docker.io/appsmith/appsmith-ee:v2.4 linux/amd64

docker.io/appsmith/appsmith-ee:v2.4 - Trivy安全扫描结果 扫描时间: 2026-09-17 01:14
全部漏洞信息
低危漏洞:20 中危漏洞:182 高危漏洞:46 严重漏洞:8

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-17 01:14

docker.io/appsmith/appsmith-ee:v2.4 (ubuntu 24.04) (ubuntu)
低危漏洞:6 中危漏洞:85 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2026-13608 中危 8.5.0-2ubuntu10.13 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
curl CVE-2026-18924 中危 8.5.0-2ubuntu10.13 A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
curl CVE-2026-19931 中危 8.5.0-2ubuntu10.13 A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
curl CVE-2026-80230 中危 8.5.0-2ubuntu10.13 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
curl CVE-2026-82209 中危 8.5.0-2ubuntu10.13 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
git CVE-2024-52005 中危 1:2.55.0-0ppa1~ubuntu24.04.2 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
git-man CVE-2024-52005 中危 1:2.55.0-0ppa1~ubuntu24.04.2 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
libc-bin CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-19499 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc-bin CVE-2026-19542 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc-bin CVE-2026-6368 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-6791 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-77117 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libc-bin CVE-2026-80489 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libc6 CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6 CVE-2026-19499 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc6 CVE-2026-19542 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc6 CVE-2026-6368 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6 CVE-2026-6791 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6 CVE-2026-77117 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libc6 CVE-2026-80489 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libcurl3t64-gnutls CVE-2026-13608 中危 8.5.0-2ubuntu10.13 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl3t64-gnutls CVE-2026-18924 中危 8.5.0-2ubuntu10.13 A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl3t64-gnutls CVE-2026-19931 中危 8.5.0-2ubuntu10.13 A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl3t64-gnutls CVE-2026-80230 中危 8.5.0-2ubuntu10.13 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl3t64-gnutls CVE-2026-82209 中危 8.5.0-2ubuntu10.13 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl4t64 CVE-2026-13608 中危 8.5.0-2ubuntu10.13 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl4t64 CVE-2026-18924 中危 8.5.0-2ubuntu10.13 A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl4t64 CVE-2026-19931 中危 8.5.0-2ubuntu10.13 A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl4t64 CVE-2026-80230 中危 8.5.0-2ubuntu10.13 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libcurl4t64 CVE-2026-82209 中危 8.5.0-2ubuntu10.13 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16
libdevmapper1.02.1 CVE-2026-19617 中危 2:1.02.185-3ubuntu3.2 libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19617

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-14 06:17 修改: 2026-09-01 13:18
libexpat1 CVE-2025-59375 中危 2.6.1-2ubuntu0.4 firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46
libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libexpat1 CVE-2026-32776 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-32777 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-32778 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-41080 中危 2.6.1-2ubuntu0.4 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
libexpat1 CVE-2026-45186 中危 2.6.1-2ubuntu0.4 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-05-10 07:16 修改: 2026-08-25 13:19
libexpat1 CVE-2026-50219 中危 2.6.1-2ubuntu0.4 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
libexpat1 CVE-2026-56131 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56132 中危 2.6.1-2ubuntu0.4 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56403 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56404 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56405 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat1 CVE-2026-56406 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat1 CVE-2026-56407 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat1 CVE-2026-56408 中危 2.6.1-2ubuntu0.4 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libexpat1 CVE-2026-56409 中危 2.6.1-2ubuntu0.4 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat1 CVE-2026-56410 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat1 CVE-2026-56411 中危 2.6.1-2ubuntu0.4 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat1 CVE-2026-56412 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libexpat1 CVE-2026-66046 中危 2.6.1-2ubuntu0.4 expat: Expat: Denial of Service via quadratic complexity in attribute processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-18 15:16 修改: 2026-08-20 16:17
libexpat1 CVE-2026-72522 中危 2.6.1-2ubuntu0.4 expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-10 04:16 修改: 2026-08-31 19:33
libexpat1 CVE-2026-76641 中危 2.6.1-2ubuntu0.4 CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17
libexpat1 CVE-2026-76957 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-20 05:16 修改: 2026-09-08 20:56
libperl5.38t64 CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17
libperl5.38t64 CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
libpython3.12-minimal CVE-2026-15308 中危 3.12.3-1ubuntu0.16 3.12.3-1ubuntu0.17 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
libpython3.12-minimal CVE-2026-4360 中危 3.12.3-1ubuntu0.16 3.12.3-1ubuntu0.17 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
libpython3.12-stdlib CVE-2026-15308 中危 3.12.3-1ubuntu0.16 3.12.3-1ubuntu0.17 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
libpython3.12-stdlib CVE-2026-4360 中危 3.12.3-1ubuntu0.16 3.12.3-1ubuntu0.17 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
libsqlite3-0 CVE-2026-39113 中危 3.45.1-1ubuntu2.7 Buffer Overflow vulnerability in SQLite affected version source s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39113

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-25 21:17 修改: 2026-09-09 16:04
libxslt1.1 CVE-2025-10911 中危 1.1.39-0exp1ubuntu0.24.04.3 libxslt: use-after-free with key data stored cross-RVT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10911

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2025-09-25 16:15 修改: 2026-09-01 12:17
libxslt1.1 CVE-2025-7425 中危 1.1.39-0exp1ubuntu0.24.04.3 libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2025-07-10 14:15 修改: 2026-09-08 16:17
locales CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
locales CVE-2026-19499 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
locales CVE-2026-19542 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
locales CVE-2026-6368 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
locales CVE-2026-6791 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
locales CVE-2026-77117 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
locales CVE-2026-80489 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
perl CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17
perl CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
perl-base CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17
perl-base CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
perl-modules-5.38 CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17
perl-modules-5.38 CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
python3.12 CVE-2026-15308 中危 3.12.3-1ubuntu0.16 3.12.3-1ubuntu0.17 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
python3.12 CVE-2026-4360 中危 3.12.3-1ubuntu0.16 3.12.3-1ubuntu0.17 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
python3.12-minimal CVE-2026-15308 中危 3.12.3-1ubuntu0.16 3.12.3-1ubuntu0.17 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
python3.12-minimal CVE-2026-4360 中危 3.12.3-1ubuntu0.16 3.12.3-1ubuntu0.17 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-03 17:16 修改: 2026-09-10 18:17
tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-03 16:16 修改: 2026-09-10 18:17
zlib1g CVE-2026-85091 中危 1:1.3.dfsg-3.1ubuntu2.2 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libllvm19 CVE-2024-7883 低危 1:19.1.1-1ubuntu1~24.04.2 clang: CMSE secure state may leak from stack to floating-point registers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7883

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2024-10-31 17:15 修改: 2026-06-17 08:21
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libicu74 CVE-2025-5222 低危 74.2-1ubuntu3.1 icu: Stack buffer overflow in the SRBRoot::addTag function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222

镜像层: sha256:ea582b376e4c17a5a3a7e1f758ef1618e3c7886da01422909f8b7208a2e61e93

发布日期: 2025-05-27 21:15 修改: 2026-09-03 15:17
Java (jar)
低危漏洞:1 中危漏洞:37 高危漏洞:9 严重漏洞:6
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
io.netty:netty-handler CVE-2026-75595 严重 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler CVE-2026-75595 严重 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler CVE-2026-75595 严重 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler CVE-2026-75595 严重 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler CVE-2026-75595 严重 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler CVE-2026-75595 严重 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:00ea47c60b4e9e0c73c89d415ebe7d14d6cb90ab7bd14ad44e7dedb0ffcab0fd

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
com.microsoft.sqlserver:mssql-jdbc CVE-2025-59250 高危 11.2.4 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 JDBC Driver for SQL Server has improper input validation issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
com.microsoft.sqlserver:mssql-jdbc CVE-2025-59250 高危 13.2.1 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 JDBC Driver for SQL Server has improper input validation issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250

镜像层: sha256:00ea47c60b4e9e0c73c89d415ebe7d14d6cb90ab7bd14ad44e7dedb0ffcab0fd

发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
com.appsmith:interfaces GHSA-h8cj-hpmg-636v 高危 v2.4 1.99 appsmith has SQL Injection in FilterDataService via Unsafe DROP TABLE Execution

漏洞详情: https://github.com/advisories/GHSA-h8cj-hpmg-636v

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-04-29 20:59 修改: 2026-04-29 20:59
com.appsmith:server GHSA-9wcp-79g5-5c3c 高危 v2.4 1.99 Appsmith Super User Creation Race Condition Allows Multiple Instance Administrators

漏洞详情: https://github.com/advisories/GHSA-9wcp-79g5-5c3c

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-06-12 18:27 修改: 2026-06-12 18:27
com.appsmith:server GHSA-j9gf-vw2f-9hrw 高危 v2.4 2.0 Appsmith: Configuration-dependent origin validation bypass in password reset and email verification link generation

漏洞详情: https://github.com/advisories/GHSA-j9gf-vw2f-9hrw

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-06-12 18:28 修改: 2026-06-12 18:28
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.16.0 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.16.0 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.16.0 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-06-23 21:17 修改: 2026-09-14 13:18
org.ini4j:ini4j CVE-2022-41404 高危 0.5.4 org.ini4j: unspecified DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41404

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2022-10-11 23:15 修改: 2026-06-17 05:03
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:00ea47c60b4e9e0c73c89d415ebe7d14d6cb90ab7bd14ad44e7dedb0ffcab0fd

发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
io.netty:netty-common CVE-2024-47535 中危 4.1.86.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common CVE-2025-25193 中危 4.1.86.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.16.0 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.16.0 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.google.guava:guava CVE-2023-2976 中危 31.1-jre 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.fasterxml.jackson.core:jackson-core CVE-2026-18401 中危 2.16.0 2.21.1, 2.18.6 tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.16.0 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.nimbusds:nimbus-jose-jwt CVE-2025-53864 中危 9.37.2 10.0.2, 9.37.4 com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
io.netty:netty-handler CVE-2026-75596 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler CVE-2026-75596 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler CVE-2026-75596 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler CVE-2026-75596 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler CVE-2026-75596 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.netty:netty-handler CVE-2026-75596 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:00ea47c60b4e9e0c73c89d415ebe7d14d6cb90ab7bd14ad44e7dedb0ffcab0fd

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.opentelemetry:opentelemetry-api CVE-2026-45292 中危 1.43.0 1.62.0 opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45292

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-05-28 17:16 修改: 2026-09-10 13:20
io.opentelemetry:opentelemetry-api CVE-2026-45292 中危 1.57.0 1.62.0 opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45292

镜像层: sha256:00ea47c60b4e9e0c73c89d415ebe7d14d6cb90ab7bd14ad44e7dedb0ffcab0fd

发布日期: 2026-05-28 17:16 修改: 2026-09-10 13:20
io.opentelemetry:opentelemetry-extension-trace-propagators CVE-2026-45292 中危 1.43.0 1.62.0 opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45292

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-05-28 17:16 修改: 2026-09-10 13:20
io.vertx:vertx-core CVE-2026-1002 中危 4.5.21 4.5.24, 5.0.7 io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1002

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-01-15 21:16 修改: 2026-06-17 10:14
io.vertx:vertx-core CVE-2026-6860 中危 4.5.21 4.5.27, 5.0.12 eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6860

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-05-06 10:16 修改: 2026-06-17 11:01
net.i2p.crypto:eddsa CVE-2020-36843 中危 0.3.0 The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36843

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2025-03-13 06:15 修改: 2026-06-17 03:16
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.5.2 5.6.3 org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.20.0 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.24.3 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.20.0 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.20.0 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.20.0 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.bouncycastle:bcpkix-jdk15on CVE-2025-8916 中危 1.70 1.79 org.bouncycastle: BouncyCastle denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8916

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2025-08-13 10:15 修改: 2026-06-17 10:07
org.bouncycastle:bcpkix-jdk15on CVE-2026-5588 中危 1.70 1.84 bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-04-15 10:16 修改: 2026-09-11 13:18
commons-lang:commons-lang CVE-2025-48924 中危 2.6 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.mariadb:r2dbc-mariadb CVE-2026-55859 中危 1.1.4 1.4.1 org.mariadb:r2dbc-mariadb has Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55859

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-28 23:17 修改: 2026-09-08 21:08
org.mariadb:r2dbc-mariadb CVE-2026-55860 中危 1.1.4 1.4.1 org.mariadb:r2dbc-mariadb vulnerable to cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55860

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2026-08-28 23:17 修改: 2026-09-08 21:08
com.google.guava:guava CVE-2020-8908 低危 31.1-jre 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:148e5d6f7e964238d3d4a48eeb0e3e61550537917fc1839fd7dbaa1292140401

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
Node.js (node-pkg)
低危漏洞:1 中危漏洞:14 高危漏洞:4 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
nodemailer CVE-2025-14874 高危 6.10.1 7.0.11 nodemailer: Nodemailer: Denial of service via crafted email address header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14874

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2025-12-18 09:15 修改: 2026-06-17 08:36
nodemailer CVE-2026-82659 高危 6.10.1 9.0.1 nodemailer: Nodemailer: Arbitrary file read and Server-Side Request Forgery via raw option bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82659

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-08-31 09:17 修改: 2026-09-10 15:48
nodemailer GHSA-2x7j-588g-ccc2 高危 6.10.1 9.1.0 Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list

漏洞详情: https://github.com/advisories/GHSA-2x7j-588g-ccc2

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-09-08 21:33 修改: 2026-09-08 21:33
tar CVE-2026-73566 高危 7.5.19 7.5.21 tar: node-tar: Denial of Service via crafted long-path tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566

镜像层: sha256:0f03d630f2d1f433f2dacf839450cc34756e4c572ad59f533115f548f2efddd2

发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
nodemailer CVE-2025-13033 中危 6.10.1 7.0.7 nodemailer: Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13033

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2025-11-14 20:15 修改: 2026-06-17 08:33
nodemailer GHSA-268h-hp4c-crq3 中危 6.10.1 8.0.9 Nodemailer: CRLF injection in Nodemailer List-* header comments allows arbitrary message header injection

漏洞详情: https://github.com/advisories/GHSA-268h-hp4c-crq3

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-06-15 17:36 修改: 2026-06-15 17:36
nodemailer GHSA-8m3c-c648-2xjj 中危 6.10.1 9.1.1 Nodemailer: resolveContent() on a MailMessage bypasses disableFileAccess/disableUrlAccess when called with the legacy signature

漏洞详情: https://github.com/advisories/GHSA-8m3c-c648-2xjj

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-09-08 21:16 修改: 2026-09-08 21:16
nodemailer GHSA-cc9r-2j5m-2m83 中危 6.10.1 9.1.0 Nodemailer: Recipient-domain validation bypass via RFC 5322 comment mis-parsing leads to email delivery to an attacker-controlled domain

漏洞详情: https://github.com/advisories/GHSA-cc9r-2j5m-2m83

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-09-08 21:32 修改: 2026-09-08 21:32
nodemailer GHSA-r7g4-qg5f-qqm2 中危 6.10.1 8.0.8 Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception

漏洞详情: https://github.com/advisories/GHSA-r7g4-qg5f-qqm2

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-06-15 17:34 修改: 2026-06-15 17:34
nodemailer GHSA-vvjj-xcjg-gr5g 中危 6.10.1 8.0.5 Nodemailer Vulnerable to SMTP Command Injection via CRLF in Transport name Option (EHLO/HELO)

漏洞详情: https://github.com/advisories/GHSA-vvjj-xcjg-gr5g

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-04-08 15:05 修改: 2026-04-08 15:05
nodemailer GHSA-wmmp-3585-3rmp 中危 6.10.1 9.1.0 Nodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domain

漏洞详情: https://github.com/advisories/GHSA-wmmp-3585-3rmp

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-09-08 21:33 修改: 2026-09-08 21:33
nodemailer GHSA-wqvq-jvpq-h66f 中危 6.10.1 8.0.9 Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess during message normalization

漏洞详情: https://github.com/advisories/GHSA-wqvq-jvpq-h66f

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-06-15 17:35 修改: 2026-06-15 17:35
@azure/identity CVE-2024-35255 中危 3.4.2 4.2.1 azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35255

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2024-06-11 17:16 修改: 2026-07-20 16:16
undici CVE-2026-15157 中危 6.27.0 6.28.0, 7.29.0, 8.9.0 undici: undici: HTTP header injection via unvalidated blob-like body type property

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157

镜像层: sha256:0f03d630f2d1f433f2dacf839450cc34756e4c572ad59f533115f548f2efddd2

发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
undici CVE-2026-16728 中危 6.27.0 6.28.0, 7.29.0, 8.9.0 undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728

镜像层: sha256:0f03d630f2d1f433f2dacf839450cc34756e4c572ad59f533115f548f2efddd2

发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
undici CVE-2026-16729 中危 6.27.0 6.28.0, 7.29.0, 8.9.0 undici: Undici: Cookie attribute injection allows bypassing security protections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729

镜像层: sha256:0f03d630f2d1f433f2dacf839450cc34756e4c572ad59f533115f548f2efddd2

发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18
uuid CVE-2026-41907 中危 8.3.2 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 9.0.1 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
nodemailer GHSA-c7w3-x93f-qmm8 低危 6.10.1 8.0.4 Nodemailer has SMTP command injection due to unsanitized `envelope.size` parameter

漏洞详情: https://github.com/advisories/GHSA-c7w3-x93f-qmm8

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-03-26 22:26 修改: 2026-03-26 22:26
opt/appsmith/rts/node_modules/@temporalio/core-bridge/Cargo.lock (cargo)
低危漏洞:8 中危漏洞:13 高危漏洞:5 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rustls CVE-2024-32650 高危 0.21.10 0.23.5, 0.22.4, 0.21.11 Rustls is a modern TLS library written in Rust. `rustls::ConnectionCom ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32650

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2024-04-19 16:15 修改: 2026-06-17 07:30
rustls CVE-2024-32650 高危 0.22.3 0.23.5, 0.22.4, 0.21.11 Rustls is a modern TLS library written in Rust. `rustls::ConnectionCom ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32650

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2024-04-19 16:15 修改: 2026-06-17 07:30
rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.101.7 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20
rustls-webpki GHSA-82j2-j2ch-gfr8 高危 0.102.2 0.103.13, 0.104.0-alpha.7 rustls-webpki: Denial of service via panic on malformed CRL BIT STRING

漏洞详情: https://github.com/advisories/GHSA-82j2-j2ch-gfr8

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-04-24 16:20 修改: 2026-04-24 16:20
zip CVE-2025-29787 高危 1.3.0 2.3.0 zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29787

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2025-03-17 14:15 修改: 2026-06-17 09:05
opentelemetry_sdk CVE-2026-48504 中危 0.22.1 0.32.1 opentelemetry_sdk has unbounded memory allocation in W3C Baggage propagation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48504

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-07-17 20:17 修改: 2026-07-23 17:59
protobuf CVE-2025-53605 中危 2.28.0 3.7.2 protobuf: Protobuf: Uncontrolled Recursion Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53605

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2025-07-05 01:15 修改: 2026-06-17 09:38
ring CVE-2025-4432 中危 0.17.8 0.17.12 ring: Some AES functions may panic when overflow checking is enabled in ring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4432

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2025-05-09 16:15 修改: 2026-06-30 11:16
bytes CVE-2026-25541 中危 1.6.0 1.11.1 Bytes is a utility library for working with bytes. From version 1.2.1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25541

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-02-04 22:16 修改: 2026-06-17 10:24
crossbeam-channel CVE-2025-4574 中危 0.5.12 0.5.15 crossbeam-channel: crossbeam-channel Vulnerable to Double Free on Drop

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4574

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2025-05-13 22:15 修改: 2026-06-30 11:16
h2 GHSA-q6cp-qfwq-4gcv 中危 0.3.25 0.3.26, 0.4.4 h2 servers vulnerable to degradation of service with CONTINUATION Flood

漏洞详情: https://github.com/advisories/GHSA-q6cp-qfwq-4gcv

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2024-04-05 15:05 修改: 2024-04-05 15:05
h2 GHSA-q6cp-qfwq-4gcv 中危 0.4.3 0.3.26, 0.4.4 h2 servers vulnerable to degradation of service with CONTINUATION Flood

漏洞详情: https://github.com/advisories/GHSA-q6cp-qfwq-4gcv

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2024-04-05 15:05 修改: 2024-04-05 15:05
rustls-webpki GHSA-pwjx-qhcg-rvj4 中危 0.102.2 0.103.10, 0.104.0-alpha.5 webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic

漏洞详情: https://github.com/advisories/GHSA-pwjx-qhcg-rvj4

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-03-20 21:51 修改: 2026-03-25 19:56
tar CVE-2026-33055 中危 0.4.40 0.4.45 tar-rs is a tar archive reading/writing library for Rust. Versions 0.4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33055

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-03-20 07:16 修改: 2026-06-17 10:36
tar CVE-2026-33056 中危 0.4.40 0.4.45 tar-rs: tar-rs: Arbitrary directory permission modification via crafted tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33056

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-03-20 08:16 修改: 2026-06-17 10:36
tar GHSA-3pv8-6f4r-ffg2 中危 0.4.40 0.4.46 tar has a PAX header desynchronization issue

漏洞详情: https://github.com/advisories/GHSA-3pv8-6f4r-ffg2

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-05-29 19:16 修改: 2026-05-29 19:16
time CVE-2026-25727 中危 0.3.36 0.3.47 time: time affected by a stack exhaustion denial of service attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25727

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-02-06 20:16 修改: 2026-06-17 10:25
idna CVE-2024-12224 中危 0.5.0 1.0.0 idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12224

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2025-05-30 02:15 修改: 2026-06-17 06:59
rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.102.2 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17
rustls-webpki GHSA-965h-392x-2mh5 低危 0.101.7 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16
rustls-webpki GHSA-xgp8-3hg3-c2mh 低危 0.101.7 0.103.12, 0.104.0-alpha.6 webpki: Name constraints were accepted for certificates asserting a wildcard name

漏洞详情: https://github.com/advisories/GHSA-xgp8-3hg3-c2mh

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-04-16 21:17 修改: 2026-04-16 21:17
lru GHSA-rhfx-m35p-ff5j 低危 0.12.3 0.16.3 `IterMut` violates Stacked Borrows by invalidating internal pointer

漏洞详情: https://github.com/advisories/GHSA-rhfx-m35p-ff5j

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-01-07 20:38 修改: 2026-01-07 20:38
rand GHSA-cq8v-f236-94qc 低危 0.8.5 0.9.3, 0.10.1, 0.8.6 Rand is unsound with a custom logger using rand::rng()

漏洞详情: https://github.com/advisories/GHSA-cq8v-f236-94qc

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-04-14 01:03 修改: 2026-04-22 20:13
tokio GHSA-rr8g-9fpq-6wmg 低危 1.37.0 1.44.2, 1.38.2, 1.43.1 Tokio broadcast channel calls clone in parallel, but does not require `Sync`

漏洞详情: https://github.com/advisories/GHSA-rr8g-9fpq-6wmg

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2025-04-07 21:12 修改: 2025-04-07 21:12
tracing-subscriber CVE-2025-58160 低危 0.3.18 0.3.20 tracing-subscriber: Tracing log pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58160

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2025-08-29 22:15 修改: 2026-06-17 09:44
rustls-webpki GHSA-965h-392x-2mh5 低危 0.102.2 0.103.12, 0.104.0-alpha.6 webpki: Name constraints for URI names were incorrectly accepted

漏洞详情: https://github.com/advisories/GHSA-965h-392x-2mh5

镜像层: sha256:3afb00ffcc255bf617c00d89131346a2510aabcfe61f7590af7e70288454ae80

发布日期: 2026-04-16 21:16 修改: 2026-04-16 21:16
opt/caddy/caddy (gobinary)
低危漏洞:0 中危漏洞:4 高危漏洞:4 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56854 高危 v0.52.0 0.55.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854

镜像层: sha256:a53a331a8b3513fc624ea5367babd9265c1fb7a57dc136b1b35428bcb9faa86c

发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
google.golang.org/grpc CVE-2026-84304 高危 v1.81.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304

镜像层: sha256:a53a331a8b3513fc624ea5367babd9265c1fb7a57dc136b1b35428bcb9faa86c

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc CVE-2026-84445 高危 v1.81.0 1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445

镜像层: sha256:a53a331a8b3513fc624ea5367babd9265c1fb7a57dc136b1b35428bcb9faa86c

发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.81.0 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:a53a331a8b3513fc624ea5367babd9265c1fb7a57dc136b1b35428bcb9faa86c

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
github.com/google/cel-go GHSA-gcjh-h69q-9w9g 中危 v0.28.1 0.29.0 cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag

漏洞详情: https://github.com/advisories/GHSA-gcjh-h69q-9w9g

镜像层: sha256:a53a331a8b3513fc624ea5367babd9265c1fb7a57dc136b1b35428bcb9faa86c

发布日期: 2026-07-24 16:48 修改: 2026-07-24 16:48
golang.org/x/crypto CVE-2026-56855 中危 v0.52.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:a53a331a8b3513fc624ea5367babd9265c1fb7a57dc136b1b35428bcb9faa86c

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.52.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:a53a331a8b3513fc624ea5367babd9265c1fb7a57dc136b1b35428bcb9faa86c

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
google.golang.org/grpc CVE-2026-84303 中危 v1.81.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303

镜像层: sha256:a53a331a8b3513fc624ea5367babd9265c1fb7a57dc136b1b35428bcb9faa86c

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
golang.org/x/crypto GO-2026-5932 未知 v0.52.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:a53a331a8b3513fc624ea5367babd9265c1fb7a57dc136b1b35428bcb9faa86c

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
opt/temporal/temporal-server (gobinary)
低危漏洞:2 中危漏洞:8 高危漏洞:10 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
google.golang.org/grpc CVE-2026-33186 严重 v1.58.2 1.79.3 google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33186

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-03-20 23:16 修改: 2026-09-14 13:18
github.com/apache/thrift CVE-2026-43871 高危 v0.18.1 0.24.0 thrift: Apache Thrift: Denial of Service via infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43871

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-07-27 12:16 修改: 2026-07-27 19:51
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc CVE-2023-47108 高危 v0.42.0 0.46.0 opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47108

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2023-11-10 19:15 修改: 2026-06-17 06:32
go.opentelemetry.io/otel/sdk CVE-2026-39883 高危 v1.16.0 1.43.0 github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39883

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-04-08 21:17 修改: 2026-09-09 13:19
golang.org/x/crypto CVE-2026-56854 高危 v0.53.0 0.55.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/oauth2 CVE-2025-22868 高危 v0.10.0 0.27.0 golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22868

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2025-02-26 08:14 修改: 2026-06-17 08:50
github.com/apache/thrift CVE-2026-41602 高危 v0.18.1 0.23.0 github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41602

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-04-28 10:16 修改: 2026-09-09 13:19
google.golang.org/grpc CVE-2026-84304 高危 v1.58.2 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc CVE-2026-84445 高危 v1.58.2 1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.58.2 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
google.golang.org/grpc GHSA-m425-mq94-257g 高危 v1.58.2 1.56.3, 1.57.1, 1.58.3 gRPC-Go HTTP/2 Rapid Reset vulnerability

漏洞详情: https://github.com/advisories/GHSA-m425-mq94-257g

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2023-10-25 21:17 修改: 2024-07-19 16:32
go.temporal.io/server CVE-2026-5724 中危 v1.22.7+dirty 1.28.4, 1.29.6, 1.30.4 Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5724

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-04-10 21:16 修改: 2026-07-08 20:17
go.temporal.io/server CVE-2025-14987 中危 v1.22.7+dirty 1.27.4, 1.28.2, 1.29.2, 1.29.0-135.0.0.20251218190115-b292a32bacdf Temporal has an Incorrect Authorization vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14987

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2025-12-30 21:15 修改: 2026-06-17 08:36
golang.org/x/crypto CVE-2026-56855 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
go.temporal.io/server CVE-2025-8396 中危 v1.22.7+dirty 1.26.3, 1.27.3, 1.28.1 Temporal OSS Server Vulnerable to Allocation of Resources Without Limits or Throttling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8396

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2025-09-15 15:15 修改: 2026-06-17 10:06
google.golang.org/grpc CVE-2026-84303 中危 v1.58.2 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/protobuf CVE-2024-24786 中危 v1.31.0 1.33.0 golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2024-03-05 23:15 修改: 2026-06-17 07:14
gopkg.in/square/go-jose.v2 CVE-2024-28180 中危 v2.6.0 jose-go: improper handling of highly compressed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28180

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2024-03-09 01:15 修改: 2026-06-17 07:21
go.temporal.io/api CVE-2025-1243 低危 v1.24.1-0.20231003165936-bb03061759c8 1.44.1 Unencrypted transmission in Temporal api-go library

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1243

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2025-02-12 01:15 修改: 2026-06-17 08:38
go.temporal.io/server CVE-2026-5199 低危 v1.22.7+dirty 1.30.3, 1.29.5 Temporal Server: attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5199

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 2026-04-01 18:16 修改: 2026-06-17 10:58
golang.org/x/crypto GO-2026-5932 未知 v0.53.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:63647db9550938d4be071dff92a17d1f4ee4a38f992451e869f49df6bfe93ca0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
opt/temporal/temporal-sql-tool (gobinary)
低危漏洞:2 中危漏洞:5 高危漏洞:6 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
google.golang.org/grpc CVE-2026-33186 严重 v1.58.2 1.79.3 google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33186

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2026-03-20 23:16 修改: 2026-09-14 13:18
go.opentelemetry.io/otel/sdk CVE-2026-39883 高危 v1.16.0 1.43.0 github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39883

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2026-04-08 21:17 修改: 2026-09-09 13:19
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc CVE-2023-47108 高危 v0.42.0 0.46.0 opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47108

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2023-11-10 19:15 修改: 2026-06-17 06:32
google.golang.org/grpc CVE-2026-84304 高危 v1.58.2 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc CVE-2026-84445 高危 v1.58.2 1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.58.2 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
google.golang.org/grpc GHSA-m425-mq94-257g 高危 v1.58.2 1.56.3, 1.57.1, 1.58.3 gRPC-Go HTTP/2 Rapid Reset vulnerability

漏洞详情: https://github.com/advisories/GHSA-m425-mq94-257g

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2023-10-25 21:17 修改: 2024-07-19 16:32
go.temporal.io/server CVE-2026-5724 中危 v1.22.7+dirty 1.28.4, 1.29.6, 1.30.4 Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5724

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2026-04-10 21:16 修改: 2026-07-08 20:17
go.temporal.io/server CVE-2025-14987 中危 v1.22.7+dirty 1.27.4, 1.28.2, 1.29.2, 1.29.0-135.0.0.20251218190115-b292a32bacdf Temporal has an Incorrect Authorization vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14987

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2025-12-30 21:15 修改: 2026-06-17 08:36
go.temporal.io/server CVE-2025-8396 中危 v1.22.7+dirty 1.26.3, 1.27.3, 1.28.1 Temporal OSS Server Vulnerable to Allocation of Resources Without Limits or Throttling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8396

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2025-09-15 15:15 修改: 2026-06-17 10:06
google.golang.org/grpc CVE-2026-84303 中危 v1.58.2 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/protobuf CVE-2024-24786 中危 v1.31.0 1.33.0 golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2024-03-05 23:15 修改: 2026-06-17 07:14
go.temporal.io/server CVE-2026-5199 低危 v1.22.7+dirty 1.30.3, 1.29.5 Temporal Server: attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5199

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2026-04-01 18:16 修改: 2026-06-17 10:58
go.temporal.io/api CVE-2025-1243 低危 v1.24.1-0.20231003165936-bb03061759c8 1.44.1 Unencrypted transmission in Temporal api-go library

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1243

镜像层: sha256:c03f32cc111d1bf3991ffc3aadba6dfc139dd812180895363ed19f0d35dc2acb

发布日期: 2025-02-12 01:15 修改: 2026-06-17 08:38
usr/bin/bsondump (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56854 高危 v0.53.0 0.55.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/crypto CVE-2026-56855 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto GO-2026-5932 未知 v0.53.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/bin/mongodump (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56854 高危 v0.53.0 0.55.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/crypto CVE-2026-56855 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto GO-2026-5932 未知 v0.53.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/bin/mongoexport (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56854 高危 v0.53.0 0.55.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/crypto CVE-2026-56855 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto GO-2026-5932 未知 v0.53.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/bin/mongofiles (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56854 高危 v0.53.0 0.55.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/crypto CVE-2026-56855 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto GO-2026-5932 未知 v0.53.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/bin/mongoimport (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56854 高危 v0.53.0 0.55.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/crypto CVE-2026-56855 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto GO-2026-5932 未知 v0.53.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/bin/mongorestore (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56854 高危 v0.53.0 0.55.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/crypto CVE-2026-56855 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto GO-2026-5932 未知 v0.53.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/bin/mongostat (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56854 高危 v0.53.0 0.55.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/crypto CVE-2026-56855 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto GO-2026-5932 未知 v0.53.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/bin/mongotop (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56854 高危 v0.53.0 0.55.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
golang.org/x/crypto CVE-2026-56855 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.53.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto GO-2026-5932 未知 v0.53.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:add0d9cf3db5144cb55a5e2b7af8afd9e4c9eb07e653c0992b746f415a8a0df8

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
/etc/ssl/private/ssl-cert-snakeoil.key ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/root/.npm/_cacache/content-v2/sha512/69/e7/5556ba64412801c7634572605c4c0d4540be8f2064c032c3172dab306d3fa75ada847a9c20c53a8966e59f06af10453b838d7bdb3e5b44e4c5646309de68 ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×