docker.io/artifactkeeper/backend:1.7.1 linux/amd64

docker.io/artifactkeeper/backend:1.7.1 - Trivy安全扫描结果 扫描时间: 2026-08-10 23:29
全部漏洞信息
低危漏洞:34 中危漏洞:72 高危漏洞:18 严重漏洞:0

系统OS: redhat 9.8 扫描引擎: Trivy 扫描时间: 2026-08-10 23:29

docker.io/artifactkeeper/backend:1.7.1 (redhat 9.8) (redhat)
低危漏洞:34 中危漏洞:67 高危漏洞:10 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl-minimal CVE-2026-11352 高危 7.76.1-40.el9 curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:01
curl-minimal CVE-2026-11586 高危 7.76.1-40.el9 curl: curl: Denial of Service via WebSocket PING flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 17:59
curl-minimal CVE-2026-8286 高危 7.76.1-40.el9 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
curl-minimal CVE-2026-8925 高危 7.76.1-40.el9 curl: curl: Double-free vulnerability in SASL authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
curl-minimal CVE-2026-9547 高危 7.76.1-40.el9 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
libcurl CVE-2026-11352 高危 7.76.1-40.el9 curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:01
libcurl CVE-2026-11586 高危 7.76.1-40.el9 curl: curl: Denial of Service via WebSocket PING flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 17:59
libcurl CVE-2026-8286 高危 7.76.1-40.el9 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libcurl CVE-2026-8925 高危 7.76.1-40.el9 curl: curl: Double-free vulnerability in SASL authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
libcurl CVE-2026-9547 高危 7.76.1-40.el9 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
curl-minimal CVE-2025-13034 中危 7.76.1-40.el9 curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13034

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:33
curl-minimal CVE-2025-14017 中危 7.76.1-40.el9 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
curl-minimal CVE-2026-11856 中危 7.76.1-40.el9 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
curl-minimal CVE-2026-1965 中危 7.76.1-40.el9 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
curl-minimal CVE-2026-3783 中危 7.76.1-40.el9 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl-minimal CVE-2026-3784 中危 7.76.1-40.el9 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl-minimal CVE-2026-4873 中危 7.76.1-40.el9 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
curl-minimal CVE-2026-5545 中危 7.76.1-40.el9 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
curl-minimal CVE-2026-5773 中危 7.76.1-40.el9 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
curl-minimal CVE-2026-6253 中危 7.76.1-40.el9 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
curl-minimal CVE-2026-6429 中危 7.76.1-40.el9 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
curl-minimal CVE-2026-7168 中危 7.76.1-40.el9 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
curl-minimal CVE-2026-8924 中危 7.76.1-40.el9 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
curl-minimal CVE-2026-8926 中危 7.76.1-40.el9 curl: curl: Information disclosure via incorrect .netrc password lookup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
gzip CVE-2026-41991 中危 1.12-1.el9 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
krb5-libs CVE-2026-11850 中危 1.21.1-10.el9_8 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libattr CVE-2026-54371 中危 2.5.1-3.el9 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:0e111396ebd730643a13d67c30dae48976f47edf0694c6a51368eca3773c8a4c

发布日期: 2026-06-29 14:16 修改: 2026-07-15 01:16
bzip2-libs CVE-2026-42250 中危 1.0.8-11.el9 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
coreutils CVE-2026-56391 中危 8.32-41.el9_8 coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56391

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28
coreutils CVE-2026-56392 中危 8.32-41.el9_8 coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56392

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28
coreutils-common CVE-2026-56391 中危 8.32-41.el9_8 coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56391

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28
coreutils-common CVE-2026-56392 中危 8.32-41.el9_8 coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56392

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28
libcurl CVE-2025-13034 中危 7.76.1-40.el9 curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13034

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:33
libcurl CVE-2025-14017 中危 7.76.1-40.el9 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
libcurl CVE-2026-11856 中危 7.76.1-40.el9 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl CVE-2026-1965 中危 7.76.1-40.el9 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
libcurl CVE-2026-3783 中危 7.76.1-40.el9 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl CVE-2026-3784 中危 7.76.1-40.el9 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl CVE-2026-4873 中危 7.76.1-40.el9 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
libcurl CVE-2026-5545 中危 7.76.1-40.el9 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl CVE-2026-5773 中危 7.76.1-40.el9 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl CVE-2026-6253 中危 7.76.1-40.el9 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl CVE-2026-6429 中危 7.76.1-40.el9 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl CVE-2026-7168 中危 7.76.1-40.el9 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
libcurl CVE-2026-8924 中危 7.76.1-40.el9 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
libcurl CVE-2026-8926 中危 7.76.1-40.el9 curl: curl: Information disclosure via incorrect .netrc password lookup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
libnghttp2 CVE-2026-58055 中危 1.43.0-6.el9_8.1 nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
libssh CVE-2025-5372 中危 0.10.4-18.el9 libssh: Incorrect Return Code Handling in ssh_kdf() in libssh

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5372

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2025-07-04 06:15 修改: 2026-06-17 09:47
libssh CVE-2026-3731 中危 0.10.4-18.el9 libssh: libssh: Denial of Service via out-of-bounds read in SFTP extension name handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3731

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-03-08 11:15 修改: 2026-06-17 10:44
libssh CVE-2026-59843 中危 0.10.4-18.el9 libssh: libssh: denial of service via zero advertised channel packet size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59843

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 12:18 修改: 2026-07-30 13:13
libssh CVE-2026-59844 中危 0.10.4-18.el9 libssh: libssh: denial of service via oversized SFTP read length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59844

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 12:18 修改: 2026-07-30 13:12
libssh CVE-2026-59845 中危 0.10.4-18.el9 libssh: libssh: denial of service via unchecked ProxyCommand fork() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59845

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 12:18 修改: 2026-07-30 13:12
libssh CVE-2026-59847 中危 0.10.4-18.el9 libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59847

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 14:16 修改: 2026-07-30 13:11
libssh CVE-2026-59848 中危 0.10.4-18.el9 libssh: libssh: denial of service via SFTP responses with unknown request IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59848

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 14:16 修改: 2026-07-30 13:11
libssh CVE-2026-59850 中危 0.10.4-18.el9 libssh: libssh: use-after-free via data callbacks on closed channels

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59850

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 15:16 修改: 2026-07-30 16:23
libssh-config CVE-2025-5372 中危 0.10.4-18.el9 libssh: Incorrect Return Code Handling in ssh_kdf() in libssh

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5372

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2025-07-04 06:15 修改: 2026-06-17 09:47
libssh-config CVE-2026-3731 中危 0.10.4-18.el9 libssh: libssh: Denial of Service via out-of-bounds read in SFTP extension name handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3731

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-03-08 11:15 修改: 2026-06-17 10:44
libssh-config CVE-2026-59843 中危 0.10.4-18.el9 libssh: libssh: denial of service via zero advertised channel packet size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59843

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 12:18 修改: 2026-07-30 13:13
libssh-config CVE-2026-59844 中危 0.10.4-18.el9 libssh: libssh: denial of service via oversized SFTP read length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59844

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 12:18 修改: 2026-07-30 13:12
libssh-config CVE-2026-59845 中危 0.10.4-18.el9 libssh: libssh: denial of service via unchecked ProxyCommand fork() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59845

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 12:18 修改: 2026-07-30 13:12
libssh-config CVE-2026-59847 中危 0.10.4-18.el9 libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59847

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 14:16 修改: 2026-07-30 13:11
libssh-config CVE-2026-59848 中危 0.10.4-18.el9 libssh: libssh: denial of service via SFTP responses with unknown request IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59848

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 14:16 修改: 2026-07-30 13:11
libssh-config CVE-2026-59850 中危 0.10.4-18.el9 libssh: libssh: use-after-free via data callbacks on closed channels

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59850

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 15:16 修改: 2026-07-30 16:23
openldap CVE-2026-22185 中危 2.6.8-4.el9 OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22185

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-01-07 21:16 修改: 2026-06-17 10:19
openssl-fips-provider CVE-2026-2673 中危 3.0.7-11.el9_8 openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31
openssl-fips-provider-so CVE-2026-2673 中危 3.0.7-11.el9_8 openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31
openssl-libs CVE-2026-2673 中危 1:3.5.5-6.el9_8 openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31
sed CVE-2026-5958 中危 4.8-10.el9 sed: GNU sed TOCTOU race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-04-20 12:16 修改: 2026-06-17 10:59
tar CVE-2005-2541 中危 2:1.34-11.el9 tar: does not properly warn the user when extracting setuid or setgid files

漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2005-08-10 04:00 修改: 2026-04-16 00:27
tar CVE-2025-64118 中危 2:1.34-11.el9 node-tar: tar: node-tar: Information disclosure via reading a truncated tar file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64118

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2025-10-30 18:15 修改: 2026-06-17 09:53
tar CVE-2026-33056 中危 2:1.34-11.el9 tar-rs: tar-rs: Arbitrary directory permission modification via crafted tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33056

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-03-20 08:16 修改: 2026-06-17 10:36
tar CVE-2026-53655 中危 2:1.34-11.el9 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-5704 中危 2:1.34-11.el9 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59
tar CVE-2026-59871 中危 2:1.34-11.el9 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 2:1.34-11.el9 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
xz CVE-2026-34743 中危 5.2.5-8.el9_0 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-04-02 19:21 修改: 2026-07-24 21:10
xz-libs CVE-2026-34743 中危 5.2.5-8.el9_0 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-04-02 19:21 修改: 2026-07-24 21:10
libcurl CVE-2025-15224 低危 7.76.1-40.el9 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl CVE-2026-6276 低危 7.76.1-40.el9 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libgcc CVE-2021-46195 低危 11.5.0-14.el9 gcc: uncontrolled recursion in libiberty/rust-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46195

镜像层: sha256:0e111396ebd730643a13d67c30dae48976f47edf0694c6a51368eca3773c8a4c

发布日期: 2022-01-14 20:15 修改: 2026-06-17 04:14
libgcc CVE-2022-27943 低危 11.5.0-14.el9 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:0e111396ebd730643a13d67c30dae48976f47edf0694c6a51368eca3773c8a4c

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
libssh-config CVE-2026-59846 低危 0.10.4-18.el9 libssh: libssh: information disclosure via ProxyCommand %r username expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59846

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 13:17 修改: 2026-07-30 13:12
libstdc++ CVE-2021-46195 低危 11.5.0-14.el9 gcc: uncontrolled recursion in libiberty/rust-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46195

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2022-01-14 20:15 修改: 2026-06-17 04:14
libstdc++ CVE-2022-27943 低危 11.5.0-14.el9 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
ncurses-base CVE-2023-50495 低危 6.2-12.20210508.el9 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:0e111396ebd730643a13d67c30dae48976f47edf0694c6a51368eca3773c8a4c

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
ncurses-libs CVE-2023-50495 低危 6.2-12.20210508.el9 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:0e111396ebd730643a13d67c30dae48976f47edf0694c6a51368eca3773c8a4c

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
curl-minimal CVE-2026-6276 低危 7.76.1-40.el9 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
gawk CVE-2023-4156 低危 5.1.0-6.el9 gawk: heap out of bound read in builtin.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4156

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2023-09-25 18:15 修改: 2026-06-17 06:37
curl-minimal CVE-2024-11053 低危 7.76.1-40.el9 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2024-12-11 08:15 修改: 2026-06-17 06:56
curl-minimal CVE-2024-7264 低危 7.76.1-40.el9 curl: libcurl: ASN.1 date parser overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2024-07-31 08:15 修改: 2026-06-17 08:19
openssl-libs CVE-2024-13176 低危 1:3.5.5-6.el9_8 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01
openssl-libs CVE-2024-41996 低危 1:3.5.5-6.el9_8 openssl: remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41996

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2024-08-26 06:15 修改: 2026-06-17 07:48
openssl-libs CVE-2025-9232 低危 1:3.5.5-6.el9_8 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
openssl-libs CVE-2026-28387 低危 1:3.5.5-6.el9_8 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
openssl-libs CVE-2026-28388 低危 1:3.5.5-6.el9_8 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
openssl-libs CVE-2026-28389 低危 1:3.5.5-6.el9_8 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
openssl-libs CVE-2026-31789 低危 1:3.5.5-6.el9_8 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
pcre2 CVE-2022-41409 低危 10.40-6.el9 pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409

镜像层: sha256:0e111396ebd730643a13d67c30dae48976f47edf0694c6a51368eca3773c8a4c

发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
pcre2-syntax CVE-2022-41409 低危 10.40-6.el9 pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409

镜像层: sha256:0e111396ebd730643a13d67c30dae48976f47edf0694c6a51368eca3773c8a4c

发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
curl-minimal CVE-2024-9681 低危 7.76.1-40.el9 curl: HSTS subdomain overwrites parent cache entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9681

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2024-11-06 08:15 修改: 2026-06-17 08:25
curl-minimal CVE-2025-14524 低危 7.76.1-40.el9 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
curl-minimal CVE-2025-15079 低危 7.76.1-40.el9 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
curl-minimal CVE-2025-15224 低危 7.76.1-40.el9 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl CVE-2024-11053 低危 7.76.1-40.el9 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2024-12-11 08:15 修改: 2026-06-17 06:56
libssh CVE-2026-59846 低危 0.10.4-18.el9 libssh: libssh: information disclosure via ProxyCommand %r username expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59846

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-07-21 13:17 修改: 2026-07-30 13:12
libcurl CVE-2024-7264 低危 7.76.1-40.el9 curl: libcurl: ASN.1 date parser overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2024-07-31 08:15 修改: 2026-06-17 08:19
libcurl CVE-2024-9681 低危 7.76.1-40.el9 curl: HSTS subdomain overwrites parent cache entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9681

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2024-11-06 08:15 修改: 2026-06-17 08:25
tar CVE-2023-39804 低危 2:1.34-11.el9 tar: Incorrectly handled extension attributes in PAX archives can lead to a crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2024-03-27 04:15 修改: 2026-06-17 06:12
libcurl CVE-2025-14524 低危 7.76.1-40.el9 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
libcurl CVE-2025-15079 低危 7.76.1-40.el9 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
zlib CVE-2026-27171 低危 1.2.11-40.el9 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:35bf50f19ad9fdc5d11ad3da6973c2ef781702fa8b277f57fbdc8fc6802fb2e7

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
usr/local/bin/grype (gobinary)
低危漏洞:0 中危漏洞:5 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/docker/docker CVE-2026-34040 高危 v28.5.2+incompatible 29.3.1 Moby: Moby: Authorization bypass vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34040

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
github.com/docker/docker CVE-2026-41567 高危 v28.5.2+incompatible docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-06-05 02:17 修改: 2026-08-06 13:18
github.com/docker/docker CVE-2026-42306 高危 v28.5.2+incompatible github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47
github.com/go-git/go-git/v5 CVE-2026-71556 高危 v5.19.1 5.19.2 go-git is an extensible git implementation library written in pure Go. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71556

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-08-07 17:17 修改: 2026-08-07 17:17
google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.80.0 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
stdlib CVE-2026-27145 高危 v1.26.3 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-06-02 23:16 修改: 2026-08-07 12:17
stdlib CVE-2026-39822 高危 v1.26.3 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib CVE-2026-42504 高危 v1.26.3 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
github.com/docker/docker CVE-2026-33997 中危 v28.5.2+incompatible 29.3.1 moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-03-31 03:15 修改: 2026-08-03 13:18
github.com/go-git/go-git/v5 CVE-2026-71557 中危 v5.19.1 5.19.2 go-git is an extensible git implementation library written in pure Go. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71557

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-08-07 17:17 修改: 2026-08-07 18:17
github.com/docker/docker CVE-2026-41568 中危 v28.5.2+incompatible github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46
stdlib CVE-2026-42505 中危 v1.26.3 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib CVE-2026-42507 中危 v1.26.3 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
golang.org/x/crypto GO-2026-5932 未知 v0.53.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:ad00a6c9fc8acb0041d896ef203207b9b1a853a53c99dd9c1c0cc523b97ca8ae

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×