docker.io/camunda/web-modeler-restapi:8.6.0 linux/amd64

docker.io/camunda/web-modeler-restapi:8.6.0 - Trivy安全扫描结果 扫描时间: 2026-09-15 21:19
全部漏洞信息
低危漏洞:37 中危漏洞:88 高危漏洞:63 严重漏洞:8

系统OS: alpine 3.20.3 扫描引擎: Trivy 扫描时间: 2026-09-15 21:19

docker.io/camunda/web-modeler-restapi:8.6.0 (alpine 3.20.3) (alpine)
低危漏洞:23 中危漏洞:14 高危漏洞:19 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto3 CVE-2026-31789 严重 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-31789 严重 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2025-15467 高危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17
libcrypto3 CVE-2025-69421 高危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2026-28387 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28388 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28389 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28390 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2024-12797 高危 3.3.2-r0 3.3.3-r0 openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12797

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-02-11 16:15 修改: 2026-06-17 07:00
libssl3 CVE-2024-12797 高危 3.3.2-r0 3.3.3-r0 openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12797

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-02-11 16:15 修改: 2026-06-17 07:00
libssl3 CVE-2025-15467 高危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17
libssl3 CVE-2025-69421 高危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2026-28387 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28388 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28389 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28390 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
musl CVE-2025-26519 高危 1.2.5-r0 1.2.5-r1 musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26519

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-02-14 04:15 修改: 2026-06-17 09:01
musl CVE-2026-40200 高危 1.2.5-r0 1.2.5-r3 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
musl-utils CVE-2025-26519 高危 1.2.5-r0 1.2.5-r1 musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26519

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-02-14 04:15 修改: 2026-06-17 09:01
musl-utils CVE-2026-40200 高危 1.2.5-r0 1.2.5-r3 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
zlib CVE-2026-22184 高危 1.3.1-r1 1.3.2-r0 zlib: zlib: Arbitrary code execution via buffer overflow in untgz utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22184

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-07 21:16 修改: 2026-09-01 13:18
busybox-binsh CVE-2024-58251 中危 1.36.1-r29 1.36.1-r31 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
libssl3 CVE-2025-69419 中危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-9230 中危 3.3.2-r0 3.3.5-r0 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2025-9231 中危 3.3.2-r0 3.3.5-r0 openssl: Timing side-channel in SM2 algorithm on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2026-31790 中危 3.3.2-r0 3.3.7-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2025-69419 中危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2025-9230 中危 3.3.2-r0 3.3.5-r0 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
musl CVE-2026-6042 中危 1.2.5-r0 1.2.5-r2 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
libcrypto3 CVE-2025-9231 中危 3.3.2-r0 3.3.5-r0 openssl: Timing side-channel in SM2 algorithm on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libcrypto3 CVE-2026-31790 中危 3.3.2-r0 3.3.7-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
musl-utils CVE-2026-6042 中危 1.2.5-r0 1.2.5-r2 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
ssl_client CVE-2024-58251 中危 1.36.1-r29 1.36.1-r31 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
busybox CVE-2024-58251 中危 1.36.1-r29 1.36.1-r31 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
zlib CVE-2026-27171 中危 1.3.1-r1 1.3.2-r0 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
libcrypto3 CVE-2025-9232 低危 3.3.2-r0 3.3.5-r0 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libcrypto3 CVE-2026-22795 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libcrypto3 CVE-2026-22796 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl3 CVE-2024-13176 低危 3.3.2-r0 3.3.2-r2 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01
libssl3 CVE-2024-9143 低危 3.3.2-r0 3.3.2-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24
libssl3 CVE-2025-15468 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
libssl3 CVE-2025-66199 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
libssl3 CVE-2025-68160 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libssl3 CVE-2025-69418 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-69420 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-9232 低危 3.3.2-r0 3.3.5-r0 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2026-22795 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl3 CVE-2026-22796 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
busybox CVE-2025-46394 低危 1.36.1-r29 1.36.1-r31 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
busybox-binsh CVE-2025-46394 低危 1.36.1-r29 1.36.1-r31 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
libcrypto3 CVE-2024-13176 低危 3.3.2-r0 3.3.2-r2 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01
libcrypto3 CVE-2024-9143 低危 3.3.2-r0 3.3.2-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24
libcrypto3 CVE-2025-15468 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
libcrypto3 CVE-2025-66199 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
libcrypto3 CVE-2025-68160 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
ssl_client CVE-2025-46394 低危 1.36.1-r29 1.36.1-r31 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
libcrypto3 CVE-2025-69418 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2025-69420 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
Java (jar)
低危漏洞:14 中危漏洞:74 高危漏洞:44 严重漏洞:6
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
io.netty:netty-handler CVE-2026-75595 严重 4.1.113.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75595

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
io.undertow:undertow-core CVE-2025-12543 严重 2.3.17.Final 2.3.21.Final, 2.2.39.Final undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12543

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-01-07 17:15 修改: 2026-09-07 13:17
org.asynchttpclient:async-http-client CVE-2024-53990 严重 2.12.3 2.12.4, 3.0.1 async-http-client: AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53990

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2024-12-02 18:15 修改: 2026-06-17 08:09
org.bouncycastle:bcprov-jdk18on CVE-2025-14813 严重 1.78.1 1.80.2, 1.81.1, 1.84 bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14813

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-15 10:16 修改: 2026-09-11 13:16
org.springframework.security:spring-security-web CVE-2024-38821 严重 6.3.3 5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4 Spring-WebFlux: Authorization Bypass of Static Resources in WebFlux Applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38821

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2024-10-28 07:15 修改: 2026-06-17 07:41
org.springframework.security:spring-security-web CVE-2026-22732 严重 6.3.3 6.5.9, 7.0.4 Spring Security: Spring Security: Security policy bypass and information disclosure due to unwritten HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22732

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-03-19 23:16 修改: 2026-06-17 10:20
io.netty:netty-codec-dns CVE-2026-42579 高危 4.1.113.Final 4.2.13.Final, 4.1.133.Final netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-05-13 19:17 修改: 2026-09-09 13:20
io.netty:netty-codec-http CVE-2026-33870 高危 4.1.113.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-03-27 20:16 修改: 2026-09-14 13:18
io.netty:netty-codec-http CVE-2026-42584 高危 4.1.113.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
io.netty:netty-codec-http CVE-2026-42587 高危 4.1.113.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
io.netty:netty-codec-http CVE-2026-55831 高危 4.1.113.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http CVE-2026-55833 高危 4.1.113.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http CVE-2026-56745 高危 4.1.113.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2 CVE-2025-55163 高危 4.1.113.Final 4.2.4.Final, 4.1.124.Final netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2 CVE-2026-33871 高危 4.1.113.Final 4.1.132.Final, 4.2.11.Final netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-03-27 20:16 修改: 2026-09-14 13:18
io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.113.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
io.netty:netty-codec-http2 CVE-2026-56819 高危 4.1.113.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.17.2 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
io.netty:netty-handler CVE-2025-24970 高危 4.1.113.Final 4.1.118.Final io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24970

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-02-10 22:15 修改: 2026-06-17 08:59
io.netty:netty-handler CVE-2026-44249 高危 4.1.113.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-11 22:16 修改: 2026-09-11 13:18
io.netty:netty-handler CVE-2026-45416 高危 4.1.113.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-12 15:16 修改: 2026-09-11 13:18
io.netty:netty-handler CVE-2026-50010 高危 4.1.113.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-12 16:16 修改: 2026-09-11 13:18
io.netty:netty-resolver-dns CVE-2026-45674 高危 4.1.113.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-12 15:16 修改: 2026-09-09 13:20
io.netty:netty-resolver-dns CVE-2026-47691 高危 4.1.113.Final 4.2.15.Final, 4.1.135.Final io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-12 16:16 修改: 2026-09-09 13:20
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.17.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
io.undertow:undertow-core CVE-2024-3884 高危 2.3.17.Final 2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final undertow: OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3884

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-12-03 19:15 修改: 2026-09-04 20:17
io.undertow:undertow-core CVE-2024-4027 高危 2.3.17.Final 2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final undertow: OutOfMemoryError in HttpServletRequestImpl.getParameterNames() can cause remote DoS attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4027

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-01-30 15:16 修改: 2026-09-01 13:17
io.undertow:undertow-core CVE-2025-9784 高危 2.3.17.Final 2.2.38.Final, 2.3.20.Final undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9784

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-09-02 14:15 修改: 2026-09-04 20:17
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.2.5 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.2.5 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.17.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-23 21:17 修改: 2026-09-14 13:18
org.asynchttpclient:async-http-client CVE-2026-45300 高危 2.12.3 3.0.10, 2.15.0 async-http-client: Cookie header not stripped on cross-origin redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45300

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-05 20:17 修改: 2026-07-23 07:10
io.micrometer:micrometer-core CVE-2026-40984 高危 1.13.4 1.16.6, 1.15.12 micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-09-14 13:18
org.postgresql:postgresql CVE-2025-49146 高危 42.7.4 42.7.7 pgjdbc: pgjdbc insecure authentication in channel binding

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49146

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-06-11 15:15 修改: 2026-06-17 09:30
org.postgresql:postgresql CVE-2026-42198 高危 42.7.4 42.7.11 jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-29 16:16 修改: 2026-09-11 13:17
org.postgresql:postgresql CVE-2026-54291 高危 42.7.4 42.7.12 org.postgresql/postgresql: com.ongres.scram/scram-client: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54291

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-06 19:17 修改: 2026-07-09 13:16
org.springframework.boot:spring-boot CVE-2025-22235 高危 3.3.4 3.3.11, 3.4.5 org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45
org.springframework.boot:spring-boot CVE-2026-40973 高危 3.3.4 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-28 00:16 修改: 2026-07-24 21:10
org.springframework.data:spring-data-commons CVE-2026-41716 高危 3.3.4 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service due to cache exhaustion via attacker-supplied strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41716

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.security:spring-security-crypto CVE-2025-22228 高危 6.3.3 6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16 spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22228

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-03-20 06:15 修改: 2026-06-17 08:45
io.netty:netty-codec CVE-2026-42583 高危 4.1.113.Final 4.1.133.Final netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec CVE-2026-59901 高危 4.1.113.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
org.springframework:spring-core CVE-2025-41249 高危 6.1.13 6.2.11 org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41249

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-09-16 11:15 修改: 2026-06-17 09:22
org.springframework:spring-expression CVE-2026-41850 高危 6.1.13 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41850

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webflux CVE-2024-38819 高危 6.1.13 6.1.14 org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41
org.springframework:spring-webflux CVE-2026-41842 高危 6.1.13 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service when resolving static resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2024-38819 高危 6.1.13 6.1.14 org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41
org.springframework:spring-webmvc CVE-2026-41842 高危 6.1.13 7.0.8, 6.2.19 spring-framework: Spring Framework: Denial of Service when resolving static resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41842

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41845 高危 6.1.13 7.0.8, 6.2.19 org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41845

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
software.amazon.jdbc:aws-advanced-jdbc-wrapper GHSA-7xw4-g7mm-r4hh 高危 2.4.0 2.6.5 Amazon Web Services Advanced JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance

漏洞详情: https://github.com/advisories/GHSA-7xw4-g7mm-r4hh

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-11-13 22:22 修改: 2025-11-13 22:22
io.netty:netty-codec-http CVE-2026-41417 中危 4.1.113.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-resolver-dns CVE-2026-45673 中危 4.1.113.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.113.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-kqueue CVE-2026-45536 中危 4.1.113.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.projectreactor.netty:reactor-netty-http CVE-2025-22227 中危 1.1.22 1.3.0-M5, 1.2.8 io.projectreactor.netty/reactor-netty: Reactor Netty Credential Leak via Redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22227

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-07-16 10:15 修改: 2026-06-17 08:45
io.netty:netty-codec-http CVE-2026-42580 中危 4.1.113.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http CVE-2026-42581 中危 4.1.113.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
io.netty:netty-codec-http CVE-2026-42585 中危 4.1.113.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http CVE-2026-50020 中危 4.1.113.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.14.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.3.1 5.6.3 org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
io.netty:netty-codec-http CVE-2026-56746 中危 4.1.113.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http CVE-2026-59898 中危 4.1.113.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.23.1 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.23.1 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.23.1 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34478 中危 2.23.1 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34478

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.23.1 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
io.netty:netty-codec-http CVE-2026-59899 中危 4.1.113.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.113.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-08-17 18:17 修改: 2026-09-10 20:43
org.asynchttpclient:async-http-client CVE-2026-40490 中危 2.12.3 3.0.9, 2.14.5 async-http-client: AsyncHttpClient: Credential leakage via improper handling of authorization headers during redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40490

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-18 02:16 修改: 2026-06-17 10:45
org.asynchttpclient:async-http-client CVE-2026-55688 中危 2.12.3 3.0.11, 2.16.0 async-http-client: AsyncHttpClient: Cookie injection allows planting cookies for unrelated domains

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55688

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-01 20:17 修改: 2026-08-06 22:17
org.bouncycastle:bcpkix-jdk18on CVE-2025-8916 中危 1.78.1 1.79 org.bouncycastle: BouncyCastle denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8916

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-08-13 10:15 修改: 2026-06-17 10:07
org.bouncycastle:bcpkix-jdk18on CVE-2026-5588 中危 1.78.1 1.84 bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-15 10:16 修改: 2026-09-11 13:18
io.netty:netty-codec-http CVE-2026-59921 中危 4.1.113.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
org.bouncycastle:bcprov-jdk18on CVE-2026-0636 中危 1.78.1 1.84 bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-15 10:16 修改: 2026-09-11 13:17
org.eclipse.angus:smtp CVE-2025-7962 中危 2.0.3 2.0.4 com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7962

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-07-21 18:15 修改: 2026-06-23 12:16
org.jsoup:jsoup CVE-2026-71497 中危 1.18.1 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-08-06 22:18 修改: 2026-09-10 20:41
io.netty:netty-codec CVE-2025-58057 中危 4.1.113.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.17.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
io.netty:netty-codec-dns CVE-2026-73508 中危 4.1.113.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-08-13 15:20 修改: 2026-09-09 20:58
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.17.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.113.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
org.springframework.boot:spring-boot-autoconfigure CVE-2026-41001 中危 3.3.4 4.0.7, 3.5.15 spring-boot: Spring Boot: Local attacker can manipulate data directory due to predictable path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41001

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-11 07:16 修改: 2026-09-04 18:13
io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.113.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-12 16:16 修改: 2026-09-11 13:18
org.springframework.data:spring-data-commons CVE-2026-41711 中危 3.3.4 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via parsing Sort parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41711

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.data:spring-data-commons CVE-2026-41721 中危 3.3.4 4.0.6, 3.5.12 Spring Data Commons: Spring Data Commons: Denial of Service via specially crafted HTTP request with @ProjectedPayload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41721

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.retry:spring-retry CVE-2026-41710 中危 2.0.9 2.0.13 spring-retry: Spring Retry: Denial of Service via cache exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41710

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-09-04 20:03
org.springframework.security:spring-security-core CVE-2024-38827 中危 6.3.3 5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5 spring-security: authorization bypass for case sensitive comparisons

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2024-12-02 15:15 修改: 2026-06-17 07:41
io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.113.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
org.springframework.security:spring-security-oauth2-jose CVE-2026-22748 中危 6.3.3 6.5.10, 7.0.5 Spring Security: Spring Security: Integrity impact due to improper JSON Web Token (JWT) validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22748

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-22 06:16 修改: 2026-06-17 10:20
io.netty:netty-codec-http2 CVE-2026-59900 中危 4.1.113.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-common CVE-2024-47535 中危 4.1.113.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
org.springframework.security:spring-security-web CVE-2026-41706 中危 6.3.3 7.0.6, 6.5.11 Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41706

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework.security:spring-security-web CVE-2026-47838 中危 6.3.3 6.5.11 Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47838

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-10 00:16 修改: 2026-07-23 09:10
org.springframework:spring-context CVE-2024-38820 中危 6.1.13 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
io.netty:netty-common CVE-2025-25193 中危 4.1.113.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.17.2 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
org.springframework:spring-expression CVE-2026-41851 中危 6.1.13 7.0.8, 6.2.19 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41851

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-web CVE-2024-38820 中危 6.1.13 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
org.springframework:spring-web CVE-2025-41234 中危 6.1.13 6.2.8, 6.1.21 springframework: Reflected download attack in Spring Framework with non-ASCII headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41234

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-06-12 22:15 修改: 2026-06-17 09:22
com.nimbusds:nimbus-jose-jwt CVE-2025-53864 中危 9.41.1 10.0.2, 9.37.4 com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.fasterxml.jackson.core:jackson-core CVE-2026-18401 中危 2.17.2 2.21.1, 2.18.6 tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18401

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-08-04 15:16 修改: 2026-09-08 19:29
org.springframework:spring-webflux CVE-2026-22737 中危 6.1.13 7.0.6, 6.2.17 Spring Framework: Spring Framework: Information disclosure via Java scripting engine enabled template views

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22737

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
org.springframework:spring-webflux CVE-2026-22740 中危 6.1.13 7.0.7, 6.2.18 spring-webflux: Spring WebFlux: Denial of Service via temporary file accumulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22740

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.springframework:spring-webflux CVE-2026-22745 中危 6.1.13 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.springframework:spring-webflux CVE-2026-41839 中危 6.1.13 7.0.8, 6.2.19 spring-framework: Spring Framework: Privilege escalation via session ID exchange in WebFlux applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41839

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webflux CVE-2026-41840 中危 6.1.13 7.0.8, 6.2.19 Spring Framework: Spring WebFlux: Denial of Service via multipart request processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41840

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webflux CVE-2026-41841 中危 6.1.13 7.0.8, 6.2.19 Spring MVC and WebFlux applications are vulnerable to Information Disc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webflux CVE-2026-41843 中危 6.1.13 7.0.8, 6.2.19 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webflux CVE-2026-41844 中危 6.1.13 7.0.8, 6.2.19 Spring Framework: Spring Framework: Open Redirect via crafted link

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webflux CVE-2026-41853 中危 6.1.13 7.0.8, 6.2.19 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
ch.qos.logback:logback-core CVE-2025-11226 中危 1.5.8 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
ch.qos.logback:logback-core CVE-2024-12798 中危 1.5.8 1.5.13, 1.3.15 logback-core: arbitrary code execution via JaninoEventEvaluator

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00
io.netty:netty-handler CVE-2026-75596 中危 4.1.113.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75596

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-08-19 21:17 修改: 2026-09-09 21:19
org.springframework:spring-webmvc CVE-2025-41242 中危 6.1.13 6.2.10 org.springframework/spring-webmvc: Spring Framework MVC path traversal vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41242

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-08-18 09:15 修改: 2026-06-17 09:22
org.springframework:spring-webmvc CVE-2026-22737 中危 6.1.13 7.0.6, 6.2.17 Spring Framework: Spring Framework: Information disclosure via Java scripting engine enabled template views

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22737

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc CVE-2026-22745 中危 6.1.13 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc CVE-2026-41841 中危 6.1.13 7.0.8, 6.2.19 Spring MVC and WebFlux applications are vulnerable to Information Disc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41841

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41843 中危 6.1.13 7.0.8, 6.2.19 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41843

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41844 中危 6.1.13 7.0.8, 6.2.19 Spring Framework: Spring Framework: Open Redirect via crafted link

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41844

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41846 中危 6.1.13 7.0.8, 6.2.19 Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41846

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
org.springframework:spring-webmvc CVE-2026-41853 中危 6.1.13 7.0.8, 6.2.19 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41853

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
io.netty:netty-codec-http CVE-2025-67735 中危 4.1.113.Final 4.2.8.Final, 4.1.129.Final netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
org.springframework.security:spring-security-core CVE-2026-22746 低危 6.3.3 6.5.10, 7.0.5 Spring Security: Spring Security: Timing attack defense bypass allows information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22746

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-22 06:16 修改: 2026-06-17 10:20
org.springframework:spring-context CVE-2025-22233 低危 6.1.13 6.2.7, 6.1.20 CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45
ch.qos.logback:logback-core CVE-2026-9828 低危 1.5.8 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
org.springframework:spring-core CVE-2026-41848 低危 6.1.13 7.0.8, 6.2.19 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41848

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
io.netty:netty-handler-proxy CVE-2026-42578 低危 4.1.113.Final 4.1.133.Final, 4.2.13.Final netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-05-13 19:17 修改: 2026-09-11 13:18
ch.qos.logback:logback-core CVE-2024-12801 低危 1.5.8 1.5.13, 1.3.15 logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00
org.springframework:spring-expression CVE-2026-41852 低危 6.1.13 7.0.8, 6.2.19 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41852

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-09 05:16 修改: 2026-07-23 08:10
ch.qos.logback:logback-core CVE-2026-10532 低危 1.5.8 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
ch.qos.logback:logback-core CVE-2026-1225 低危 1.5.8 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15
io.netty:netty-codec-http CVE-2025-58056 低危 4.1.113.Final 4.1.125.Final, 4.2.5.Final netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
org.springframework:spring-webflux CVE-2026-22735 低危 6.1.13 7.0.6, 6.2.17 org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring MVC and WebFlux: Stream corruption vulnerability when using Server-Sent Events

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22735

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc CVE-2026-22735 低危 6.1.13 7.0.6, 6.2.17 org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring MVC and WebFlux: Stream corruption vulnerability when using Server-Sent Events

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22735

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc CVE-2026-22741 低危 6.1.13 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
org.springframework:spring-webflux CVE-2026-22741 低危 6.1.13 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:e046c6b3602f7e674b6b53286d0456d7e6bfd9d56254964f8cbb0b0b472237a6

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×