docker.io/camunda/web-modeler-webapp:8.6.0 linux/amd64

docker.io/camunda/web-modeler-webapp:8.6.0 - Trivy安全扫描结果 扫描时间: 2026-09-15 21:23
全部漏洞信息
低危漏洞:38 中危漏洞:84 高危漏洞:81 严重漏洞:7

系统OS: alpine 3.20.3 扫描引擎: Trivy 扫描时间: 2026-09-15 21:23

docker.io/camunda/web-modeler-webapp:8.6.0 (alpine 3.20.3) (alpine)
低危漏洞:23 中危漏洞:14 高危漏洞:19 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto3 CVE-2026-31789 严重 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-31789 严重 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2025-15467 高危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17
libcrypto3 CVE-2025-69421 高危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2026-28387 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28388 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28389 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28390 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2024-12797 高危 3.3.2-r0 3.3.3-r0 openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12797

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-02-11 16:15 修改: 2026-06-17 07:00
libssl3 CVE-2024-12797 高危 3.3.2-r0 3.3.3-r0 openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12797

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-02-11 16:15 修改: 2026-06-17 07:00
libssl3 CVE-2025-15467 高危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17
libssl3 CVE-2025-69421 高危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2026-28387 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28388 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28389 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28390 高危 3.3.2-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
musl CVE-2025-26519 高危 1.2.5-r0 1.2.5-r1 musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26519

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-02-14 04:15 修改: 2026-06-17 09:01
musl CVE-2026-40200 高危 1.2.5-r0 1.2.5-r3 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
musl-utils CVE-2025-26519 高危 1.2.5-r0 1.2.5-r1 musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26519

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-02-14 04:15 修改: 2026-06-17 09:01
musl-utils CVE-2026-40200 高危 1.2.5-r0 1.2.5-r3 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
zlib CVE-2026-22184 高危 1.3.1-r1 1.3.2-r0 zlib: zlib: Arbitrary code execution via buffer overflow in untgz utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22184

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-07 21:16 修改: 2026-09-01 13:18
busybox-binsh CVE-2024-58251 中危 1.36.1-r29 1.36.1-r31 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
libssl3 CVE-2025-69419 中危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-9230 中危 3.3.2-r0 3.3.5-r0 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2025-9231 中危 3.3.2-r0 3.3.5-r0 openssl: Timing side-channel in SM2 algorithm on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2026-31790 中危 3.3.2-r0 3.3.7-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2025-69419 中危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2025-9230 中危 3.3.2-r0 3.3.5-r0 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
musl CVE-2026-6042 中危 1.2.5-r0 1.2.5-r2 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
libcrypto3 CVE-2025-9231 中危 3.3.2-r0 3.3.5-r0 openssl: Timing side-channel in SM2 algorithm on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libcrypto3 CVE-2026-31790 中危 3.3.2-r0 3.3.7-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
musl-utils CVE-2026-6042 中危 1.2.5-r0 1.2.5-r2 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
ssl_client CVE-2024-58251 中危 1.36.1-r29 1.36.1-r31 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
busybox CVE-2024-58251 中危 1.36.1-r29 1.36.1-r31 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
zlib CVE-2026-27171 中危 1.3.1-r1 1.3.2-r0 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
libcrypto3 CVE-2025-9232 低危 3.3.2-r0 3.3.5-r0 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libcrypto3 CVE-2026-22795 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libcrypto3 CVE-2026-22796 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl3 CVE-2024-13176 低危 3.3.2-r0 3.3.2-r2 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01
libssl3 CVE-2024-9143 低危 3.3.2-r0 3.3.2-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24
libssl3 CVE-2025-15468 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
libssl3 CVE-2025-66199 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
libssl3 CVE-2025-68160 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libssl3 CVE-2025-69418 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-69420 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-9232 低危 3.3.2-r0 3.3.5-r0 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2026-22795 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl3 CVE-2026-22796 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
busybox CVE-2025-46394 低危 1.36.1-r29 1.36.1-r31 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
busybox-binsh CVE-2025-46394 低危 1.36.1-r29 1.36.1-r31 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
libcrypto3 CVE-2024-13176 低危 3.3.2-r0 3.3.2-r2 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01
libcrypto3 CVE-2024-9143 低危 3.3.2-r0 3.3.2-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24
libcrypto3 CVE-2025-15468 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
libcrypto3 CVE-2025-66199 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
libcrypto3 CVE-2025-68160 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
ssl_client CVE-2025-46394 低危 1.36.1-r29 1.36.1-r31 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
libcrypto3 CVE-2025-69418 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2025-69420 低危 3.3.2-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
Node.js (node-pkg)
低危漏洞:15 中危漏洞:70 高危漏洞:62 严重漏洞:5
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
fast-xml-parser CVE-2026-25896 严重 4.4.1 5.3.5, 4.5.4 fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25896

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-02-20 21:19 修改: 2026-09-10 13:17
form-data CVE-2025-7783 严重 4.0.0 2.5.4, 3.0.4, 4.0.4 form-data: Unsafe random function in form-data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7783

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-07-18 17:15 修改: 2026-06-17 10:05
koa CVE-2025-25200 严重 2.15.3 2.15.4, 3.0.0-alpha.3, 1.7.1, 0.21.2 Inefficient Regular Expression Complexity in koa

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25200

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-02-12 18:15 修改: 2026-06-17 09:00
protobufjs CVE-2026-41242 严重 7.3.2 8.0.1, 7.5.5 protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41242

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-18 17:16 修改: 2026-09-09 13:19
tar CVE-2026-59873 严重 6.2.1 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
axios CVE-2026-42033 高危 1.7.7 1.15.1, 0.31.1 axios: Axios: HTTP Transport Hijacking via Prototype Pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42033

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 18:16 修改: 2026-09-10 13:20
axios CVE-2026-42035 高危 1.7.7 1.15.1, 0.31.1 axios: Axios: Arbitrary HTTP header injection via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42035

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42043 高危 1.7.7 1.15.1, 0.31.1 axios: Axios: NO_PROXY bypass via crafted URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42043

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 18:16 修改: 2026-09-10 13:20
axios CVE-2026-42264 高危 1.7.7 1.15.2 axios: Axios: Prototype pollution allows information disclosure and request manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42264

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-05-08 04:16 修改: 2026-09-11 13:17
axios CVE-2026-44486 高危 1.7.7 1.16.0, 0.32.0 axios: Axios: Information disclosure of proxy credentials via HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44486

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-11 17:16 修改: 2026-09-11 13:18
axios CVE-2026-44487 高危 1.7.7 1.16.0, 0.32.0 axios: Axios: Information disclosure of proxy credentials via redirect flows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44487

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-11 17:16 修改: 2026-09-11 13:18
axios CVE-2026-44488 高危 1.7.7 1.16.0 axios: Axios: Denial of Service due to unenforced request and response size limits

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44488

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-11 17:16 修改: 2026-09-11 13:18
axios CVE-2026-44494 高危 1.7.7 1.16.0 axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44494

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-11 17:16 修改: 2026-09-11 13:18
axios CVE-2026-44495 高危 1.7.7 1.15.2, 0.31.1 axios: Axios: Information disclosure due to prototype pollution vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44495

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-11 17:16 修改: 2026-09-11 13:18
axios CVE-2026-44496 高危 1.7.7 1.16.0, 0.32.0 axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44496

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-11 17:16 修改: 2026-09-11 13:18
brace-expansion CVE-2026-13149 高危 2.0.1 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 2.0.1 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-69152 高危 2.0.1 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
canvg CVE-2025-25977 高危 4.0.2 4.0.3, 3.0.11 canvg: Prototype Pollution Vulneralbility

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25977

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-03-10 16:15 修改: 2026-06-17 09:01
cross-spawn CVE-2024-21538 高危 7.0.3 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2024-11-08 05:15 修改: 2026-07-28 16:17
@grpc/grpc-js CVE-2026-48068 高危 1.10.9 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4 grpc-js: @grpc/grpc-js: Server crash via malformed HTTP/2 stream initiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48068

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-14 20:17 修改: 2026-07-21 16:17
fast-xml-parser CVE-2026-26278 高危 4.4.1 4.5.4, 5.3.6 fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26278

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-02-19 20:25 修改: 2026-09-10 13:17
fast-xml-parser CVE-2026-33036 高危 4.4.1 5.5.6, 4.5.5 fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33036

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-20 06:16 修改: 2026-06-17 10:36
@grpc/grpc-js CVE-2026-48069 高危 1.10.9 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4 grpc-js: @grpc/grpc-js: Client or server crash via malformed compressed message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48069

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-14 20:17 修改: 2026-07-15 20:23
form-data CVE-2026-12143 高危 4.0.0 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-12 19:16 修改: 2026-09-11 13:17
glob CVE-2025-64756 高危 10.4.2 11.1.0, 10.5.0 glob: glob: Command Injection Vulnerability via Malicious Filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64756

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2025-11-17 18:15 修改: 2026-06-17 09:55
immutable CVE-2026-29063 高危 4.3.4 4.3.8, 5.1.5, 3.8.3 immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29063

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-06 19:16 修改: 2026-09-10 13:18
immutable CVE-2026-59879 高危 4.3.4 4.3.9, 5.1.8 immutable-js: Immutable.js: Denial of Service due to mishandling of large index values in List operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59879

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-08 17:17 修改: 2026-07-10 18:48
immutable CVE-2026-59880 高危 4.3.4 4.3.9, 5.1.8, 3.8.4 Immutable.js provides many Persistent Immutable data structures. Prior ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59880

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:49
ip-address CVE-2026-69192 高危 9.0.5 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-08-03 20:17 修改: 2026-09-10 20:30
axios CVE-2025-27152 高危 1.7.7 1.8.2, 0.30.0 axios: Possible SSRF and Credential Leakage via Absolute URL in axios Requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27152

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-03-07 16:15 修改: 2026-06-17 09:03
koa CVE-2026-27959 高危 2.15.3 3.1.2, 2.16.4 koa: Koa: Host header injection vulnerability due to malformed HTTP Host header parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27959

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-02-26 02:16 修改: 2026-07-15 02:19
lodash CVE-2026-4800 高危 4.17.21 4.18.0 lodash: lodash: Arbitrary code execution via untrusted input in template imports

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4800

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-31 20:16 修改: 2026-09-10 13:20
minimatch CVE-2026-26996 高危 9.0.5 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
nanoid CVE-2026-67213 高危 3.3.7 3.3.18, 5.1.6 nanoid: nanoid: Denial of Service via infinite loop in random ID generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67213

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-29 14:16 修改: 2026-08-18 14:26
nanoid CVE-2026-67214 高危 3.3.7 3.3.16, 5.1.16 nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67214

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-29 14:16 修改: 2026-08-26 17:53
nanoid CVE-2026-73086 高危 3.3.7 3.3.12, 5.1.11 nanoid: nanoid: Predictable ID generation due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73086

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-08-11 17:19 修改: 2026-09-09 20:46
node-forge CVE-2025-12816 高危 1.3.1 1.3.2 node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12816

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-11-25 20:15 修改: 2026-06-17 08:32
node-forge CVE-2025-66031 高危 1.3.1 1.3.2 node-forge: node-forge ASN.1 Unbounded Recursion

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66031

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-11-26 23:15 修改: 2026-06-17 09:56
node-forge CVE-2026-33891 高危 1.3.1 1.4.0 node-forge: node-forge: Denial of Service via infinite loop in BigInteger.modInverse()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33891

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-27 21:17 修改: 2026-09-04 13:19
node-forge CVE-2026-33894 高危 1.3.1 1.4.0 node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33894

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-27 21:17 修改: 2026-09-10 13:18
node-forge CVE-2026-33895 高危 1.3.1 1.4.0 node-forge: Forge: Authentication bypass via forged Ed25519 cryptographic signatures

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33895

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-27 21:17 修改: 2026-09-04 13:19
node-forge CVE-2026-33896 高危 1.3.1 1.4.0 node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33896

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-27 21:17 修改: 2026-09-04 13:19
pacote CVE-2026-9496 高危 18.0.6 21.5.1 Versions of the package pacote from 11.2.7 and before 21.5.1 are vulne ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9496

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-05-26 07:16 修改: 2026-07-23 11:10
picomatch CVE-2026-33671 高危 2.3.1 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
postcss CVE-2026-45623 高危 8.4.38 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-27 18:16 修改: 2026-08-07 00:13
postcss CVE-2026-73646 高危 8.4.38 8.5.18 postcss: PostCSS: Information disclosure via path traversal in source map auto-loading

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73646

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-08-17 16:17 修改: 2026-08-17 17:16
axios CVE-2025-58754 高危 1.7.7 1.12.0, 0.30.2 axios: Axios DoS via lack of data size check

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58754

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-09-12 02:15 修改: 2026-06-17 09:44
protobufjs CVE-2026-44289 高危 7.3.2 7.5.6, 8.0.2 protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44289

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-05-13 16:16 修改: 2026-08-28 16:18
protobufjs CVE-2026-44290 高危 7.3.2 7.5.6, 8.0.2 protobufjs: protobufjs: Denial of Service via crafted schema

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44290

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44291 高危 7.3.2 7.5.6, 8.0.2 protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44291

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44293 高危 7.3.2 7.5.6, 8.0.2 protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44293

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-05-13 16:16 修改: 2026-09-09 13:20
protobufjs CVE-2026-48712 高危 7.3.2 7.6.1, 8.4.1 protobufjs: protobufjs: Denial of Service via uncontrolled recursion with crafted protobuf payload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48712

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
sigstore CVE-2026-48815 高危 2.3.1 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
axios CVE-2026-25639 高危 1.7.7 1.13.5, 0.30.3 axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25639

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-02-09 21:15 修改: 2026-09-10 13:17
tar CVE-2026-23745 高危 6.2.1 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-01-16 22:16 修改: 2026-09-07 13:18
tar CVE-2026-23950 高危 6.2.1 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-01-20 01:15 修改: 2026-08-24 13:17
tar CVE-2026-24842 高危 6.2.1 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-01-28 01:16 修改: 2026-09-07 13:18
tar CVE-2026-26960 高危 6.2.1 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-29786 高危 6.2.1 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-03-07 16:15 修改: 2026-09-01 13:18
tar CVE-2026-31802 高危 6.2.1 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-59874 高危 6.2.1 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-73566 高危 6.2.1 7.5.21 tar: node-tar: Denial of Service via crafted long-path tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
toml CVE-2026-63376 高危 3.0.0 4.1.2 toml-node: toml-node: Arbitrary Code Execution via Prototype Pollution in TOML Parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63376

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-09-03 21:17 修改: 2026-09-09 21:09
toml CVE-2026-77465 高危 3.0.0 4.2.0 toml-node: toml-node: Denial of Service via uncontrolled recursion in TOML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77465

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-09-03 21:17 修改: 2026-09-09 21:09
follow-redirects GHSA-r4q5-vmmm-2653 中危 1.15.6 1.16.0 follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets

漏洞详情: https://github.com/advisories/GHSA-r4q5-vmmm-2653

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-14 01:11 修改: 2026-04-14 01:11
axios CVE-2025-62718 中危 1.7.7 1.15.0, 0.31.0 axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-62718

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-09 15:16 修改: 2026-09-10 13:17
axios CVE-2026-40175 中危 1.7.7 1.15.0, 0.31.0 axios: Axios: Remote Code Execution via Prototype Pollution escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40175

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-10 20:16 修改: 2026-09-09 13:19
axios CVE-2026-42034 中危 1.7.7 1.15.1, 0.31.1 axios: Axios: Denial of Service via oversized streamed uploads bypassing body limits

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42034

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42036 中危 1.7.7 1.15.1, 0.31.1 axios: Axios: Denial of Service via unbounded stream consumption when 'responseType: 'stream'' is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42036

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42037 中危 1.7.7 1.15.1 axios: Node.js: Axios: Information disclosure via CRLF injection in multipart Content-Type header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42037

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42038 中危 1.7.7 1.15.1, 0.31.1 axios: Axios: Information disclosure due to `no_proxy` bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42038

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42039 中危 1.7.7 1.15.1, 0.31.1 axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42039

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 18:16 修改: 2026-09-10 13:20
ip-address CVE-2026-42338 中危 9.0.5 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-05-12 20:16 修改: 2026-09-11 13:17
joi CVE-2026-48038 中危 17.13.3 18.2.1, 17.13.4 joi: joi: Denial of Service via uncaught RangeError on deeply nested input through recursive link() schemas

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48038

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-14 20:17 修改: 2026-07-15 20:22
axios CVE-2026-42041 中危 1.7.7 1.15.1, 0.31.1 axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42041

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 18:16 修改: 2026-09-10 13:20
axios CVE-2026-42042 中危 1.7.7 1.15.1, 0.31.1 axios: Axios: XSRF token bypass leading to information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42042

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
koa CVE-2025-32379 中危 2.15.3 2.16.1, 3.0.0-alpha.5 koa: XSS at ctx.redirect() function in Koajs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32379

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-04-09 16:15 修改: 2026-06-17 09:11
axios CVE-2026-42044 中危 1.7.7 1.15.2 axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42044

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 18:16 修改: 2026-09-10 13:20
lodash CVE-2025-13465 中危 4.17.21 4.17.23 lodash: prototype pollution in _.unset and _.omit functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13465

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-01-21 20:16 修改: 2026-09-10 13:16
lodash CVE-2026-2950 中危 4.17.21 4.18.0 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2950

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-31 20:16 修改: 2026-07-24 20:10
axios CVE-2026-44490 中危 1.7.7 1.16.0, 0.32.0 axios: Axios: Information disclosure and denial of service due to prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44490

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-11 17:16 修改: 2026-06-17 10:50
axios CVE-2026-67312 中危 1.7.7 0.33.0, 1.18.0 axios: axios: Denial of Service via uncontrolled recursion in form data processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67312

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:40
axios CVE-2026-67313 中危 1.7.7 0.33.0, 1.18.0 axios versions 0.28.0 and later contain uncontrolled recursion in form ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67313

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:40
axios CVE-2026-67316 中危 1.7.7 1.18.0, 0.33.0 axios: axios: Prototype Pollution allows unauthorized data transmission and network redirection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67316

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:40
axios CVE-2026-67317 中危 1.7.7 1.18.0 axios: axios: Denial of Service via maxBodyLength bypass with ReadableStream

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67317

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:39
axios CVE-2026-67319 中危 1.7.7 0.33.0, 1.18.0 axios: axios: Information disclosure and data manipulation via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67319

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-08-01 13:17 修改: 2026-09-01 15:39
nanoid CVE-2024-55565 中危 3.3.7 5.0.9, 3.3.8 nanoid: nanoid mishandles non-integer values

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-55565

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2024-12-09 02:15 修改: 2026-06-17 08:11
@protobufjs/utf8 CVE-2026-44288 中危 1.1.0 1.1.1 protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44288

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
@sentry/browser GHSA-593m-55hh-j8gv 中危 8.30.0 8.33.0, 7.119.1 Sentry SDK Prototype Pollution gadget in JavaScript SDKs

漏洞详情: https://github.com/advisories/GHSA-593m-55hh-j8gv

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2024-10-03 18:26 修改: 2024-10-04 16:32
@sigstore/core CVE-2026-48758 中危 1.1.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
brace-expansion CVE-2026-33750 中危 2.0.1 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
@babel/runtime CVE-2025-27789 中危 7.25.0 7.26.10, 8.0.0-alpha.17 Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27789

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-03-11 20:15 修改: 2026-06-17 09:04
@opentelemetry/core CVE-2026-54285 中危 1.25.1 2.8.0 @opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-22 18:16 修改: 2026-08-27 15:45
node-forge CVE-2025-66030 中危 1.3.1 1.3.2 node-forge: node-forge: Integer Overflow allows OID-based security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66030

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-11-26 23:15 修改: 2026-06-17 09:56
dom-iterator CVE-2024-21541 中危 1.0.0 1.0.1 dom-iterator code execution vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21541

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2024-11-13 05:15 修改: 2026-06-17 07:09
dompurify CVE-2025-15599 中危 3.1.6 3.2.7 DOMPurify: DOMPurify: Cross-site scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15599

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-03 18:16 修改: 2026-06-17 08:38
picomatch CVE-2026-33672 中危 2.3.1 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
dompurify CVE-2025-26791 中危 3.1.6 3.2.4 dompurify: Mutation XSS in DOMPurify Due to Improper Template Literal Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26791

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-02-14 09:15 修改: 2026-06-17 09:02
dompurify CVE-2026-0540 中危 3.1.6 3.3.2, 2.5.9 DOMPurify: DOMPurify: Cross-site scripting vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0540

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-03 18:16 修改: 2026-06-17 10:10
postcss CVE-2026-41305 中危 8.4.38 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46
postcss CVE-2026-69153 中危 8.4.38 8.5.23 postcss: PostCSS: Information disclosure via crafted sourceMappingURL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69153

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
dompurify CVE-2026-41238 中危 3.1.6 3.4.0 DOMPurify: DOMPurify: Cross-Site Scripting bypass via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41238

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-23 16:16 修改: 2026-06-17 10:46
dompurify CVE-2026-41239 中危 3.1.6 3.4.0 DOMPurify: Vue 2: DOMPurify: Cross-site scripting due to incomplete sanitization of template expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41239

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-23 16:16 修改: 2026-06-17 10:46
dompurify CVE-2026-41240 中危 3.1.6 3.4.0 DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41240

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-23 16:16 修改: 2026-06-17 10:46
dompurify CVE-2026-49458 中危 3.1.6 3.4.6 dompurify: DOMPurify: Cross-site scripting due to improper sanitization of DOM nodes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49458

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:47
dompurify CVE-2026-49459 中危 3.1.6 3.4.6 dompurify: DOMPurify: Cross-site scripting bypass allows arbitrary script execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49459

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:51
dompurify CVE-2026-49978 中危 3.1.6 3.4.7 dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49978

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:49
protobufjs CVE-2026-44288 中危 7.3.2 7.5.6, 8.0.2 protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44288

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44292 中危 7.3.2 7.5.6, 8.0.2 protobufjs: protobufjs: Data integrity impact due to prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44292

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44294 中危 7.3.2 7.5.6, 8.0.2 protobufjs: protobufjs: Denial of Service due to unescaped control characters in field names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44294

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-45740 中危 7.3.2 7.5.8, 8.2.0 protobufjs: protobufjs: Denial of Service via crafted JSON descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45740

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-05-13 16:17 修改: 2026-06-17 10:52
protobufjs CVE-2026-54269 中危 7.3.2 7.6.3, 8.6.0 protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54269

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-22 18:16 修改: 2026-06-24 20:40
qs CVE-2025-15284 中危 6.11.2 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
qs CVE-2026-82417 中危 6.11.2 6.16.0 qs: qs: Denial of Service via improper validation in stringify function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82417

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-08-30 00:16 修改: 2026-09-03 18:00
qs CVE-2026-8723 中危 6.11.2 6.15.2 qs: qs: Denial of Service due to improper handling of null/undefined array elements

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
dompurify CVE-2026-65898 中危 3.1.6 3.4.11 dompurify: DOMPurify: Cross-site scripting via permanent attribute allowlist pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65898

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:54
dompurify CVE-2026-65902 中危 3.1.6 3.4.7 dompurify: DOMPurify: Sanitization bypass via hook manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65902

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:51
dompurify CVE-2026-65903 中危 3.1.6 3.4.0 dompurify: DOMPurify: Security bypass allows injection of malicious content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65903

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:51
dompurify CVE-2026-65912 中危 3.1.6 3.3.2 dompurify: DOMPurify: URI validation bypass leads to cross-site scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65912

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:50
dompurify CVE-2026-65913 中危 3.1.6 3.3.2 dompurify: DOMPurify: Cross-Site Scripting (XSS) via prototype pollution in USE_PROFILES mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65913

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:50
dompurify CVE-2026-65914 中危 3.1.6 3.3.2 dompurify: DOMPurify: Cross-Site Scripting vulnerability allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65914

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:49
dompurify GHSA-55q2-fjhq-7xh7 中危 3.1.6 3.4.13 DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS

漏洞详情: https://github.com/advisories/GHSA-55q2-fjhq-7xh7

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-08-07 15:30 修改: 2026-08-07 15:30
@opentelemetry/core CVE-2026-54285 中危 1.26.0 2.8.0 @opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-22 18:16 修改: 2026-08-27 15:45
@opentelemetry/core CVE-2026-54285 中危 1.26.0 2.8.0 @opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-22 18:16 修改: 2026-08-27 15:45
@opentelemetry/core CVE-2026-54285 中危 1.26.0 2.8.0 @opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-06-22 18:16 修改: 2026-08-27 15:45
tar CVE-2026-53655 中危 6.2.1 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 6.2.1 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 6.2.1 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
fast-xml-parser CVE-2026-33349 中危 4.4.1 4.5.5, 5.5.7 fast-xml-parser: fast-xml-parser: Denial of Service via unbounded entity expansion due to incorrect configuration limit handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33349

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-03-24 20:16 修改: 2026-06-17 10:37
fast-xml-parser CVE-2026-41650 中危 4.4.1 5.7.0 fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41650

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-05-07 15:16 修改: 2026-06-17 10:46
uuid CVE-2026-41907 中危 10.0.0 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 7.0.3 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 9.0.1 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 9.0.1 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
diff CVE-2026-24001 低危 5.1.0 8.0.3, 5.2.2, 4.0.4, 3.5.1 jsdiff: denial of service vulnerability in parsePatch and applyPatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24001

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-01-22 03:15 修改: 2026-07-15 02:18
diff CVE-2026-24001 低危 5.2.0 8.0.3, 5.2.2, 4.0.4, 3.5.1 jsdiff: denial of service vulnerability in parsePatch and applyPatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24001

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-01-22 03:15 修改: 2026-07-15 02:18
brace-expansion CVE-2025-5889 低危 2.0.1 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
@sentry/node GHSA-r5w7-f542-q2j4 低危 8.30.0 8.49.0 Potential DoS when using ContextLines integration

漏洞详情: https://github.com/advisories/GHSA-r5w7-f542-q2j4

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-01-28 20:37 修改: 2025-01-28 20:37
fast-xml-parser CVE-2026-27942 低危 4.4.1 5.3.8, 4.5.4 fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27942

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
joi CVE-2026-84367 低危 17.13.3 17.13.5, 18.2.4 joi: object().rename() with a template target can set the validated object's prototype

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84367

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-09-01 21:18 修改: 2026-09-09 21:09
joi CVE-2026-84368 低危 17.13.3 17.13.6, 18.2.5 joi: @hapi/joi: joi: Prototype pollution via untrusted input in schema configuration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84368

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-09-01 21:18 修改: 2026-09-09 21:09
dompurify CVE-2026-65899 低危 3.1.6 3.4.9 dompurify: DOMPurify: Client-side arbitrary code execution due to improper Trusted Types policy reset

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65899

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:53
dompurify CVE-2026-65900 低危 3.1.6 3.4.8 dompurify: DOMPurify: Template expression injection allows information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65900

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:52
postcss-selector-parser CVE-2026-9358 低危 6.1.0 6.1.3, 7.1.3 postcss-selector-parser: Postcss: Denial of Service via uncontrolled recursion in AST Serialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9358

镜像层: sha256:d6f6f040bd98fa126dd3f7aec9e6c5f855ec2ca43ff4a0345d6b289e8fb01f3b

发布日期: 2026-05-24 06:16 修改: 2026-07-23 11:10
qs CVE-2026-2391 低危 6.11.2 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
dompurify CVE-2026-65901 低危 3.1.6 dompurify: DOMPurify: Cross-site scripting vulnerability via attacker-controlled nodeName

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65901

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:52
koa CVE-2025-8129 低危 2.15.3 2.16.2, 3.0.1 koa: KoaJS Koa HTTP Header response.js back redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8129

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2025-07-25 05:15 修改: 2026-06-17 10:06
dompurify GHSA-c2j3-45gr-mqc4 低危 3.1.6 3.4.12 DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

漏洞详情: https://github.com/advisories/GHSA-c2j3-45gr-mqc4

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-07-21 19:41 修改: 2026-07-21 19:41
axios CVE-2026-42040 低危 1.7.7 1.15.1, 0.31.1 axios: Axios: Incorrect null byte handling can lead to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42040

镜像层: sha256:8940692ca02f47dbcce6687cadc19867ec034a90e9a90dd98338e899af41cc0e

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×