docker.io/atlassian/confluence:10.2.15 linux/amd64

docker.io/atlassian/confluence:10.2.15 - Trivy安全扫描结果 扫描时间: 2026-09-10 11:08
全部漏洞信息
低危漏洞:55 中危漏洞:259 高危漏洞:109 严重漏洞:9

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-10 11:08

docker.io/atlassian/confluence:10.2.15 (ubuntu 24.04) (ubuntu)
低危漏洞:20 中危漏洞:89 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
binutils CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils-common CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils-common CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libbinutils CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libbinutils CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libc-bin CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6 CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libctf-nobfd0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libctf0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libctf0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libexpat1 CVE-2025-59375 中危 2.6.1-2ubuntu0.4 firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46
libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libexpat1 CVE-2026-32776 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-32777 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-32778 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-41080 中危 2.6.1-2ubuntu0.4 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
libexpat1 CVE-2026-45186 中危 2.6.1-2ubuntu0.4 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-05-10 07:16 修改: 2026-08-25 13:19
libexpat1 CVE-2026-50219 中危 2.6.1-2ubuntu0.4 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
libexpat1 CVE-2026-56131 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56132 中危 2.6.1-2ubuntu0.4 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56403 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56404 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56405 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat1 CVE-2026-56406 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat1 CVE-2026-56407 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat1 CVE-2026-56408 中危 2.6.1-2ubuntu0.4 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libexpat1 CVE-2026-56409 中危 2.6.1-2ubuntu0.4 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat1 CVE-2026-56410 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat1 CVE-2026-56411 中危 2.6.1-2ubuntu0.4 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat1 CVE-2026-56412 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libexpat1 CVE-2026-66046 中危 2.6.1-2ubuntu0.4 Expat through 2.8.3 contains a denial of service vulnerability caused ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-08-18 15:16 修改: 2026-08-20 16:17
libexpat1 CVE-2026-72522 中危 2.6.1-2ubuntu0.4 expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-08-10 04:16 修改: 2026-08-31 19:33
libexpat1 CVE-2026-76641 中危 2.6.1-2ubuntu0.4 CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17
libexpat1 CVE-2026-76957 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-08-20 05:16 修改: 2026-09-08 20:56
libgprofng0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libsqlite3-0 CVE-2026-39113 中危 3.45.1-1ubuntu2.7 Buffer Overflow vulnerability in SQLite affected version source snapsh ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39113

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-08-25 21:17 修改: 2026-09-09 16:04
locales CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
perl-base CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:8c655165b66a040586bdf967dc0f2dbed1f05b42ec10151c0faaba0b97ae6e82

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17
perl-base CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:8c655165b66a040586bdf967dc0f2dbed1f05b42ec10151c0faaba0b97ae6e82

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-03 17:16 修改: 2026-09-01 15:17
tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-03 16:16 修改: 2026-09-01 15:17
wget CVE-2021-31879 中危 1.21.4-1ubuntu4.5 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
binutils-common CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libbinutils CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libbinutils CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libctf0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libctf0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
binutils CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libctf-nobfd0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libsframe1 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libsframe1 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libctf-nobfd0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
binutils CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
binutils-common CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
binutils-x86-64-linux-gnu CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
binutils-x86-64-linux-gnu CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libgprofng0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libgprofng0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:9edfe9a037a29ccb5493f2844a5f08201467680b6896276115ebb0713466eb8c

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
Java (jar)
低危漏洞:8 中危漏洞:104 高危漏洞:56 严重漏洞:9
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
io.netty:netty-handler CVE-2026-75595 严重 4.1.133.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-19 21:17 修改: 2026-08-20 15:18
io.netty:netty-handler CVE-2026-75595 严重 4.1.135.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-19 21:17 修改: 2026-08-20 15:18
io.netty:netty-handler CVE-2026-75595 严重 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-19 21:17 修改: 2026-08-20 15:18
io.netty:netty-handler CVE-2026-75595 严重 4.1.133.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-19 21:17 修改: 2026-08-20 15:18
io.netty:netty-handler CVE-2026-75595 严重 4.1.135.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-19 21:17 修改: 2026-08-20 15:18
io.netty:netty-handler CVE-2026-75595 严重 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-19 21:17 修改: 2026-08-20 15:18
org.apache.tomcat:tomcat-catalina CVE-2026-65182 严重 10.1.57 11.0.25, 10.1.58, 9.0.121 Apache Tomcat: Apache Tomcat: Security constraint bypass due to improper access control

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65182

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:27
org.apache.tomcat:tomcat-catalina CVE-2026-65905 严重 10.1.57 11.0.25, 10.1.58, 9.0.121 tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65905

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:17
org.apache.tomcat:tomcat-catalina CVE-2026-68525 严重 10.1.57 11.0.25, 10.1.58, 9.0.121 org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-68525

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-25 22:17 修改: 2026-08-27 15:15
io.micrometer:micrometer-core CVE-2026-40984 高危 1.14.3 1.16.6, 1.15.12 micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-09-02 13:17
io.netty:netty-codec CVE-2026-59901 高危 4.1.133.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec CVE-2026-59901 高危 4.1.133.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-http CVE-2026-55831 高危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http CVE-2026-55833 高危 4.1.133.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http CVE-2026-56745 高危 4.1.133.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http CVE-2026-55831 高危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http CVE-2026-55833 高危 4.1.133.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http CVE-2026-56745 高危 4.1.133.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2 CVE-2026-56819 高危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2 CVE-2026-56819 高危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.18.4 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
io.netty:netty-handler CVE-2026-44249 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-11 22:16 修改: 2026-09-09 13:20
io.netty:netty-handler CVE-2026-45416 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 15:16 修改: 2026-09-09 13:20
io.netty:netty-handler CVE-2026-50010 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 16:16 修改: 2026-09-09 13:20
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.18.4 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.18.4 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.18.4 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-23 21:17 修改: 2026-09-02 13:18
io.netty:netty-handler CVE-2026-44249 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-11 22:16 修改: 2026-09-09 13:20
io.netty:netty-handler CVE-2026-45416 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 15:16 修改: 2026-09-09 13:20
io.netty:netty-handler CVE-2026-50010 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 16:16 修改: 2026-09-09 13:20
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.18.4 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.18.4 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-23 21:17 修改: 2026-09-02 13:18
io.netty:netty-resolver-dns CVE-2026-45674 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 15:16 修改: 2026-09-09 13:20
io.netty:netty-resolver-dns CVE-2026-47691 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 16:16 修改: 2026-09-09 13:20
io.netty:netty-resolver-dns CVE-2026-45674 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 15:16 修改: 2026-09-09 13:20
io.netty:netty-resolver-dns CVE-2026-47691 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 16:16 修改: 2026-09-09 13:20
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.3.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.3.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.3.6 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.3.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.3.6 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.3.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.3.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.3.6 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.3.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.3.6 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
com.microsoft.sqlserver:mssql-jdbc CVE-2025-59250 高危 12.10.2 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 JDBC Driver for SQL Server has improper input validation issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
com.microsoft.sqlserver:mssql-jdbc CVE-2025-59250 高危 12.10.2 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 JDBC Driver for SQL Server has improper input validation issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
io.micrometer:micrometer-core CVE-2026-40984 高危 1.14.3 1.16.6, 1.15.12 micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-09-02 13:17
org.apache.velocity:velocity CVE-2020-13936 高危 1.6.4-atlassian-41 velocity: arbitrary code execution when attacker is able to modify templates

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13936

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2021-03-10 08:15 修改: 2026-06-17 02:53
org.apache.velocity:velocity CVE-2020-13936 高危 1.6.4-atlassian-41 velocity: arbitrary code execution when attacker is able to modify templates

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13936

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2021-03-10 08:15 修改: 2026-06-17 02:53
org.springframework.data:spring-data-commons CVE-2026-41695 高危 3.4.3 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via crafted property path strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41695

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41716 高危 3.4.3 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41716

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41695 高危 3.4.4 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via crafted property path strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41695

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41716 高危 3.4.4 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41716

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41695 高危 3.4.3 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via crafted property path strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41695

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41716 高危 3.4.3 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41716

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41695 高危 3.4.4 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via crafted property path strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41695

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41716 高危 3.4.4 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41716

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework:spring-expression CVE-2026-41850 高危 6.2.18 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-expression CVE-2026-41850 高危 6.2.18 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41842 高危 6.2.18 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service when resolving static resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41845 高危 6.2.18 7.0.8, 6.2.19 org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41842 高危 6.2.18 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service when resolving static resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41845 高危 6.2.18 7.0.8, 6.2.19 org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.21.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.21.4 2.21.5, 2.18.9, 2.22.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.21.4 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
io.netty:netty-handler CVE-2026-75596 中危 4.1.133.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-19 21:17 修改: 2026-08-20 20:17
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.18.4 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
io.netty:netty-handler CVE-2026-75596 中危 4.1.135.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-19 21:17 修改: 2026-08-20 20:17
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.18.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-handler CVE-2026-75596 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-19 21:17 修改: 2026-08-20 20:17
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.18.4 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.18.4 2.21.5, 2.18.9, 2.22.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.18.4 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.21.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-handler CVE-2026-75596 中危 4.1.133.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-19 21:17 修改: 2026-08-20 20:17
io.netty:netty-codec-dns CVE-2026-73508 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18
io.netty:netty-handler CVE-2026-75596 中危 4.1.135.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-19 21:17 修改: 2026-08-20 20:17
io.netty:netty-codec-dns CVE-2026-73508 中危 4.1.135.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18
io.netty:netty-handler CVE-2026-75596 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-19 21:17 修改: 2026-08-20 20:17
io.netty:netty-codec-dns CVE-2026-73508 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18
io.netty:netty-codec-dns CVE-2026-73508 中危 4.1.135.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18
io.netty:netty-resolver-dns CVE-2026-45673 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.21.4 2.21.5, 2.18.9, 2.22.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.21.4 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
io.netty:netty-resolver-dns CVE-2026-45673 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-kqueue CVE-2026-45536 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-kqueue CVE-2026-45536 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.4.4 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.4.4 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.5.2 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.4.4 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.5.2 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
com.fasterxml.jackson.core:jackson-core CVE-2026-18401 中危 2.18.4 2.21.1, 2.18.6 tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
io.netty:netty-codec-http CVE-2026-50020 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http CVE-2026-56746 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http CVE-2026-59898 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
io.netty:netty-codec-http CVE-2026-59899 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.133.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
io.netty:netty-codec-http CVE-2026-59921 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
com.fasterxml.jackson.core:jackson-core CVE-2026-18401 中危 2.18.4 2.21.1, 2.18.6 tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.18.4 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.26.0 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.26.0 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.26.0 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.26.0 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.26.0 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.26.0 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.26.0 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.18.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-codec-http CVE-2026-50020 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http CVE-2026-56746 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http CVE-2026-59898 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
io.netty:netty-codec-http CVE-2026-59899 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
org.eclipse.jetty:jetty-util CVE-2026-8384 中危 12.1.8 12.0.35, 12.1.9 jetty: Eclipse Jetty: Path confusion vulnerability may lead to information disclosure in web applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8384

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:39
org.eclipse.jetty:jetty-util CVE-2026-8384 中危 12.1.8 12.0.35, 12.1.9 jetty: Eclipse Jetty: Path confusion vulnerability may lead to information disclosure in web applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8384

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:39
org.jsoup:jsoup CVE-2026-71497 中危 1.16.2 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-06 22:18 修改: 2026-08-07 15:17
org.jsoup:jsoup CVE-2026-71497 中危 1.17.2 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-06 22:18 修改: 2026-08-07 15:17
org.jsoup:jsoup CVE-2026-71497 中危 1.22.2 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-06 22:18 修改: 2026-08-07 15:17
org.jsoup:jsoup CVE-2026-71497 中危 1.16.2 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-06 22:18 修改: 2026-08-07 15:17
org.jsoup:jsoup CVE-2026-71497 中危 1.17.2 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-06 22:18 修改: 2026-08-07 15:17
org.jsoup:jsoup CVE-2026-71497 中危 1.22.2 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-06 22:18 修改: 2026-08-07 15:17
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.133.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
io.netty:netty-codec-http CVE-2026-59921 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
org.springframework.data:spring-data-commons CVE-2026-41711 中危 3.4.3 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41711

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41721 中危 3.4.3 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41721

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.136.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.18.4 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
org.springframework.data:spring-data-commons CVE-2026-41711 中危 3.4.4 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41711

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41721 中危 3.4.4 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41721

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.133.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 16:16 修改: 2026-09-09 13:20
org.springframework.data:spring-data-commons CVE-2026-41711 中危 3.4.3 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41711

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41721 中危 3.4.3 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41721

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2 CVE-2026-59900 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
org.springframework.data:spring-data-commons CVE-2026-41711 中危 3.4.4 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41711

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41721 中危 3.4.4 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41721

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.retry:spring-retry CVE-2026-41710 中危 2.0.6 2.0.13 spring-retry: Spring Retry: Denial of Service via cache exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41710

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-09-04 20:03
org.springframework.retry:spring-retry CVE-2026-41710 中危 2.0.6 2.0.13 spring-retry: Spring Retry: Denial of Service via cache exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41710

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-09-04 20:03
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.18.4 2.21.5, 2.18.9, 2.22.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
org.springframework:spring-expression CVE-2026-41851 中危 6.2.18 7.0.8, 6.2.19 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
org.springframework:spring-expression CVE-2026-41851 中危 6.2.18 7.0.8, 6.2.19 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-web CVE-2026-41854 中危 6.2.18 7.0.8, 6.2.19 spring-framework: Spring Framework: Server-Side Request Forgery via incorrect host parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41854

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-web CVE-2026-41854 中危 6.2.18 7.0.8, 6.2.19 spring-framework: Spring Framework: Server-Side Request Forgery via incorrect host parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41854

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.133.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 16:16 修改: 2026-09-09 13:20
io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
org.springframework:spring-webmvc CVE-2026-41841 中危 6.2.18 7.0.8, 6.2.19 Spring MVC and WebFlux applications are vulnerable to Information Disc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41843 中危 6.2.18 7.0.8, 6.2.19 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41844 中危 6.2.18 7.0.8, 6.2.19 Spring Framework: Spring Framework: Open Redirect via crafted link

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41846 中危 6.2.18 7.0.8, 6.2.19 Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41853 中危 6.2.18 7.0.8, 6.2.19 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
io.netty:netty-codec-http2 CVE-2026-59900 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.18.4 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
org.springframework:spring-webmvc CVE-2026-41841 中危 6.2.18 7.0.8, 6.2.19 Spring MVC and WebFlux applications are vulnerable to Information Disc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41843 中危 6.2.18 7.0.8, 6.2.19 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41844 中危 6.2.18 7.0.8, 6.2.19 Spring Framework: Spring Framework: Open Redirect via crafted link

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41846 中危 6.2.18 7.0.8, 6.2.19 Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41853 中危 6.2.18 7.0.8, 6.2.19 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-websocket CVE-2026-41838 中危 6.2.18 7.0.8, 6.2.19 IDs for WebSocket sessions in the spring-websocket module are not cryp ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41838

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-websocket CVE-2026-41838 中危 6.2.18 7.0.8, 6.2.19 IDs for WebSocket sessions in the spring-websocket module are not cryp ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41838

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
tools.jackson.core:jackson-databind CVE-2026-59889 中危 3.1.4 3.1.5, 3.2.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
tools.jackson.core:jackson-databind CVE-2026-59889 中危 3.1.4 3.1.5, 3.2.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
org.springframework:spring-expression CVE-2026-41852 低危 6.2.18 7.0.8, 6.2.19 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
ch.qos.logback:logback-core CVE-2026-9828 低危 1.5.32 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
ch.qos.logback:logback-core CVE-2026-10532 低危 1.5.32 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
org.springframework:spring-expression CVE-2026-41852 低危 6.2.18 7.0.8, 6.2.19 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-core CVE-2026-41848 低危 6.2.18 7.0.8, 6.2.19 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-core CVE-2026-41848 低危 6.2.18 7.0.8, 6.2.19 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
ch.qos.logback:logback-core CVE-2026-9828 低危 1.5.32 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
ch.qos.logback:logback-core CVE-2026-10532 低危 1.5.32 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
Node.js (node-pkg)
低危漏洞:27 中危漏洞:66 高危漏洞:53 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
axios CVE-2026-67320 高危 1.16.0 0.33.0, 1.18.0 axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67320

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:39
brace-expansion CVE-2026-13149 高危 1.1.13 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 1.1.13 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-69152 高危 1.1.13 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-13149 高危 1.1.14 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 1.1.14 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-69152 高危 1.1.14 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-14257 高危 1.1.16 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-69152 高危 1.1.16 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
browserslist CVE-2026-73088 高危 4.25.1 4.28.7 browserslist: Browserslist: Prototype pollution leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73088

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73089 高危 4.25.1 4.28.7 browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73089

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73088 高危 4.25.2 4.28.7 browserslist: Browserslist: Prototype pollution leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73088

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73089 高危 4.25.2 4.28.7 browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73089

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73088 高危 4.25.3 4.28.7 browserslist: Browserslist: Prototype pollution leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73088

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73089 高危 4.25.3 4.28.7 browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73089

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73088 高危 4.25.4 4.28.7 browserslist: Browserslist: Prototype pollution leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73088

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73089 高危 4.25.4 4.28.7 browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73089

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73088 高危 4.28.0 4.28.7 browserslist: Browserslist: Prototype pollution leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73088

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73089 高危 4.28.0 4.28.7 browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73089

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73088 高危 4.28.1 4.28.7 browserslist: Browserslist: Prototype pollution leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73088

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73089 高危 4.28.1 4.28.7 browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73089

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73088 高危 4.28.2 4.28.7 browserslist: Browserslist: Prototype pollution leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73088

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73089 高危 4.28.2 4.28.7 browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73089

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73088 高危 4.28.6 4.28.7 browserslist: Browserslist: Prototype pollution leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73088

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
browserslist CVE-2026-73089 高危 4.28.6 4.28.7 browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73089

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-11 17:19 修改: 2026-08-13 15:20
fast-uri CVE-2026-13676 高危 3.1.2 4.0.1, 3.1.3, 2.4.2 fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13676

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-29 14:16 修改: 2026-09-09 13:18
fast-uri CVE-2026-16221 高危 3.1.2 2.4.3, 3.1.4, 4.1.1 fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16221

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-19 15:16 修改: 2026-08-05 19:46
fast-uri CVE-2026-18446 高危 3.1.2 2.4.4, 3.1.5, 4.1.2 fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18446

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-31 15:16 修改: 2026-09-02 14:42
fast-uri CVE-2026-75899 高危 3.1.2 2.4.5, 3.1.6, 4.1.3 fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75899

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:43
fast-uri CVE-2026-75975 高危 3.1.2 2.4.5, 3.1.6, 4.1.3 fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75975

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:44
fast-uri CVE-2026-76172 高危 3.1.2 2.4.5, 3.1.6, 4.1.3 fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76172

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-24 11:16 修改: 2026-09-02 14:43
fast-uri CVE-2026-16221 高危 3.1.3 2.4.3, 3.1.4, 4.1.1 fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16221

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-19 15:16 修改: 2026-08-05 19:46
fast-uri CVE-2026-18446 高危 3.1.3 2.4.4, 3.1.5, 4.1.2 fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18446

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-31 15:16 修改: 2026-09-02 14:42
fast-uri CVE-2026-75899 高危 3.1.3 2.4.5, 3.1.6, 4.1.3 fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75899

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:43
fast-uri CVE-2026-75931 高危 3.1.3 2.4.5, 3.1.6, 4.1.3 fast-uri: fast-uri: Host confusion via skipped IDN canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75931

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:44
fast-uri CVE-2026-75975 高危 3.1.3 2.4.5, 3.1.6, 4.1.3 fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75975

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:44
fast-uri CVE-2026-76172 高危 3.1.3 2.4.5, 3.1.6, 4.1.3 fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76172

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-24 11:16 修改: 2026-09-02 14:43
immutable CVE-2026-59879 高危 4.3.8 4.3.9, 5.1.8 immutable-js: Immutable.js: Denial of Service due to mishandling of large index values in List operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59879

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-08 17:17 修改: 2026-07-10 18:48
immutable CVE-2026-59880 高危 4.3.8 4.3.9, 5.1.8, 3.8.4 Immutable.js provides many Persistent Immutable data structures. Prior ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59880

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:49
js-yaml CVE-2026-59869 高危 3.14.2 3.15.0, 4.3.0 js-yaml: js-yaml: Denial of Service via crafted YAML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59869

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:05
js-yaml CVE-2026-84375 高危 3.14.2 4.3.2, 3.15.2 js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84375

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-09-01 22:17 修改: 2026-09-02 16:17
js-yaml GHSA-5p4m-2wfm-xmqj 高危 3.14.2 4.3.1, 3.15.1 JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27
js-yaml CVE-2026-59869 高危 4.1.0 3.15.0, 4.3.0 js-yaml: js-yaml: Denial of Service via crafted YAML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59869

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:05
js-yaml CVE-2026-84375 高危 4.1.0 4.3.2, 3.15.2 js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84375

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-09-01 22:17 修改: 2026-09-02 16:17
js-yaml GHSA-5p4m-2wfm-xmqj 高危 4.1.0 4.3.1, 3.15.1 JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27
lodash CVE-2026-4800 高危 4.17.21 4.18.0 lodash: lodash: Arbitrary code execution via untrusted input in template imports

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4800

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-03-31 20:16 修改: 2026-09-09 13:20
nanoid CVE-2026-67213 高危 3.3.12 3.3.18, 5.1.6 nanoid: nanoid: Denial of Service via infinite loop in random ID generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67213

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-29 14:16 修改: 2026-08-18 14:26
nanoid CVE-2026-67214 高危 3.3.12 3.3.16, 5.1.16 nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67214

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-29 14:16 修改: 2026-08-26 17:53
path-to-regexp CVE-2024-45296 高危 2.4.0 1.9.0, 0.1.10, 8.0.0, 3.3.0, 6.3.0 path-to-regexp: Backtracking regular expressions cause ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45296

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2024-09-09 19:15 修改: 2026-06-17 07:53
postcss CVE-2026-73646 高危 8.5.15 8.5.18 postcss: PostCSS: Information disclosure via path traversal in source map auto-loading

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73646

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-17 16:17 修改: 2026-08-17 17:16
tinymce CVE-2026-47759 高危 8.3.2 7.9.3, 8.5.1 TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47759

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:54
tinymce CVE-2026-47761 高危 8.3.2 7.9.3, 8.5.1 TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47761

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:54
tinymce CVE-2026-47762 高危 8.3.2 7.9.3, 8.5.1 TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47762

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:54
dompurify CVE-2026-65902 中危 2.5.9 3.4.7 dompurify: DOMPurify: Sanitization bypass via hook manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65902

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:51
dompurify CVE-2026-65903 中危 2.5.9 3.4.0 dompurify: DOMPurify: Security bypass allows injection of malicious content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65903

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:51
dompurify CVE-2026-65912 中危 2.5.9 3.3.2 dompurify: DOMPurify: URI validation bypass leads to cross-site scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65912

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:50
dompurify CVE-2026-65913 中危 2.5.9 3.3.2 dompurify: DOMPurify: Cross-Site Scripting (XSS) via prototype pollution in USE_PROFILES mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65913

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:50
dompurify CVE-2026-65914 中危 2.5.9 3.3.2 dompurify: DOMPurify: Cross-Site Scripting vulnerability allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65914

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:49
dompurify GHSA-55q2-fjhq-7xh7 中危 2.5.9 3.4.13 DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS

漏洞详情: https://github.com/advisories/GHSA-55q2-fjhq-7xh7

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-07 15:30 修改: 2026-08-07 15:30
dompurify CVE-2026-65898 中危 3.4.10 3.4.11 dompurify: DOMPurify: Cross-site scripting via permanent attribute allowlist pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65898

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:54
dompurify GHSA-55q2-fjhq-7xh7 中危 3.4.10 3.4.13 DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS

漏洞详情: https://github.com/advisories/GHSA-55q2-fjhq-7xh7

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-07 15:30 修改: 2026-08-07 15:30
dompurify GHSA-55q2-fjhq-7xh7 中危 3.4.11 3.4.13 DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS

漏洞详情: https://github.com/advisories/GHSA-55q2-fjhq-7xh7

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-07 15:30 修改: 2026-08-07 15:30
dompurify GHSA-55q2-fjhq-7xh7 中危 3.4.12 3.4.13 DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS

漏洞详情: https://github.com/advisories/GHSA-55q2-fjhq-7xh7

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-07 15:30 修改: 2026-08-07 15:30
dompurify CVE-2026-49458 中危 3.4.5 3.4.6 dompurify: DOMPurify: Cross-site scripting due to improper sanitization of DOM nodes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49458

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:47
dompurify CVE-2026-49459 中危 3.4.5 3.4.6 dompurify: DOMPurify: Cross-site scripting bypass allows arbitrary script execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49459

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:51
dompurify CVE-2026-49978 中危 3.4.5 3.4.7 dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49978

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:49
dompurify CVE-2026-65898 中危 3.4.5 3.4.11 dompurify: DOMPurify: Cross-site scripting via permanent attribute allowlist pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65898

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:54
dompurify CVE-2026-65902 中危 3.4.5 3.4.7 dompurify: DOMPurify: Sanitization bypass via hook manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65902

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:51
dompurify GHSA-55q2-fjhq-7xh7 中危 3.4.5 3.4.13 DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS

漏洞详情: https://github.com/advisories/GHSA-55q2-fjhq-7xh7

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-07 15:30 修改: 2026-08-07 15:30
dompurify CVE-2026-65898 中危 3.4.7 3.4.11 dompurify: DOMPurify: Cross-site scripting via permanent attribute allowlist pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65898

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:54
dompurify GHSA-55q2-fjhq-7xh7 中危 3.4.7 3.4.13 DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS

漏洞详情: https://github.com/advisories/GHSA-55q2-fjhq-7xh7

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-07 15:30 修改: 2026-08-07 15:30
@remix-run/router CVE-2026-40181 中危 1.23.2 1.23.3 react-router: React Router: Open redirect vulnerability via specially crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40181

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-02 20:16 修改: 2026-08-04 22:17
axios CVE-2026-67312 中危 1.16.0 0.33.0, 1.18.0 axios: axios: Denial of Service via uncontrolled recursion in form data processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67312

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:40
axios CVE-2026-67313 中危 1.16.0 0.33.0, 1.18.0 axios: axios: Denial of Service via uncontrolled recursion in formDataToJSON

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67313

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:40
axios CVE-2026-67314 中危 1.16.0 1.18.0 axios: axios: Outbound Request Tampering via Prototype Pollution in Basic Auth

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67314

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:40
axios CVE-2026-67315 中危 1.16.0 1.18.0, 0.33.0 axios: axios: NO_PROXY bypass allows exposure of local services

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67315

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:40
axios CVE-2026-67316 中危 1.16.0 1.18.0, 0.33.0 axios: axios: Prototype Pollution allows unauthorized data transmission and network redirection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67316

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:40
axios CVE-2026-67317 中危 1.16.0 1.18.0 axios: axios: Denial of Service via maxBodyLength bypass with ReadableStream

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67317

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:39
axios CVE-2026-67318 中危 1.16.0 1.18.0 axios: axios: Denial of Service due to maxBodyLength bypass in HTTP/2 requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67318

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:39
axios CVE-2026-67319 中危 1.16.0 0.33.0, 1.18.0 axios: axios: Information disclosure and data manipulation via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67319

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:39
axios CVE-2026-67321 中危 1.16.0 0.33.0, 1.18.0 axios: axios: Denial of Service via object serialization bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67321

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:38
baseline-browser-mapping CVE-2026-45819 中危 2.10.32 2.11.0 baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45819

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-13 12:17 修改: 2026-09-09 15:52
baseline-browser-mapping CVE-2026-45819 中危 2.10.33 2.11.0 baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45819

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-13 12:17 修改: 2026-09-09 15:52
baseline-browser-mapping CVE-2026-45819 中危 2.10.43 2.11.0 baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45819

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-13 12:17 修改: 2026-09-09 15:52
baseline-browser-mapping CVE-2026-45819 中危 2.8.28 2.11.0 baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45819

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-13 12:17 修改: 2026-09-09 15:52
baseline-browser-mapping CVE-2026-45819 中危 2.9.5 2.11.0 baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45819

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-13 12:17 修改: 2026-09-09 15:52
baseline-browser-mapping CVE-2026-45819 中危 2.9.8 2.11.0 baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45819

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-13 12:17 修改: 2026-09-09 15:52
@sentry/browser GHSA-593m-55hh-j8gv 中危 6.19.7 8.33.0, 7.119.1 Sentry SDK Prototype Pollution gadget in JavaScript SDKs

漏洞详情: https://github.com/advisories/GHSA-593m-55hh-j8gv

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2024-10-03 18:26 修改: 2024-10-04 16:32
js-yaml CVE-2026-53550 中危 3.14.2 4.2.0, 3.15.0 js-yaml: js-yaml: Denial of Service via crafted YAML merge keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53550

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-22 16:16 修改: 2026-07-09 20:33
ajv CVE-2025-69873 中危 6.12.6 8.18.0, 6.14.0 ajv: ReDoS via $data reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-02-11 19:15 修改: 2026-09-07 13:17
ajv CVE-2025-69873 中危 8.12.0 8.18.0, 6.14.0 ajv: ReDoS via $data reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-02-11 19:15 修改: 2026-09-07 13:17
ajv CVE-2025-69873 中危 8.17.1 8.18.0, 6.14.0 ajv: ReDoS via $data reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-02-11 19:15 修改: 2026-09-07 13:17
js-yaml CVE-2025-64718 中危 4.1.0 4.1.1, 3.14.2 js-yaml: js-yaml prototype pollution in merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64718

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2025-11-13 16:15 修改: 2026-06-17 09:55
js-yaml CVE-2026-53550 中危 4.1.0 4.2.0, 3.15.0 js-yaml: js-yaml: Denial of Service via crafted YAML merge keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53550

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-22 16:16 修改: 2026-07-09 20:33
decode-uri-component CVE-2026-45822 中危 0.2.2 0.5.0 decode-uri-component: decode-uri-component: Denial of Service via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45822

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-30 09:16 修改: 2026-06-30 14:33
lodash CVE-2025-13465 中危 4.17.21 4.17.23 lodash: prototype pollution in _.unset and _.omit functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13465

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-01-21 20:16 修改: 2026-09-09 13:17
lodash CVE-2026-2950 中危 4.17.21 4.18.0 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2950

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-03-31 20:16 修改: 2026-07-24 20:10
markdown-it CVE-2026-2327 中危 13.0.2 14.1.1 markdown-it: markdown-it: Denial of Service via Regular Expression Denial of Service in linkify function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2327

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-02-12 06:16 修改: 2026-06-17 10:30
markdown-it CVE-2026-48988 中危 13.0.2 14.2.0 markdown-it: markdown-it: Denial of Service via quadratic processing of smartquotes with typographer enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48988

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-17 21:16 修改: 2026-06-24 19:06
dompurify CVE-2025-26791 中危 2.5.9 3.2.4 dompurify: Mutation XSS in DOMPurify Due to Improper Template Literal Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26791

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2025-02-14 09:15 修改: 2026-06-17 09:02
dompurify CVE-2026-41239 中危 2.5.9 3.4.0 DOMPurify: Vue 2: DOMPurify: Cross-site scripting due to incomplete sanitization of template expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41239

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-04-23 16:16 修改: 2026-06-17 10:46
dompurify CVE-2026-41240 中危 2.5.9 3.4.0 DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41240

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-04-23 16:16 修改: 2026-06-17 10:46
dompurify CVE-2026-49458 中危 2.5.9 3.4.6 dompurify: DOMPurify: Cross-site scripting due to improper sanitization of DOM nodes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49458

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:47
postcss CVE-2026-69153 中危 8.5.15 8.5.23 postcss: PostCSS: Information disclosure via crafted sourceMappingURL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69153

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
prismjs CVE-2024-53382 中危 1.27.0 1.30.0 prismjs: DOM Clobbering vulnerability within the Prism library's prism-autoloader plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53382

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2025-03-03 07:15 修改: 2026-06-17 08:08
qs CVE-2026-82417 中危 6.15.0 6.16.0 qs: qs: Denial of Service via improper validation in stringify function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82417

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-30 00:16 修改: 2026-09-03 18:00
qs CVE-2026-82562 中危 6.15.0 6.16.0 qs: qs: Denial of Service via array limit bypass in query string parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82562

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-30 01:20 修改: 2026-09-03 18:00
qs CVE-2026-8723 中危 6.15.0 6.15.2 qs: qs: Denial of Service due to improper handling of null/undefined array elements

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2026-82417 中危 6.15.2 6.16.0 qs: qs: Denial of Service via improper validation in stringify function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82417

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-30 00:16 修改: 2026-09-03 18:00
qs CVE-2026-82562 中危 6.15.2 6.16.0 qs: qs: Denial of Service via array limit bypass in query string parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82562

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-08-30 01:20 修改: 2026-09-03 18:00
react-router CVE-2026-53666 中危 6.30.4 7.18.0 react-router: React Router: Information disclosure via client-side constructor execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53666

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-27 22:17 修改: 2026-08-03 14:04
react-router CVE-2026-53669 中危 6.30.4 7.18.0 react-router: React Router: Open Redirect vulnerability via backslashes in navigation components

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53669

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-27 22:17 修改: 2026-08-03 13:56
react-router-dom CVE-2026-53668 中危 6.30.4 6.30.6 react-router: react-router-dom: React Router: Cross-Site Scripting (XSS) via open redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53668

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-27 22:17 修改: 2026-08-03 14:13
select2 CVE-2016-10744 中危 3.5.4 4.0.6 select2: XSS due to missing sanitization when HTML templates are used to display remotely-loaded data.

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10744

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2019-03-27 04:29 修改: 2026-06-17 00:40
dompurify CVE-2026-49459 中危 2.5.9 3.4.6 dompurify: DOMPurify: Cross-site scripting bypass allows arbitrary script execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49459

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:51
dompurify CVE-2026-49978 中危 2.5.9 3.4.7 dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49978

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:49
dompurify CVE-2026-65898 中危 2.5.9 3.4.11 dompurify: DOMPurify: Cross-site scripting via permanent attribute allowlist pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65898

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:54
uuid CVE-2026-41907 中危 3.4.0 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
valibot CVE-2026-59952 中危 1.2.0 1.4.2 Valibot: record() issue paths can make flatten() throw for inherited Object property names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59952

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-30 01:17 修改: 2026-07-30 20:07
dompurify CVE-2026-65900 低危 3.4.5 3.4.8 dompurify: DOMPurify: Template expression injection allows information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65900

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:52
dompurify CVE-2026-65901 低危 3.4.5 dompurify: DOMPurify: Cross-site scripting vulnerability via attacker-controlled nodeName

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65901

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:52
dompurify GHSA-c2j3-45gr-mqc4 低危 3.4.5 3.4.12 DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

漏洞详情: https://github.com/advisories/GHSA-c2j3-45gr-mqc4

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 19:41 修改: 2026-07-21 19:41
@babel/core CVE-2026-49356 低危 7.20.12 8.0.0-rc.6, 7.29.6 @babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49356

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
dompurify GHSA-c2j3-45gr-mqc4 低危 3.4.10 3.4.12 DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

漏洞详情: https://github.com/advisories/GHSA-c2j3-45gr-mqc4

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 19:41 修改: 2026-07-21 19:41
dompurify CVE-2026-65899 低危 3.4.7 3.4.9 dompurify: DOMPurify: Client-side arbitrary code execution due to improper Trusted Types policy reset

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65899

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:53
dompurify CVE-2026-65900 低危 3.4.7 3.4.8 dompurify: DOMPurify: Template expression injection allows information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65900

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:52
dompurify GHSA-c2j3-45gr-mqc4 低危 3.4.7 3.4.12 DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

漏洞详情: https://github.com/advisories/GHSA-c2j3-45gr-mqc4

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 19:41 修改: 2026-07-21 19:41
elliptic CVE-2025-14505 低危 6.6.1 elliptic: Key handling flaws in Elliptic

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14505

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-01-08 21:15 修改: 2026-06-17 08:36
@babel/core CVE-2026-49356 低危 7.22.20 8.0.0-rc.6, 7.29.6 @babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49356

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
dompurify GHSA-c2j3-45gr-mqc4 低危 3.4.11 3.4.12 DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

漏洞详情: https://github.com/advisories/GHSA-c2j3-45gr-mqc4

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 19:41 修改: 2026-07-21 19:41
@babel/core CVE-2026-49356 低危 7.24.9 8.0.0-rc.6, 7.29.6 @babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49356

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
@babel/core CVE-2026-49356 低危 7.28.0 8.0.0-rc.6, 7.29.6 @babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49356

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
@babel/core CVE-2026-49356 低危 7.28.3 8.0.0-rc.6, 7.29.6 @babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49356

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
dompurify CVE-2026-65899 低危 2.5.9 3.4.9 dompurify: DOMPurify: Client-side arbitrary code execution due to improper Trusted Types policy reset

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65899

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:53
dompurify CVE-2026-65901 低危 2.5.9 dompurify: DOMPurify: Cross-site scripting vulnerability via attacker-controlled nodeName

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65901

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:52
dompurify GHSA-c2j3-45gr-mqc4 低危 2.5.9 3.4.12 DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

漏洞详情: https://github.com/advisories/GHSA-c2j3-45gr-mqc4

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-21 19:41 修改: 2026-07-21 19:41
@babel/core CVE-2026-49356 低危 7.28.6 8.0.0-rc.6, 7.29.6 @babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49356

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
dompurify CVE-2026-65899 低危 3.4.5 3.4.9 dompurify: DOMPurify: Client-side arbitrary code execution due to improper Trusted Types policy reset

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65899

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:53
webpack CVE-2025-68157 低危 5.101.3 5.104.0 webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68157

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-02-05 23:15 修改: 2026-06-17 09:58
webpack CVE-2025-68458 低危 5.101.3 5.104.1 webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68458

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-02-05 23:15 修改: 2026-06-17 09:59
webpack CVE-2025-68157 低危 5.103.0 5.104.0 webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68157

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-02-05 23:15 修改: 2026-06-17 09:58
webpack CVE-2025-68458 低危 5.103.0 5.104.1 webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68458

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-02-05 23:15 修改: 2026-06-17 09:59
webpack CVE-2025-68157 低危 5.97.1 5.104.0 webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68157

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-02-05 23:15 修改: 2026-06-17 09:58
webpack CVE-2025-68458 低危 5.97.1 5.104.1 webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68458

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-02-05 23:15 修改: 2026-06-17 09:59
webpack CVE-2025-68157 低危 5.98.0 5.104.0 webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68157

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-02-05 23:15 修改: 2026-06-17 09:58
webpack CVE-2025-68458 低危 5.98.0 5.104.1 webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68458

镜像层: sha256:8dae5e55e77780d67abab6f4bdae9f46d826a54a1a8585d77635818375570c90

发布日期: 2026-02-05 23:15 修改: 2026-06-17 09:59
Python (python-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×