functions and also has certain ORDER BY usage 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19244 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-11-25 20:15 修改: 2026-06-17 02:26
sqlite-libs	CVE-2019-5018	高危	3.26.0-r3	3.28.0-r0	sqlite: Use-after-free in window function leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5018 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-05-10 19:29 修改: 2026-06-17 02:36
sqlite-libs	CVE-2020-11655	高危	3.26.0-r3	3.28.0-r3	sqlite: malformed window-function query leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11655 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-09 03:15 修改: 2026-06-17 02:50
libcrypto1.1	CVE-2021-3449	中危	1.1.1b-r1	1.1.1k-r0	openssl: NULL pointer dereference in signature_algorithms processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libcom_err	CVE-2019-5188	中危	1.44.5-r0	1.44.5-r2	e2fsprogs: Out-of-bounds write in e2fsck/rehash.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37
libjpeg-turbo	CVE-2018-14498	中危	1.5.3-r4	1.5.3-r5	libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14498 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-03-07 23:29 修改: 2026-06-17 01:41
libcom_err	CVE-2019-5094	中危	1.44.5-r0	1.44.5-r1	e2fsprogs: Crafted ext4 partition leads to out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37
libcrypto1.1	CVE-2019-1547	中危	1.1.1b-r1	1.1.1d-r0	openssl: side-channel weak encryption vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
openjdk8-jre	CVE-2019-2745	中危	8.212.04-r0	8.222.10-r0	OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2745 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2762	中危	8.212.04-r0	8.222.10-r0	OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2762 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2769	中危	8.212.04-r0	8.222.10-r0	OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2769 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2816	中危	8.212.04-r0	8.222.10-r0	OpenJDK: Missing URL format validation (Networking, 8221518) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2816 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2949	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2949 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2958	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2958 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2975	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2975 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2989	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2989 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre	CVE-2019-2999	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2999 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre	CVE-2019-7317	中危	8.212.04-r0	8.222.10-r0	libpng: use-after-free in png_image_free in png.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7317 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-02-04 08:29 修改: 2026-06-17 02:40
openjdk8-jre	CVE-2020-14556	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14556 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:54
openjdk8-jre	CVE-2020-14621	中危	8.212.04-r0	8.272.10-r0	OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14621 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-14779	中危	8.212.04-r0	8.272.10-r0	OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14779 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-14781	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14781 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-14782	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14782 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-14792	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14792 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-14797	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14797 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-14803	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14803 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-2593	中危	8.212.04-r0	8.242.08-r0	OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2593 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2601	中危	8.212.04-r0	8.242.08-r0	OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2601 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2781	中危	8.212.04-r0	8.252.09-r0	OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2781 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2800	中危	8.212.04-r0	8.252.09-r0	OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2800 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2830	中危	8.212.04-r0	8.252.09-r0	OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2830 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:13
libcrypto1.1	CVE-2019-1549	中危	1.1.1b-r1	1.1.1d-r0	openssl: information disclosure in fork() 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1549 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libssl1.1	CVE-2019-1547	中危	1.1.1b-r1	1.1.1d-r0	openssl: side-channel weak encryption vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libssl1.1	CVE-2019-1549	中危	1.1.1b-r1	1.1.1d-r0	openssl: information disclosure in fork() 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1549 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libssl1.1	CVE-2019-1551	中危	1.1.1b-r1	1.1.1d-r2	openssl: Integer overflow in RSAZ modular exponentiation on x86_64 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2019-12-06 18:15 修改: 2026-06-17 02:28
libssl1.1	CVE-2020-1971	中危	1.1.1b-r1	1.1.1i-r0	openssl: EDIPARTYNAME NULL pointer de-reference 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02
openjdk8-jre-base	CVE-2019-2745	中危	8.212.04-r0	8.222.10-r0	OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2745 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2762	中危	8.212.04-r0	8.222.10-r0	OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2762 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2769	中危	8.212.04-r0	8.222.10-r0	OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2769 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2816	中危	8.212.04-r0	8.222.10-r0	OpenJDK: Missing URL format validation (Networking, 8221518) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2816 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2949	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2949 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2958	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2958 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2975	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2975 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2989	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2989 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre-base	CVE-2019-2999	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2999 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre-base	CVE-2019-7317	中危	8.212.04-r0	8.222.10-r0	libpng: use-after-free in png_image_free in png.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7317 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-02-04 08:29 修改: 2026-06-17 02:40
openjdk8-jre-base	CVE-2020-14556	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14556 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:54
openjdk8-jre-base	CVE-2020-14621	中危	8.212.04-r0	8.272.10-r0	OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14621 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-14779	中危	8.212.04-r0	8.272.10-r0	OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14779 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-14781	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14781 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-14782	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14782 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-14792	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14792 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-14797	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14797 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-14803	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14803 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-2593	中危	8.212.04-r0	8.242.08-r0	OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2593 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2601	中危	8.212.04-r0	8.242.08-r0	OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2601 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2781	中危	8.212.04-r0	8.252.09-r0	OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2781 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2800	中危	8.212.04-r0	8.252.09-r0	OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2800 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2830	中危	8.212.04-r0	8.252.09-r0	OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2830 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:13
libssl1.1	CVE-2021-23841	中危	1.1.1b-r1	1.1.1j-r0	openssl: NULL pointer dereference in X509_issuer_and_serial_hash() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libssl1.1	CVE-2021-3449	中危	1.1.1b-r1	1.1.1k-r0	openssl: NULL pointer dereference in signature_algorithms processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libtasn1	CVE-2018-1000654	中危	4.13-r0	4.14-r0	libtasn1: Infinite loop in _asn1_expand_object_id(ptree) leads to memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000654 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2018-08-20 19:31 修改: 2026-06-17 01:33
libcrypto1.1	CVE-2019-1551	中危	1.1.1b-r1	1.1.1d-r2	openssl: Integer overflow in RSAZ modular exponentiation on x86_64 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2019-12-06 18:15 修改: 2026-06-17 02:28
libx11	CVE-2020-14344	中危	1.6.7-r0	1.6.10-r0	libX11: Heap overflow in the X input method client 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14344 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-08-05 14:15 修改: 2026-06-17 02:54
openjdk8-jre-lib	CVE-2019-2745	中危	8.212.04-r0	8.222.10-r0	OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2745 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2762	中危	8.212.04-r0	8.222.10-r0	OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2762 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2769	中危	8.212.04-r0	8.222.10-r0	OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2769 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2816	中危	8.212.04-r0	8.222.10-r0	OpenJDK: Missing URL format validation (Networking, 8221518) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2816 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2949	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2949 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2958	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Incorrect escaping of command line arguments in ProcessImpl on Windows (Libraries, 8221858) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2958 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2975	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2975 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2989	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2989 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre-lib	CVE-2019-2999	中危	8.212.04-r0	8.232.09-r0	OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2999 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre-lib	CVE-2019-7317	中危	8.212.04-r0	8.222.10-r0	libpng: use-after-free in png_image_free in png.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7317 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-02-04 08:29 修改: 2026-06-17 02:40
openjdk8-jre-lib	CVE-2020-14556	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14556 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:54
openjdk8-jre-lib	CVE-2020-14621	中危	8.212.04-r0	8.272.10-r0	OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14621 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-14779	中危	8.212.04-r0	8.272.10-r0	OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14779 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-14781	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14781 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-14782	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14782 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-14792	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14792 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-14797	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14797 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-14803	中危	8.212.04-r0	8.272.10-r0	OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14803 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-2593	中危	8.212.04-r0	8.242.08-r0	OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2593 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2601	中危	8.212.04-r0	8.242.08-r0	OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2601 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2781	中危	8.212.04-r0	8.252.09-r0	OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2781 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2800	中危	8.212.04-r0	8.252.09-r0	OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2800 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2830	中危	8.212.04-r0	8.252.09-r0	OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2830 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:13
libcrypto1.1	CVE-2020-1971	中危	1.1.1b-r1	1.1.1i-r0	openssl: EDIPARTYNAME NULL pointer de-reference 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02
musl	CVE-2020-28928	中危	1.1.20-r4	1.1.20-r6	In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2020-11-24 18:15 修改: 2026-06-17 03:10
libcrypto1.1	CVE-2021-23841	中危	1.1.1b-r1	1.1.1j-r0	openssl: NULL pointer dereference in X509_issuer_and_serial_hash() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
musl-utils	CVE-2020-28928	中危	1.1.20-r4	1.1.20-r6	In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2020-11-24 18:15 修改: 2026-06-17 03:10
sqlite-libs	CVE-2019-16168	中危	3.26.0-r3	3.28.0-r1	sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16168 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-09-09 17:15 修改: 2026-06-17 02:21
sqlite-libs	CVE-2019-19242	中危	3.26.0-r3	3.28.0-r2	sqlite: SQL injection in sqlite3ExprCodeTarget in expr.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19242 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-11-27 17:15 修改: 2026-06-17 02:26
openjdk8-jre-base	CVE-2019-2766	低危	8.212.04-r0	8.222.10-r0	OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2766 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2786	低危	8.212.04-r0	8.222.10-r0	OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2786 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2842	低危	8.212.04-r0	8.222.10-r0	OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2842 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2894	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2894 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2933	低危	8.212.04-r0	8.232.09-r0	OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2933 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2945	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2945 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2962	低危	8.212.04-r0	8.232.09-r0	OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2962 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2964	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2964 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2973	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2973 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2978	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2978 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2981	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2981 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2983	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2983 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2987	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2987 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2988	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2988 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-base	CVE-2019-2992	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2992 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre-base	CVE-2020-14577	低危	8.212.04-r0	8.272.10-r0	OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14577 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-14578	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14578 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-14579	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14579 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-14581	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Information disclosure in color management (2D, 8238002) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14581 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-14796	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14796 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-14798	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Missing maximum length check in WindowsNativeDispatcher.asNativeBuffer() (Libraries, 8242695) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14798 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-base	CVE-2020-2583	低危	8.212.04-r0	8.242.08-r0	OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2583 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2590	低危	8.212.04-r0	8.242.08-r0	OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2590 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2654	低危	8.212.04-r0	8.242.08-r0	OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2654 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2659	低危	8.212.04-r0	8.242.08-r0	OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2659 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2754	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2754 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2755	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2755 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2756	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2756 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2757	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2757 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-base	CVE-2020-2773	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2773 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2659	低危	8.212.04-r0	8.242.08-r0	OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2659 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2754	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2754 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2755	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2755 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2756	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2756 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2757	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2757 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2773	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2773 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
libssl1.1	CVE-2021-23839	低危	1.1.1b-r1	1.1.1j-r0	openssl: incorrect SSLv2 rollback protection 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libcrypto1.1	CVE-2021-23839	低危	1.1.1b-r1	1.1.1j-r0	openssl: incorrect SSLv2 rollback protection 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libcrypto1.1	CVE-2019-1563	低危	1.1.1b-r1	1.1.1d-r0	openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libssl1.1	CVE-2019-1563	低危	1.1.1b-r1	1.1.1d-r0	openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563 镜像层: sha256:f1b5933fe4b5f49bbe8258745cf396afe07e625bdab3168e364daf7c956b6b81 发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
openjdk8-jre	CVE-2019-2766	低危	8.212.04-r0	8.222.10-r0	OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2766 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2786	低危	8.212.04-r0	8.222.10-r0	OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2786 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2842	低危	8.212.04-r0	8.222.10-r0	OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2842 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2894	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2894 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2933	低危	8.212.04-r0	8.232.09-r0	OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2933 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2945	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2945 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2962	低危	8.212.04-r0	8.232.09-r0	OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2962 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2964	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2964 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2973	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2973 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2978	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2978 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2981	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2981 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2983	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2983 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2987	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2987 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2988	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2988 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre	CVE-2019-2992	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2992 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre	CVE-2020-14577	低危	8.212.04-r0	8.272.10-r0	OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14577 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-14578	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14578 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-14579	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14579 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2019-2766	低危	8.212.04-r0	8.222.10-r0	OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2766 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2786	低危	8.212.04-r0	8.222.10-r0	OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2786 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2842	低危	8.212.04-r0	8.222.10-r0	OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2842 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2894	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2894 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2933	低危	8.212.04-r0	8.232.09-r0	OpenJDK: FilePermission checks not preformed correctly on Windows (Libraries, 8213429) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2933 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2945	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2945 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2962	低危	8.212.04-r0	8.232.09-r0	OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2962 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2964	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2964 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2973	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2973 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2978	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2978 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2981	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2981 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2983	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2983 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2987	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2987 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2988	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2988 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34
openjdk8-jre-lib	CVE-2019-2992	低危	8.212.04-r0	8.232.09-r0	OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2992 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35
openjdk8-jre-lib	CVE-2020-14577	低危	8.212.04-r0	8.272.10-r0	OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14577 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-14578	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14578 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-14579	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14579 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-14581	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Information disclosure in color management (2D, 8238002) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14581 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-14796	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14796 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-14798	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Missing maximum length check in WindowsNativeDispatcher.asNativeBuffer() (Libraries, 8242695) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14798 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre-lib	CVE-2020-2583	低危	8.212.04-r0	8.242.08-r0	OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2583 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2590	低危	8.212.04-r0	8.242.08-r0	OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2590 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2654	低危	8.212.04-r0	8.242.08-r0	OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2654 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2659	低危	8.212.04-r0	8.242.08-r0	OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2659 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2754	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2754 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2755	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2755 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2756	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2756 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2757	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2757 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre-lib	CVE-2020-2773	低危	8.212.04-r0	8.252.09-r0	OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2773 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-14581	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Information disclosure in color management (2D, 8238002) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14581 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-14796	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14796 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-14798	低危	8.212.04-r0	8.272.10-r0	OpenJDK: Missing maximum length check in WindowsNativeDispatcher.asNativeBuffer() (Libraries, 8242695) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14798 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55
openjdk8-jre	CVE-2020-2583	低危	8.212.04-r0	8.242.08-r0	OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2583 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2590	低危	8.212.04-r0	8.242.08-r0	OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2590 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12
openjdk8-jre	CVE-2020-2654	低危	8.212.04-r0	8.242.08-r0	OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2654 镜像层: sha256:edd61588d12669e2d71a0de2aab96add3304bf565730e1e6144ec3c3fac339e4 发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

Java (jar)

低危漏洞:28

中危漏洞:214

高危漏洞:239

严重漏洞:59

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.9.10	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-10-01 17:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.9.10	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-10-01 17:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.9.10	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-10-12 21:15 修改: 2026-06-17 02:24
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.9.10	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-01-03 04:15 修改: 2026-06-17 02:30
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.9.10	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-02-10 21:56 修改: 2026-06-17 03:27
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9546	严重	2.9.10	2.9.10.4	jackson-databind: Serialization gadgets in shaded-hikari-config 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9546 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-02 04:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.9.10	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-02 04:15 修改: 2026-06-17 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.9.10	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-02 04:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2018-11307	严重	2.9.5	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11307 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-07-09 16:15 修改: 2026-06-17 01:35
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14718	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: arbitrary code execution in slf4j-ext class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14718 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:41
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14719	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: arbitrary code execution in blaze-ds-opt and blaze-ds-core classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14719 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:41
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14720	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: exfiltration/XXE in some JDK classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14720 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:41
com.fasterxml.jackson.core:jackson-databind	CVE-2018-14721	严重	2.9.5	2.9.7, 2.8.11.3, 2.7.9.5	jackson-databind: server-side request forgery (SSRF) in axis2-jaxws class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14721 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:41
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19360	严重	2.9.5	2.9.8, 2.8.11.3, 2.7.9.5	jackson-databind: improper polymorphic deserialization in axis2-transport-jms class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19360 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:49
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19361	严重	2.9.5	2.7.9.5, 2.9.8, 2.8.11.3	jackson-databind: improper polymorphic deserialization in openjpa class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19361 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:49
com.fasterxml.jackson.core:jackson-databind	CVE-2018-19362	严重	2.9.5	2.9.8, 2.8.11.3, 2.7.9.5, 2.6.7.3	jackson-databind: improper polymorphic deserialization in jboss-common-core class 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19362 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-01-02 18:29 修改: 2026-06-17 01:49
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14379	严重	2.9.5	2.9.9.2, 2.8.11.4, 2.7.9.6	jackson-databind: default typing mishandling leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14379 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-07-29 12:15 修改: 2026-06-17 02:18
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14540	严重	2.9.5	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14540 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-09-15 22:15 修改: 2026-06-17 02:18
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16335	严重	2.9.5	2.9.10, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16335 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-09-15 22:15 修改: 2026-06-17 02:22
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16942	严重	2.9.5	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16942 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-10-01 17:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind	CVE-2019-16943	严重	2.9.5	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16943 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-10-01 17:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17267	严重	2.9.5	2.9.10, 2.8.11.5	jackson-databind: Serialization gadgets in classes of the ehcache package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17267 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-10-07 00:15 修改: 2026-06-17 02:23
com.fasterxml.jackson.core:jackson-databind	CVE-2019-17531	严重	2.9.5	2.9.10.1, 2.8.11.5, 2.6.7.3	jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17531 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-10-12 21:15 修改: 2026-06-17 02:24
com.fasterxml.jackson.core:jackson-databind	CVE-2019-20330	严重	2.9.5	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.2	jackson-databind: lacks certain net.sf.ehcache blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20330 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-01-03 04:15 修改: 2026-06-17 02:30
com.fasterxml.jackson.core:jackson-databind	CVE-2020-8840	严重	2.9.5	2.6.7.4, 2.7.9.7, 2.8.11.5, 2.9.10.3	jackson-databind: Lacks certain xbean-reflect/JNDI blocking 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8840 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-02-10 21:56 修改: 2026-06-17 03:27
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9546	严重	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in shaded-hikari-config 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9546 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-02 04:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9547	严重	2.9.5	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in ibatis-sqlmap 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9547 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-02 04:15 修改: 2026-06-17 03:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-9548	严重	2.9.5	2.9.10.4, 2.8.11.6, 2.7.9.7	jackson-databind: Serialization gadgets in anteros-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9548 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-02 04:15 修改: 2026-08-25 16:28
com.h2database:h2	CVE-2021-42392	严重	1.4.196	2.0.206	h2: Remote Code Execution in Console 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42392 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-01-10 14:10 修改: 2026-06-17 04:09
com.h2database:h2	CVE-2022-23221	严重	1.4.196	2.1.210	h2: Loading of custom classes from remote servers through JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23221 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-01-19 17:15 修改: 2026-06-17 04:29
com.squareup.retrofit2:retrofit	CVE-2018-1000844	严重	2.3.0	2.5.0	retrofit: XML external entity processing vulnerability in JAXB 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000844 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-12-20 15:29 修改: 2026-06-17 01:33
io.netty:netty	CVE-2019-20444	严重	3.10.5.Final	4.0.0	netty: HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20444 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30
io.netty:netty-codec-http	CVE-2019-20444	严重	4.0.27.Final	4.1.44	netty: HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20444 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30
io.netty:netty-codec-http	CVE-2019-20444	严重	4.1.42.Final	4.1.44	netty: HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20444 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30
io.netty:netty-codec-http	CVE-2019-20444	严重	4.1.42.Final	4.1.44	netty: HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20444 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30
io.netty:netty-handler	CVE-2026-75595	严重	4.0.27.Final	4.2.17.Final, 4.1.137.Final	io.netty/netty-handler: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler	CVE-2026-75595	严重	4.1.42.Final	4.2.17.Final, 4.1.137.Final	io.netty/netty-handler: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler	CVE-2026-75595	严重	4.1.42.Final	4.2.17.Final, 4.1.137.Final	io.netty/netty-handler: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
log4j:log4j	CVE-2019-17571	严重	1.2.16		log4j: deserialization of untrusted data in SocketServer 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17571 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-12-20 17:15 修改: 2026-06-17 02:24
log4j:log4j	CVE-2022-23305	严重	1.2.16		log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23305 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
log4j:log4j	CVE-2022-23307	严重	1.2.16		log4j: Unsafe deserialization flaw in Chainsaw log viewer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23307 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
org.apache.logging.log4j:log4j-core	CVE-2021-44228	严重	2.9.0	2.15.0, 2.3.1, 2.12.2	log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44228 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-12-10 10:15 修改: 2026-08-11 19:33
org.apache.logging.log4j:log4j-core	CVE-2021-45046	严重	2.9.0	2.16.0, 2.12.2	log4j-core: DoS in log4j 2.x with thread context message pattern and context lookup pattern (incomplete fix for CVE-2021-44228) 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45046 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-12-14 19:15 修改: 2026-06-17 04:13
org.apache.tomcat.embed:tomcat-embed-core	CVE-2018-8014	严重	8.5.29	9.0.9, 8.5.32, 8.0.53, 7.0.88	tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8014 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-05-16 16:29 修改: 2026-06-17 02:04
org.apache.tomcat.embed:tomcat-embed-core	CVE-2020-1938	严重	8.5.29	9.0.31, 8.5.51, 7.0.100	tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1938 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-02-24 22:15 修改: 2026-08-25 16:28
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-24813	严重	8.5.29	11.0.3, 10.1.35, 9.0.99	tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24813 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-03-10 17:15 修改: 2026-06-17 08:59
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-41293	严重	8.5.29	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43512	严重	8.5.29	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43515	严重	8.5.29	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: tomcat: Improper Authorization allows security bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-65182	严重	8.5.29	11.0.25, 10.1.58, 9.0.121	Apache Tomcat: Apache Tomcat: Security constraint bypass due to improper access control 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65182 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:27
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-65905	严重	8.5.29	11.0.25, 10.1.58, 9.0.121	tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65905 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:17
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-68525	严重	8.5.29	11.0.25, 10.1.58, 9.0.121	org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68525 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:15
org.apache.zookeeper:zookeeper	CVE-2023-44981	严重	3.4.10	3.7.2, 3.8.3, 3.9.1	zookeeper: Authorization Bypass in Apache ZooKeeper 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44981 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-10-11 12:15 修改: 2026-06-17 06:28
org.codehaus.jackson:jackson-mapper-asl	CVE-2019-10202	严重	1.9.13		codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10202 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-10-01 15:15 修改: 2026-06-17 02:10
org.eclipse.jetty:jetty-server	CVE-2019-17638	严重	9.4.28.v20200408	9.4.30.v20200611	jetty: double release of resource can lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17638 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-07-09 18:15 修改: 2026-06-17 02:24
org.springframework.boot:spring-boot-starter-web	CVE-2022-22965	严重	1.5.11.RELEASE	2.5.12, 2.6.6	spring-framework: RCE via Data Binding on JDK 9+ 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
org.springframework:spring-beans	CVE-2022-22965	严重	4.3.15.RELEASE	5.2.20.RELEASE, 5.3.18	spring-framework: RCE via Data Binding on JDK 9+ 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
org.springframework:spring-web	CVE-2016-1000027	严重	4.3.15.RELEASE	6.0.0	spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42
org.springframework:spring-webmvc	CVE-2022-22965	严重	4.3.15.RELEASE	5.2.20.RELEASE, 5.3.18	spring-framework: RCE via Data Binding on JDK 9+ 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
com.alibaba.nacos:nacos-common	CVE-2021-29442	高危	1.3.1	1.4.1	Authentication bypass for specific endpoint 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29442 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-04-27 21:15 修改: 2026-06-17 03:47
com.ctrip.framework.apollo:apollo-core	CVE-2020-15170	高危	1.4.0	1.7.1	Potential access control security issue in apollo-adminservice 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15170 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-09-10 19:15 修改: 2026-06-17 02:56
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.9.10	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.9.10	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.9.10	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-12-26 20:15 修改: 2026-06-17 02:48
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10672	高危	2.9.10	2.9.10.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10672 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-18 22:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.9.10	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-18 22:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10968	高危	2.9.10	2.9.10.4	jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10968 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-26 13:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10969	高危	2.9.10	2.9.10.4	jackson-databind: Serialization gadgets in javax.swing.JEditorPane 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10969 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-26 13:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11111	高危	2.9.10	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11111 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-31 05:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11112	高危	2.9.10	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11112 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-31 05:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11113	高危	2.9.10	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11113 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-31 05:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11619	高危	2.9.10	2.9.10.4	jackson-databind: Serialization gadgets in org.springframework:spring-aop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11619 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-04-07 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11620	高危	2.9.10	2.9.10.4	jackson-databind: Serialization gadgets in commons-jelly:commons-jelly 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11620 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-04-07 23:15 修改: 2026-06-17 02:50
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12022	高危	2.9.5	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Jodd-db library 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12022 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-03-21 16:00 修改: 2026-06-17 01:37
com.fasterxml.jackson.core:jackson-databind	CVE-2018-12023	高危	2.9.5	2.7.9.4, 2.8.11.2, 2.9.6	jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12023 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-03-21 16:00 修改: 2026-06-17 01:37
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12086	高危	2.9.5	2.9.9, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12086 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-05-17 17:29 修改: 2026-06-17 02:14
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14439	高危	2.9.5	2.9.9.2, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: Polymorphic typing issue related to logback/JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14439 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-07-30 11:15 修改: 2026-06-17 02:18
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14892	高危	2.9.5	2.6.7.3, 2.8.11.5, 2.9.10	jackson-databind: Serialization gadgets in classes of the commons-configuration package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14892 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-02 17:15 修改: 2026-06-17 02:19
com.fasterxml.jackson.core:jackson-databind	CVE-2019-14893	高危	2.9.5	2.9.10	jackson-databind: Serialization gadgets in classes of the xalan package 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14893 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-02 21:15 修改: 2026-06-17 02:19
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10650	高危	2.9.5	2.9.10.4	A deserialization flaw was discovered in jackson-databind through 2.9. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10650 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-12-26 20:15 修改: 2026-06-17 02:48
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10672	高危	2.9.5	2.9.10.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10672 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-18 22:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10673	高危	2.9.5	2.9.10.4, 2.6.7.4	jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10673 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-18 22:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10968	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10968 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-26 13:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-10969	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in javax.swing.JEditorPane 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10969 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-26 13:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11111	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11111 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-31 05:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11112	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11112 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-31 05:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11113	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11113 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-31 05:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11619	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in org.springframework:spring-aop 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11619 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-04-07 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-11620	高危	2.9.5	2.9.10.4	jackson-databind: Serialization gadgets in commons-jelly:commons-jelly 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11620 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-04-07 23:15 修改: 2026-06-17 02:50
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14060	高危	2.9.5	2.9.10.5	jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14060 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-06-14 21:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14061	高危	2.9.5	2.9.10.5	jackson-databind: serialization in weblogic/oracle-aqjms 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14061 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-06-14 20:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14062	高危	2.9.5	2.9.10.5	jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14062 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-06-14 20:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14195	高危	2.9.5	2.9.10.5	jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14195 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-06-16 16:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.9.5	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-08-25 18:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.9.5	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-09-17 19:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.9.5	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-03 17:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-17 19:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-17 19:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-27 05:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-07 00:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-07 00:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-07 00:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-07 00:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.9.5	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.9.5	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.9.5	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.9.5	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-19 17:15 修改: 2026-07-24 14:27
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.9.5	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.9.5	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor	CVE-2020-28491	高危	2.8.10	2.11.4, 2.12.1	jackson-dataformat-cbor: Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28491 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-02-18 16:15 修改: 2026-06-17 03:10
com.google.code.gson:gson	CVE-2022-25647	高危	2.8.2	2.8.9	com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-05-01 16:15 修改: 2026-06-17 04:33
com.google.code.gson:gson	CVE-2022-25647	高危	2.8.6	2.8.9	com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-05-01 16:15 修改: 2026-06-17 04:33
com.google.code.gson:gson	CVE-2022-25647	高危	2.8.6	2.8.9	com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25647 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-05-01 16:15 修改: 2026-06-17 04:33
com.google.protobuf:protobuf-java	CVE-2021-22569	高危	3.11.0	3.16.1, 3.18.2, 3.19.2	protobuf-java: potential DoS in the parsing procedure for binary data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:37
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	3.11.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	3.11.0	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.11.0	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
com.google.protobuf:protobuf-java	CVE-2021-22569	高危	3.11.4	3.16.1, 3.18.2, 3.19.2	protobuf-java: potential DoS in the parsing procedure for binary data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:37
com.google.protobuf:protobuf-java	CVE-2022-3509	高危	3.11.4	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Textformat parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3509 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2022-3510	高危	3.11.4	3.16.3, 3.19.6, 3.20.3, 3.21.7	protobuf-java: Message-Type Extensions parsing issue leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3510 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-12-12 13:15 修改: 2026-06-17 04:59
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.11.4	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
com.graphql-java:graphql-java	CVE-2022-37734	高危	8.0	17.4, 18.3	graphql-java: DoS by malicious query 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37734 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-09-12 14:15 修改: 2026-06-17 04:55
com.graphql-java:graphql-java	CVE-2023-28867	高危	8.0	0.0.0-2023-03-20T01-49-44-80e3135, 17.5, 18.4, 19.4, 20.1	graphql-java: crafted GraphQL query causes stack consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28867 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-03-27 01:15 修改: 2026-06-17 05:48
com.graphql-java:graphql-java	CVE-2024-40094	高危	8.0	19.11, 20.9, 21.5	graphql-java: Allocation of Resources Without Limits or Throttling in GraphQL Java 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40094 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-07-30 07:15 修改: 2026-06-17 07:45
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14060	高危	2.9.10	2.9.10.5	jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14060 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-06-14 21:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14061	高危	2.9.10	2.9.10.5	jackson-databind: serialization in weblogic/oracle-aqjms 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14061 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-06-14 20:15 修改: 2026-08-25 16:28
com.squareup.okhttp3:okhttp	CVE-2021-0341	高危	3.9.0	4.9.2	okhttp: information disclosure via improperly used cryptographic function 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-0341 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-02-10 17:15 修改: 2026-06-17 03:29
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14062	高危	2.9.10	2.9.10.5	jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14062 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-06-14 20:15 修改: 2026-08-25 16:28
com.squareup.retrofit2:retrofit	CVE-2018-1000850	高危	2.3.0	2.5.0	retrofit: Directory traversal in RequestBuilder allows manipulation of resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000850 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-12-20 15:29 修改: 2026-06-17 01:33
commons-io:commons-io	CVE-2024-47554	高危	2.4	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57
commons-io:commons-io	CVE-2024-47554	高危	2.6	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57
io.kubernetes:client-java	CVE-2020-8570	高危	8.0.0	9.0.2, 10.0.1	kubernetes-client: Path Traversal bug in the Java kubernetes client 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8570 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-21 17:15 修改: 2026-06-17 03:26
com.fasterxml.jackson.core:jackson-databind	CVE-2020-14195	高危	2.9.10	2.9.10.5	jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14195 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-06-16 16:15 修改: 2026-08-25 16:28
io.netty:netty	CVE-2019-16869	高危	3.10.5.Final		netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16869 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-09-26 16:15 修改: 2026-06-17 02:22
io.netty:netty	CVE-2021-37136	高危	3.10.5.Final	4.0.0	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty	CVE-2021-37137	高危	3.10.5.Final	4.0.0	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37136	高危	4.0.27.Final	4.1.68.Final	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37137	高危	4.0.27.Final	4.1.68.Final	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2026-42583	高危	4.0.27.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec	CVE-2026-59901	高危	4.0.27.Final	4.1.136.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec	CVE-2021-37136	高危	4.1.42.Final	4.1.68.Final	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37136	高危	4.1.42.Final	4.1.68.Final	netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37136 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37137	高危	4.1.42.Final	4.1.68.Final	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2021-37137	高危	4.1.42.Final	4.1.68.Final	netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37137 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-10-19 15:15 修改: 2026-06-17 04:00
io.netty:netty-codec	CVE-2026-42583	高危	4.1.42.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec	CVE-2026-42583	高危	4.1.42.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec	CVE-2026-59901	高危	4.1.42.Final	4.1.136.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec	CVE-2026-59901	高危	4.1.42.Final	4.1.136.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-dns	CVE-2026-42579	高危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24616	高危	2.9.10	2.9.10.6	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24616 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-08-25 18:15 修改: 2026-08-25 16:28
io.netty:netty-codec-http	CVE-2026-33870	高危	4.0.27.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-03-27 20:16 修改: 2026-09-14 13:18
io.netty:netty-codec-http	CVE-2026-42584	高危	4.0.27.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
io.netty:netty-codec-http	CVE-2026-42587	高危	4.0.27.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
com.fasterxml.jackson.core:jackson-databind	CVE-2020-24750	高危	2.9.10	2.6.7.5, 2.9.10.6	jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24750 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-09-17 19:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	高危	2.9.10	2.6.7.4, 2.9.10.7, 2.10.5.1	jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-03 17:15 修改: 2026-08-25 16:28
io.netty:netty-codec-http	CVE-2026-33870	高危	4.1.42.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-03-27 20:16 修改: 2026-09-14 13:18
io.netty:netty-codec-http	CVE-2026-33870	高危	4.1.42.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-03-27 20:16 修改: 2026-09-14 13:18
io.netty:netty-codec-http	CVE-2026-42584	高危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
io.netty:netty-codec-http	CVE-2026-42584	高危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
io.netty:netty-codec-http	CVE-2026-42587	高危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
io.netty:netty-codec-http	CVE-2026-42587	高危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
io.netty:netty-codec-http	CVE-2026-55831	高危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http	CVE-2026-55831	高危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http	CVE-2026-55833	高危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http	CVE-2026-55833	高危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http	CVE-2026-56745	高危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http	CVE-2026-56745	高危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2	CVE-2025-55163	高危	4.1.42.Final	4.2.4.Final, 4.1.124.Final	netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2	CVE-2025-55163	高危	4.1.42.Final	4.2.4.Final, 4.1.124.Final	netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2	CVE-2026-33871	高危	4.1.42.Final	4.1.132.Final, 4.2.11.Final	netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-03-27 20:16 修改: 2026-09-14 13:18
io.netty:netty-codec-http2	CVE-2026-33871	高危	4.1.42.Final	4.1.132.Final, 4.2.11.Final	netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-03-27 20:16 修改: 2026-09-14 13:18
io.netty:netty-codec-http2	CVE-2026-42587	高危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
io.netty:netty-codec-http2	CVE-2026-42587	高危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
io.netty:netty-codec-http2	CVE-2026-56819	高危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2	CVE-2026-56819	高危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2	GHSA-xpw8-rcwv-8f8p	高危	4.1.42.Final	4.1.100.Final	io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack 漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08
io.netty:netty-codec-http2	GHSA-xpw8-rcwv-8f8p	高危	4.1.42.Final	4.1.100.Final	io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack 漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35490	高危	2.9.10	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35490 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-17 19:15 修改: 2026-08-25 16:28
io.netty:netty-handler	CVE-2016-4970	高危	4.0.27.Final	4.0.37.Final, 4.1.1.Final	netty: Infinite loop vulnerability when handling renegotiation using SslProvider.OpenSsl 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4970 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2017-04-13 14:59 修改: 2026-06-17 00:48
io.netty:netty-handler	CVE-2026-44249	高危	4.0.27.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-11 22:16 修改: 2026-09-18 13:18
io.netty:netty-handler	CVE-2026-45416	高危	4.0.27.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 15:16 修改: 2026-09-18 13:18
io.netty:netty-handler	CVE-2026-50010	高危	4.0.27.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 16:16 修改: 2026-09-18 13:18
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35491	高危	2.9.10	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35491 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-17 19:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-35728	高危	2.9.10	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35728 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-27 05:15 修改: 2026-08-25 16:28
io.netty:netty-handler	CVE-2020-11612	高危	4.1.42.Final	4.1.46	netty: compression/decompression codecs don't enforce limits on buffer allocation sizes 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11612 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-04-07 18:15 修改: 2026-06-17 02:50
io.netty:netty-handler	CVE-2020-11612	高危	4.1.42.Final	4.1.46	netty: compression/decompression codecs don't enforce limits on buffer allocation sizes 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11612 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-04-07 18:15 修改: 2026-06-17 02:50
io.netty:netty-handler	CVE-2026-44249	高危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-11 22:16 修改: 2026-09-18 13:18
io.netty:netty-handler	CVE-2026-44249	高危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-11 22:16 修改: 2026-09-18 13:18
io.netty:netty-handler	CVE-2026-45416	高危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 15:16 修改: 2026-09-18 13:18
io.netty:netty-handler	CVE-2026-45416	高危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 15:16 修改: 2026-09-18 13:18
io.netty:netty-handler	CVE-2026-50010	高危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 16:16 修改: 2026-09-18 13:18
io.netty:netty-handler	CVE-2026-50010	高危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 16:16 修改: 2026-09-18 13:18
io.netty:netty-resolver-dns	CVE-2026-45674	高危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 15:16 修改: 2026-09-18 13:18
io.netty:netty-resolver-dns	CVE-2026-47691	高危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 16:16 修改: 2026-09-18 13:18
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36179	高危	2.9.10	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36179 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-07 00:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36180	高危	2.9.10	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36180 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-07 00:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36181	高危	2.9.10	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36181 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
log4j:log4j	CVE-2021-4104	高危	1.2.16		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4104 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-12-14 12:15 修改: 2026-06-17 04:19
log4j:log4j	CVE-2022-23302	高危	1.2.16		log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23302 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-01-18 16:15 修改: 2026-06-17 04:29
log4j:log4j	CVE-2023-26464	高危	1.2.16	2.0	log4j1-socketappender: DoS via hashmap logging 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26464 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-03-10 14:15 修改: 2026-06-17 05:43
org.apache.commons:commons-compress	CVE-2021-35515	高危	1.19	1.21	apache-commons-compress: infinite loop when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35515 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57
org.apache.commons:commons-compress	CVE-2021-35516	高危	1.19	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35516 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57
org.apache.commons:commons-compress	CVE-2021-35517	高危	1.19	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35517 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57
org.apache.commons:commons-compress	CVE-2021-36090	高危	1.19	1.21	apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36090 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:58
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36182	高危	2.9.10	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36182 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-07 00:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36183	高危	2.9.10	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36183 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-07 00:15 修改: 2026-08-25 16:28
org.apache.logging.log4j:log4j-core	CVE-2021-45105	高危	2.9.0	2.12.3, 2.17.0, 2.3.1	log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45105 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-12-18 12:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36184	高危	2.9.10	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36184 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36185	高危	2.9.10	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36185 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36186	高危	2.9.10	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36186 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36187	高危	2.9.10	2.9.10.8	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36187 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36188	高危	2.9.10	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36188 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36189	高危	2.9.10	2.9.10.8, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36189 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-06 23:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	高危	2.9.10	2.13.2.1, 2.12.6.1	jackson-databind: denial of service via a large depth of nested objects 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15
com.fasterxml.jackson.core:jackson-databind	CVE-2021-20190	高危	2.9.10	2.9.10.7, 2.6.7.5	jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20190 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-19 17:15 修改: 2026-07-24 14:27
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.9.10	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
org.apache.tomcat.embed:tomcat-embed-core	CVE-2018-1336	高危	8.5.29	9.0.8, 8.5.31, 8.0.51, 7.0.87	tomcat: A bug in the UTF-8 decoder can lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1336 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-08-02 14:29 修改: 2026-06-17 01:51
org.apache.tomcat.embed:tomcat-embed-core	CVE-2018-8034	高危	8.5.29	9.0.10, 8.5.32, 8.0.53, 7.0.90	tomcat: Host name verification missing in WebSocket client 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8034 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-08-01 18:29 修改: 2026-06-17 02:04
org.apache.tomcat.embed:tomcat-embed-core	CVE-2019-0199	高危	8.5.29	9.0.16, 8.5.38	tomcat: Apache Tomcat HTTP/2 DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0199 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-04-10 15:29 修改: 2026-06-17 02:07
org.apache.tomcat.embed:tomcat-embed-core	CVE-2019-0232	高危	8.5.29	9.0.17, 8.5.40, 7.0.94	tomcat: Remote Code Execution on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0232 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-04-15 15:29 修改: 2026-06-17 02:08
org.apache.tomcat.embed:tomcat-embed-core	CVE-2019-10072	高危	8.5.29	9.0.20, 8.5.41	tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10072 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-06-21 18:15 修改: 2026-06-17 02:10
org.apache.tomcat.embed:tomcat-embed-core	CVE-2019-12418	高危	8.5.29	7.0.99, 8.5.49, 9.0.29	tomcat: local privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12418 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-12-23 18:15 修改: 2026-06-17 02:14
org.apache.tomcat.embed:tomcat-embed-core	CVE-2019-17563	高危	8.5.29	7.0.99, 8.5.50, 9.0.30	tomcat: Session fixation when using FORM authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17563 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-12-23 17:15 修改: 2026-06-17 02:24
org.apache.tomcat.embed:tomcat-embed-core	CVE-2020-11996	高危	8.5.29	10.0.0-M5, 9.0.35, 8.5.55	tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11996 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-06-26 17:15 修改: 2026-06-17 02:51
org.apache.tomcat.embed:tomcat-embed-core	CVE-2020-9484	高危	8.5.29	10.0.0-M5, 9.0.35, 8.5.55, 7.0.104	tomcat: deserialization flaw in session persistence storage leading to RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9484 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-05-20 19:15 修改: 2026-08-25 16:28
org.apache.tomcat.embed:tomcat-embed-core	CVE-2021-25122	高危	8.5.29	10.0.2, 9.0.43, 8.5.63	tomcat: Request mix-up with h2c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25122 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-03-01 12:15 修改: 2026-08-25 16:28
org.apache.tomcat.embed:tomcat-embed-core	CVE-2021-25329	高危	8.5.29	10.0.2, 9.0.41, 8.5.61, 7.0.108	tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence) 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25329 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-03-01 12:15 修改: 2026-08-25 16:28
org.apache.tomcat.embed:tomcat-embed-core	CVE-2022-42252	高危	8.5.29	8.5.83, 9.0.68, 10.0.27, 10.1.1	tomcat: request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42252 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-11-01 09:15 修改: 2026-06-17 05:04
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-46589	高危	8.5.29	11.0.0-M11, 10.1.16, 9.0.83, 8.5.96	tomcat: HTTP request smuggling via malformed trailer headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-11-28 16:15 修改: 2026-06-17 06:31
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-34750	高危	8.5.29	11.0.0-M21, 10.1.25, 9.0.90	tomcat: Improper Handling of Exceptional Conditions 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34750 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-07-03 20:15 修改: 2026-06-17 07:34
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-50379	高危	8.5.29	11.0.2, 10.1.34, 9.0.98	tomcat: RCE due to TOCTOU issue in JSP compilation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50379 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-12-17 13:15 修改: 2026-06-17 08:04
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-48988	高危	8.5.29	11.0.8, 10.1.42, 9.0.106	tomcat: Apache Tomcat DoS in multipart upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-52520	高危	8.5.29	11.0.9, 10.1.43, 9.0.107	tomcat: Apache Tomcat denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-53506	高危	8.5.29	9.0.107, 10.1.43, 11.0.9	tomcat: Apache Tomcat denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-55752	高危	8.5.29	11.0.11, 10.1.45, 9.0.109	tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-24880	高危	8.5.29	9.0.116, 10.1.52, 11.0.20	Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-41284	高危	8.5.29	9.0.118, 10.1.55, 11.0.22	tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-42498	高危	8.5.29	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43513	高危	8.5.29	9.0.118, 10.1.55, 11.0.22	tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-websocket	CVE-2020-13935	高危	8.5.29	7.0.105, 8.5.57, 9.0.37, 10.0.0-M7	tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13935 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-07-14 15:15 修改: 2026-08-25 16:28
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.9.10	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
org.bitbucket.b_c:jose4j	CVE-2023-31582	高危	0.7.0	0.9.3	jose4j: Insecure iteration count setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31582 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-10-25 18:17 修改: 2026-06-17 05:57
org.bitbucket.b_c:jose4j	CVE-2024-29371	高危	0.7.0	0.9.6	jose4j: jose4j: Denial of Service via malicious JSON Web Encryption (JWE) token compression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29371 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-12-17 16:16 修改: 2026-06-17 07:22
org.bouncycastle:bcprov-jdk15on	CVE-2016-1000338	高危	1.55	1.56	bouncycastle: DSA does not fully validate ASN.1 encoding during signature verification allowing for injection of unsigned data 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000338 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-01 20:29 修改: 2025-05-05 14:14
org.bouncycastle:bcprov-jdk15on	CVE-2016-1000340	高危	1.55	1.56	bouncycastle: Carry propagation bug in math.raw.Nat??? class 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000340 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-04 13:29 修改: 2025-05-12 17:37
org.bouncycastle:bcprov-jdk15on	CVE-2016-1000342	高危	1.55	1.56	bouncycastle: ECDSA improper validation of ASN.1 encoding of signature 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000342 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-04 13:29 修改: 2025-05-12 17:37
org.bouncycastle:bcprov-jdk15on	CVE-2016-1000343	高危	1.55	1.56	bouncycastle: DSA key pair generator generates a weak private key by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000343 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-04 13:29 修改: 2025-05-12 17:37
org.bouncycastle:bcprov-jdk15on	CVE-2016-1000344	高危	1.55	1.56	bouncycastle: DHIES implementation allowed the use of ECB mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000344 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-04 21:29 修改: 2025-05-12 17:37
org.bouncycastle:bcprov-jdk15on	CVE-2016-1000352	高危	1.55	1.56	bouncycastle: ECIES implementation allowed the use of ECB mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000352 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-04 21:29 修改: 2025-05-12 17:37
org.bouncycastle:bcprov-jdk15on	CVE-2018-1000180	高危	1.55	1.60	bouncycastle: flaw in the low-level interface to RSA key pair generator 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000180 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-05 13:29 修改: 2026-06-17 01:32
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.9.5	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
org.codehaus.jackson:jackson-mapper-asl	CVE-2019-10172	高危	1.9.13		jackson-mapper-asl: XML external entity similar to CVE-2016-3720 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10172 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-11-18 17:15 修改: 2026-06-17 02:10
org.eclipse.jetty:jetty-http	CVE-2026-2332	高危	9.4.28.v20200408	12.1.7, 12.0.33, 11.0.29, 10.0.28, 9.4.60	org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-14 12:16 修改: 2026-09-10 13:18
org.eclipse.jetty:jetty-security	CVE-2026-10050	高危	9.4.28.v20200408	9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10	jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-04 11:22 修改: 2026-08-08 00:38
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.9.5	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
org.eclipse.jetty:jetty-server	CVE-2021-28165	高危	9.4.28.v20200408	9.4.39, 10.0.2, 11.0.2	jetty: Resource exhaustion when receiving an invalid large TLS frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28165 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-04-01 15:15 修改: 2026-06-17 03:45
org.eclipse.jetty:jetty-server	CVE-2024-13009	高危	9.4.28.v20200408	9.4.57.v20241219	jetty-server: Jetty: Gzip Request Body Buffer Corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13009 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-05-08 18:15 修改: 2026-06-17 07:00
org.elasticsearch:elasticsearch	CVE-2018-3831	高危	6.3.2	5.6.12, 6.4.1	elasticsearch: Information exposure via _cluster/settings API 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3831 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-09-19 19:29 修改: 2026-06-17 01:57
org.elasticsearch:elasticsearch	CVE-2019-7611	高危	6.3.2	5.6.15, 6.6.1	elasticsearch: Improper permission issue when attaching a new name to an index 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7611 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-03-25 19:29 修改: 2026-06-17 02:40
org.elasticsearch:elasticsearch	CVE-2023-31418	高危	6.3.2	7.17.13, 8.9.0	elasticsearch: uncontrolled resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31418 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-10-26 18:15 修改: 2026-06-17 05:56
org.lz4:lz4-java	CVE-2025-12183	高危	1.6.0	1.8.1	lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12183 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-11-28 16:15 修改: 2026-06-17 08:31
org.lz4:lz4-java	CVE-2025-66566	高危	1.6.0		lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66566 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-12-05 18:15 修改: 2026-06-17 09:57
org.msgpack:msgpack-core	CVE-2026-21452	高危	0.8.16	0.9.11	MessagePack for Java is a serializer implementation for Java. A denial ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21452 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-01-02 21:16 修改: 2026-06-17 10:18
org.springframework.boot:spring-boot	CVE-2022-27772	高危	1.5.11.RELEASE	2.2.11.RELEASE	Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27772 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-03-30 18:15 修改: 2026-06-17 04:37
org.springframework.boot:spring-boot	CVE-2025-22235	高危	1.5.11.RELEASE	3.3.11, 3.4.5	org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45
org.springframework.boot:spring-boot	CVE-2026-40973	高危	1.5.11.RELEASE	4.0.6, 3.5.14	Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10
org.springframework.boot:spring-boot-autoconfigure	CVE-2023-20883	高危	1.5.11.RELEASE	3.0.7, 2.7.12, 2.6.15, 2.5.15	spring-boot: Spring Boot Welcome Page DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-05-26 17:15 修改: 2026-06-17 05:31
org.springframework.boot:spring-boot-starter-actuator	CVE-2026-22733	高危	1.5.11.RELEASE	4.0.4, 3.5.12	Spring Boot has an Authentication Bypass under Actuator CloudFoundry endpoints 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22733 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
ch.qos.logback:logback-classic	CVE-2023-6378	高危	1.2.3	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
org.springframework.security:spring-security-crypto	CVE-2025-22228	高危	4.2.3.RELEASE	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16	spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22228 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-03-20 06:15 修改: 2026-06-17 08:45
ch.qos.logback:logback-core	CVE-2023-6378	高危	1.2.3	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
org.springframework:spring-beans	CVE-2022-22970	高危	4.3.15.RELEASE	5.2.22.RELEASE, 5.3.20	springframework: DoS via data binding to multipartFile or servlet part 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-05-12 20:15 修改: 2026-06-17 04:29
org.springframework:spring-context	CVE-2022-22968	高危	4.3.15.RELEASE	5.3.19, 5.2.21.RELEASE	Framework: Data Binding Rules Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:29
org.springframework:spring-core	CVE-2018-15756	高危	4.3.15.RELEASE	5.1.1.RELEASE, 5.0.10.RELEASE, 4.3.20.RELEASE	springframework: DoS Attack via Range Requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15756 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-10-18 22:29 修改: 2026-08-25 16:28
org.springframework:spring-expression	CVE-2023-20863	高危	4.3.15.RELEASE	6.0.8, 5.3.27, 5.2.24.RELEASE	springframework: Spring Expression DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-04-13 20:15 修改: 2026-06-17 05:31
org.springframework:spring-expression	CVE-2026-41849	高危	4.3.15.RELEASE		spring-framework: Spring Framework: Denial of Service via integer overflow in SpEL 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41849 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-expression	CVE-2026-41850	高危	4.3.15.RELEASE	7.0.8, 6.2.19	spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
com.alibaba.nacos:nacos-client	CVE-2021-43116	高危	1.3.1		Use of Hard-coded Credentials in Nacos 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43116 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-07-05 14:15 修改: 2026-06-17 04:10
org.springframework:spring-web	CVE-2024-22243	高危	4.3.15.RELEASE	6.1.4, 6.0.17, 5.3.32	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web	CVE-2024-22259	高危	4.3.15.RELEASE	6.1.5, 6.0.18, 5.3.33	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web	CVE-2024-22262	高危	4.3.15.RELEASE	5.3.34, 6.0.19, 6.1.6	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11
com.alibaba.nacos:nacos-common	CVE-2021-29441	高危	1.3.1	1.4.1	Authentication Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29441 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-04-27 21:15 修改: 2026-06-17 03:47
org.springframework:spring-webmvc	CVE-2024-38819	高危	4.3.15.RELEASE	6.1.14	org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41
org.springframework:spring-webmvc	CVE-2026-41842	高危	4.3.15.RELEASE	7.0.8, 6.2.19	spring-framework: Spring Framework: Denial of Service when resolving static resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc	CVE-2026-41845	高危	4.3.15.RELEASE	7.0.8, 6.2.19	org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.xerial.snappy:snappy-java	CVE-2023-34455	高危	1.1.7.3	1.1.10.1	snappy-java: Unchecked chunk length leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-06-15 18:15 修改: 2026-06-17 06:03
org.xerial.snappy:snappy-java	CVE-2023-43642	高危	1.1.7.3	1.1.10.4	snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-09-25 20:15 修改: 2026-06-17 06:26
org.yaml:snakeyaml	CVE-2017-18640	高危	1.17	1.26	snakeyaml: Billion laughs attack via alias feature 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-12-12 03:15 修改: 2026-06-17 01:13
org.yaml:snakeyaml	CVE-2022-1471	高危	1.17	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22
org.yaml:snakeyaml	CVE-2022-25857	高危	1.17	1.31	snakeyaml: Denial of Service due to missing nested depth limitation for collections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34
org.yaml:snakeyaml	CVE-2017-18640	高危	1.18	1.26	snakeyaml: Billion laughs attack via alias feature 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-12-12 03:15 修改: 2026-06-17 01:13
org.yaml:snakeyaml	CVE-2022-1471	高危	1.18	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22
org.yaml:snakeyaml	CVE-2022-25857	高危	1.18	1.31	snakeyaml: Denial of Service due to missing nested depth limitation for collections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34
io.netty:netty-handler	CVE-2019-20445	中危	4.1.42.Final	4.1.45	netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20445 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30
io.netty:netty-handler	CVE-2023-34462	中危	4.1.42.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03
io.netty:netty-handler	CVE-2023-34462	中危	4.1.42.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03
io.netty:netty-handler	CVE-2026-75596	中危	4.1.42.Final	4.2.17.Final, 4.1.137.Final	Netty is an asynchronous, event-driven network application framework. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler	CVE-2026-75596	中危	4.1.42.Final	4.2.17.Final, 4.1.137.Final	Netty is an asynchronous, event-driven network application framework. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-codec-http	CVE-2026-41417	中危	4.0.27.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-42580	中危	4.0.27.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-resolver-dns	CVE-2026-45673	中危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll	CVE-2026-45536	中危	4.0.27.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-codec-http	CVE-2026-42581	中危	4.0.27.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
io.netty:netty-codec-http	CVE-2026-42585	中危	4.0.27.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-50020	中危	4.0.27.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http	CVE-2026-56746	中危	4.0.27.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http	CVE-2026-59898	中危	4.0.27.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
io.netty:netty-codec-http	CVE-2026-59899	中危	4.0.27.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http	CVE-2026-59903	中危	4.0.27.Final	4.2.17.Final, 4.1.137.Final	io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
io.netty:netty-codec-http	CVE-2026-59921	中危	4.0.27.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
commons-lang:commons-lang	CVE-2025-48924	中危	2.4		commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
commons-lang:commons-lang	CVE-2025-48924	中危	2.6		commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-compress	CVE-2024-25710	中危	1.19	1.26.0	commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-02-19 09:15 修改: 2026-06-17 07:16
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.1	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.7	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.5.2	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-02 17:15 修改: 2026-06-17 02:53
org.apache.httpcomponents:httpclient	CVE-2020-13956	中危	4.5.3	4.5.13, 5.0.3	apache-httpclient: incorrect handling of malformed authority component in request URIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13956 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-02 17:15 修改: 2026-06-17 02:53
org.apache.kafka:kafka-clients	CVE-2021-38153	中危	2.4.1	2.6.3, 2.7.2, 2.8.1	Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-38153 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-09-22 09:15 修改: 2026-06-17 04:01
org.apache.kafka:kafka-clients	CVE-2024-31141	中危	2.4.1	3.7.1	kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-31141 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-11-19 09:15 修改: 2026-06-17 07:27
org.apache.kafka:kafka-clients	CVE-2026-33558	中危	2.4.1	3.9.2, 4.0.1	Apache Kafka exposes sensitive information in its DEBUG logs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33558 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-20 14:16 修改: 2026-06-17 10:37
com.alibaba.nacos:nacos-common	CVE-2021-44667	中危	1.3.1	2.1.0-BETA, 1.4.5	Cross-site Scripting in Nacos 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44667 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-03-11 19:15 修改: 2026-06-17 04:12
io.kubernetes:client-java	CVE-2021-25738	中危	8.0.0	11.0.1	kubernetes-client: Loading specially-crafted yaml can lead to code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25738 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-10-11 19:15 修改: 2026-06-17 03:42
ch.qos.logback:logback-core	CVE-2021-42550	中危	1.2.3	1.2.9	logback: remote code execution through JNDI call from within its configuration file 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42550 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-12-16 19:15 修改: 2026-06-17 04:09
org.apache.logging.log4j:log4j-core	CVE-2021-44832	中危	2.9.0	2.3.2, 2.12.4, 2.17.1	log4j-core: remote code execution via JDBC Appender 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44832 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-12-28 20:15 修改: 2026-06-17 04:12
org.apache.logging.log4j:log4j-core	CVE-2025-68161	中危	2.9.0	2.25.3	Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core	CVE-2026-34480	中危	2.9.0	2.25.4	org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.skywalking:apm-webapp	CVE-2025-54057	中危	8.1.0		Apache SkyWalking has a stored XSS vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54057 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-11-27 12:15 修改: 2026-06-17 09:39
com.fasterxml.jackson.core:jackson-core	CVE-2025-49128	中危	2.9.5	2.13.0	com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	3.11.0	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12384	中危	2.9.5	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12384 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-06-24 16:15 修改: 2026-06-17 02:14
io.netty:netty	CVE-2019-20445	中危	3.10.5.Final	4.0.0	netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20445 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30
io.netty:netty	CVE-2021-21290	中危	3.10.5.Final	4.0.0	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35
io.netty:netty	CVE-2021-21295	中危	3.10.5.Final	4.0.0	netty: possible request smuggling in HTTP/2 due missing validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-03-09 19:15 修改: 2026-06-17 03:35
io.netty:netty	CVE-2021-21409	中危	3.10.5.Final	4.0.0	netty: Request smuggling via content-length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-03-30 15:15 修改: 2026-06-17 03:35
io.netty:netty	CVE-2021-43797	中危	3.10.5.Final	4.0.0	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11
com.fasterxml.jackson.core:jackson-databind	CVE-2019-12814	中危	2.9.5	2.9.9.1, 2.8.11.4, 2.7.9.6, 2.6.7.3	jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12814 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-06-19 14:15 修改: 2026-06-17 02:15
io.netty:netty-codec-http	CVE-2021-21290	中危	4.1.42.Final	4.1.59.Final	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http	CVE-2021-21290	中危	4.1.42.Final	4.1.59.Final	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http	CVE-2021-43797	中危	4.1.42.Final	4.1.71.Final	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11
io.netty:netty-codec-http	CVE-2021-43797	中危	4.1.42.Final	4.1.71.Final	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11
io.netty:netty-codec-http	CVE-2022-24823	中危	4.1.42.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32
io.netty:netty-codec-http	CVE-2022-24823	中危	4.1.42.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32
io.netty:netty-codec-http	CVE-2024-29025	中危	4.1.42.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22
io.netty:netty-codec-http	CVE-2024-29025	中危	4.1.42.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22
io.netty:netty-codec-http	CVE-2025-67735	中危	4.1.42.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http	CVE-2025-67735	中危	4.1.42.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http	CVE-2026-41417	中危	4.1.42.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-41417	中危	4.1.42.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-42580	中危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42580	中危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42581	中危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
io.netty:netty-codec-http	CVE-2026-42581	中危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
io.netty:netty-codec-http	CVE-2026-42585	中危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42585	中危	4.1.42.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-50020	中危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http	CVE-2026-50020	中危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http	CVE-2026-56746	中危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http	CVE-2026-56746	中危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http	CVE-2026-59898	中危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
org.apache.tomcat.embed:tomcat-embed-core	CVE-2018-11784	中危	8.5.29	8.5.34, 7.0.91, 9.0.12	tomcat: Open redirect in default servlet 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11784 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-10-04 13:29 修改: 2026-06-17 01:36
org.apache.tomcat.embed:tomcat-embed-core	CVE-2018-8037	中危	8.5.29	9.0.10, 8.5.32	tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8037 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-08-02 14:29 修改: 2026-06-17 02:04
org.apache.tomcat.embed:tomcat-embed-core	CVE-2019-0221	中危	8.5.29	9.0.17, 8.5.40, 7.0.94	tomcat: XSS in SSI printenv 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0221 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-05-28 22:29 修改: 2026-06-17 02:08
org.apache.tomcat.embed:tomcat-embed-core	CVE-2020-1935	中危	8.5.29	7.0.100, 8.5.51, 9.0.31	tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1935 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-02-24 22:15 修改: 2026-06-17 03:02
org.apache.tomcat.embed:tomcat-embed-core	CVE-2021-24122	中危	8.5.29	10.0.0-M10, 9.0.40, 8.5.60, 7.0.107	tomcat: Information disclosure when using NTFS file system 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24122 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-14 15:15 修改: 2026-08-25 16:28
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-41080	中危	8.5.29	8.5.93, 9.0.80, 10.1.13, 11.0.0-M11	tomcat: Open Redirect vulnerability in FORM authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41080 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-08-25 21:15 修改: 2026-06-17 06:20
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-42795	中危	8.5.29	10.1.14, 9.0.81, 8.5.94, 11.0.0-M12	tomcat: improper cleaning of recycled objects could lead to information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42795 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-10-10 18:15 修改: 2026-06-17 06:24
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-44487	中危	8.5.29	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-10-10 14:15 修改: 2026-08-11 19:37
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-45648	中危	8.5.29	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94	tomcat: incorrectly parsed http trailer headers can cause request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45648 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-10-10 19:15 修改: 2026-06-17 06:28
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-21733	中危	8.5.29	8.5.64, 9.0.44	tomcat: Leaking of unrelated request bodies in default error page 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21733 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-01-19 11:15 修改: 2026-06-17 07:10
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-24549	中危	8.5.29	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17	Tomcat: HTTP/2 header handling DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:14
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-31650	中危	8.5.29	9.0.104, 10.1.40, 11.0.6	tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31650 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-04-28 20:15 修改: 2026-06-17 09:10
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-49125	中危	8.5.29	11.0.8, 10.1.42, 9.0.106	tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-52434	中危	8.5.29	9.0.107	tomcat: Apache Tomcat denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52434 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-66614	中危	8.5.29	11.0.15, 10.1.50, 9.0.113	tomcat: Client certificate verification bypass due to virtual host mapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57
io.netty:netty-codec-http	CVE-2026-59898	中危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
org.apache.tomcat.embed:tomcat-embed-websocket	CVE-2024-23672	中危	8.5.29	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99	Tomcat: WebSocket DoS with incomplete closing handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:13
io.netty:netty-codec-http	CVE-2026-59899	中危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
org.apache.zookeeper:zookeeper	CVE-2019-0201	中危	3.4.10	3.4.14, 3.5.5	zookeeper: Information disclosure in Apache ZooKeeper 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-0201 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-05-23 14:29 修改: 2026-06-17 02:07
io.netty:netty-codec-http	CVE-2026-59899	中危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http	CVE-2026-59903	中危	4.1.42.Final	4.2.17.Final, 4.1.137.Final	io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
org.bitbucket.b_c:jose4j	CVE-2023-51775	中危	0.7.0	0.9.4	jose4j: denial of service via specially crafted JWE 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51775 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-02-29 01:42 修改: 2026-06-17 06:41
org.bitbucket.b_c:jose4j	GHSA-jgvc-jfgh-rjvv	中危	0.7.0	0.9.3	Chosen Ciphertext Attack in Jose4j 漏洞详情: https://github.com/advisories/GHSA-jgvc-jfgh-rjvv 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-04-27 23:52 修改: 2023-04-27 23:52
org.bouncycastle:bcpkix-jdk15on	CVE-2025-8916	中危	1.55	1.79	org.bouncycastle: BouncyCastle denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8916 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-08-13 10:15 修改: 2026-06-17 10:07
org.bouncycastle:bcpkix-jdk15on	CVE-2026-5588	中危	1.55	1.84	bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-15 10:16 修改: 2026-09-18 13:18
org.bouncycastle:bcpkix-jdk15on	CVE-2025-8916	中危	1.61	1.79	org.bouncycastle: BouncyCastle denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8916 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-08-13 10:15 修改: 2026-06-17 10:07
org.bouncycastle:bcpkix-jdk15on	CVE-2026-5588	中危	1.61	1.84	bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-15 10:16 修改: 2026-09-18 13:18
org.bouncycastle:bcprov-ext-jdk15on	CVE-2020-15522	中危	1.61	1.66	bouncycastle: Timing issue within the EC math library 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15522 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-05-20 12:15 修改: 2026-06-17 02:56
org.bouncycastle:bcprov-ext-jdk15on	CVE-2023-33201	中危	1.61		bouncycastle: potential blind LDAP injection attack using a self-signed certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33201 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-07-05 03:15 修改: 2026-06-17 06:01
org.bouncycastle:bcprov-ext-jdk15on	CVE-2023-33202	中危	1.61	1.73	bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33202 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-11-23 16:15 修改: 2026-06-17 06:01
io.netty:netty-codec-http	CVE-2026-59903	中危	4.1.42.Final	4.2.17.Final, 4.1.137.Final	io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
io.netty:netty-codec-http	CVE-2026-59921	中危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
io.netty:netty-codec-http	CVE-2026-59921	中危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.9.5	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.9.5	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.google.protobuf:protobuf-java	CVE-2022-3171	中危	3.11.4	3.21.7, 3.20.3, 3.19.6, 3.16.3	protobuf-java: timeout in parser leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58
io.netty:netty-codec	CVE-2025-58057	中危	4.0.27.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
org.bouncycastle:bcprov-jdk15on	CVE-2016-1000339	中危	1.55	1.56	bouncycastle: Information leak in AESFastEngine class 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000339 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-04 13:29 修改: 2025-05-12 17:37
org.bouncycastle:bcprov-jdk15on	CVE-2016-1000341	中危	1.55	1.56	bouncycastle: Information exposure in DSA signature generation via timing attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000341 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-04 13:29 修改: 2025-05-12 17:37
org.bouncycastle:bcprov-jdk15on	CVE-2016-1000345	中危	1.55	1.56	bouncycastle: DHIES/ECIES CBC modes are vulnerable to padding oracle attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000345 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-04 21:29 修改: 2025-05-12 17:37
org.bouncycastle:bcprov-jdk15on	CVE-2020-15522	中危	1.55	1.66	bouncycastle: Timing issue within the EC math library 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15522 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-05-20 12:15 修改: 2026-06-17 02:56
org.bouncycastle:bcprov-jdk15on	CVE-2020-26939	中危	1.55	1.61	In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26939 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-11-02 22:15 修改: 2026-06-17 03:08
org.bouncycastle:bcprov-jdk15on	CVE-2023-33201	中危	1.55		bouncycastle: potential blind LDAP injection attack using a self-signed certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33201 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-07-05 03:15 修改: 2026-06-17 06:01
org.bouncycastle:bcprov-jdk15on	CVE-2023-33202	中危	1.55	1.70	bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33202 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-11-23 16:15 修改: 2026-06-17 06:01
org.bouncycastle:bcprov-jdk15on	CVE-2024-29857	中危	1.55	1.78	org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-05-14 15:17 修改: 2026-06-17 07:23
org.bouncycastle:bcprov-jdk15on	CVE-2024-30171	中危	1.55	1.78	bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30171 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26
org.bouncycastle:bcprov-jdk15on	CVE-2020-15522	中危	1.61	1.66	bouncycastle: Timing issue within the EC math library 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15522 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-05-20 12:15 修改: 2026-06-17 02:56
org.bouncycastle:bcprov-jdk15on	CVE-2023-33201	中危	1.61		bouncycastle: potential blind LDAP injection attack using a self-signed certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33201 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-07-05 03:15 修改: 2026-06-17 06:01
org.bouncycastle:bcprov-jdk15on	CVE-2023-33202	中危	1.61	1.70	bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33202 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-11-23 16:15 修改: 2026-06-17 06:01
org.bouncycastle:bcprov-jdk15on	CVE-2024-29857	中危	1.61	1.78	org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-05-14 15:17 修改: 2026-06-17 07:23
org.bouncycastle:bcprov-jdk15on	CVE-2024-30171	中危	1.61	1.78	bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30171 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26
org.bouncycastle:bcprov-jdk15on	CVE-2024-34447	中危	1.61	1.78	org.bouncycastle: Use of Incorrectly-Resolved Name or Reference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34447 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-05-03 16:15 修改: 2026-06-17 07:33
org.codehaus.groovy:groovy	CVE-2020-17521	中危	3.0.3	2.4.21, 2.5.14, 3.0.7	groovy: OS temporary directory leads to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-17521 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-07 20:15 修改: 2026-08-25 16:28
ch.qos.logback:logback-core	CVE-2024-12798	中危	1.2.3	1.5.13, 1.3.15	logback-core: arbitrary code execution via JaninoEventEvaluator 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.9.10	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.9.10	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
org.eclipse.jetty:jetty-http	CVE-2023-40167	中危	9.4.28.v20200408	9.4.52, 10.0.16, 11.0.16, 12.0.1	jetty: Improper validation of HTTP/1 content-length 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40167 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-09-15 20:15 修改: 2026-06-17 06:16
org.eclipse.jetty:jetty-http	CVE-2024-6763	中危	9.4.28.v20200408	12.0.12	org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
ch.qos.logback:logback-core	CVE-2025-11226	中危	1.2.3	1.5.19, 1.3.16	ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
com.google.guava:guava	CVE-2018-10237	中危	18.0	24.1.1-android	guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-04-26 21:29 修改: 2026-06-17 01:33
com.google.guava:guava	CVE-2023-2976	中危	18.0	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
io.netty:netty-codec-http2	CVE-2021-21295	中危	4.1.42.Final	4.1.60.Final	netty: possible request smuggling in HTTP/2 due missing validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-03-09 19:15 修改: 2026-06-17 03:35
org.eclipse.jetty:jetty-server	CVE-2020-27218	中危	9.4.28.v20200408	9.4.35.v20201120	jetty: buffer not correctly recycled in Gzip Request inflation 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27218 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-11-28 01:15 修改: 2026-06-17 03:08
org.eclipse.jetty:jetty-server	CVE-2020-27223	中危	9.4.28.v20200408	9.4.37, 10.0.1, 11.0.1	jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27223 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-02-26 22:15 修改: 2026-06-17 03:08
org.eclipse.jetty:jetty-server	CVE-2023-26048	中危	9.4.28.v20200408	9.4.51.v20230217, 10.0.14, 11.0.14	jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26048 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-04-18 21:15 修改: 2026-06-17 05:42
org.eclipse.jetty:jetty-server	CVE-2024-8184	中危	9.4.28.v20200408	12.0.9, 10.0.24, 11.0.24, 9.4.56	org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8184 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:22
org.eclipse.jetty:jetty-server	CVE-2026-6790	中危	9.4.28.v20200408	12.0.35, 12.1.9	jetty: Jetty: Improper Host header validation can lead to request routing issues 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6790 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:35
io.netty:netty-codec-http2	CVE-2021-21295	中危	4.1.42.Final	4.1.60.Final	netty: possible request smuggling in HTTP/2 due missing validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21295 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-03-09 19:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21409	中危	4.1.42.Final	4.1.61.Final	netty: Request smuggling via content-length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-03-30 15:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http2	CVE-2021-21409	中危	4.1.42.Final	4.1.61.Final	netty: Request smuggling via content-length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21409 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-03-30 15:15 修改: 2026-06-17 03:35
org.elasticsearch:elasticsearch	CVE-2019-7614	中危	6.3.2	6.8.2, 7.2.1	elasticsearch: Race condition in response headers on systems with multiple submitting requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7614 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2019-07-30 22:15 修改: 2026-06-17 02:40
org.elasticsearch:elasticsearch	CVE-2020-7019	中危	6.3.2	7.9.0, 6.8.12	elasticsearch: scrolling search can leak fields that should be hidden allowing access restriction bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7019 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-08-18 17:15 修改: 2026-06-17 03:24
org.elasticsearch:elasticsearch	CVE-2020-7021	中危	6.3.2	6.8.14, 7.10.0	elasticsearch: Information disclosure via audit logging with emit_request_body option enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7021 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-02-10 19:15 修改: 2026-06-17 03:24
org.elasticsearch:elasticsearch	CVE-2021-22135	中危	6.3.2	7.11.2, 6.8.15	elasticsearch: Document disclosure flaw in the Elasticsearch suggester 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22135 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-05-13 18:15 修改: 2026-06-17 03:36
org.elasticsearch:elasticsearch	CVE-2021-22137	中危	6.3.2	7.11.2, 6.8.15	elasticsearch: Document disclosure flaw when Document or Field Level Security is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22137 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-05-13 18:15 修改: 2026-06-17 03:36
org.elasticsearch:elasticsearch	CVE-2021-22144	中危	6.3.2	6.8.17, 7.13.3	elasticsearch: uncontrolled recursion in Grok parser 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22144 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-07-26 12:15 修改: 2026-06-17 03:36
org.elasticsearch:elasticsearch	CVE-2023-49921	中危	6.3.2	7.17.16, 8.11.2	elasticsearch: Insertion of Sensitive Information into Log File 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-49921 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-07-26 05:15 修改: 2026-06-17 06:36
org.elasticsearch:elasticsearch	CVE-2024-23444	中危	6.3.2	8.13.0, 7.17.23	Elasticsearch stores private key on disk unencrypted 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23444 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-07-31 18:15 修改: 2026-06-17 07:12
org.elasticsearch:elasticsearch	CVE-2024-43709	中危	6.3.2	7.17.21, 8.13.3	elasticsearch: Elasticsearch allocation of resources without limits or throttling leads to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43709 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-01-21 11:15 修改: 2026-06-17 07:51
org.elasticsearch:elasticsearch	CVE-2024-52979	中危	6.3.2	7.17.25, 8.16.0	elasticsearch: Elasticsearch Uncontrolled Resource Consumption vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52979 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-05-01 14:15 修改: 2026-06-17 08:07
org.hibernate:hibernate-validator	CVE-2020-10693	中危	5.3.6.Final	6.1.5.Final, 6.0.20.Final	hibernate-validator: Improper input validation in the interpolation of constraint error messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10693 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-05-06 14:15 修改: 2026-06-17 02:48
org.hibernate:hibernate-validator	CVE-2023-1932	中危	5.3.6.Final	6.2.0.Final	hibernate-validator: rendering of invalid html with SafeHTML leads to HTML injection and XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1932 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-11-07 10:15 修改: 2026-06-17 05:29
org.hibernate:hibernate-validator	CVE-2025-35036	中危	5.3.6.Final	6.2.0.CR1, 7.0.0.CR1	hibernate-validator: Hibernate Validator Expression Language Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-35036 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-06-03 20:15 修改: 2026-06-17 09:14
org.jetbrains.kotlin:kotlin-stdlib	CVE-2020-29582	中危	1.1.60	1.4.21	kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29582 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-02-03 16:15 修改: 2026-06-17 03:11
org.jetbrains.kotlin:kotlin-stdlib	CVE-2022-24329	中危	1.1.60	1.6.0	kotlin: Not possible to lock dependencies for Multiplatform Gradle Projects 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24329 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-02-25 15:15 修改: 2026-06-17 04:31
io.netty:netty-codec-http2	CVE-2026-47244	中危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2	CVE-2026-47244	中危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
org.lz4:lz4-java	CVE-2026-59949	中危	1.6.0		lz4-java: lz4-java: Denial of Service via insufficient validation in XXHash JNI implementations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-18 15:16 修改: 2026-09-18 20:09
io.netty:netty-codec-http2	CVE-2026-48043	中危	4.1.42.Final	4.1.135.Final, 4.2.15.Final	netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 16:16 修改: 2026-09-18 13:18
io.netty:netty-codec-http2	CVE-2026-48043	中危	4.1.42.Final	4.1.135.Final, 4.2.15.Final	netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 16:16 修改: 2026-09-18 13:18
io.netty:netty-codec-http2	CVE-2026-50560	中危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2	CVE-2026-50560	中危	4.1.42.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
org.springframework.boot:spring-boot-actuator	CVE-2023-34055	中危	1.5.11.RELEASE	2.7.18, 3.0.13, 3.1.6	spring-boot: org.springframework.boot: spring-boot-actuator class vulnerable to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34055 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-11-28 09:15 修改: 2026-06-17 06:02
io.netty:netty-codec-http2	CVE-2026-59900	中危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-http2	CVE-2026-59900	中危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-common	CVE-2024-47535	中危	4.0.27.Final	4.1.115.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common	CVE-2025-25193	中危	4.0.27.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
io.netty:netty-common	CVE-2024-47535	中危	4.1.42.Final	4.1.115.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common	CVE-2024-47535	中危	4.1.42.Final	4.1.115.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common	CVE-2025-25193	中危	4.1.42.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
org.springframework:spring-context	CVE-2024-38820	中危	4.3.15.RELEASE	6.1.14	The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
io.netty:netty-common	CVE-2025-25193	中危	4.1.42.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
org.springframework:spring-core	CVE-2018-11040	中危	4.3.15.RELEASE	5.0.7.RELEASE, 4.3.18.RELEASE	springframework: cross-domain requests via JSONP through AbstractJsonpResponseBodyAdvice 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11040 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-25 15:29 修改: 2026-06-17 01:35
org.springframework:spring-core	CVE-2018-1257	中危	4.3.15.RELEASE	5.0.6, 4.3.17	spring-framework: ReDoS Attack with spring-messaging 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1257 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-05-11 20:29 修改: 2026-06-17 01:50
com.squareup.okio:okio	CVE-2023-3635	中危	1.13.0	3.4.0, 1.17.6	okio: GzipSource class improper exception handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-07-12 19:15 修改: 2026-06-17 06:14
com.google.guava:guava	CVE-2018-10237	中危	20.0	24.1.1-android	guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10237 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-04-26 21:29 修改: 2026-06-17 01:33
io.netty:netty-codec	CVE-2025-58057	中危	4.1.42.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
org.springframework:spring-expression	CVE-2022-22950	中危	4.3.15.RELEASE	5.3.17, 5.2.20.RELEASE	spring-expression: Denial of service via specially crafted SpEL expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29
org.springframework:spring-expression	CVE-2023-20861	中危	4.3.15.RELEASE	6.0.7, 5.3.26, 5.2.23.RELEASE	springframework: Spring Expression DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-03-23 21:15 修改: 2026-06-17 05:31
org.springframework:spring-expression	CVE-2024-38808	中危	4.3.15.RELEASE	5.3.39	spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41
org.springframework:spring-expression	CVE-2026-41851	中危	4.3.15.RELEASE	7.0.8, 6.2.19	Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
io.netty:netty-codec	CVE-2025-58057	中危	4.1.42.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
com.google.guava:guava	CVE-2023-2976	中危	20.0	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
io.netty:netty-handler	CVE-2019-20445	中危	4.0.27.Final	4.1.45	netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20445 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30
io.netty:netty-handler	CVE-2023-34462	中危	4.0.27.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03
org.springframework:spring-web	CVE-2018-11039	中危	4.3.15.RELEASE	5.0.7, 4.3.18	springframework: Cross Site Tracing (XST) if vulnerable to XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11039 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-25 15:29 修改: 2026-08-25 16:28
org.springframework:spring-web	CVE-2024-38809	中危	4.3.15.RELEASE	5.3.38, 6.0.23, 6.1.12	org.springframework:spring-web: Spring Framework DoS via conditional HTTP request 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41
org.springframework:spring-web	CVE-2024-38820	中危	4.3.15.RELEASE	6.1.14	The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
io.netty:netty-handler	CVE-2026-75596	中危	4.0.27.Final	4.2.17.Final, 4.1.137.Final	Netty is an asynchronous, event-driven network application framework. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-codec-dns	CVE-2026-73508	中危	4.1.42.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-13 15:20 修改: 2026-09-09 20:58
com.google.guava:guava	CVE-2023-2976	中危	28.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
commons-io:commons-io	CVE-2021-29425	中危	2.4	2.7	apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29425 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-04-13 07:15 修改: 2026-08-25 16:28
org.springframework:spring-webmvc	CVE-2026-22745	中危	4.3.15.RELEASE	7.0.7, 6.2.18	spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc	CVE-2026-41841	中危	4.3.15.RELEASE	7.0.8, 6.2.19	Spring MVC and WebFlux applications are vulnerable to Information Disc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc	CVE-2026-41843	中危	4.3.15.RELEASE	7.0.8, 6.2.19	spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc	CVE-2026-41844	中危	4.3.15.RELEASE	7.0.8, 6.2.19	Spring Framework: Spring Framework: Open Redirect via crafted link 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc	CVE-2026-41846	中危	4.3.15.RELEASE	7.0.8, 6.2.19	Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc	CVE-2026-41853	中危	4.3.15.RELEASE	7.0.8, 6.2.19	Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
com.fasterxml.jackson.core:jackson-core	CVE-2025-49128	中危	2.9.10	2.13.0	com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30
commons-io:commons-io	CVE-2021-29425	中危	2.6	2.7	apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29425 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-04-13 07:15 修改: 2026-08-25 16:28
org.xerial.snappy:snappy-java	CVE-2023-34453	中危	1.1.7.3	1.1.10.1	snappy-java: Integer overflow in shuffle leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03
org.xerial.snappy:snappy-java	CVE-2023-34454	中危	1.1.7.3	1.1.10.1	snappy-java: Integer overflow in compress leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03
io.netty:netty-codec-http	CVE-2021-21290	中危	4.0.27.Final	4.1.59.Final	netty: Information disclosure via the local system temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21290 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35
io.netty:netty-codec-http	CVE-2021-43797	中危	4.0.27.Final	4.1.71.Final	netty: control chars in header names may lead to HTTP request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43797 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-12-09 19:15 修改: 2026-06-17 04:11
io.netty:netty-codec-http	CVE-2022-24823	中危	4.0.27.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32
org.yaml:snakeyaml	CVE-2022-38749	中危	1.17	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-38750	中危	1.17	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-38751	中危	1.17	1.31	snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-38752	中危	1.17	1.32	snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-41854	中危	1.17	1.32	dev-java/snakeyaml: DoS via stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03
io.netty:netty-codec-http	CVE-2024-29025	中危	4.0.27.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22
io.netty:netty-codec-http	CVE-2025-67735	中危	4.0.27.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-handler	CVE-2019-20445	中危	4.1.42.Final	4.1.45	netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20445 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-01-29 21:15 修改: 2026-06-17 02:30
org.yaml:snakeyaml	CVE-2022-38749	中危	1.18	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-38750	中危	1.18	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-38751	中危	1.18	1.31	snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-38752	中危	1.18	1.32	snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-41854	中危	1.18	1.32	dev-java/snakeyaml: DoS via stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03
io.netty:netty-handler-proxy	CVE-2026-42578	低危	4.1.42.Final	4.1.133.Final, 4.2.13.Final	netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18
ch.qos.logback:logback-core	CVE-2026-9828	低危	1.2.3	1.5.33	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
io.netty:netty-codec-http	CVE-2025-58056	低危	4.1.42.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
org.eclipse.jetty:jetty-http	CVE-2022-2047	低危	9.4.28.v20200408	9.4.47, 10.0.10, 11.0.10	jetty-http: improver hostname input handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2047 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-07-07 21:15 修改: 2026-06-17 04:41
org.springframework:spring-context	CVE-2025-22233	低危	4.3.15.RELEASE	6.2.7, 6.1.20	CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45
org.eclipse.jetty:jetty-http	CVE-2025-11143	低危	9.4.28.v20200408	12.0.31, 12.1.5	org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11143 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-03-05 10:15 修改: 2026-06-17 08:29
org.apache.logging.log4j:log4j-core	CVE-2020-9488	低危	2.9.0	2.13.2, 2.12.3, 2.3.2	log4j: improper validation of certificate with host mismatch in SMTP appender 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9488 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-04-27 16:15 修改: 2026-06-17 03:28
org.springframework:spring-webmvc	CVE-2026-22741	低危	4.3.15.RELEASE	7.0.7, 6.2.18	Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.elasticsearch:elasticsearch	CVE-2020-7020	低危	6.3.2	6.8.13, 7.9.2	elasticsearch: not properly preserving security permissions when executing complex queries may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7020 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-10-22 17:15 修改: 2026-06-17 03:24
org.springframework:spring-core	CVE-2026-41848	低危	4.3.15.RELEASE	7.0.8, 6.2.19	spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
io.netty:netty-codec-http	CVE-2025-58056	低危	4.1.42.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
io.netty:netty-codec-http	CVE-2025-58056	低危	4.0.27.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
ch.qos.logback:logback-core	CVE-2024-12801	低危	1.2.3	1.5.13, 1.3.15	logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00
com.google.guava:guava	CVE-2020-8908	低危	20.0	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
commons-configuration:commons-configuration	CVE-2025-46392	低危	1.8		apache-commons-configuration: Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46392 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-05-09 10:15 修改: 2026-06-17 09:26
org.bouncycastle:bcprov-jdk15on	CVE-2016-1000346	低危	1.55	1.56	bouncycastle: Other party DH public keys are not fully validated 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000346 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2018-06-04 21:29 修改: 2025-05-12 17:37
ch.qos.logback:logback-core	CVE-2026-10532	低危	1.2.3	1.5.34	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
org.springframework:spring-expression	CVE-2026-41852	低危	4.3.15.RELEASE	7.0.8, 6.2.19	spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-31651	低危	8.5.29	9.0.104, 10.1.40, 11.0.6	tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31651 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-04-28 20:15 修改: 2026-06-17 09:10
org.eclipse.jetty:jetty-server	CVE-2021-34428	低危	9.4.28.v20200408	9.4.41, 10.0.3, 11.0.3	jetty: SessionListener can prevent a session from being invalidated breaking logout 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34428 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-06-22 15:15 修改: 2026-06-17 03:55
org.eclipse.jetty:jetty-server	CVE-2023-26049	低危	9.4.28.v20200408	9.4.51.v20230217, 10.0.14, 11.0.14, 12.0.0.beta0	jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26049 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-04-18 21:15 修改: 2026-06-17 05:42
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-46701	低危	8.5.29	9.0.105, 10.1.41, 11.0.7	tomcat: Apache Tomcat: Security constraint bypass for CGI scripts 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-61795	低危	8.5.29	11.0.12, 10.1.47, 9.0.110	tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43514	低危	8.5.29	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
com.google.guava:guava	CVE-2020-8908	低危	28.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
ch.qos.logback:logback-core	CVE-2026-1225	低危	1.2.3	1.5.25	ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15
com.google.guava:guava	CVE-2020-8908	低危	18.0	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
io.netty:netty-handler-proxy	CVE-2026-42578	低危	4.1.42.Final	4.1.133.Final, 4.2.13.Final	netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-13 19:17 修改: 2026-09-18 13:18

skywalking/bin/swctl (gobinary)

低危漏洞:4

中危漏洞:81

高危漏洞:106

严重漏洞:6

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
google.golang.org/grpc	CVE-2026-33186	严重	v1.24.0	1.79.3	google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33186 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-03-20 23:16 修改: 2026-09-18 13:17
stdlib	CVE-2022-23806	严重	v1.13.3	1.16.14, 1.17.7	golang: crypto/elliptic: IsOnCurve returns true for invalid field elements 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23806 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-02-11 01:15 修改: 2026-06-17 04:30
stdlib	CVE-2023-24538	严重	v1.13.3	1.19.8, 1.20.3	golang: html/template: backticks not treated as string delimiters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-04-06 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-24540	严重	v1.13.3	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-05-11 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2024-24790	严重	v1.13.3	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-06-05 16:15 修改: 2026-06-17 07:14
stdlib	CVE-2025-68121	严重	v1.13.3	1.24.13, 1.25.7, 1.26.0-rc.3	crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58
golang.org/x/crypto	CVE-2024-45337	高危	v0.0.0-20191122220453-ac88ee75c92c	0.31.0	golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45337 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-12-12 02:02 修改: 2026-06-17 07:54
golang.org/x/crypto	CVE-2025-22869	高危	v0.0.0-20191122220453-ac88ee75c92c	0.35.0	golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22869 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-02-26 08:14 修改: 2026-06-17 08:50
golang.org/x/crypto	CVE-2025-47913	高危	v0.0.0-20191122220453-ac88ee75c92c	0.43.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47913 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-11-13 22:15 修改: 2026-06-17 09:28
golang.org/x/crypto	CVE-2026-39828	高危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-09-11 13:17
golang.org/x/crypto	CVE-2026-39829	高危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-09-16 13:17
golang.org/x/crypto	CVE-2026-39830	高危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-09-16 13:17
golang.org/x/crypto	CVE-2026-39831	高危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39832	高危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-09-15 12:17
golang.org/x/crypto	CVE-2026-39835	高危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-09-18 13:18
golang.org/x/crypto	CVE-2026-42508	高危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-09-15 12:17
golang.org/x/crypto	CVE-2026-46595	高危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-09-11 13:18
golang.org/x/crypto	CVE-2026-46597	高危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-56854	高危	v0.0.0-20191122220453-ac88ee75c92c	0.55.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/net	CVE-2021-33194	高危	v0.0.0-20200226121028-0de0cce0169b	0.0.0-20210520170846-37e1c6afe023	golang: x/net/html: infinite loop in ParseFragment 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33194 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-05-26 15:15 修改: 2026-06-17 03:54
golang.org/x/net	CVE-2021-44716	高危	v0.0.0-20200226121028-0de0cce0169b	0.0.0-20211209124913-491a49abca63	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-01-01 05:15 修改: 2026-06-17 04:12
golang.org/x/net	CVE-2022-27664	高危	v0.0.0-20200226121028-0de0cce0169b	0.0.0-20220906165146-f3363e06e74c	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-09-06 18:15 修改: 2026-06-17 04:37
golang.org/x/net	CVE-2022-41723	高危	v0.0.0-20200226121028-0de0cce0169b	0.7.0	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
golang.org/x/net	CVE-2023-39325	高危	v0.0.0-20200226121028-0de0cce0169b	0.17.0	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-10-11 22:15 修改: 2026-06-17 06:12
golang.org/x/net	CVE-2023-45288	高危	v0.0.0-20200226121028-0de0cce0169b	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-04-04 21:15 修改: 2026-06-17 06:28
golang.org/x/net	CVE-2024-45338	高危	v0.0.0-20200226121028-0de0cce0169b	0.33.0	golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45338 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-12-18 21:15 修改: 2026-06-17 07:54
golang.org/x/net	CVE-2026-25681	高危	v0.0.0-20200226121028-0de0cce0169b	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-27136	高危	v0.0.0-20200226121028-0de0cce0169b	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-33814	高危	v0.0.0-20200226121028-0de0cce0169b	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-07 20:16 修改: 2026-09-18 13:17
golang.org/x/net	CVE-2026-39821	高危	v0.0.0-20200226121028-0de0cce0169b	0.55.0	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 16:16 修改: 2026-09-17 12:18
golang.org/x/net	CVE-2026-46600	高危	v0.0.0-20200226121028-0de0cce0169b	0.56.0	golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text	CVE-2020-14040	高危	v0.3.0	0.3.3	golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14040 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-06-17 20:15 修改: 2026-06-17 02:54
golang.org/x/text	CVE-2021-38561	高危	v0.3.0	0.3.7	golang: out-of-bounds read in golang.org/x/text/language leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-38561 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-12-26 06:15 修改: 2026-06-17 04:02
golang.org/x/text	CVE-2022-32149	高危	v0.3.0	0.3.8	golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32149 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-10-14 15:15 修改: 2026-06-17 04:46
golang.org/x/text	CVE-2026-56852	高危	v0.3.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
github.com/sirupsen/logrus	CVE-2025-65637	高危	v1.6.0	1.8.3, 1.9.1, 1.9.3	github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65637 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-12-04 19:16 修改: 2026-06-17 09:55
google.golang.org/grpc	CVE-2026-84304	高危	v1.24.0	1.83.1	gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc	CVE-2026-84445	高危	v1.24.0	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.24.0	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
google.golang.org/grpc	GHSA-m425-mq94-257g	高危	v1.24.0	1.56.3, 1.57.1, 1.58.3	gRPC-Go HTTP/2 Rapid Reset vulnerability 漏洞详情: https://github.com/advisories/GHSA-m425-mq94-257g 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-10-25 21:17 修改: 2024-07-19 16:32
golang.org/x/crypto	CVE-2020-29652	高危	v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20201216223049-8b5274cf687f	golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29652 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-12-17 05:15 修改: 2026-06-17 03:11
golang.org/x/crypto	CVE-2020-7919	高危	v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20200124225646-8b5121be2f68	golang: Integer overflow on 32bit architectures via crafted certificate allows for denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7919 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-16 21:15 修改: 2026-06-17 03:25
golang.org/x/crypto	CVE-2020-9283	高危	v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20200220183623-bac4c82f6975	golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9283 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-02-20 20:15 修改: 2026-06-17 03:27
golang.org/x/crypto	CVE-2021-43565	高危	v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20211202192323-5770296d904e	golang.org/x/crypto: empty plaintext packet causes panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43565 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-09-06 18:15 修改: 2026-06-17 04:11
golang.org/x/crypto	CVE-2022-27191	高危	v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20220314234659-1baeb1ce4c0b	golang: crash in a golang.org/x/crypto/ssh server 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27191 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-03-18 07:15 修改: 2026-06-17 04:36
stdlib	CVE-2020-0601	高危	v1.13.3	1.12.16, 1.13.7	Certificate validation bypass on Windows in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-0601 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-01-14 23:15 修改: 2026-06-17 02:46
stdlib	CVE-2020-16845	高危	v1.13.3	1.13.15, 1.14.7	golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16845 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-08-06 18:15 修改: 2026-06-17 02:58
stdlib	CVE-2020-7919	高危	v1.13.3	1.12.16, 1.13.7	golang: Integer overflow on 32bit architectures via crafted certificate allows for denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7919 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-03-16 21:15 修改: 2026-06-17 03:25
stdlib	CVE-2021-27918	高危	v1.13.3	1.15.9, 1.16.1	golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-03-11 00:15 修改: 2026-06-17 03:45
stdlib	CVE-2021-33195	高危	v1.13.3	1.15.13, 1.16.5	golang: net: lookup functions may return invalid host names 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33195 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-08-02 19:15 修改: 2026-06-17 03:54
stdlib	CVE-2021-33196	高危	v1.13.3	1.15.13, 1.16.5	golang: archive/zip: malformed archive may cause panic or memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33196 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-08-02 19:15 修改: 2026-06-17 03:54
stdlib	CVE-2021-33198	高危	v1.13.3	1.15.13, 1.16.5	golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33198 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-08-02 19:15 修改: 2026-06-17 03:54
stdlib	CVE-2021-39293	高危	v1.13.3	1.16.8, 1.17.1	golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39293 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-01-24 01:15 修改: 2026-06-17 04:03
stdlib	CVE-2021-41771	高危	v1.13.3	1.16.10, 1.17.3	golang: debug/macho: invalid dynamic symbol table command can cause panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41771 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-11-08 06:15 修改: 2026-06-17 04:08
stdlib	CVE-2021-41772	高危	v1.13.3	1.16.10, 1.17.3	golang: archive/zip: Reader.Open panics on empty string 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41772 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-11-08 06:15 修改: 2026-06-17 04:08
stdlib	CVE-2021-44716	高危	v1.13.3	1.16.12, 1.17.5	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-01-01 05:15 修改: 2026-06-17 04:12
stdlib	CVE-2022-23772	高危	v1.13.3	1.16.14, 1.17.7	golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23772 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-02-11 01:15 修改: 2026-06-17 04:30
stdlib	CVE-2022-24675	高危	v1.13.3	1.17.9, 1.18.1	golang: encoding/pem: fix stack overflow in Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24675 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-04-20 10:15 修改: 2026-06-17 04:32
stdlib	CVE-2022-24921	高危	v1.13.3	1.16.15, 1.17.8	golang: regexp: stack exhaustion via a deeply nested expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24921 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-03-05 20:15 修改: 2026-06-17 04:32
stdlib	CVE-2022-27664	高危	v1.13.3	1.18.6, 1.19.1	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-09-06 18:15 修改: 2026-06-17 04:37
stdlib	CVE-2022-28131	高危	v1.13.3	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Decoder.Skip 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:38
stdlib	CVE-2022-28327	高危	v1.13.3	1.17.9, 1.18.1	golang: crypto/elliptic: panic caused by oversized scalar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28327 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-04-20 10:15 修改: 2026-06-17 04:38
stdlib	CVE-2022-2879	高危	v1.13.3	1.18.7, 1.19.2	golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-10-14 15:15 修改: 2026-06-17 04:42
stdlib	CVE-2022-2880	高危	v1.13.3	1.18.7, 1.19.2	golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-10-14 15:15 修改: 2026-06-17 04:42
stdlib	CVE-2022-29804	高危	v1.13.3	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:40
stdlib	CVE-2022-30580	高危	v1.13.3	1.17.11, 1.18.3	golang: os/exec: Code injection in Cmd.Start 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-30630	高危	v1.13.3	1.17.12, 1.18.4	golang: io/fs: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-30631	高危	v1.13.3	1.17.12, 1.18.4	golang: compress/gzip: stack exhaustion in Reader.Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-30632	高危	v1.13.3	1.17.12, 1.18.4	golang: path/filepath: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-30633	高危	v1.13.3	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-30634	高危	v1.13.3	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-07-15 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-30635	高危	v1.13.3	1.17.12, 1.18.4	golang: encoding/gob: stack exhaustion in Decoder.Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-32189	高危	v1.13.3	1.17.13, 1.18.5	golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:46
stdlib	CVE-2022-41715	高危	v1.13.3	1.18.7, 1.19.2	golang: regexp/syntax: limit memory used by parsing regexps 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-10-14 15:16 修改: 2026-06-17 05:03
stdlib	CVE-2022-41716	高危	v1.13.3	1.18.8, 1.19.3	Due to unsanitized NUL values, attackers may be able to maliciously se ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-11-02 16:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41720	高危	v1.13.3	1.18.9, 1.19.4	golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-12-07 17:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41722	高危	v1.13.3	1.19.6, 1.20.1	golang: path/filepath: path-filepath filepath.Clean path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41723	高危	v1.13.3	1.19.6, 1.20.1	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41724	高危	v1.13.3	1.19.6, 1.20.1	golang: crypto/tls: large handshake records may cause panics 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41725	高危	v1.13.3	1.19.6, 1.20.1	golang: net/http, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
stdlib	CVE-2023-24534	高危	v1.13.3	1.19.8, 1.20.3	golang: net/http, net/textproto: denial of service from excessive memory allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-04-06 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-24536	高危	v1.13.3	1.19.8, 1.20.3	golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-04-06 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-24537	高危	v1.13.3	1.19.8, 1.20.3	golang: go/parser: Infinite loop in parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-04-06 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-24539	高危	v1.13.3	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-05-11 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-29400	高危	v1.13.3	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-05-11 16:15 修改: 2026-06-17 05:49
stdlib	CVE-2023-29403	高危	v1.13.3	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-06-08 21:15 修改: 2026-06-17 05:49
stdlib	CVE-2023-39325	高危	v1.13.3	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-10-11 22:15 修改: 2026-06-17 06:12
stdlib	CVE-2023-45283	高危	v1.13.3	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-11-09 17:15 修改: 2026-06-17 06:28
stdlib	CVE-2023-45287	高危	v1.13.3	1.20.0	golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-12-05 17:15 修改: 2026-06-17 06:28
stdlib	CVE-2023-45288	高危	v1.13.3	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-04-04 21:15 修改: 2026-06-17 06:28
stdlib	CVE-2024-34156	高危	v1.13.3	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-09-06 21:15 修改: 2026-06-17 07:33
stdlib	CVE-2025-61726	高危	v1.13.3	1.24.12, 1.25.6	golang: net/url: Memory exhaustion in query parameter parsing in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-01-28 20:16 修改: 2026-09-17 12:17
stdlib	CVE-2025-61729	高危	v1.13.3	1.24.11, 1.25.5	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50
stdlib	CVE-2026-25679	高危	v1.13.3	1.25.8, 1.26.1	net/url: Incorrect parsing of IPv6 host literals in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-03-06 22:16 修改: 2026-09-18 13:17
stdlib	CVE-2026-27145	高危	v1.13.3	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-02 23:16 修改: 2026-09-18 13:17
stdlib	CVE-2026-32280	高危	v1.13.3	1.25.9, 1.26.2	crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-08 02:16 修改: 2026-09-18 13:17
stdlib	CVE-2026-32281	高危	v1.13.3	1.25.9, 1.26.2	crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32283	高危	v1.13.3	1.25.9, 1.26.2	crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-08 02:16 修改: 2026-09-18 13:17
stdlib	CVE-2026-33811	高危	v1.13.3	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-07 20:16 修改: 2026-09-18 13:17
stdlib	CVE-2026-33814	高危	v1.13.3	1.25.10, 1.26.3	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-07 20:16 修改: 2026-09-18 13:17
stdlib	CVE-2026-33818	高危	v1.13.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib	CVE-2026-39820	高危	v1.13.3	1.25.10, 1.26.3	net/mail: golang: Go net/mail: Denial of Service via crafted email inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-07 20:16 修改: 2026-09-18 13:18
stdlib	CVE-2026-39821	高危	v1.13.3	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 16:16 修改: 2026-09-17 12:18
stdlib	CVE-2026-39822	高危	v1.13.3	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-08 17:17 修改: 2026-09-17 17:10
stdlib	CVE-2026-39836	高危	v1.13.3	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42499	高危	v1.13.3	1.25.10, 1.26.3	net/mail: golang: net/mail: Denial of Service via pathological email address parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-07 20:16 修改: 2026-09-18 13:18
stdlib	CVE-2026-42504	高危	v1.13.3	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-56853	高危	v1.13.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib	CVE-2026-56858	高危	v1.13.3	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib	CVE-2026-56859	高危	v1.13.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib	CVE-2026-56860	高危	v1.13.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
stdlib	CVE-2026-56862	高危	v1.13.3	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
golang.org/x/net	CVE-2026-42506	中危	v0.0.0-20200226121028-0de0cce0169b	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/sys	CVE-2022-29526	中危	v0.0.0-20200116001909-b77594299b42	0.0.0-20220412211240-33da011f77ad	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-06-23 17:15 修改: 2026-06-17 04:40
golang.org/x/crypto	CVE-2026-39827	中危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39833	中危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-08-11 22:17
golang.org/x/crypto	CVE-2026-39834	中危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-46598	中危	v0.0.0-20191122220453-ac88ee75c92c	0.52.0	golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-56855	中危	v0.0.0-20191122220453-ac88ee75c92c	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto	CVE-2026-78662	中危	v0.0.0-20191122220453-ac88ee75c92c	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto	CVE-2023-48795	中危	v0.0.0-20191122220453-ac88ee75c92c	0.17.0	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-12-18 16:15 修改: 2026-06-17 06:34
golang.org/x/crypto	CVE-2025-47914	中危	v0.0.0-20191122220453-ac88ee75c92c	0.45.0	golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47914 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-11-19 21:15 修改: 2026-06-17 09:28
golang.org/x/crypto	CVE-2025-58181	中危	v0.0.0-20191122220453-ac88ee75c92c	0.45.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58181 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-11-19 21:15 修改: 2026-06-17 09:44
google.golang.org/grpc	CVE-2026-84303	中危	v1.24.0	1.83.1	gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
golang.org/x/net	CVE-2021-31525	中危	v0.0.0-20200226121028-0de0cce0169b	0.0.0-20210428140749-89ef3d95e781	golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31525 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-05-27 13:15 修改: 2026-06-17 03:51
golang.org/x/net	CVE-2022-41717	中危	v0.0.0-20200226121028-0de0cce0169b	0.4.0	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-12-08 20:15 修改: 2026-06-17 05:03
golang.org/x/net	CVE-2023-3978	中危	v0.0.0-20200226121028-0de0cce0169b	0.13.0	golang.org/x/net/html: Cross site scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3978 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-08-02 20:15 修改: 2026-06-17 06:15
golang.org/x/net	CVE-2025-22870	中危	v0.0.0-20200226121028-0de0cce0169b	0.36.0	golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50
golang.org/x/net	CVE-2025-22872	中危	v0.0.0-20200226121028-0de0cce0169b	0.38.0	golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22872 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-04-16 18:16 修改: 2026-06-17 08:50
golang.org/x/net	CVE-2025-47911	中危	v0.0.0-20200226121028-0de0cce0169b	0.45.0	golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47911 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:28
golang.org/x/net	CVE-2025-58190	中危	v0.0.0-20200226121028-0de0cce0169b	0.45.0	golang.org/x/net/html: Infinite parsing loop in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58190 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:44
golang.org/x/net	CVE-2026-25680	中危	v0.0.0-20200226121028-0de0cce0169b	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42502	中危	v0.0.0-20200226121028-0de0cce0169b	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
stdlib	CVE-2020-14039	中危	v1.13.3	1.13.13, 1.14.5	CVE-2020-14039 affecting package golang 1.13.11- 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14039 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-07-17 16:15 修改: 2026-06-17 02:54
stdlib	CVE-2020-15586	中危	v1.13.3	1.13.13, 1.14.5	golang: data race in certain net/http servers including ReverseProxy can lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15586 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-07-17 16:15 修改: 2026-06-17 02:56
stdlib	CVE-2020-24553	中危	v1.13.3	1.14.8, 1.15.1	golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2020-09-02 17:15 修改: 2026-06-17 03:05
stdlib	CVE-2021-3114	中危	v1.13.3	1.14.14, 1.15.7	golang: crypto/elliptic: incorrect operations on the P-224 curve 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3114 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-01-26 18:16 修改: 2026-06-17 04:04
stdlib	CVE-2021-31525	中危	v1.13.3	1.15.12, 1.16.4	golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31525 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-05-27 13:15 修改: 2026-06-17 03:51
stdlib	CVE-2021-33197	中危	v1.13.3	1.15.13, 1.16.5	golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33197 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-08-02 19:15 修改: 2026-06-17 03:54
stdlib	CVE-2021-34558	中危	v1.13.3	1.15.14, 1.16.6	golang: crypto/tls: certificate of wrong type is causing TLS client to panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34558 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-07-15 14:15 修改: 2026-06-17 03:56
stdlib	CVE-2021-36221	中危	v1.13.3	1.15.15, 1.16.7	golang: net/http/httputil: panic due to racy read of persistConn after handler panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36221 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2021-08-08 06:15 修改: 2026-06-17 03:58
stdlib	CVE-2021-44717	中危	v1.13.3	1.16.12, 1.17.5	golang: syscall: don't close fd 0 on ForkExec error 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44717 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-01-01 05:15 修改: 2026-06-17 04:12
stdlib	CVE-2022-1705	中危	v1.13.3	1.17.12, 1.18.4	golang: net/http: improper sanitization of Transfer-Encoding header 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:22
stdlib	CVE-2022-1962	中危	v1.13.3	1.17.12, 1.18.4	golang: go/parser: stack exhaustion in all Parse* functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:23
stdlib	CVE-2022-29526	中危	v1.13.3	1.17.10, 1.18.2	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-06-23 17:15 修改: 2026-06-17 04:40
stdlib	CVE-2022-32148	中危	v1.13.3	1.17.12, 1.18.4	golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:46
stdlib	CVE-2022-41717	中危	v1.13.3	1.18.9, 1.19.4	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-12-08 20:15 修改: 2026-06-17 05:03
stdlib	CVE-2023-24532	中危	v1.13.3	1.19.7, 1.20.2	golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-03-08 20:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-29406	中危	v1.13.3	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-07-11 20:15 修改: 2026-06-17 05:49
stdlib	CVE-2023-29409	中危	v1.13.3	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-08-02 20:15 修改: 2026-06-17 05:49
stdlib	CVE-2023-39318	中危	v1.13.3	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-09-08 17:15 修改: 2026-06-17 06:12
stdlib	CVE-2023-39319	中危	v1.13.3	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-09-08 17:15 修改: 2026-06-17 06:12
stdlib	CVE-2023-39326	中危	v1.13.3	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-12-06 17:15 修改: 2026-06-17 06:12
stdlib	CVE-2023-45284	中危	v1.13.3	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2023-11-09 17:15 修改: 2026-06-17 06:28
stdlib	CVE-2023-45289	中危	v1.13.3	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-03-05 23:15 修改: 2026-06-17 06:28
stdlib	CVE-2023-45290	中危	v1.13.3	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-03-05 23:15 修改: 2026-06-17 06:28
stdlib	CVE-2024-24783	中危	v1.13.3	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-03-05 23:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-24784	中危	v1.13.3	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-03-05 23:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-24785	中危	v1.13.3	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-03-05 23:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-24789	中危	v1.13.3	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-06-05 16:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-24791	中危	v1.13.3	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-07-02 22:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-34155	中危	v1.13.3	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-09-06 21:15 修改: 2026-06-17 07:33
stdlib	CVE-2024-34158	中危	v1.13.3	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-09-06 21:15 修改: 2026-06-17 07:33
stdlib	CVE-2024-45336	中危	v1.13.3	1.22.11, 1.23.5, 1.24.0-rc.2	golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45336 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-01-28 02:15 修改: 2026-06-17 07:54
stdlib	CVE-2025-0913	中危	v1.13.3	1.23.10, 1.24.4	Inconsistent handling of O_CREATE\|O_EXCL on Unix and Windows in os in syscall 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27
stdlib	CVE-2025-22866	中危	v1.13.3	1.22.12, 1.23.6, 1.24.0-rc.3	crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22866 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-02-06 17:15 修改: 2026-06-17 08:50
stdlib	CVE-2025-22870	中危	v1.13.3	1.23.7, 1.24.1	golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50
stdlib	CVE-2025-22871	中危	v1.13.3	1.23.8, 1.24.2	net/http: Request smuggling due to acceptance of invalid chunked data in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50
stdlib	CVE-2025-22873	中危	v1.13.3	1.23.9, 1.24.3	os: os: Information disclosure via path traversal using specially crafted filenames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50
stdlib	CVE-2025-4673	中危	v1.13.3	1.23.10, 1.24.4	net/http: Sensitive headers not cleared on cross-origin redirect in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33
stdlib	CVE-2025-47906	中危	v1.13.3	1.23.12, 1.24.6	os/exec: Unexpected paths returned from LookPath in os/exec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28
stdlib	CVE-2025-47907	中危	v1.13.3	1.23.12, 1.24.6	database/sql: Postgres Scan Race Condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28
stdlib	CVE-2025-47912	中危	v1.13.3	1.24.8, 1.25.2	net/url: Insufficient validation of bracketed IPv6 hostnames in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28
stdlib	CVE-2025-58183	中危	v1.13.3	1.24.8, 1.25.2	golang: archive/tar: Unbounded allocation when parsing GNU sparse map 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-58185	中危	v1.13.3	1.24.8, 1.25.2	encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-58187	中危	v1.13.3	1.24.9, 1.25.3	crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-58188	中危	v1.13.3	1.24.8, 1.25.2	crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-58189	中危	v1.13.3	1.24.8, 1.25.2	crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-61723	中危	v1.13.3	1.24.8, 1.25.2	encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61724	中危	v1.13.3	1.24.8, 1.25.2	net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61725	中危	v1.13.3	1.24.8, 1.25.2	net/mail: Excessive CPU consumption in ParseAddress in net/mail 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61727	中危	v1.13.3	1.24.11, 1.25.5	golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61728	中危	v1.13.3	1.24.12, 1.25.6	golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61730	中危	v1.13.3	1.24.12, 1.25.6	crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib	CVE-2026-27142	中危	v1.13.3	1.25.8, 1.26.1	html/template: URLs in meta content attribute actions are not escaped in html/template 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
stdlib	CVE-2026-32282	中危	v1.13.3	1.25.9, 1.26.2	golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32288	中危	v1.13.3	1.25.9, 1.26.2	archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32289	中危	v1.13.3	1.25.9, 1.26.2	html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-39823	中危	v1.13.3	1.25.10, 1.26.3	html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39825	中危	v1.13.3	1.25.10, 1.26.3	net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39826	中危	v1.13.3	1.25.10, 1.26.3	html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42505	中危	v1.13.3	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-07-08 17:17 修改: 2026-09-16 20:14
stdlib	CVE-2026-42507	中危	v1.13.3	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2022-30629	低危	v1.13.3	1.17.11, 1.18.3	golang: crypto/tls: session tickets lack random ticket_age_add 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2024-45341	低危	v1.13.3	1.22.11, 1.23.5, 1.24.0-rc.2	golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45341 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-01-28 02:15 修改: 2026-06-17 07:54
stdlib	CVE-2025-58186	低危	v1.13.3	1.24.8, 1.25.2	golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2026-27139	低危	v1.13.3	1.25.8, 1.26.1	os: FileInfo can escape from a Root in golang os module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
golang.org/x/crypto	CVE-2022-30636	未知	v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20220525230936-793ad666bf5e	httpTokenCacheKey uses path.Base to extract the expected HTTP-01 token ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30636 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2024-07-02 20:15 修改: 2026-06-17 04:43
golang.org/x/sys	CVE-2026-39824	未知	v0.0.0-20200116001909-b77594299b42	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:791e301242202d2d4dee087e138effdb574a809ec1a91d05b17afc24dff07636 发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10