docker.io/appwrite/assistant:0.8.4 linux/amd64

docker.io/appwrite/assistant:0.8.4 - Trivy安全扫描结果 扫描时间: 2026-09-08 10:10
全部漏洞信息
低危漏洞:31 中危漏洞:52 高危漏洞:94 严重漏洞:5

系统OS: alpine 3.21.3 扫描引擎: Trivy 扫描时间: 2026-09-08 10:10

docker.io/appwrite/assistant:0.8.4 (alpine 3.21.3) (alpine)
低危漏洞:19 中危漏洞:14 高危漏洞:15 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto3 CVE-2026-31789 严重 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-31789 严重 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2025-69421 高危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2026-28387 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28388 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28389 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28390 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2025-15467 高危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17
libssl3 CVE-2025-15467 高危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17
libssl3 CVE-2025-69421 高危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2026-28387 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28388 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28389 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28390 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
musl CVE-2026-40200 高危 1.2.5-r9 1.2.5-r11 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
musl-utils CVE-2026-40200 高危 1.2.5-r9 1.2.5-r11 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
zlib CVE-2026-22184 高危 1.3.1-r2 1.3.2-r0 zlib: zlib: Arbitrary code execution via buffer overflow in untgz utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22184

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-07 21:16 修改: 2026-09-01 13:18
libcrypto3 CVE-2025-9231 中危 3.3.3-r0 3.3.5-r0 openssl: Timing side-channel in SM2 algorithm on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libcrypto3 CVE-2026-31790 中危 3.3.3-r0 3.3.7-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
busybox-binsh CVE-2024-58251 中危 1.37.0-r12 1.37.0-r14 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
libssl3 CVE-2025-69419 中危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-9230 中危 3.3.3-r0 3.3.5-r0 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2025-9231 中危 3.3.3-r0 3.3.5-r0 openssl: Timing side-channel in SM2 algorithm on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2026-31790 中危 3.3.3-r0 3.3.7-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
busybox CVE-2024-58251 中危 1.37.0-r12 1.37.0-r14 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
musl CVE-2026-6042 中危 1.2.5-r9 1.2.5-r10 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
libcrypto3 CVE-2025-69419 中危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
musl-utils CVE-2026-6042 中危 1.2.5-r9 1.2.5-r10 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
ssl_client CVE-2024-58251 中危 1.37.0-r12 1.37.0-r14 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
libcrypto3 CVE-2025-9230 中危 3.3.3-r0 3.3.5-r0 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
zlib CVE-2026-27171 中危 1.3.1-r2 1.3.2-r0 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
libcrypto3 CVE-2026-22795 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libcrypto3 CVE-2026-22796 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
busybox-binsh CVE-2025-46394 低危 1.37.0-r12 1.37.0-r14 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
libssl3 CVE-2025-15468 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
libssl3 CVE-2025-66199 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
libssl3 CVE-2025-68160 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libssl3 CVE-2025-69418 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-69420 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-9232 低危 3.3.3-r0 3.3.5-r0 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2026-22795 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl3 CVE-2026-22796 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
busybox CVE-2025-46394 低危 1.37.0-r12 1.37.0-r14 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
libcrypto3 CVE-2025-15468 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
libcrypto3 CVE-2025-66199 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
libcrypto3 CVE-2025-68160 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libcrypto3 CVE-2025-69418 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
ssl_client CVE-2025-46394 低危 1.37.0-r12 1.37.0-r14 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
libcrypto3 CVE-2025-69420 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2025-9232 低危 3.3.3-r0 3.3.5-r0 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
Node.js (node-pkg)
低危漏洞:12 中危漏洞:38 高危漏洞:79 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
form-data CVE-2025-7783 严重 3.0.1 2.5.4, 3.0.4, 4.0.4 form-data: Unsafe random function in form-data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7783

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2025-07-18 17:15 修改: 2026-06-17 10:05
tar CVE-2026-59873 严重 6.2.1 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar CVE-2026-59873 严重 7.4.3 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
brace-expansion CVE-2026-13149 高危 1.1.11 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 1.1.11 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-69152 高危 1.1.11 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-13149 高危 2.0.1 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-13149 高危 2.0.1 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 2.0.1 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-14257 高危 2.0.1 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-69152 高危 2.0.1 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-69152 高危 2.0.1 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-13149 高危 2.0.2 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 2.0.2 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-69152 高危 2.0.2 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
braces CVE-2024-4068 高危 3.0.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01
cross-spawn CVE-2024-21538 高危 7.0.3 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2024-11-08 05:15 修改: 2026-07-28 16:17
cross-spawn CVE-2024-21538 高危 7.0.3 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2024-11-08 05:15 修改: 2026-07-28 16:17
expr-eval CVE-2025-12735 高危 2.0.2 expr-eval:

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12735

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2025-11-05 01:15 修改: 2026-06-17 08:32
expr-eval CVE-2025-13204 高危 2.0.2 expr-eval: expr-eval: Prototype Pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13204

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2025-11-14 17:16 修改: 2026-06-17 08:33
@langchain/core CVE-2025-68665 高危 0.0.3 1.1.8, 0.3.80 langchain-core: LangChain: Arbitrary Code Execution via Serialization Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68665

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2025-12-23 23:15 修改: 2026-06-17 09:59
form-data CVE-2026-12143 高危 3.0.1 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-06-12 19:16 修改: 2026-09-07 13:18
glob CVE-2025-64756 高危 10.3.10 11.1.0, 10.5.0 glob: glob: Command Injection Vulnerability via Malicious Filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64756

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2025-11-17 18:15 修改: 2026-06-17 09:55
glob CVE-2025-64756 高危 10.4.2 11.1.0, 10.5.0 glob: glob: Command Injection Vulnerability via Malicious Filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64756

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2025-11-17 18:15 修改: 2026-06-17 09:55
glob CVE-2025-64756 高危 10.4.5 11.1.0, 10.5.0 glob: glob: Command Injection Vulnerability via Malicious Filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64756

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2025-11-17 18:15 修改: 2026-06-17 09:55
ip-address CVE-2026-69192 高危 9.0.5 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
ip-address CVE-2026-69192 高危 9.0.5 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
js-yaml CVE-2026-59869 高危 4.1.0 3.15.0, 4.3.0 js-yaml: js-yaml: Denial of Service via crafted YAML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59869

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:05
js-yaml GHSA-5p4m-2wfm-xmqj 高危 4.1.0 4.3.1, 3.15.1 JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27
langchain CVE-2025-68665 高危 0.0.199 1.2.3, 0.3.37 langchain-core: LangChain: Arbitrary Code Execution via Serialization Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68665

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2025-12-23 23:15 修改: 2026-06-17 09:59
langsmith CVE-2026-45134 高危 0.0.48 0.6.0 langsmith-sdk-python: langsmith-sdk-js: LangSmith Client SDKs: Information disclosure via untrusted prompt deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45134

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-05-27 20:16 修改: 2026-06-17 10:51
langsmith CVE-2026-45134 高危 0.0.49 0.6.0 langsmith-sdk-python: langsmith-sdk-js: LangSmith Client SDKs: Information disclosure via untrusted prompt deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45134

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-05-27 20:16 修改: 2026-06-17 10:51
minimatch CVE-2026-26996 高危 3.1.2 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-26996 高危 9.0.3 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 9.0.3 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 9.0.3 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-26996 高危 9.0.5 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-26996 高危 9.0.5 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27903 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
pacote CVE-2026-9496 高危 18.0.6 21.5.1 Versions of the package pacote from 11.2.7 and before 21.5.1 are vulne ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9496

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-05-26 07:16 修改: 2026-07-23 11:10
path-to-regexp CVE-2024-45296 高危 0.1.7 1.9.0, 0.1.10, 8.0.0, 3.3.0, 6.3.0 path-to-regexp: Backtracking regular expressions cause ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45296

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2024-09-09 19:15 修改: 2026-06-17 07:53
path-to-regexp CVE-2024-52798 高危 0.1.7 0.1.12 path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52798

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2024-12-05 23:15 修改: 2026-06-17 08:07
path-to-regexp CVE-2026-4867 高危 0.1.7 0.1.13 path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4867

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:57
picomatch CVE-2026-33671 高危 2.3.1 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
pnpm CVE-2025-69262 高危 10.13.1 10.27.0 pnpm: pnpm: Remote code execution via command injection in tokenHelper environment variable substitution

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69262

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-01-07 23:15 修改: 2026-06-22 14:39
pnpm CVE-2025-69263 高危 10.13.1 10.26.0 pnpm: pnpm Lockfile Integrity Bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69263

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-01-07 22:15 修改: 2026-07-15 02:17
pnpm CVE-2025-69264 高危 10.13.1 10.26.0 pnpm: pnpm code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69264

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-01-07 22:15 修改: 2026-07-15 02:17
pnpm CVE-2026-50015 高危 10.13.1 10.34.0, 11.4.0 pnpm: pnpm: Arbitrary file write/delete due to lack of path validation in patch files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50015

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-25 18:16 修改: 2026-06-29 21:15
pnpm CVE-2026-50016 高危 10.13.1 10.34.0, 11.4.0 pnpm: pnpm: Arbitrary code execution due to path traversal in dependency aliases

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50016

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-25 18:16 修改: 2026-06-29 23:57
pnpm CVE-2026-55487 高危 10.13.1 10.34.2, 11.5.3 pnpm: pnpm: Supply chain compromise via manipulated package source strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55487

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-25 18:16 修改: 2026-06-29 21:16
pnpm CVE-2026-55697 高危 10.13.1 10.34.2, 11.5.3 pnpm: pnpm: Arbitrary code execution via improper handling of config dependencies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55697

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-25 18:16 修改: 2026-06-30 19:04
pnpm CVE-2026-55698 高危 10.13.1 10.34.2, 11.5.3 pnpm: pnpm: Arbitrary code execution via malicious package-manager lockfile

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55698

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-25 18:16 修改: 2026-06-30 19:03
pnpm CVE-2026-82392 高危 10.13.1 10.34.5, 11.11.0 pnpm: pnpm: Arbitrary Code Execution via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82392

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-08-31 21:17 修改: 2026-09-01 15:17
pnpm CVE-2026-82393 高危 10.13.1 10.34.5, 11.11.0 pnpm: pnpm: Arbitrary file write and code execution via path traversal in tarball dependency manifest

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82393

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-08-31 22:17 修改: 2026-09-02 04:18
pnpm GHSA-72r4-9c5j-mj57 高危 10.13.1 10.34.4, 11.7.0 pnpm: `patch-remove` could delete project-selected files outside the patches directory

漏洞详情: https://github.com/advisories/GHSA-72r4-9c5j-mj57

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-27 00:12 修改: 2026-06-27 00:12
pnpm GHSA-fr4h-3cph-29xv 高危 10.13.1 10.34.4, 11.7.0 pnpm: Hoisted install imports lockfile alias outside node_modules

漏洞详情: https://github.com/advisories/GHSA-fr4h-3cph-29xv

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-27 00:02 修改: 2026-06-27 00:03
pnpm GHSA-qrv3-253h-g69c 高危 10.13.1 10.34.4, 11.8.0 pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config

漏洞详情: https://github.com/advisories/GHSA-qrv3-253h-g69c

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-27 00:13 修改: 2026-06-27 00:13
pnpm GHSA-vx52-2968-3vc6 高危 10.13.1 11.11.0, 10.34.5 pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml

漏洞详情: https://github.com/advisories/GHSA-vx52-2968-3vc6

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-09-01 19:22 修改: 2026-09-01 19:22
sigstore CVE-2026-48815 高危 2.3.1 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
body-parser CVE-2024-45590 高危 1.20.1 1.20.3 body-parser: Denial of Service Vulnerability in body-parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45590

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2024-09-10 16:15 修改: 2026-06-17 07:54
tar CVE-2026-23745 高危 6.2.1 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-01-16 22:16 修改: 2026-09-07 13:18
tar CVE-2026-23950 高危 6.2.1 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-01-20 01:15 修改: 2026-08-24 13:17
tar CVE-2026-24842 高危 6.2.1 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-01-28 01:16 修改: 2026-09-07 13:18
tar CVE-2026-26960 高危 6.2.1 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-29786 高危 6.2.1 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-03-07 16:15 修改: 2026-09-01 13:18
tar CVE-2026-31802 高危 6.2.1 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-59874 高危 6.2.1 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-73566 高危 6.2.1 7.5.21 tar: node-tar: Denial of Service via crafted long-path tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
body-parser CVE-2024-45590 高危 1.20.2 1.20.3 body-parser: Denial of Service Vulnerability in body-parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45590

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2024-09-10 16:15 修改: 2026-06-17 07:54
tar CVE-2026-23745 高危 7.4.3 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-01-16 22:16 修改: 2026-09-07 13:18
tar CVE-2026-23950 高危 7.4.3 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-01-20 01:15 修改: 2026-08-24 13:17
tar CVE-2026-24842 高危 7.4.3 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-01-28 01:16 修改: 2026-09-07 13:18
tar CVE-2026-26960 高危 7.4.3 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-29786 高危 7.4.3 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-03-07 16:15 修改: 2026-09-01 13:18
tar CVE-2026-31802 高危 7.4.3 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-59874 高危 7.4.3 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-73566 高危 7.4.3 7.5.21 tar: node-tar: Denial of Service via crafted long-path tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
pnpm CVE-2026-24056 中危 10.13.1 10.28.2 pnpm: pnpm symlink traversal in file:/git dependencies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24056

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-01-26 22:15 修改: 2026-06-17 10:22
pnpm CVE-2026-24131 中危 10.13.1 10.28.2 pnpm: pnpm: Arbitrary file permission modification via directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24131

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-01-26 22:15 修改: 2026-06-17 10:22
pnpm CVE-2026-48995 中危 10.13.1 10.33.4, 11.0.7 pnpm: pnpm: Supply chain compromise from unverified dependencies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48995

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-25 18:16 修改: 2026-06-29 20:30
pnpm CVE-2026-50014 中危 10.13.1 10.34.0, 11.4.0 pnpm: pnpm: Arbitrary Code Execution via Malicious Lockfile

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50014

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-25 18:16 修改: 2026-06-29 21:14
pnpm CVE-2026-50017 中危 10.13.1 10.34.0, 11.4.0 pnpm: pnpm: Information disclosure of authentication credentials via malicious .npmrc file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50017

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-25 18:16 修改: 2026-06-30 19:04
pnpm CVE-2026-50021 中危 10.13.1 11.4.0, 10.34.1 pnpm: pnpm: Integrity bypass allows installation of altered packages via modified lockfile

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50021

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-25 18:16 修改: 2026-06-29 21:15
pnpm CVE-2026-50573 中危 10.13.1 10.34.0, 11.4.0 pnpm: pnpm: Package integrity check bypass allows installation of malicious content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50573

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-25 18:16 修改: 2026-06-29 21:15
pnpm CVE-2026-55180 中危 10.13.1 10.34.2, 11.5.3 pnpm: pacquet: pnpm and pacquet: Information disclosure of environment secrets via improper environment variable expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55180

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-25 18:16 修改: 2026-06-29 21:16
pnpm CVE-2026-55699 中危 10.13.1 10.34.2, 11.5.3 pnpm: pnpm: Denial of Service due to improper handling of malicious package manifest bin keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55699

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-25 18:16 修改: 2026-06-29 21:16
qs CVE-2025-15284 中危 6.11.0 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
qs CVE-2026-82417 中危 6.11.0 6.16.0 qs: qs: Denial of Service via improper validation in stringify function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82417

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-08-30 00:16 修改: 2026-09-03 18:00
ip-address CVE-2026-42338 中危 9.0.5 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-05-12 20:16 修改: 2026-09-07 13:19
picomatch CVE-2026-33672 中危 2.3.1 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
ip-address CVE-2026-42338 中危 9.0.5 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-05-12 20:16 修改: 2026-09-07 13:19
@sigstore/core CVE-2026-48758 中危 1.1.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
brace-expansion CVE-2026-33750 中危 1.1.11 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
js-yaml CVE-2025-64718 中危 4.1.0 4.1.1, 3.14.2 js-yaml: js-yaml prototype pollution in merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64718

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2025-11-13 16:15 修改: 2026-06-17 09:55
js-yaml CVE-2026-53550 中危 4.1.0 4.2.0, 3.15.0 js-yaml: js-yaml: Denial of Service via crafted YAML merge keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53550

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-06-22 16:16 修改: 2026-07-09 20:33
brace-expansion CVE-2026-33750 中危 2.0.1 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
langchain CVE-2024-7774 中危 0.0.199 0.2.19 Langchain Path Traversal vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7774

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2024-10-29 13:15 修改: 2026-06-17 08:20
brace-expansion CVE-2026-33750 中危 2.0.2 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
tar CVE-2026-53655 中危 6.2.1 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 6.2.1 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 6.2.1 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
langsmith CVE-2026-40190 中危 0.0.48 0.5.18 LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40190

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-04-10 20:16 修改: 2026-07-07 18:33
langsmith CVE-2026-41182 中危 0.0.48 0.5.19 LangSmith SDK: Streaming token events bypass output redaction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41182

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-04-23 02:16 修改: 2026-06-17 10:46
express CVE-2024-29041 中危 4.18.2 4.19.2, 5.0.0-beta.3 express: cause malformed URLs to be evaluated

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29041

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2024-03-25 21:15 修改: 2026-06-17 07:22
langsmith CVE-2026-40190 中危 0.0.49 0.5.18 LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40190

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-04-10 20:16 修改: 2026-07-07 18:33
langsmith CVE-2026-41182 中危 0.0.49 0.5.19 LangSmith SDK: Streaming token events bypass output redaction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41182

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-04-23 02:16 修改: 2026-06-17 10:46
brace-expansion CVE-2026-33750 中危 2.0.1 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
pnpm CVE-2026-23888 中危 10.13.1 10.28.1 pnpm: pnpm: Arbitrary file write via path traversal in binary fetcher leading to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23888

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-01-26 22:15 修改: 2026-06-17 10:22
pnpm CVE-2026-23889 中危 10.13.1 10.28.1 pnpm: pnpm: Arbitrary file write via path traversal on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23889

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-01-26 22:15 修改: 2026-06-17 10:22
pnpm CVE-2026-23890 中危 10.13.1 10.28.1 pnpm: pnpm: Arbitrary code execution via path traversal in bin linking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23890

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-01-26 22:15 修改: 2026-06-17 10:22
tar CVE-2026-53655 中危 7.4.3 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 7.4.3 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 7.4.3 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:370044818c37c6528a70f6eee6fac722f323168afc7c4c2fef7a9d4f269756d2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
uuid CVE-2026-41907 中危 9.0.0 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
yaml CVE-2026-33532 中危 2.3.1 2.8.3, 1.10.3 yaml: yaml: Denial of Service via deeply nested YAML document parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33532

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-03-26 20:16 修改: 2026-06-17 10:37
brace-expansion CVE-2025-5889 低危 2.0.1 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
express CVE-2024-43796 低危 4.18.2 4.20.0, 5.0.0 express: Improper Input Handling in Express Redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43796

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51
cookie CVE-2024-47764 低危 0.5.0 0.7.0 cookie: cookie accepts cookie name, path, and domain with out of bounds characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47764

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2024-10-04 20:15 修改: 2026-06-17 07:57
postcss-selector-parser CVE-2026-9358 低危 6.1.0 6.1.3, 7.1.3 postcss-selector-parser: Postcss: Denial of Service via uncontrolled recursion in AST Serialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9358

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-05-24 06:16 修改: 2026-07-23 11:10
brace-expansion CVE-2025-5889 低危 1.1.11 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
body-parser CVE-2026-12590 低危 1.20.1 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
qs CVE-2026-2391 低危 6.11.0 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
send CVE-2024-43799 低危 0.18.0 0.19.0 send: Code Execution Vulnerability in Send Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43799

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51
serve-static CVE-2024-43800 低危 1.15.0 1.16.0, 2.1.0 serve-static: Improper Sanitization in serve-static

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43800

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51
diff CVE-2026-24001 低危 5.2.0 8.0.3, 5.2.2, 4.0.4, 3.5.1 jsdiff: denial of service vulnerability in parsePatch and applyPatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24001

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-01-22 03:15 修改: 2026-07-15 02:18
body-parser CVE-2026-12590 低危 1.20.2 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:db4fa6eb1b9fd0fe3cb33230f5cfa0c6b3aaf40dac07b99923db056a3827e767

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
brace-expansion CVE-2025-5889 低危 2.0.1 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×