| com.fasterxml.jackson.core:jackson-core |
GHSA-r7wm-3cxj-wff9 |
高危 |
2.21.2 |
2.18.8, 2.21.4 |
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54512 |
高危 |
2.21.2 |
2.18.8, 3.1.4, 2.21.4 |
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54513 |
高危 |
2.21.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
|
| com.microsoft.sqlserver:mssql-jdbc |
CVE-2025-59250 |
高危 |
13.2.1 |
10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 |
JDBC Driver for SQL Server has improper input validation issue
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
|
| io.micrometer:micrometer-core |
CVE-2026-40983 |
高危 |
1.16.3 |
1.16.6, 1.15.12 |
micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40983
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-09 05:16 修改: 2026-08-13 13:18
|
| io.micrometer:micrometer-core |
CVE-2026-40984 |
高危 |
1.16.3 |
1.16.6, 1.15.12 |
micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-09 05:16 修改: 2026-08-13 13:18
|
| io.netty:netty-codec |
CVE-2026-59901 |
高危 |
4.1.135.Final |
4.1.136.Final |
io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
|
| io.netty:netty-codec-haproxy |
CVE-2026-55851 |
高危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55851
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:48
|
| io.netty:netty-codec-http |
CVE-2026-55831 |
高危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
|
| io.netty:netty-codec-http |
CVE-2026-55833 |
高危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
|
| io.netty:netty-codec-http |
CVE-2026-56745 |
高危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
|
| io.netty:netty-codec-http2 |
CVE-2026-56819 |
高危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
|
| org.apache.httpcomponents.core5:httpcore5 |
CVE-2026-54399 |
高危 |
5.3.4 |
5.4.3, 5.5-beta2 |
org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
|
| org.apache.httpcomponents.core5:httpcore5-h2 |
CVE-2026-54428 |
高危 |
5.3.4 |
5.4.3, 5.5-beta2 |
org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
|
| org.postgresql:postgresql |
CVE-2026-54291 |
高危 |
42.7.11 |
42.7.12 |
org.postgresql/postgresql: com.ongres.scram/scram-client: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54291
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-06 19:17 修改: 2026-07-09 13:16
|
| tools.jackson.core:jackson-core |
CVE-2026-29062 |
高危 |
3.0.0 |
3.1.0 |
jackson-core: jackson-core: Denial of Service via excessive JSON nesting
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29062
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-03-06 08:16 修改: 2026-07-15 02:19
|
| tools.jackson.core:jackson-core |
GHSA-2m67-wjpj-xhg9 |
高危 |
3.0.0 |
3.1.1 |
Jackson Core: Document length constraint bypass in blocking, async, and DataInput parsers
漏洞详情: https://github.com/advisories/GHSA-2m67-wjpj-xhg9
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-04-04 04:17 修改: 2026-04-08 22:42
|
| tools.jackson.core:jackson-core |
GHSA-r7wm-3cxj-wff9 |
高危 |
3.0.0 |
3.1.4 |
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
|
| tools.jackson.core:jackson-databind |
CVE-2026-54512 |
高危 |
3.0.0 |
3.1.4 |
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
|
| tools.jackson.core:jackson-databind |
CVE-2026-54513 |
高危 |
3.0.0 |
3.1.4 |
jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-59888 |
中危 |
2.21.2 |
2.18.8, 2.21.4 |
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-59889 |
中危 |
2.21.2 |
2.21.5, 2.18.9, 2.22.1 |
jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
|
| io.netty:netty-codec-http |
CVE-2026-56746 |
中危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
|
| io.netty:netty-codec-http |
CVE-2026-59898 |
中危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
|
| io.netty:netty-codec-http |
CVE-2026-59899 |
中危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
|
| io.netty:netty-codec-http |
CVE-2026-59903 |
中危 |
4.1.135.Final |
4.2.17.Final, 4.1.137.Final |
Netty is an asynchronous, event-driven network application framework. ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
|
| io.netty:netty-codec-http |
CVE-2026-59921 |
中危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
|
| com.fasterxml.jackson.core:jackson-databind |
GHSA-mhm7-754m-9p8w |
中危 |
2.21.2 |
2.18.9, 2.21.5 |
jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`
漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
|
| io.netty:netty-codec-http2 |
CVE-2026-59900 |
中危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
|
| io.opentelemetry:opentelemetry-api |
CVE-2026-45292 |
中危 |
1.57.0 |
1.62.0 |
opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45292
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-05-28 17:16 修改: 2026-08-17 12:18
|
| org.apache.commons:commons-configuration2 |
CVE-2026-45205 |
中危 |
2.13.0 |
2.15.0 |
commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45205
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-05-14 12:16 修改: 2026-06-17 10:51
|
| org.apache.httpcomponents.client5:httpclient5 |
CVE-2026-64607 |
中危 |
5.4.4 |
5.6.3 |
Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
|
| at.yawk.lz4:lz4-java |
CVE-2026-59949 |
中危 |
1.10.1 |
1.11.1 |
LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-08-18 15:16 修改: 2026-08-18 18:18
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54514 |
中危 |
2.21.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54515 |
中危 |
2.21.2 |
3.1.4, 2.18.9, 2.21.5, 2.22.1 |
jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54516 |
中危 |
2.21.2 |
2.21.4, 3.1.4 |
jackson-databind: jackson-databind: Security bypass due to improper handling of renamed properties
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54516
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:52
|
| io.netty:netty-codec-dns |
CVE-2026-73508 |
中危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54517 |
中危 |
2.21.2 |
2.21.4, 3.1.4 |
jackson-databind: jackson-databind: Information disclosure via improper JsonView filter application
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54517
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:51
|
| tools.jackson.core:jackson-core |
GHSA-72hv-8253-57qq |
中危 |
3.0.0 |
3.1.0 |
jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition
漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
|
| io.netty:netty-codec-haproxy |
CVE-2026-59919 |
中危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-haproxy: Netty: Improper CR/LF neutralization in netty-codec-haproxy
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59919
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:33
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54518 |
中危 |
2.21.2 |
2.21.4 |
jackson-databind: jackson-databind: Information disclosure and data manipulation via view-based access control bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54518
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 22:16 修改: 2026-06-27 20:49
|
| tools.jackson.core:jackson-databind |
CVE-2026-54514 |
中危 |
3.0.0 |
2.21.4, 3.1.4 |
jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
|
| tools.jackson.core:jackson-databind |
CVE-2026-54516 |
中危 |
3.0.0 |
3.1.4 |
jackson-databind: jackson-databind: Security bypass due to improper handling of renamed properties
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54516
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:52
|
| tools.jackson.core:jackson-databind |
CVE-2026-54517 |
中危 |
3.0.0 |
3.1.4 |
jackson-databind: jackson-databind: Information disclosure via improper JsonView filter application
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54517
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:51
|
| tools.jackson.core:jackson-databind |
CVE-2026-54518 |
中危 |
3.0.0 |
3.1.4 |
jackson-databind: jackson-databind: Information disclosure and data manipulation via view-based access control bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54518
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-06-23 22:16 修改: 2026-06-27 20:49
|
| tools.jackson.core:jackson-databind |
CVE-2026-59888 |
中危 |
3.0.0 |
3.1.4 |
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
|
| tools.jackson.core:jackson-databind |
CVE-2026-59889 |
中危 |
3.0.0 |
3.1.5, 3.2.1 |
jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889
镜像层: sha256:3b9c5a55ceedb7762d5664adb663bcf52396fe9a7f7d706cd9e9a9cc74497129
发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
|