docker.io/chatwoot/chatwoot:v4.15.1 linux/amd64

docker.io/chatwoot/chatwoot:v4.15.1 - Trivy安全扫描结果 扫描时间: 2026-08-02 00:54
全部漏洞信息
低危漏洞:53 中危漏洞:153 高危漏洞:193 严重漏洞:38

系统OS: alpine 3.21.3 扫描引擎: Trivy 扫描时间: 2026-08-02 00:54

docker.io/chatwoot/chatwoot:v4.15.1 (alpine 3.21.3) (alpine)
低危漏洞:4 中危漏洞:16 高危漏洞:6 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
c-ares CVE-2026-33630 高危 1.34.6-r0 1.34.8-r0 c-ares: c-ares: Use-after-free / double-free in query-completion handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33630

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libexpat CVE-2026-45186 高危 2.7.5-r0 2.8.1-r0 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-05-10 07:16 修改: 2026-07-24 20:10
libexpat CVE-2026-56131 高危 2.7.5-r0 2.8.2-r0 libexpat before 2.8.2 lacks handler call depth tracking for calls to X ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat CVE-2026-56408 高危 2.7.5-r0 2.8.2-r0 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
musl-utils CVE-2026-40200 高危 1.2.5-r9 1.2.5-r11 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
zlib CVE-2026-22184 高危 1.3.1-r2 1.3.2-r0 zlib: zlib: Arbitrary code execution via buffer overflow in untgz utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22184

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-07 21:16 修改: 2026-07-15 02:18
libexpat CVE-2026-50219 中危 2.7.5-r0 2.8.2-r0 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
libexpat CVE-2026-56132 中危 2.7.5-r0 2.8.2-r0 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat CVE-2026-56403 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat CVE-2026-56404 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat CVE-2026-56405 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat CVE-2026-56406 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat CVE-2026-56407 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat CVE-2026-56409 中危 2.7.5-r0 2.8.2-r0 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat CVE-2026-56410 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat CVE-2026-56411 中危 2.7.5-r0 2.8.2-r0 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat CVE-2026-56412 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
busybox CVE-2024-58251 中危 1.37.0-r12 1.37.0-r14 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
musl-utils CVE-2026-6042 中危 1.2.5-r9 1.2.5-r10 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
ssl_client CVE-2024-58251 中危 1.37.0-r12 1.37.0-r14 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
busybox-binsh CVE-2024-58251 中危 1.37.0-r12 1.37.0-r14 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
zlib CVE-2026-27171 中危 1.3.1-r2 1.3.2-r0 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
libexpat CVE-2026-41080 低危 2.7.5-r0 2.8.1-r0 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:4acb9c208d3d0bdc2cc1594256f5b28b87754dc64ef5a73ede1e5f3e2eacd78d

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
ssl_client CVE-2025-46394 低危 1.37.0-r12 1.37.0-r14 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
busybox-binsh CVE-2025-46394 低危 1.37.0-r12 1.37.0-r14 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
busybox CVE-2025-46394 低危 1.37.0-r12 1.37.0-r14 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
Node.js (node-pkg)
低危漏洞:38 中危漏洞:113 高危漏洞:170 严重漏洞:32
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
@babel/traverse CVE-2023-45133 严重 7.14.0 7.23.2, 8.0.0-alpha.4 babel: arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45133

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-10-12 17:15 修改: 2026-06-17 06:28
@babel/traverse CVE-2023-45133 严重 7.14.0 7.23.2, 8.0.0-alpha.4 babel: arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45133

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-10-12 17:15 修改: 2026-06-17 06:28
cipher-base CVE-2025-9287 严重 1.0.4 1.0.5 cipher-base: Cipher-base hash manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9287

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-08-20 22:15 修改: 2026-06-17 10:08
cipher-base CVE-2025-9287 严重 1.0.4 1.0.5 cipher-base: Cipher-base hash manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9287

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-08-20 22:15 修改: 2026-06-17 10:08
elliptic GHSA-vjh7-7g9h-fjfh 严重 6.5.4 6.6.1 Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)

漏洞详情: https://github.com/advisories/GHSA-vjh7-7g9h-fjfh

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-02-12 19:47 修改: 2025-02-12 19:47
elliptic GHSA-vjh7-7g9h-fjfh 严重 6.5.4 6.6.1 Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)

漏洞详情: https://github.com/advisories/GHSA-vjh7-7g9h-fjfh

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-02-12 19:47 修改: 2025-02-12 19:47
eventsource CVE-2022-1650 严重 1.1.0 1.1.1, 2.0.2 eventsource: Exposure of Sensitive Information

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1650

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-05-12 11:15 修改: 2026-06-17 04:22
eventsource CVE-2022-1650 严重 1.1.0 1.1.1, 2.0.2 eventsource: Exposure of Sensitive Information

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1650

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-05-12 11:15 修改: 2026-06-17 04:22
form-data CVE-2025-7783 严重 2.3.3 2.5.4, 3.0.4, 4.0.4 form-data: Unsafe random function in form-data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7783

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-07-18 17:15 修改: 2026-06-17 10:05
json-schema CVE-2021-3918 严重 0.2.3 0.4.0 nodejs-json-schema: Prototype pollution vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3918

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-11-13 09:15 修改: 2026-06-17 04:05
loader-utils CVE-2022-37601 严重 1.4.0 2.0.3, 1.4.1 loader-utils: prototype pollution in function parseQuery in parseQuery.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37601

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-12 20:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37601 严重 1.4.0 2.0.3, 1.4.1 loader-utils: prototype pollution in function parseQuery in parseQuery.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37601

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-12 20:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37601 严重 2.0.0 2.0.3, 1.4.1 loader-utils: prototype pollution in function parseQuery in parseQuery.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37601

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-12 20:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37601 严重 2.0.0 2.0.3, 1.4.1 loader-utils: prototype pollution in function parseQuery in parseQuery.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37601

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-12 20:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37601 严重 2.0.0 2.0.3, 1.4.1 loader-utils: prototype pollution in function parseQuery in parseQuery.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37601

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-12 20:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37601 严重 2.0.0 2.0.3, 1.4.1 loader-utils: prototype pollution in function parseQuery in parseQuery.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37601

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-12 20:15 修改: 2026-06-17 04:55
minimist CVE-2021-44906 严重 1.2.5 1.2.6, 0.2.4 minimist: prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44906

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-03-17 16:15 修改: 2026-06-17 04:12
minimist CVE-2021-44906 严重 1.2.5 1.2.6, 0.2.4 minimist: prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44906

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-03-17 16:15 修改: 2026-06-17 04:12
pbkdf2 CVE-2025-6545 严重 3.1.2 3.1.3 pbkdf2: pbkdf2 silently returns predictable key material

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6545

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-06-23 19:15 修改: 2026-06-17 10:02
pbkdf2 CVE-2025-6545 严重 3.1.2 3.1.3 pbkdf2: pbkdf2 silently returns predictable key material

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6545

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-06-23 19:15 修改: 2026-06-17 10:02
pbkdf2 CVE-2025-6547 严重 3.1.2 3.1.3 pbkdf2: pbkdf2 silently returns static keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6547

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-06-23 19:15 修改: 2026-06-17 10:02
pbkdf2 CVE-2025-6547 严重 3.1.2 3.1.3 pbkdf2: pbkdf2 silently returns static keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6547

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-06-23 19:15 修改: 2026-06-17 10:02
sha.js CVE-2025-9288 严重 2.4.11 2.4.12 sha.js: Missing type checks leading to hash rewind and passing on crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9288

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-08-20 22:15 修改: 2026-06-17 10:08
sha.js CVE-2025-9288 严重 2.4.11 2.4.12 sha.js: Missing type checks leading to hash rewind and passing on crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9288

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-08-20 22:15 修改: 2026-06-17 10:08
tar CVE-2026-59873 严重 2.2.2 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar CVE-2026-59873 严重 6.1.0 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar CVE-2026-59873 严重 6.1.0 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar CVE-2026-59873 严重 7.5.13 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
url-parse CVE-2022-0686 严重 1.5.1 1.5.8 npm-url-parse: Authorization bypass through user-controlled key

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0686

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-02-20 13:15 修改: 2026-06-17 04:21
url-parse CVE-2022-0686 严重 1.5.1 1.5.8 npm-url-parse: Authorization bypass through user-controlled key

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0686

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-02-20 13:15 修改: 2026-06-17 04:21
websocket-driver CVE-2026-54466 严重 0.7.4 0.7.5 websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54466

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-17 21:17 修改: 2026-07-23 16:18
websocket-driver CVE-2026-54466 严重 0.7.4 0.7.5 websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54466

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-17 21:17 修改: 2026-07-23 16:18
cross-spawn CVE-2024-21538 高危 6.0.5 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-11-08 05:15 修改: 2026-07-28 16:17
decode-uri-component CVE-2022-38900 高危 0.2.0 0.2.1 decode-uri-component: improper input validation resulting in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38900

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-11-28 13:15 修改: 2026-06-17 04:57
decode-uri-component CVE-2022-38900 高危 0.2.0 0.2.1 decode-uri-component: improper input validation resulting in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38900

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-11-28 13:15 修改: 2026-06-17 04:57
dns-packet CVE-2021-23386 高危 1.3.1 5.2.2, 1.3.2 dns-packet: does not always fill buffers before forming network packets which couls result in Remote Memory Exposure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23386

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-05-20 17:15 修改: 2026-06-17 03:38
dns-packet CVE-2021-23386 高危 1.3.1 5.2.2, 1.3.2 dns-packet: does not always fill buffers before forming network packets which couls result in Remote Memory Exposure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23386

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-05-20 17:15 修改: 2026-06-17 03:38
ansi-html CVE-2021-23424 高危 0.0.7 0.0.8 nodejs-ansi-html: ReDoS via crafted string

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23424

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-18 17:15 修改: 2026-06-17 03:38
ansi-html CVE-2021-23424 高危 0.0.7 0.0.8 nodejs-ansi-html: ReDoS via crafted string

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23424

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-18 17:15 修改: 2026-06-17 03:38
ansi-regex CVE-2021-3807 高危 3.0.0 6.0.1, 5.0.1, 4.1.1, 3.0.1 nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3807

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-09-17 07:15 修改: 2026-06-17 04:05
ansi-regex CVE-2021-3807 高危 4.1.0 6.0.1, 5.0.1, 4.1.1, 3.0.1 nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3807

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-09-17 07:15 修改: 2026-06-17 04:05
flatted CVE-2026-32141 高危 2.0.2 3.4.0 flatted: flatted: Unbounded recursion DoS in parse() revive phase

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32141

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-12 18:16 修改: 2026-07-17 13:18
flatted CVE-2026-33228 高危 2.0.2 3.4.2 flatted: Flatted: Prototype pollution vulnerability allows arbitrary code execution via crafted JSON.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33228

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-20 23:16 修改: 2026-07-15 02:20
flatted CVE-2026-32141 高危 3.1.1 3.4.0 flatted: flatted: Unbounded recursion DoS in parse() revive phase

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32141

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-12 18:16 修改: 2026-07-17 13:18
flatted CVE-2026-33228 高危 3.1.1 3.4.2 flatted: Flatted: Prototype pollution vulnerability allows arbitrary code execution via crafted JSON.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33228

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-20 23:16 修改: 2026-07-15 02:20
follow-redirects CVE-2022-0155 高危 1.14.0 1.14.7 follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0155

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-01-10 20:15 修改: 2026-06-17 04:20
follow-redirects CVE-2022-0155 高危 1.14.0 1.14.7 follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0155

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-01-10 20:15 修改: 2026-06-17 04:20
ansi-regex CVE-2021-3807 高危 4.1.0 6.0.1, 5.0.1, 4.1.1, 3.0.1 nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3807

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-09-17 07:15 修改: 2026-06-17 04:05
form-data CVE-2026-12143 高危 2.3.3 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-12 19:16 修改: 2026-07-31 13:17
http-proxy-middleware CVE-2024-21536 高危 0.19.1 2.0.7, 3.0.3 http-proxy-middleware: Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21536

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-10-19 05:15 修改: 2026-06-17 07:09
http-proxy-middleware CVE-2024-21536 高危 0.19.1 2.0.7, 3.0.3 http-proxy-middleware: Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21536

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-10-19 05:15 修改: 2026-06-17 07:09
ip CVE-2024-29415 高危 1.1.5 node-ip: Incomplete fix for CVE-2023-42282

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29415

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-05-27 20:15 修改: 2026-06-17 07:22
ip CVE-2024-29415 高危 1.1.5 node-ip: Incomplete fix for CVE-2023-42282

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29415

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-05-27 20:15 修改: 2026-06-17 07:22
js-yaml CVE-2026-59869 高危 3.14.1 3.15.0, 4.3.0 js-yaml: js-yaml: Denial of Service via crafted YAML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59869

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:05
js-yaml CVE-2026-59869 高危 3.14.1 3.15.0, 4.3.0 js-yaml: js-yaml: Denial of Service via crafted YAML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59869

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:05
ansi-regex CVE-2021-3807 高危 4.1.0 6.0.1, 5.0.1, 4.1.1, 3.0.1 nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3807

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-09-17 07:15 修改: 2026-06-17 04:05
json5 CVE-2022-46175 高危 1.0.1 2.2.2, 1.0.2 json5: Prototype Pollution in JSON5 via Parse Method

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46175

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-12-24 04:15 修改: 2026-06-17 05:11
json5 CVE-2022-46175 高危 1.0.1 2.2.2, 1.0.2 json5: Prototype Pollution in JSON5 via Parse Method

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46175

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-12-24 04:15 修改: 2026-06-17 05:11
json5 CVE-2022-46175 高危 2.2.0 2.2.2, 1.0.2 json5: Prototype Pollution in JSON5 via Parse Method

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46175

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-12-24 04:15 修改: 2026-06-17 05:11
json5 CVE-2022-46175 高危 2.2.0 2.2.2, 1.0.2 json5: Prototype Pollution in JSON5 via Parse Method

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46175

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-12-24 04:15 修改: 2026-06-17 05:11
ansi-regex CVE-2021-3807 高危 4.1.0 6.0.1, 5.0.1, 4.1.1, 3.0.1 nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3807

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-09-17 07:15 修改: 2026-06-17 04:05
async CVE-2021-43138 高危 2.6.3 3.2.2, 2.6.4 async: Prototype Pollution in async

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43138

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-04-06 17:15 修改: 2026-06-17 04:10
loader-utils CVE-2022-37599 高危 1.4.0 1.4.2, 2.0.4, 3.2.1 loader-utils: regular expression denial of service in interpolateName.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37599

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-11 19:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37599 高危 1.4.0 1.4.2, 2.0.4, 3.2.1 loader-utils: regular expression denial of service in interpolateName.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37599

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-11 19:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37603 高危 1.4.0 1.4.2, 2.0.4, 3.2.1 loader-utils: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37603

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-14 16:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37603 高危 1.4.0 1.4.2, 2.0.4, 3.2.1 loader-utils: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37603

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-14 16:15 修改: 2026-06-17 04:55
async CVE-2021-43138 高危 2.6.3 3.2.2, 2.6.4 async: Prototype Pollution in async

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43138

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-04-06 17:15 修改: 2026-06-17 04:10
body-parser CVE-2024-45590 高危 1.19.0 1.20.3 body-parser: Denial of Service Vulnerability in body-parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45590

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-09-10 16:15 修改: 2026-06-17 07:54
body-parser CVE-2024-45590 高危 1.19.0 1.20.3 body-parser: Denial of Service Vulnerability in body-parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45590

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-09-10 16:15 修改: 2026-06-17 07:54
brace-expansion CVE-2026-13149 高危 1.1.11 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
loader-utils CVE-2022-37599 高危 2.0.0 1.4.2, 2.0.4, 3.2.1 loader-utils: regular expression denial of service in interpolateName.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37599

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-11 19:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37599 高危 2.0.0 1.4.2, 2.0.4, 3.2.1 loader-utils: regular expression denial of service in interpolateName.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37599

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-11 19:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37599 高危 2.0.0 1.4.2, 2.0.4, 3.2.1 loader-utils: regular expression denial of service in interpolateName.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37599

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-11 19:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37599 高危 2.0.0 1.4.2, 2.0.4, 3.2.1 loader-utils: regular expression denial of service in interpolateName.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37599

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-11 19:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37603 高危 2.0.0 1.4.2, 2.0.4, 3.2.1 loader-utils: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37603

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-14 16:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37603 高危 2.0.0 1.4.2, 2.0.4, 3.2.1 loader-utils: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37603

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-14 16:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37603 高危 2.0.0 1.4.2, 2.0.4, 3.2.1 loader-utils: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37603

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-14 16:15 修改: 2026-06-17 04:55
loader-utils CVE-2022-37603 高危 2.0.0 1.4.2, 2.0.4, 3.2.1 loader-utils: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37603

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-14 16:15 修改: 2026-06-17 04:55
lodash CVE-2026-4800 高危 4.17.21 4.18.0 lodash: lodash: Arbitrary code execution via untrusted input in template imports

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4800

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-31 20:16 修改: 2026-07-30 12:18
lodash CVE-2026-4800 高危 4.17.21 4.18.0 lodash: lodash: Arbitrary code execution via untrusted input in template imports

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4800

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-31 20:16 修改: 2026-07-30 12:18
minimatch CVE-2022-3517 高危 3.0.4 3.0.5 nodejs-minimatch: ReDoS via the braceExpand function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3517

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-17 20:15 修改: 2026-06-17 04:59
minimatch CVE-2022-3517 高危 3.0.4 3.0.5 nodejs-minimatch: ReDoS via the braceExpand function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3517

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-10-17 20:15 修改: 2026-06-17 04:59
minimatch CVE-2026-26996 高危 3.0.4 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-26996 高危 3.0.4 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 3.0.4 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27903 高危 3.0.4 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 3.0.4 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 3.0.4 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
brace-expansion CVE-2026-13149 高危 1.1.11 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 1.1.11 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
node-forge CVE-2022-24771 高危 0.10.0 1.3.0 node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24771

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-03-18 14:15 修改: 2026-06-17 04:32
node-forge CVE-2022-24771 高危 0.10.0 1.3.0 node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24771

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-03-18 14:15 修改: 2026-06-17 04:32
node-forge CVE-2022-24772 高危 0.10.0 1.3.0 node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24772

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-03-18 14:15 修改: 2026-06-17 04:32
node-forge CVE-2022-24772 高危 0.10.0 1.3.0 node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24772

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-03-18 14:15 修改: 2026-06-17 04:32
node-forge CVE-2025-12816 高危 0.10.0 1.3.2 node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12816

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-11-25 20:15 修改: 2026-06-17 08:32
node-forge CVE-2025-12816 高危 0.10.0 1.3.2 node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12816

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-11-25 20:15 修改: 2026-06-17 08:32
node-forge CVE-2025-66031 高危 0.10.0 1.3.2 node-forge: node-forge ASN.1 Unbounded Recursion

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66031

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-11-26 23:15 修改: 2026-06-17 09:56
node-forge CVE-2025-66031 高危 0.10.0 1.3.2 node-forge: node-forge ASN.1 Unbounded Recursion

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66031

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-11-26 23:15 修改: 2026-06-17 09:56
node-forge CVE-2026-33891 高危 0.10.0 1.4.0 node-forge: node-forge: Denial of Service via infinite loop in BigInteger.modInverse()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33891

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-27 21:17 修改: 2026-07-15 02:20
node-forge CVE-2026-33891 高危 0.10.0 1.4.0 node-forge: node-forge: Denial of Service via infinite loop in BigInteger.modInverse()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33891

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-27 21:17 修改: 2026-07-15 02:20
node-forge CVE-2026-33894 高危 0.10.0 1.4.0 node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33894

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-27 21:17 修改: 2026-07-20 12:18
node-forge CVE-2026-33894 高危 0.10.0 1.4.0 node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33894

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-27 21:17 修改: 2026-07-20 12:18
node-forge CVE-2026-33895 高危 0.10.0 1.4.0 node-forge: Forge: Authentication bypass via forged Ed25519 cryptographic signatures

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33895

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-27 21:17 修改: 2026-07-15 02:20
node-forge CVE-2026-33895 高危 0.10.0 1.4.0 node-forge: Forge: Authentication bypass via forged Ed25519 cryptographic signatures

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33895

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-27 21:17 修改: 2026-07-15 02:20
node-forge CVE-2026-33896 高危 0.10.0 1.4.0 node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33896

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-27 21:17 修改: 2026-07-15 02:20
node-forge CVE-2026-33896 高危 0.10.0 1.4.0 node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33896

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-27 21:17 修改: 2026-07-15 02:20
nth-check CVE-2021-3803 高危 1.0.2 2.0.1 nodejs-nth-check: inefficient regular expression complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3803

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-09-17 07:15 修改: 2026-06-17 04:05
nth-check CVE-2021-3803 高危 1.0.2 2.0.1 nodejs-nth-check: inefficient regular expression complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3803

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-09-17 07:15 修改: 2026-06-17 04:05
path-to-regexp CVE-2024-45296 高危 0.1.7 1.9.0, 0.1.10, 8.0.0, 3.3.0, 6.3.0 path-to-regexp: Backtracking regular expressions cause ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45296

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-09-09 19:15 修改: 2026-06-17 07:53
path-to-regexp CVE-2024-45296 高危 0.1.7 1.9.0, 0.1.10, 8.0.0, 3.3.0, 6.3.0 path-to-regexp: Backtracking regular expressions cause ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45296

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-09-09 19:15 修改: 2026-06-17 07:53
path-to-regexp CVE-2024-52798 高危 0.1.7 0.1.12 path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52798

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-12-05 23:15 修改: 2026-06-17 08:07
path-to-regexp CVE-2024-52798 高危 0.1.7 0.1.12 path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52798

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-12-05 23:15 修改: 2026-06-17 08:07
path-to-regexp CVE-2026-4867 高危 0.1.7 0.1.13 path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4867

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:57
path-to-regexp CVE-2026-4867 高危 0.1.7 0.1.13 path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4867

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:57
brace-expansion CVE-2026-14257 高危 1.1.11 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-13149 高危 5.0.5 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 5.0.5 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
braces CVE-2024-4068 高危 2.3.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01
picomatch CVE-2026-33671 高危 2.2.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
picomatch CVE-2026-33671 高危 2.2.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
playwright CVE-2025-59288 高危 1.0.0 1.55.1 playwright: Playwright Spoofing Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59288

镜像层: sha256:e46bdd0a97d0dad9013c28e33bfd5fc9ec79d1d9b7ae7658c24132d6eb3eaa1a

发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
postcss CVE-2026-45623 高危 7.0.35 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-27 18:16 修改: 2026-07-30 19:57
postcss CVE-2026-45623 高危 7.0.35 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-27 18:16 修改: 2026-07-30 19:57
postcss GHSA-r28c-9q8g-f849 高危 7.0.35 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24
postcss GHSA-r28c-9q8g-f849 高危 7.0.35 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24
qs CVE-2022-24999 高危 6.5.2 6.10.3, 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, 6.2.4 express: "qs" prototype poisoning causes the hang of the node process

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24999

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-11-26 22:15 修改: 2026-06-17 04:32
qs CVE-2022-24999 高危 6.7.0 6.10.3, 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, 6.2.4 express: "qs" prototype poisoning causes the hang of the node process

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24999

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-11-26 22:15 修改: 2026-06-17 04:32
qs CVE-2022-24999 高危 6.7.0 6.10.3, 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, 6.2.4 express: "qs" prototype poisoning causes the hang of the node process

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24999

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-11-26 22:15 修改: 2026-06-17 04:32
scss-tokenizer CVE-2022-25758 高危 0.2.3 0.4.3 scss-tokenizer: Regular expression denial of service in scss-tokenizer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25758

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-07-01 20:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 5.3.0 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 5.7.1 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 5.7.1 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 5.7.1 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 5.7.1 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 5.7.1 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 6.3.0 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 6.3.0 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 7.0.0 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 7.0.0 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 7.3.5 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
serialize-javascript GHSA-5c6j-r48x-rmvq 高危 4.0.0 7.0.3 Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

漏洞详情: https://github.com/advisories/GHSA-5c6j-r48x-rmvq

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-28 02:50 修改: 2026-03-02 16:17
serialize-javascript GHSA-5c6j-r48x-rmvq 高危 4.0.0 7.0.3 Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

漏洞详情: https://github.com/advisories/GHSA-5c6j-r48x-rmvq

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-28 02:50 修改: 2026-03-02 16:17
serialize-javascript GHSA-5c6j-r48x-rmvq 高危 5.0.1 7.0.3 Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

漏洞详情: https://github.com/advisories/GHSA-5c6j-r48x-rmvq

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-28 02:50 修改: 2026-03-02 16:17
braces CVE-2024-4068 高危 2.3.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01
braces CVE-2024-4068 高危 3.0.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01
sigstore CVE-2026-48815 高危 4.1.0 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
ssri CVE-2021-27290 高危 7.1.0 6.0.2, 7.1.1, 8.0.1 nodejs-ssri: Regular expression DoS (ReDoS) when parsing malicious SRI in strict mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27290

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-03-12 22:15 修改: 2026-06-17 03:44
svgo GHSA-2p49-hgcm-8545 高危 1.3.2 2.8.3, 3.3.4, 4.0.2 SVGO removeScripts plugin leaves some executable scripts intact

漏洞详情: https://github.com/advisories/GHSA-2p49-hgcm-8545

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-21 19:42 修改: 2026-07-21 19:42
svgo GHSA-2p49-hgcm-8545 高危 1.3.2 2.8.3, 3.3.4, 4.0.2 SVGO removeScripts plugin leaves some executable scripts intact

漏洞详情: https://github.com/advisories/GHSA-2p49-hgcm-8545

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-21 19:42 修改: 2026-07-21 19:42
braces CVE-2024-4068 高危 3.0.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01
tar CVE-2021-32804 高危 2.2.2 3.2.2, 4.4.14, 5.0.6, 6.1.1 nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32804

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-03 19:15 修改: 2026-06-17 03:53
tar CVE-2021-37713 高危 2.2.2 4.4.18, 5.0.10, 6.1.9 nodejs-tar: Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37713

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-31 17:15 修改: 2026-06-17 04:01
tar CVE-2026-23745 高危 2.2.2 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-16 22:16 修改: 2026-07-27 13:17
tar CVE-2026-23950 高危 2.2.2 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18
tar CVE-2026-24842 高危 2.2.2 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-28 01:16 修改: 2026-07-27 13:17
tar CVE-2026-26960 高危 2.2.2 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-29786 高危 2.2.2 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19
tar CVE-2026-31802 高危 2.2.2 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-59874 高危 2.2.2 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
braces CVE-2024-4068 高危 3.0.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01
browserify-sign CVE-2023-46234 高危 4.2.1 4.2.2 browserify-sign: upper bound check issue in dsaVerify leads to a signature forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46234

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-10-26 15:15 修改: 2026-06-17 06:30
tar CVE-2021-32803 高危 6.1.0 3.2.3, 4.4.15, 5.0.7, 6.1.2 nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32803

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-03 19:15 修改: 2026-06-17 03:53
tar CVE-2021-32803 高危 6.1.0 3.2.3, 4.4.15, 5.0.7, 6.1.2 nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32803

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-03 19:15 修改: 2026-06-17 03:53
tar CVE-2021-32804 高危 6.1.0 3.2.2, 4.4.14, 5.0.6, 6.1.1 nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32804

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-03 19:15 修改: 2026-06-17 03:53
tar CVE-2021-32804 高危 6.1.0 3.2.2, 4.4.14, 5.0.6, 6.1.1 nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32804

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-03 19:15 修改: 2026-06-17 03:53
tar CVE-2021-37701 高危 6.1.0 4.4.16, 5.0.8, 6.1.7 nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37701

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-31 17:15 修改: 2026-06-17 04:01
tar CVE-2021-37701 高危 6.1.0 4.4.16, 5.0.8, 6.1.7 nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37701

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-31 17:15 修改: 2026-06-17 04:01
tar CVE-2021-37712 高危 6.1.0 4.4.18, 5.0.10, 6.1.9 nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37712

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-31 17:15 修改: 2026-06-17 04:01
tar CVE-2021-37712 高危 6.1.0 4.4.18, 5.0.10, 6.1.9 nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37712

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-31 17:15 修改: 2026-06-17 04:01
tar CVE-2021-37713 高危 6.1.0 4.4.18, 5.0.10, 6.1.9 nodejs-tar: Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37713

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-31 17:15 修改: 2026-06-17 04:01
tar CVE-2021-37713 高危 6.1.0 4.4.18, 5.0.10, 6.1.9 nodejs-tar: Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37713

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-08-31 17:15 修改: 2026-06-17 04:01
tar CVE-2026-23745 高危 6.1.0 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-16 22:16 修改: 2026-07-27 13:17
tar CVE-2026-23745 高危 6.1.0 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-16 22:16 修改: 2026-07-27 13:17
tar CVE-2026-23950 高危 6.1.0 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18
tar CVE-2026-23950 高危 6.1.0 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18
tar CVE-2026-24842 高危 6.1.0 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-28 01:16 修改: 2026-07-27 13:17
tar CVE-2026-24842 高危 6.1.0 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-28 01:16 修改: 2026-07-27 13:17
tar CVE-2026-26960 高危 6.1.0 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-26960 高危 6.1.0 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-29786 高危 6.1.0 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19
tar CVE-2026-29786 高危 6.1.0 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19
tar CVE-2026-31802 高危 6.1.0 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-31802 高危 6.1.0 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-59874 高危 6.1.0 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-59874 高危 6.1.0 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
browserify-sign CVE-2023-46234 高危 4.2.1 4.2.2 browserify-sign: upper bound check issue in dsaVerify leads to a signature forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46234

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-10-26 15:15 修改: 2026-06-17 06:30
tar CVE-2026-59874 高危 7.5.13 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
terser CVE-2022-25858 高危 4.8.0 4.8.1, 5.14.2 terser: insecure use of regular expressions leads to ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25858

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-07-15 20:15 修改: 2026-06-17 04:34
terser CVE-2022-25858 高危 4.8.0 4.8.1, 5.14.2 terser: insecure use of regular expressions leads to ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25858

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-07-15 20:15 修改: 2026-06-17 04:34
terser CVE-2022-25858 高危 5.7.0 4.8.1, 5.14.2 terser: insecure use of regular expressions leads to ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25858

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-07-15 20:15 修改: 2026-06-17 04:34
trim-newlines CVE-2021-33623 高危 1.0.0 3.0.1, 4.0.1 nodejs-trim-newlines: ReDoS in .end() method

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33623

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-05-28 18:15 修改: 2026-06-17 03:54
undici CVE-2026-12151 高危 6.25.0 6.27.0, 7.28.0, 8.5.0 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-06-17 17:16 修改: 2026-07-30 12:17
@babel/plugin-transform-modules-systemjs CVE-2026-44728 高危 7.13.8 7.29.4, 8.0.0-alpha.13 Babel is a compiler for writing next generation JavaScript. From 7.12. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44728

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-05-26 18:16 修改: 2026-07-24 11:10
@babel/plugin-transform-modules-systemjs CVE-2026-44728 高危 7.13.8 7.29.4, 8.0.0-alpha.13 Babel is a compiler for writing next generation JavaScript. From 7.12. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44728

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-05-26 18:16 修改: 2026-07-24 11:10
webpack-dev-middleware CVE-2024-29180 高危 3.7.3 7.1.0, 6.1.2, 5.3.4 webpack-dev-middleware: lack of URL validation may lead to file leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29180

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-03-21 17:15 修改: 2026-06-17 07:22
webpack-dev-middleware CVE-2024-29180 高危 3.7.3 7.1.0, 6.1.2, 5.3.4 webpack-dev-middleware: lack of URL validation may lead to file leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29180

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-03-21 17:15 修改: 2026-06-17 07:22
cross-spawn CVE-2024-21538 高危 3.0.1 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-11-08 05:15 修改: 2026-07-28 16:17
cross-spawn CVE-2024-21538 高危 6.0.5 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-11-08 05:15 修改: 2026-07-28 16:17
ws CVE-2024-37890 高危 6.2.1 5.2.4, 6.2.3, 7.5.10, 8.17.1 nodejs-ws: denial of service when handling a request with many HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37890

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-06-17 20:15 修改: 2026-06-17 07:38
ws CVE-2024-37890 高危 6.2.1 5.2.4, 6.2.3, 7.5.10, 8.17.1 nodejs-ws: denial of service when handling a request with many HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37890

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-06-17 20:15 修改: 2026-06-17 07:38
ws CVE-2026-48779 高危 6.2.1 5.2.5, 6.2.4, 7.5.11, 8.21.0 ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48779

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-17 13:20 修改: 2026-07-30 12:18
ws CVE-2026-48779 高危 6.2.1 5.2.5, 6.2.4, 7.5.11, 8.21.0 ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48779

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-17 13:20 修改: 2026-07-30 12:18
@babel/helpers CVE-2025-27789 中危 7.14.0 7.26.10, 8.0.0-alpha.17 Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27789

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-03-11 20:15 修改: 2026-06-17 09:04
follow-redirects CVE-2022-0536 中危 1.14.0 1.14.8 follow-redirects: Exposure of Sensitive Information via Authorization Header leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0536

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-02-09 11:15 修改: 2026-06-17 04:20
follow-redirects CVE-2022-0536 中危 1.14.0 1.14.8 follow-redirects: Exposure of Sensitive Information via Authorization Header leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0536

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-02-09 11:15 修改: 2026-06-17 04:20
follow-redirects CVE-2023-26159 中危 1.14.0 1.15.4 follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26159

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-01-02 05:15 修改: 2026-06-17 05:42
serialize-javascript CVE-2026-34043 中危 5.0.1 7.0.5 serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34043

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
follow-redirects CVE-2023-26159 中危 1.14.0 1.15.4 follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26159

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-01-02 05:15 修改: 2026-06-17 05:42
follow-redirects CVE-2024-28849 中危 1.14.0 1.15.6 follow-redirects: Possible credential leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28849

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-03-14 17:15 修改: 2026-06-17 07:21
follow-redirects CVE-2024-28849 中危 1.14.0 1.15.6 follow-redirects: Possible credential leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28849

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-03-14 17:15 修改: 2026-06-17 07:21
node-forge CVE-2022-0122 中危 0.10.0 1.0.0 Open Redirect in node-forge

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0122

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-01-06 05:15 修改: 2026-06-17 04:20
node-forge CVE-2022-0122 中危 0.10.0 1.0.0 Open Redirect in node-forge

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0122

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-01-06 05:15 修改: 2026-06-17 04:20
node-forge CVE-2022-24773 中危 0.10.0 1.3.0 node-forge: Signature verification leniency in checking `DigestInfo` structure

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24773

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-03-18 14:15 修改: 2026-06-17 04:32
node-forge CVE-2022-24773 中危 0.10.0 1.3.0 node-forge: Signature verification leniency in checking `DigestInfo` structure

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24773

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-03-18 14:15 修改: 2026-06-17 04:32
node-forge CVE-2025-66030 中危 0.10.0 1.3.2 node-forge: node-forge: Integer Overflow allows OID-based security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66030

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-11-26 23:15 修改: 2026-06-17 09:56
node-forge CVE-2025-66030 中危 0.10.0 1.3.2 node-forge: node-forge: Integer Overflow allows OID-based security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66030

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-11-26 23:15 修改: 2026-06-17 09:56
node-sass CVE-2020-24025 中危 4.14.1 7.0.0 nodejs-node-sass: Certificate validation is disabled when requesting binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24025

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-01-11 19:15 修改: 2026-06-17 03:05
follow-redirects GHSA-r4q5-vmmm-2653 中危 1.14.0 1.16.0 follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets

漏洞详情: https://github.com/advisories/GHSA-r4q5-vmmm-2653

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-04-14 01:11 修改: 2026-04-14 01:11
follow-redirects GHSA-r4q5-vmmm-2653 中危 1.14.0 1.16.0 follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets

漏洞详情: https://github.com/advisories/GHSA-r4q5-vmmm-2653

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-04-14 01:11 修改: 2026-04-14 01:11
path-parse CVE-2021-23343 中危 1.0.6 1.0.7 nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23343

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-05-04 09:15 修改: 2026-06-17 03:38
path-parse CVE-2021-23343 中危 1.0.6 1.0.7 nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23343

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-05-04 09:15 修改: 2026-06-17 03:38
@sigstore/core CVE-2026-48758 中危 3.2.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
@sigstore/verify CVE-2026-48816 中危 3.1.0 3.1.1 sigstore-js: github.com/sigstore/sigstore-js: sigstore-js: Insufficient verification of data authenticity allows timestamp manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48816

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
tar CVE-2024-28863 中危 2.2.2 6.2.1 node-tar: denial of service while parsing a tar file due to lack of folders depth validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28863

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-03-21 23:15 修改: 2026-06-17 07:21
tar CVE-2026-53655 中危 2.2.2 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 2.2.2 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 2.2.2 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar GHSA-r292-9mhp-454m 中危 2.2.2 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
ajv CVE-2025-69873 中危 6.12.6 8.18.0, 6.14.0 ajv: ReDoS via $data reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-11 19:15 修改: 2026-07-27 13:16
brace-expansion CVE-2026-33750 中危 1.1.11 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
http-proxy-middleware CVE-2026-55602 中危 0.19.1 3.0.6, 4.1.0, 2.0.10 http-proxy-middleware: http-proxy-middleware: Unintended backend routing due to crafted Host header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55602

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:06
http-proxy-middleware CVE-2026-55602 中危 0.19.1 3.0.6, 4.1.0, 2.0.10 http-proxy-middleware: http-proxy-middleware: Unintended backend routing due to crafted Host header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55602

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:06
lodash CVE-2025-13465 中危 4.17.21 4.17.23 lodash: prototype pollution in _.unset and _.omit functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13465

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-21 20:16 修改: 2026-07-31 13:17
lodash CVE-2025-13465 中危 4.17.21 4.17.23 lodash: prototype pollution in _.unset and _.omit functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13465

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-21 20:16 修改: 2026-07-31 13:17
lodash CVE-2026-2950 中危 4.17.21 4.18.0 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2950

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-31 20:16 修改: 2026-07-24 20:10
lodash CVE-2026-2950 中危 4.17.21 4.18.0 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2950

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-31 20:16 修改: 2026-07-24 20:10
micromatch CVE-2024-4067 中危 3.1.10 4.0.8 micromatch: vulnerable to Regular Expression Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4067

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01
micromatch CVE-2024-4067 中危 3.1.10 4.0.8 micromatch: vulnerable to Regular Expression Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4067

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01
picomatch CVE-2026-33672 中危 2.2.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
picomatch CVE-2026-33672 中危 2.2.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
brace-expansion CVE-2026-33750 中危 1.1.11 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
ajv CVE-2025-69873 中危 6.12.6 8.18.0, 6.14.0 ajv: ReDoS via $data reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-11 19:15 修改: 2026-07-27 13:16
ip-address CVE-2026-42338 中危 10.1.0 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-05-12 20:16 修改: 2026-07-29 13:18
@babel/runtime CVE-2025-27789 中危 7.14.0 7.26.10, 8.0.0-alpha.17 Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27789

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-03-11 20:15 修改: 2026-06-17 09:04
brace-expansion CVE-2026-45149 中危 5.0.5 5.0.6 brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
postcss CVE-2021-23368 中危 7.0.35 7.0.36, 8.2.10 nodejs-postcss: Regular expression denial of service during source map parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23368

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-04-12 14:15 修改: 2026-06-17 03:38
postcss CVE-2021-23368 中危 7.0.35 7.0.36, 8.2.10 nodejs-postcss: Regular expression denial of service during source map parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23368

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-04-12 14:15 修改: 2026-06-17 03:38
postcss CVE-2021-23382 中危 7.0.35 8.2.13, 7.0.36 nodejs-postcss: ReDoS via getAnnotationURL() and loadAnnotation() in lib/previous-map.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23382

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-04-26 16:15 修改: 2026-06-17 03:38
postcss CVE-2021-23382 中危 7.0.35 8.2.13, 7.0.36 nodejs-postcss: ReDoS via getAnnotationURL() and loadAnnotation() in lib/previous-map.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23382

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-04-26 16:15 修改: 2026-06-17 03:38
postcss CVE-2023-44270 中危 7.0.35 8.4.31 PostCSS: Improper input validation in PostCSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44270

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-09-29 22:15 修改: 2026-06-17 06:27
postcss CVE-2023-44270 中危 7.0.35 8.4.31 PostCSS: Improper input validation in PostCSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44270

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-09-29 22:15 修改: 2026-06-17 06:27
postcss CVE-2026-41305 中危 7.0.35 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46
postcss CVE-2026-41305 中危 7.0.35 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46
js-yaml CVE-2025-64718 中危 3.14.1 4.1.1, 3.14.2 js-yaml: js-yaml prototype pollution in merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64718

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-11-13 16:15 修改: 2026-06-17 09:55
tar CVE-2024-28863 中危 6.1.0 6.2.1 node-tar: denial of service while parsing a tar file due to lack of folders depth validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28863

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-03-21 23:15 修改: 2026-06-17 07:21
tar CVE-2024-28863 中危 6.1.0 6.2.1 node-tar: denial of service while parsing a tar file due to lack of folders depth validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28863

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-03-21 23:15 修改: 2026-06-17 07:21
tar CVE-2026-53655 中危 6.1.0 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-53655 中危 6.1.0 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 6.1.0 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59871 中危 6.1.0 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 6.1.0 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar CVE-2026-59875 中危 6.1.0 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar GHSA-r292-9mhp-454m 中危 6.1.0 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
tar GHSA-r292-9mhp-454m 中危 6.1.0 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
qs CVE-2025-15284 中危 6.5.2 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
js-yaml CVE-2025-64718 中危 3.14.1 4.1.1, 3.14.2 js-yaml: js-yaml prototype pollution in merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64718

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-11-13 16:15 修改: 2026-06-17 09:55
tar CVE-2026-53655 中危 7.5.13 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 7.5.13 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 7.5.13 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar GHSA-r292-9mhp-454m 中危 7.5.13 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
js-yaml CVE-2026-53550 中危 3.14.1 4.2.0, 3.15.0 js-yaml: js-yaml: Denial of Service via crafted YAML merge keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53550

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-22 16:16 修改: 2026-07-09 20:33
qs CVE-2025-15284 中危 6.7.0 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
qs CVE-2025-15284 中危 6.7.0 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
tough-cookie CVE-2023-26136 中危 2.5.0 4.1.3 tough-cookie: prototype pollution in cookie memstore

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26136

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-07-01 05:15 修改: 2026-06-17 05:42
request CVE-2023-28155 中危 2.88.2 request: bypass of SSRF mitigations when following a cross-protocol redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28155

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2023-03-16 15:15 修改: 2026-06-17 05:46
js-yaml CVE-2026-53550 中危 3.14.1 4.2.0, 3.15.0 js-yaml: js-yaml: Denial of Service via crafted YAML merge keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53550

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-22 16:16 修改: 2026-07-09 20:33
undici CVE-2026-9679 中危 6.25.0 6.27.0, 7.28.0, 8.5.0 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
bn.js CVE-2026-2739 中危 4.12.0 4.12.3, 5.2.3 bn.js: bn.js: Denial of Service via calling maskn(0)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2739

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-20 05:17 修改: 2026-06-17 10:31
bn.js CVE-2026-2739 中危 4.12.0 4.12.3, 5.2.3 bn.js: bn.js: Denial of Service via calling maskn(0)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2739

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-20 05:17 修改: 2026-06-17 10:31
url-parse CVE-2021-3664 中危 1.5.1 1.5.2 nodejs-url-parse: URL Redirection to Untrusted Site

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3664

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-07-26 12:15 修改: 2026-06-17 04:05
url-parse CVE-2021-3664 中危 1.5.1 1.5.2 nodejs-url-parse: URL Redirection to Untrusted Site

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3664

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-07-26 12:15 修改: 2026-06-17 04:05
url-parse CVE-2022-0512 中危 1.5.1 1.5.6 nodejs-url-parse: authorization bypass through user-controlled key

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0512

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-02-14 16:15 修改: 2026-06-17 04:20
url-parse CVE-2022-0512 中危 1.5.1 1.5.6 nodejs-url-parse: authorization bypass through user-controlled key

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0512

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-02-14 16:15 修改: 2026-06-17 04:20
url-parse CVE-2022-0639 中危 1.5.1 1.5.7 npm-url-parse: Authorization Bypass Through User-Controlled Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0639

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-02-17 18:15 修改: 2026-06-17 04:20
url-parse CVE-2022-0639 中危 1.5.1 1.5.7 npm-url-parse: Authorization Bypass Through User-Controlled Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0639

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-02-17 18:15 修改: 2026-06-17 04:20
url-parse CVE-2022-0691 中危 1.5.1 1.5.9 npm-url-parse: authorization bypass through user-controlled key

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0691

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-02-21 09:15 修改: 2026-06-17 04:21
url-parse CVE-2022-0691 中危 1.5.1 1.5.9 npm-url-parse: authorization bypass through user-controlled key

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0691

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-02-21 09:15 修改: 2026-06-17 04:21
uuid CVE-2026-41907 中危 3.4.0 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 3.4.0 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
bn.js CVE-2026-2739 中危 5.2.0 4.12.3, 5.2.3 bn.js: bn.js: Denial of Service via calling maskn(0)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2739

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-20 05:17 修改: 2026-06-17 10:31
express CVE-2024-29041 中危 4.17.1 4.19.2, 5.0.0-beta.3 express: cause malformed URLs to be evaluated

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29041

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-03-25 21:15 修改: 2026-06-17 07:22
webpack-dev-server CVE-2025-30359 中危 3.11.2 5.2.1 webpack-dev-server: webpack-dev-server information exposure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30359

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-06-03 18:15 修改: 2026-06-17 09:08
webpack-dev-server CVE-2025-30359 中危 3.11.2 5.2.1 webpack-dev-server: webpack-dev-server information exposure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30359

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-06-03 18:15 修改: 2026-06-17 09:08
webpack-dev-server CVE-2025-30360 中危 3.11.2 5.2.1 webpack-dev-server: webpack-dev-server information exposure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30360

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-06-03 18:15 修改: 2026-06-17 09:08
webpack-dev-server CVE-2025-30360 中危 3.11.2 5.2.1 webpack-dev-server: webpack-dev-server information exposure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30360

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-06-03 18:15 修改: 2026-06-17 09:08
webpack-dev-server CVE-2026-14620 中危 3.11.2 5.2.6 webpack-dev-server: webpack-dev-server: Arbitrary file opening and denial of service via exposed developer endpoints

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14620

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-03 17:16 修改: 2026-07-07 15:12
webpack-dev-server CVE-2026-14620 中危 3.11.2 5.2.6 webpack-dev-server: webpack-dev-server: Arbitrary file opening and denial of service via exposed developer endpoints

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14620

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-03 17:16 修改: 2026-07-07 15:12
webpack-dev-server CVE-2026-14631 中危 3.11.2 5.2.6 webpack-dev-server: webpack-dev-server: Denial of Service via malformed headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14631

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-03 18:16 修改: 2026-07-07 15:08
webpack-dev-server CVE-2026-14631 中危 3.11.2 5.2.6 webpack-dev-server: webpack-dev-server: Denial of Service via malformed headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14631

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-03 18:16 修改: 2026-07-07 15:08
webpack-dev-server CVE-2026-6402 中危 3.11.2 5.2.4 webpack-dev-server: webpack-dev-server: Information disclosure due to cross-origin source code exposure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6402

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-05-12 09:16 修改: 2026-06-17 11:00
webpack-dev-server CVE-2026-6402 中危 3.11.2 5.2.4 webpack-dev-server: webpack-dev-server: Information disclosure due to cross-origin source code exposure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6402

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-05-12 09:16 修改: 2026-06-17 11:00
webpack-dev-server CVE-2026-9595 中危 3.11.2 5.2.5 webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9595

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-15 16:16 修改: 2026-06-17 11:05
webpack-dev-server CVE-2026-9595 中危 3.11.2 5.2.5 webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9595

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-15 16:16 修改: 2026-06-17 11:05
express CVE-2024-29041 中危 4.17.1 4.19.2, 5.0.0-beta.3 express: cause malformed URLs to be evaluated

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29041

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-03-25 21:15 修改: 2026-06-17 07:22
bn.js CVE-2026-2739 中危 5.2.0 4.12.3, 5.2.3 bn.js: bn.js: Denial of Service via calling maskn(0)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2739

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-20 05:17 修改: 2026-06-17 10:31
websocket-driver CVE-2026-54490 中危 0.7.4 0.7.5 websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54490

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-17 21:17 修改: 2026-07-23 18:14
websocket-driver CVE-2026-54490 中危 0.7.4 0.7.5 websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54490

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-17 21:17 修改: 2026-07-23 18:14
bn.js CVE-2026-2739 中危 5.2.0 4.12.3, 5.2.3 bn.js: bn.js: Denial of Service via calling maskn(0)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2739

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-20 05:17 修改: 2026-06-17 10:31
bn.js CVE-2026-2739 中危 5.2.0 4.12.3, 5.2.3 bn.js: bn.js: Denial of Service via calling maskn(0)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2739

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-20 05:17 修改: 2026-06-17 10:31
@babel/runtime CVE-2025-27789 中危 7.14.0 7.26.10, 8.0.0-alpha.17 Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27789

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-03-11 20:15 修改: 2026-06-17 09:04
@babel/helpers CVE-2025-27789 中危 7.14.0 7.26.10, 8.0.0-alpha.17 Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27789

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-03-11 20:15 修改: 2026-06-17 09:04
ws CVE-2021-32640 中危 6.2.1 7.4.6, 6.2.2, 5.2.3 nodejs-ws: Specially crafted value of the `Sec-Websocket-Protocol` header can be used to significantly slow down a ws server

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32640

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-05-25 19:15 修改: 2026-06-17 03:53
ws CVE-2021-32640 中危 6.2.1 7.4.6, 6.2.2, 5.2.3 nodejs-ws: Specially crafted value of the `Sec-Websocket-Protocol` header can be used to significantly slow down a ws server

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32640

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2021-05-25 19:15 修改: 2026-06-17 03:53
yaml CVE-2026-33532 中危 1.10.2 2.8.3, 1.10.3 yaml: yaml: Denial of Service via deeply nested YAML document parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33532

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-26 20:16 修改: 2026-06-17 10:37
yaml CVE-2026-33532 中危 1.10.2 2.8.3, 1.10.3 yaml: yaml: Denial of Service via deeply nested YAML document parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33532

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-26 20:16 修改: 2026-06-17 10:37
serve-static CVE-2024-43800 低危 1.14.1 1.16.0, 2.1.0 serve-static: Improper Sanitization in serve-static

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43800

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51
serve-static CVE-2024-43800 低危 1.14.1 1.16.0, 2.1.0 serve-static: Improper Sanitization in serve-static

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43800

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51
node-forge GHSA-5rrq-pxf6-6jx5 低危 0.10.0 1.0.0 Prototype Pollution in node-forge debug API.

漏洞详情: https://github.com/advisories/GHSA-5rrq-pxf6-6jx5

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-01-08 00:22 修改: 2022-01-07 22:20
node-forge GHSA-gf8q-jrpm-jvxq 低危 0.10.0 1.0.0 URL parsing in node-forge could lead to undesired behavior.

漏洞详情: https://github.com/advisories/GHSA-gf8q-jrpm-jvxq

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-01-08 00:22 修改: 2022-01-07 22:20
node-forge GHSA-gf8q-jrpm-jvxq 低危 0.10.0 1.0.0 URL parsing in node-forge could lead to undesired behavior.

漏洞详情: https://github.com/advisories/GHSA-gf8q-jrpm-jvxq

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-01-08 00:22 修改: 2022-01-07 22:20
ip CVE-2023-42282 低危 1.1.5 2.0.1, 1.1.9 nodejs-ip: arbitrary code execution via the isPublic() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42282

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-02-08 17:15 修改: 2026-06-17 06:23
ip CVE-2023-42282 低危 1.1.5 2.0.1, 1.1.9 nodejs-ip: arbitrary code execution via the isPublic() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42282

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-02-08 17:15 修改: 2026-06-17 06:23
brace-expansion CVE-2025-5889 低危 1.1.11 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
on-headers CVE-2025-7339 低危 1.0.2 1.1.0 on-headers: on-headers vulnerable to http response header manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7339

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-07-17 16:15 修改: 2026-06-17 10:04
on-headers CVE-2025-7339 低危 1.0.2 1.1.0 on-headers: on-headers vulnerable to http response header manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7339

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-07-17 16:15 修改: 2026-06-17 10:04
cookie CVE-2024-47764 低危 0.4.0 0.7.0 cookie: cookie accepts cookie name, path, and domain with out of bounds characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47764

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-10-04 20:15 修改: 2026-06-17 07:57
cookie CVE-2024-47764 低危 0.4.0 0.7.0 cookie: cookie accepts cookie name, path, and domain with out of bounds characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47764

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-10-04 20:15 修改: 2026-06-17 07:57
body-parser CVE-2026-12590 低危 1.19.0 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
elliptic CVE-2024-42459 低危 6.5.4 6.5.7 elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42459

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-08-02 07:16 修改: 2026-06-17 07:49
elliptic CVE-2024-42459 低危 6.5.4 6.5.7 elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42459

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-08-02 07:16 修改: 2026-06-17 07:49
qs CVE-2026-2391 低危 6.7.0 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
qs CVE-2026-2391 低危 6.7.0 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
elliptic CVE-2024-42460 低危 6.5.4 6.5.7 elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42460

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-08-02 07:16 修改: 2026-06-17 07:49
elliptic CVE-2024-42460 低危 6.5.4 6.5.7 elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42460

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-08-02 07:16 修改: 2026-06-17 07:49
elliptic CVE-2024-42461 低危 6.5.4 6.5.7 elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42461

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-08-02 07:16 修改: 2026-06-17 07:49
elliptic CVE-2024-42461 低危 6.5.4 6.5.7 elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42461

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-08-02 07:16 修改: 2026-06-17 07:49
elliptic CVE-2024-48948 低危 6.5.4 6.6.0 elliptic: ECDSA signature verification error may reject legitimate transactions

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-48948

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-10-15 14:15 修改: 2026-06-17 07:59
elliptic CVE-2024-48948 低危 6.5.4 6.6.0 elliptic: ECDSA signature verification error may reject legitimate transactions

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-48948

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-10-15 14:15 修改: 2026-06-17 07:59
elliptic CVE-2024-48949 低危 6.5.4 6.5.6 elliptic: Missing Validation in Elliptic's EDDSA Signature Verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-48949

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-10-10 01:15 修改: 2026-06-17 07:59
elliptic CVE-2024-48949 低危 6.5.4 6.5.6 elliptic: Missing Validation in Elliptic's EDDSA Signature Verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-48949

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-10-10 01:15 修改: 2026-06-17 07:59
elliptic CVE-2025-14505 低危 6.5.4 elliptic: Key handling flaws in Elliptic

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14505

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-08 21:15 修改: 2026-06-17 08:36
elliptic CVE-2025-14505 低危 6.5.4 elliptic: Key handling flaws in Elliptic

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14505

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-01-08 21:15 修改: 2026-06-17 08:36
body-parser CVE-2026-12590 低危 1.19.0 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
@babel/core CVE-2026-49356 低危 7.14.0 8.0.0-rc.6, 7.29.6 @babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49356

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
@babel/core CVE-2026-49356 低危 7.14.0 8.0.0-rc.6, 7.29.6 @babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49356

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
send CVE-2024-43799 低危 0.17.1 0.19.0 send: Code Execution Vulnerability in Send Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43799

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51
send CVE-2024-43799 低危 0.17.1 0.19.0 send: Code Execution Vulnerability in Send Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43799

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51
brace-expansion CVE-2025-5889 低危 1.1.11 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
express CVE-2024-43796 低危 4.17.1 4.20.0, 5.0.0 express: Improper Input Handling in Express Redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43796

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51
express CVE-2024-43796 低危 4.17.1 4.20.0, 5.0.0 express: Improper Input Handling in Express Redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43796

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51
node-forge GHSA-5rrq-pxf6-6jx5 低危 0.10.0 1.0.0 Prototype Pollution in node-forge debug API.

漏洞详情: https://github.com/advisories/GHSA-5rrq-pxf6-6jx5

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2022-01-08 00:22 修改: 2022-01-07 22:20
undici CVE-2026-11525 低危 6.25.0 6.27.0, 7.28.0, 8.5.0 undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici CVE-2026-6733 低危 6.25.0 6.27.0, 7.28.0, 8.5.0 undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733

镜像层: sha256:d86982a5656ed98bc07ce312cfa889c8eae9c9319f166ebb5552f1da0232bd3a

发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
Ruby (gemspec)
低危漏洞:11 中危漏洞:24 高危漏洞:17 严重漏洞:6
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
activestorage CVE-2026-33195 严重 7.1.5.2 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 Rails: Active Storage: Active Storage (Rails): Arbitrary file access via path traversal in blob keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33195

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-24 00:16 修改: 2026-07-15 02:20
activestorage CVE-2026-33202 严重 7.1.5.2 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 rails: Active Storage: Unintended file deletion via crafted blob keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33202

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-24 00:16 修改: 2026-06-17 10:37
activestorage CVE-2026-66066 严重 7.1.5.2 ~> 7.2.3, >= 7.2.3.2, ~> 8.0.5, >= 8.0.5.1, >= 8.1.3.1 Action Pack is a framework for handling and responding to web requests ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66066

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-30 19:18 修改: 2026-07-31 16:17
concurrent-ruby CVE-2026-54906 严重 1.3.5 >= 1.3.7 concurrent-ruby: rubygem-concurrent-ruby: concurrent-ruby: Synchronization flaw in ReadWriteLock allows unauthorized lock release and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54906

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-24 17:17 修改: 2026-06-26 20:00
net-imap CVE-2026-42257 严重 0.5.8 ~> 0.4.24, ~> 0.5.14, >= 0.6.4 net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42257

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2026-05-09 20:16 修改: 2026-07-24 21:10
zlib CVE-2026-27820 严重 3.2.1 ~> 3.0.1, ~> 3.1.2, >= 3.2.3 zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27820

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2026-04-16 18:16 修改: 2026-06-17 10:27
concurrent-ruby CVE-2026-54904 高危 1.3.5 >= 1.3.7 concurrent-ruby: rubygem-concurrent-ruby: concurrent-ruby: Denial of Service due to infinite loop in AtomicReference#update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54904

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-24 17:17 修改: 2026-06-26 19:26
datadog CVE-2026-50276 高危 2.19.0 >= 2.32.0 dd-trace-rb - Improper parsing of W3C baggage headers may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50276

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
erb CVE-2026-41316 高危 4.0.4 ~> 4.0.3.1, ~> 4.0.4.1, ~> 6.0.1.1, >= 6.0.4 erb: ERB: Arbitrary code execution via deserialization bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41316

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2026-04-24 03:16 修改: 2026-07-15 02:21
faraday CVE-2026-54297 高危 2.14.2 ~> 1.10.6, >= 2.14.3 faraday: Faraday: Denial of Service via crafted nested query strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54297

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-24 17:17 修改: 2026-07-15 01:16
activesupport CVE-2026-33176 高危 7.1.5.2 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 Rails: Active Support: Active Support: Denial of Service via large scientific notation strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33176

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-24 00:16 修改: 2026-06-17 10:37
net-imap CVE-2026-42245 高危 0.5.8 ~> 0.4.24, ~> 0.5.14, >= 0.6.4 ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42245

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2026-05-09 20:16 修改: 2026-07-24 19:10
net-imap CVE-2026-42246 高危 0.5.8 ~> 0.3.10, ~> 0.4.24, ~> 0.5.14, >= 0.6.4 net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42246

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2026-05-09 20:16 修改: 2026-07-24 19:10
net-imap CVE-2026-42258 高危 0.5.8 ~> 0.4.24, ~> 0.5.14, >= 0.6.4 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42258

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2026-05-09 20:16 修改: 2026-07-24 21:10
oj CVE-2026-54592 高危 3.16.10 >= 3.17.3 oj: Oj: Denial of Service via deeply nested JSON input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54592

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-01 00:16 修改: 2026-07-01 15:27
oj CVE-2026-54896 高危 3.16.10 >= 3.17.3 oj: Oj: Heap buffer overflow in exception serialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54896

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-01 00:16 修改: 2026-07-01 15:27
oj CVE-2026-54897 高危 3.16.10 >= 3.17.3 oj: Oj: Use-After-Free in Oj::Doc Iterators via reentrant close

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54897

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-01 00:16 修改: 2026-07-01 15:27
oj CVE-2026-54900 高危 3.16.10 >= 3.17.3 oj: Oj: Heap corruption via crafted JSON object key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54900

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-01 00:16 修改: 2026-07-01 17:16
oj CVE-2026-54903 高危 3.16.10 >= 3.17.3 oj: Oj: Heap corruption and Denial of Service via integer overflow in JSON parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54903

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-01 00:16 修改: 2026-07-01 15:27
resolv CVE-2025-24294 高危 0.6.0 ~> 0.2.2, ~> 0.3.0, >= 0.6.1 resolv: Denial of Service in resolv gem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24294

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2025-07-12 04:15 修改: 2026-06-17 08:58
uri CVE-2025-61594 高危 1.0.3 ~> 0.12.5, ~> 0.13.3, >= 1.0.4 uri: URI module: Credential exposure via URI + operator

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61594

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2025-12-30 21:15 修改: 2026-06-17 09:50
websocket-driver CVE-2026-61666 高危 0.7.7 >= 0.8.2 Denial of service via malformed Host header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-61666

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
activestorage CVE-2026-33174 高危 7.1.5.2 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 Rails: Active Storage: Rails Active Storage: Denial of Service via unbounded Range header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33174

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-24 00:16 修改: 2026-06-17 10:37
net-imap CVE-2026-42256 中危 0.5.8 ~> 0.4.24, ~> 0.5.14, >= 0.6.4 ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42256

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2026-05-09 20:16 修改: 2026-07-24 19:10
net-imap CVE-2026-47240 中危 0.5.8 ~> 0.5.15, >= 0.6.4.1 net-imap: Net::IMAP: Command injection via non-synchronizing literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47240

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2026-06-22 21:16 修改: 2026-06-23 16:16
net-imap CVE-2026-47242 中危 0.5.8 ~> 0.5.15, >= 0.6.4.1 Net::IMAP implements Internet Message Access Protocol (IMAP) client fu ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47242

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2026-06-22 21:16 修改: 2026-06-23 15:03
nokogiri GHSA-5prr-v3j2-97mh 中危 1.19.3 >= 1.19.4 Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`

漏洞详情: https://github.com/advisories/GHSA-5prr-v3j2-97mh

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-19 16:36 修改: 2026-06-19 16:36
devise CVE-2026-32700 中危 4.9.4 >= 5.0.3 devise: Devise: Unauthorized email confirmation due to a race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32700

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-18 21:16 修改: 2026-06-17 10:36
devise CVE-2026-40295 中危 4.9.4 >= 5.0.4 Devise is an authentication solution for Rails based on Warden. In ver ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40295

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
activesupport CVE-2026-33169 中危 7.1.5.2 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 rails: rails-activesupport: Active Support: Denial of Service via crafted long digit strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33169

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-24 00:16 修改: 2026-06-17 10:37
activesupport CVE-2026-33170 中危 7.1.5.2 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 Rails: Active Support: Active Support: Cross-Site Scripting (XSS) due to improper HTML safety flag propagation in SafeBuffer#%

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33170

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-24 00:16 修改: 2026-06-17 10:37
loofah GHSA-9wjq-cp2p-hrgf 中危 2.23.1 >= 2.25.2 SVG `href` attribute bypasses local-reference restriction in Loofah

漏洞详情: https://github.com/advisories/GHSA-9wjq-cp2p-hrgf

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-21 22:01 修改: 2026-07-21 22:01
oj CVE-2026-54500 中危 3.16.10 >= 3.17.3 oj: Oj: Information disclosure via uninitialized stack memory read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54500

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-01 00:16 修改: 2026-07-01 15:27
oj CVE-2026-54502 中危 3.16.10 >= 3.17.3 Oj: Stack Buffer Overflow in Oj.dump via Large Indent

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54502

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-01 00:16 修改: 2026-07-01 17:16
oj CVE-2026-54898 中危 3.16.10 >= 3.17.3 oj: Oj: Denial of Service via input string mutation during JSON parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54898

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-01 00:16 修改: 2026-07-01 15:27
oj CVE-2026-54899 中危 3.16.10 >= 3.17.3 oj: Oj: Use-After-Free in parser symbol key cache toggle

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54899

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-01 00:16 修改: 2026-07-01 15:27
oj CVE-2026-54901 中危 3.16.10 >= 3.17.3 Oj: Use-After-Free in Oj::Parser array_class/hash_class GC Marking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54901

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-01 00:16 修改: 2026-07-01 15:27
oj CVE-2026-54902 中危 3.16.10 >= 3.17.3 Oj: Use-After-Free in Oj::Parser SAJ Long Key Callback

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54902

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-01 00:16 修改: 2026-07-01 15:27
rails-html-sanitizer GHSA-cj75-f6xr-r4g7 中危 1.6.1 >= 1.7.1 Possible XSS vulnerability with certain configurations of rails-html-sanitizer

漏洞详情: https://github.com/advisories/GHSA-cj75-f6xr-r4g7

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-21 22:05 修改: 2026-07-21 22:05
activestorage CVE-2026-33173 中危 7.1.5.2 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 Rails: Active Storage: Rails Active Storage: Content type bypass via arbitrary metadata in direct uploads

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33173

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-24 00:16 修改: 2026-06-17 10:37
rexml CVE-2025-58767 中危 3.4.0 >= 3.4.2 rexml: REXML denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58767

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2025-09-17 18:15 修改: 2026-06-17 09:44
activestorage CVE-2026-33658 中危 7.1.5.2 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 rails: activestorage: Active Storage: Denial of Service via HTTP Range header processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33658

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
concurrent-ruby CVE-2026-54905 中危 1.3.5 >= 1.3.7 concurrent-ruby: Concurrent-ruby: Incorrect write lock granting leading to broken mutual exclusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54905

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-24 17:17 修改: 2026-06-26 20:01
websocket-driver CVE-2026-54463 中危 0.7.7 >= 0.8.1 websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54463

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:04
websocket-driver CVE-2026-54464 中危 0.7.7 >= 0.8.1 ### Impact If this library is used in tandem with the `permessage-def ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54464

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:14
websocket-driver CVE-2026-54465 中危 0.7.7 >= 0.8.1 websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54465

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-17 20:17 修改: 2026-07-23 16:19
actionview CVE-2026-33168 中危 7.1.5.2 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 actionview: Action View: Cross-Site Scripting (XSS) via blank HTML attribute names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33168

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-03-23 23:17 修改: 2026-06-17 10:37
nokogiri GHSA-wfpw-mmfh-qq69 低危 1.19.3 >= 1.19.4 Nokogiri: Possible Use-After-Free in XInclude Processing

漏洞详情: https://github.com/advisories/GHSA-wfpw-mmfh-qq69

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-19 16:37 修改: 2026-06-19 16:37
nokogiri GHSA-wjv4-x9w8-wm3h 低危 1.19.3 >= 1.19.4 Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

漏洞详情: https://github.com/advisories/GHSA-wjv4-x9w8-wm3h

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-19 16:36 修改: 2026-06-19 16:36
msgpack CVE-2026-54522 低危 1.8.0 >= 1.8.2 MessagePack for Ruby is an implementation of the MessagePack binary se ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54522

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-07-30 17:16 修改: 2026-07-30 19:27
json CVE-2026-54696 低危 2.9.1 >= 2.19.9 json: Ruby JSON: Denial of service via heap buffer overflow with oversized streamed objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54696

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2026-06-30 23:17 修改: 2026-07-02 17:54
net-imap CVE-2026-47241 低危 0.5.8 ~> 0.5.15, >= 0.6.4.1 net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47241

镜像层: sha256:55ea456db4e5c3dbec4a38409995e2b361033219d81a1e94150ef0d5ced31e72

发布日期: 2026-06-22 21:16 修改: 2026-06-23 15:16
json CVE-2026-54696 低危 2.19.8 >= 2.19.9 json: Ruby JSON: Denial of service via heap buffer overflow with oversized streamed objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54696

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-30 23:17 修改: 2026-07-02 17:54
nokogiri GHSA-5v8h-3h3q-446p 低危 1.19.3 >= 1.19.4 Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

漏洞详情: https://github.com/advisories/GHSA-5v8h-3h3q-446p

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-19 16:35 修改: 2026-06-19 16:35
nokogiri GHSA-8678-w3jw-xfc2 低危 1.19.3 >= 1.19.4 Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247

漏洞详情: https://github.com/advisories/GHSA-8678-w3jw-xfc2

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-19 16:36 修改: 2026-06-19 16:36
nokogiri GHSA-9cv2-cfxc-v4v2 低危 1.19.3 >= 1.19.4 Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

漏洞详情: https://github.com/advisories/GHSA-9cv2-cfxc-v4v2

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-19 16:36 修改: 2026-06-19 16:36
nokogiri GHSA-p67v-3w7g-wjg7 低危 1.19.3 >= 1.19.4 Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

漏洞详情: https://github.com/advisories/GHSA-p67v-3w7g-wjg7

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-19 16:37 修改: 2026-06-19 16:37
nokogiri GHSA-phwj-rprq-35pp 低危 1.19.3 >= 1.19.4 Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

漏洞详情: https://github.com/advisories/GHSA-phwj-rprq-35pp

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 2026-06-19 16:37 修改: 2026-06-19 16:37
crass GHSA-6wmf-3r64-vcwv 未知 1.0.6 >= 1.0.7 Large numeric exponents cause CPU and memory denial of service

漏洞详情: https://github.com/advisories/GHSA-6wmf-3r64-vcwv

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
crass GHSA-8vfg-2r28-hvhj 未知 1.0.6 >= 1.0.7 Non-ASCII characters cause superlinear CPU consumption

漏洞详情: https://github.com/advisories/GHSA-8vfg-2r28-hvhj

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
crass GHSA-wwpr-jff3-395c 未知 1.0.6 >= 1.0.7 A large number of adjacent CSS comments can trigger a SystemStackError

漏洞详情: https://github.com/advisories/GHSA-wwpr-jff3-395c

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
crass GHSA-6jxj-px6v-747w 未知 1.0.6 >= 1.0.7 Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage

漏洞详情: https://github.com/advisories/GHSA-6jxj-px6v-747w

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
nokogiri GHSA-g9g8-vgvw-g3vf 未知 1.19.3 >= 1.19.4 Possible invalid memory read when calling `Nokogiri::XML::Node#initialize_copy_with_args` with incorrect argument type

漏洞详情: https://github.com/advisories/GHSA-g9g8-vgvw-g3vf

镜像层: sha256:cd41edf5f43a6e6f0636f88813caa66f12e055f269daafbffa86363bd61fa547

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
/gems/ruby/3.4.0/gems/aws-sdk-core-3.240.0/lib/aws-sdk-ssooidc/client.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/gems/ruby/3.4.0/gems/web-push-3.0.1/spec/web_push/vapid_key_spec.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×