docker.io/cloudreve/cloudreve:4.17.0 linux/amd64

docker.io/cloudreve/cloudreve:4.17.0 - Trivy安全扫描结果 扫描时间: 2026-06-26 13:29
全部漏洞信息
低危漏洞:29 中危漏洞:77 高危漏洞:69 严重漏洞:5

系统OS: alpine 3.23.3 扫描引擎: Trivy 扫描时间: 2026-06-26 13:29

docker.io/cloudreve/cloudreve:4.17.0 (alpine 3.23.3) (alpine)
低危漏洞:28 中危漏洞:57 高危漏洞:41 严重漏洞:4
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gnutls CVE-2026-33845 严重 3.8.11-r0 3.8.13-r0 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-30 18:16 修改: 2026-06-24 17:16
gnutls CVE-2026-42010 严重 3.8.11-r0 3.8.13-r0 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-07 12:16 修改: 2026-06-24 17:16
libcrypto3 CVE-2026-31789 严重 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:34
libssl3 CVE-2026-31789 严重 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:34
gnutls CVE-2026-33846 高危 3.8.11-r0 3.8.13-r0 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-04 10:15 修改: 2026-06-24 17:16
gnutls CVE-2026-3833 高危 3.8.11-r0 3.8.13-r0 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-30 18:16 修改: 2026-06-24 17:16
gnutls CVE-2026-42009 高危 3.8.11-r0 3.8.13-r0 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-18 13:16 修改: 2026-06-24 17:16
lcms2 CVE-2026-41254 高危 2.17-r0 2.19-r0 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41254

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-18 07:16 修改: 2026-06-17 10:46
libcap2 CVE-2026-4878 高危 2.77-r0 2.78-r0 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-09 16:16 修改: 2026-06-25 11:16
cups-libs CVE-2026-34980 高危 2.4.16-r0 2.4.18-r0 cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34980

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:39
libcrypto3 CVE-2026-28387 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
libcrypto3 CVE-2026-28388 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
libcrypto3 CVE-2026-28389 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
libcrypto3 CVE-2026-28390 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
libcrypto3 CVE-2026-45447 高危 3.5.5-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52
libexif CVE-2026-32775 高危 0.6.25-r0 0.6.26-r0 libexif: libexif: Buffer overwrite via integer underflow in MakerNotes decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32775

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-16 14:19 修改: 2026-06-17 10:36
libexif CVE-2026-40385 高危 0.6.25-r0 0.6.26-r0 libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40385

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-12 19:16 修改: 2026-06-17 10:45
libexif CVE-2026-40386 高危 0.6.25-r0 0.6.26-r0 libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40386

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-12 19:16 修改: 2026-06-17 10:45
libexpat CVE-2026-25210 高危 2.7.3-r0 2.7.4-r0 libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25210

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-01-30 07:16 修改: 2026-06-17 10:24
libexpat CVE-2026-45186 高危 2.7.3-r0 2.8.1-r0 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-10 07:16 修改: 2026-06-17 10:51
libheif CVE-2025-68431 高危 1.20.2-r1 1.21.2-r0 libheif is an HEIF and AVIF file format decoder and encoder. Prior to ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68431

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2025-12-29 19:15 修改: 2026-06-17 09:59
libheif CVE-2026-32740 高危 1.20.2-r1 1.23.0-r0 libheif: libheif: Arbitrary code execution or denial of service via crafted HEIF/AVIF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32740

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-19 20:16 修改: 2026-06-17 10:36
libinput-libs CVE-2026-35093 高危 1.30.0-r0 1.30.3-r0 libinput: libinput: Unauthorized code execution and information disclosure through Lua bytecode plugins

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35093

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-01 14:16 修改: 2026-06-17 10:40
libpng CVE-2026-25646 高危 1.6.54-r0 1.6.55-r0 libpng: LIBPNG has a heap buffer overflow in png_set_quantize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25646

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-02-10 18:16 修改: 2026-06-17 10:25
libpq CVE-2026-2004 高危 18.1-r0 18.2-r0 postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2004

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-02-12 14:16 修改: 2026-06-17 10:29
libpq CVE-2026-2005 高危 18.1-r0 18.2-r0 postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2005

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-02-12 14:16 修改: 2026-06-17 10:29
libpq CVE-2026-2006 高危 18.1-r0 18.2-r0 postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2006

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-02-12 14:16 修改: 2026-06-17 10:29
libpq CVE-2026-2007 高危 18.1-r0 18.2-r0 postgresql: PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2007

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-02-12 14:16 修改: 2026-06-17 10:29
libpq CVE-2026-6473 高危 18.1-r0 18.4-r0 postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6473

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
libpq CVE-2026-6477 高危 18.1-r0 18.4-r0 postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6477

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
libpq CVE-2026-6478 高危 18.1-r0 18.4-r0 postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6478

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
libpq CVE-2026-6638 高危 18.1-r0 18.4-r0 SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ... ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6638

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:01
libssh CVE-2026-0966 高危 0.11.3-r0 0.11.4-r0 libssh: libssh: Denial of Service via zero-length input in ssh_get_hexa()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0966

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11
gnutls CVE-2026-1584 高危 3.8.11-r0 3.8.12-r0 gnutls: gnutls: Remote Denial of Service via crafted ClientHello with invalid PSK binder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1584

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-09 18:16 修改: 2026-06-17 10:16
libssl3 CVE-2026-28387 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
libssl3 CVE-2026-28388 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
libssl3 CVE-2026-28389 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
libssl3 CVE-2026-28390 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
libssl3 CVE-2026-45447 高危 3.5.5-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52
libxml2 CVE-2026-6732 高危 2.13.9-r0 2.13.9-r1 libxml2: libxml2: Denial of Service via crafted XSD-validated document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6732

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-23 23:16 修改: 2026-06-17 11:01
mbedtls CVE-2026-25835 高危 3.6.5-r0 3.6.6-r0 Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25835

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-01 19:16 修改: 2026-06-17 10:25
musl CVE-2026-40200 高危 1.2.5-r21 1.2.5-r23 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
musl-utils CVE-2026-40200 高危 1.2.5-r21 1.2.5-r23 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
nghttp2-libs CVE-2026-27135 高危 1.68.0-r0 1.68.1 nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27135

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-18 18:16 修改: 2026-06-17 10:26
zlib CVE-2026-22184 高危 1.3.1-r2 1.3.2-r0 zlib: zlib: Arbitrary code execution via buffer overflow in untgz utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22184

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-01-07 21:16 修改: 2026-06-17 10:19
libexpat CVE-2026-32776 中危 2.7.3-r0 2.7.5-r0 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-16 14:19 修改: 2026-06-17 10:36
libexpat CVE-2026-32777 中危 2.7.3-r0 2.7.5-r0 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-16 14:19 修改: 2026-06-17 10:36
libexpat CVE-2026-32778 中危 2.7.3-r0 2.7.5-r0 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-16 14:19 修改: 2026-06-17 10:36
cups-libs CVE-2026-27447 中危 2.4.16-r0 2.4.18-r0 cups: OpenPrinting CUPS: Authorization bypass via case-insensitive username comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27447

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libblkid CVE-2026-27456 中危 2.41.2-r0 2.41.4-r0 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libheif CVE-2026-32738 中危 1.20.2-r1 1.23.0-r0 libheif: libheif: Unsigned integer underflow leads to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32738

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-19 19:16 修改: 2026-06-17 10:36
libheif CVE-2026-32739 中危 1.20.2-r1 1.23.0-r0 libheif: libheif: Denial of Service via crafted HEIF sequence file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32739

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-19 20:16 修改: 2026-06-17 10:36
cups-libs CVE-2026-34978 中危 2.4.16-r0 2.4.18-r0 cups: OpenPrinting CUPS: Denial of Service via path traversal in RSS notifier

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34978

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:39
libmount CVE-2026-27456 中危 2.41.2-r0 2.41.4-r0 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
cups-libs CVE-2026-34979 中危 2.4.16-r0 2.4.18-r0 cups: OpenPrinting CUPS: Denial of Service via heap-based buffer overflow in job attribute processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34979

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:39
libpng CVE-2026-33416 中危 1.6.54-r0 1.6.56-r0 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37
libpng CVE-2026-33636 中危 1.6.54-r0 1.6.56-r0 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33636

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37
libpng CVE-2026-34757 中危 1.6.54-r0 1.6.57-r0 libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39
libpng CVE-2026-40930 中危 1.6.54-r0 1.6.58-r1 LIBPNG is a reference library for use in applications that process PNG ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40930

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-06-04 16:16 修改: 2026-06-17 10:45
cups-libs CVE-2026-34990 中危 2.4.16-r0 2.4.18-r0 cups: OpenPrinting CUPS: Privilege escalation via arbitrary file overwrite due to coerced authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34990

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:39
cups-libs CVE-2026-39314 中危 2.4.16-r0 2.4.18-r0 cups: CUPS: Denial of Service via integer underflow in IPP attribute handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39314

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-07 17:16 修改: 2026-06-17 10:41
cups-libs CVE-2026-39316 中危 2.4.16-r0 2.4.18-r0 cups: CUPS: Denial of Service and potential arbitrary code execution via use-after-free vulnerability when deleting temporary printers.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39316

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-07 17:16 修改: 2026-06-17 10:41
gnutls CVE-2025-14831 中危 3.8.11-r0 3.8.12-r0 gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14831

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-02-09 15:16 修改: 2026-06-25 04:17
gnutls CVE-2026-42011 中危 3.8.11-r0 3.8.13-r0 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-07 15:16 修改: 2026-06-24 17:16
libcrypto3 CVE-2026-2673 中危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31
libcrypto3 CVE-2026-31790 中危 3.5.5-r0 3.5.6-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:34
libcrypto3 CVE-2026-34182 中危 3.5.5-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
libpq CVE-2026-2003 中危 18.1-r0 18.2-r0 postgresql: PostgreSQL oidvector discloses a few bytes of memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2003

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-02-12 14:16 修改: 2026-06-17 10:29
libpq CVE-2026-6472 中危 18.1-r0 18.4-r0 postgresql: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6472

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
libpq CVE-2026-6474 中危 18.1-r0 18.4-r0 postgresql: PostgreSQL: Information disclosure via externally-controlled format string in timeofday() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6474

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
libpq CVE-2026-6475 中危 18.1-r0 18.4-r0 postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6475

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
libpq CVE-2026-6476 中危 18.1-r0 18.4-r0 SQL injection in PostgreSQL pg_createsubscriber allows an attacker wit ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6476

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
libpq CVE-2026-6479 中危 18.1-r0 18.4-r0 Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6479

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:00
libpq CVE-2026-6575 中危 18.1-r0 18.4-r0 postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_restore_attribute_stats()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6575

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:01
libpq CVE-2026-6637 中危 18.1-r0 18.4-r0 Stack buffer overflow in PostgreSQL module "refint" allows an unprivil ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6637

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-14 14:16 修改: 2026-06-17 11:01
libcrypto3 CVE-2026-34183 中危 3.5.5-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
libssh CVE-2026-0964 中危 0.11.3-r0 0.11.4-r0 libssh: Improper sanitation of paths received from SCP servers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0964

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11
libssh CVE-2026-0967 中危 0.11.3-r0 0.11.4-r0 libssh: libssh: Denial of Service via inefficient regular expression processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0967

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11
libcrypto3 CVE-2026-42764 中危 3.5.5-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libcrypto3 CVE-2026-45445 中危 3.5.5-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52
libcurl CVE-2025-14017 中危 8.17.0-r1 8.19.0-r0 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
libcurl CVE-2026-1965 中危 8.17.0-r1 8.19.0-r0 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
libcurl CVE-2026-3783 中危 8.17.0-r1 8.19.0-r0 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl CVE-2026-3784 中危 8.17.0-r1 8.19.0-r0 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libssl3 CVE-2026-2673 中危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31
libssl3 CVE-2026-31790 中危 3.5.5-r0 3.5.6-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:34
libssl3 CVE-2026-34182 中危 3.5.5-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
libssl3 CVE-2026-34183 中危 3.5.5-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
libssl3 CVE-2026-42764 中危 3.5.5-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libssl3 CVE-2026-45445 中危 3.5.5-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52
libuuid CVE-2026-27456 中危 2.41.2-r0 2.41.4-r0 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libcurl CVE-2026-3805 中危 8.17.0-r1 8.19.0-r0 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
gnutls CVE-2026-42012 中危 3.8.11-r0 3.8.13-r0 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-26 22:16 修改: 2026-06-24 17:17
mbedtls CVE-2026-25834 中危 3.6.5-r0 3.6.6-r0 mbedtls: Mbed TLS: Algorithm downgrade vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25834

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-01 18:16 修改: 2026-06-17 10:25
gnutls CVE-2026-42013 中危 3.8.11-r0 3.8.13-r0 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-26 22:16 修改: 2026-06-24 17:17
musl CVE-2026-6042 中危 1.2.5-r21 1.2.5-r22 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
gnutls CVE-2026-42014 中危 3.8.11-r0 3.8.13-r0 gnutls: Fix use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-06-16 02:16 修改: 2026-06-24 17:17
musl-utils CVE-2026-6042 中危 1.2.5-r21 1.2.5-r22 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
gnutls CVE-2026-42015 中危 3.8.11-r0 3.8.13-r0 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-26 22:16 修改: 2026-06-24 17:17
xz-libs CVE-2026-34743 中危 5.8.2-r0 5.8.3-r0 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-02 19:21 修改: 2026-06-17 10:39
gnutls CVE-2026-5260 中危 3.8.11-r0 3.8.13-r0 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-05-26 22:16 修改: 2026-06-24 17:17
zlib CVE-2026-27171 中危 1.3.1-r2 1.3.2-r0 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
libcurl CVE-2025-14524 低危 8.17.0-r1 8.19.0-r0 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
libcurl CVE-2025-14819 低危 8.17.0-r1 8.19.0-r0 curl: libcurl: Improper certificate validation due to cached TLS settings reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14819

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
libcrypto3 CVE-2026-42767 低危 3.5.5-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libcrypto3 CVE-2026-42768 低危 3.5.5-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libcrypto3 CVE-2026-42769 低危 3.5.5-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libcrypto3 CVE-2026-42770 低危 3.5.5-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libssl3 CVE-2026-34180 低危 3.5.5-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
libssl3 CVE-2026-34181 低危 3.5.5-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
libssl3 CVE-2026-42766 低危 3.5.5-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libssl3 CVE-2026-42767 低危 3.5.5-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libssl3 CVE-2026-42768 低危 3.5.5-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libssl3 CVE-2026-42769 低危 3.5.5-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libssl3 CVE-2026-42770 低危 3.5.5-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libssl3 CVE-2026-45446 低危 3.5.5-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52
libssl3 CVE-2026-7383 低危 3.5.5-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:02
libssl3 CVE-2026-9076 低危 3.5.5-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:04
libcrypto3 CVE-2026-45446 低危 3.5.5-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52
libcrypto3 CVE-2026-7383 低危 3.5.5-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:02
libcrypto3 CVE-2026-9076 低危 3.5.5-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:04
gnutls CVE-2026-5419 低危 3.8.11-r0 3.8.13-r0 guntls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-06-01 21:16 修改: 2026-06-24 17:17
libssh CVE-2026-0965 低危 0.11.3-r0 0.11.4-r0 libssh: libssh: Denial of Service via improper configuration file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0965

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11
libssh CVE-2026-0968 低危 0.11.3-r0 0.11.4-r0 libssh: libssh: Denial of Service due to malformed SFTP message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0968

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11
libexpat CVE-2026-24515 低危 2.7.3-r0 2.7.4-r0 libexpat: libexpat null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-01-23 08:16 修改: 2026-06-17 10:23
libexpat CVE-2026-41080 低危 2.7.3-r0 2.8.1-r0 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-16 17:16 修改: 2026-06-17 10:46
gnutls CVE-2026-3832 低危 3.8.11-r0 3.8.13-r0 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-30 18:16 修改: 2026-06-24 17:16
libcrypto3 CVE-2026-34180 低危 3.5.5-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
libcrypto3 CVE-2026-34181 低危 3.5.5-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
libcrypto3 CVE-2026-42766 低危 3.5.5-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e

发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
mbedtls CVE-2026-25833 未知 3.6.5-r0 3.6.6-r0 Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25833

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-04-01 19:16 修改: 2026-06-17 10:25
libvpx CVE-2026-1861 未知 1.15.2-r0 1.15.2-r1 Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.13 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1861

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 2026-02-03 21:16 修改: 2026-06-17 10:16
libheif CVE-2026-50142 未知 1.20.2-r1 1.23.0-r0

漏洞详情:

镜像层: sha256:2c9297b0e60adf7a341bafdbd2f06325ea77b41ced3666cb26a0cf0b678e5f0d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
cloudreve/cloudreve (gobinary)
低危漏洞:1 中危漏洞:20 高危漏洞:28 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2025-68121 严重 v1.25.5 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58
golang.org/x/crypto CVE-2026-39828 高危 v0.48.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39829 高危 v0.48.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39830 高危 v0.48.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39835 高危 v0.48.0 0.52.0 SSH servers which use CertChecker as a public key callback without set ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-42508 高危 v0.48.0 0.52.0 golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:47
golang.org/x/crypto CVE-2026-46595 高危 v0.48.0 0.52.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
golang.org/x/crypto CVE-2026-46597 高危 v0.48.0 0.52.0 An incorrectly placed cast from bytes to int allowed for server-side p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
golang.org/x/net CVE-2026-25680 高危 v0.50.0 0.55.0 Parsing arbitrary HTML can consume excessive CPU time, possibly leadin ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net CVE-2026-25681 高危 v0.50.0 0.55.0 Parsing arbitrary HTML which is then rendered using Render can result ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:25
golang.org/x/net CVE-2026-27136 高危 v0.50.0 0.55.0 Parsing arbitrary HTML which is then rendered using Render can result ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:26
golang.org/x/net CVE-2026-33814 高危 v0.50.0 0.53.0 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:38
golang.org/x/net CVE-2026-39821 高危 v0.50.0 0.55.0 golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:42
golang.org/x/net CVE-2026-42502 高危 v0.50.0 0.55.0 Parsing arbitrary HTML which is then rendered using Render can result ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
golang.org/x/net CVE-2026-42506 高危 v0.50.0 0.55.0 Parsing arbitrary HTML which is then rendered using Render can result ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 16:16 修改: 2026-06-17 10:47
golang.org/x/crypto CVE-2026-39827 高危 v0.48.0 0.52.0 An authenticated SSH client that repeatedly opened channels which were ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
stdlib CVE-2025-61726 高危 v1.25.5 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib CVE-2026-25679 高危 v1.25.5 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:25
stdlib CVE-2026-27145 高危 v1.25.5 1.25.11, 1.26.4 *x509.Certificate).VerifyHostname previously called matchHostnames in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-06-02 23:16 修改: 2026-06-17 10:26
stdlib CVE-2026-32280 高危 v1.25.5 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-04-08 02:16 修改: 2026-06-17 10:35
stdlib CVE-2026-32281 高危 v1.25.5 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-04-08 02:16 修改: 2026-06-17 10:35
stdlib CVE-2026-32283 高危 v1.25.5 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-04-08 02:16 修改: 2026-06-17 10:35
stdlib CVE-2026-33811 高危 v1.25.5 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:38
stdlib CVE-2026-33814 高危 v1.25.5 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:38
stdlib CVE-2026-39820 高危 v1.25.5 1.25.10, 1.26.3 Well-crafted inputs reaching ParseAddress, ParseAddressList, and Parse ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-39823 高危 v1.25.5 1.25.10, 1.26.3 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-39836 高危 v1.25.5 1.25.10, 1.26.3 ELSA-2026-22121: golang security update (IMPORTANT)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-42499 高危 v1.25.5 1.25.10, 1.26.3 Pathological inputs could cause DoS through consumePhrase when parsing ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:47
stdlib CVE-2026-42504 高危 v1.25.5 1.25.11, 1.26.4 Decoding a maliciously-crafted MIME header containing many invalid enc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-06-02 23:16 修改: 2026-06-17 10:47
github.com/ulikunitz/xz CVE-2025-58058 中危 v0.5.12 0.5.15 github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58058

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2025-08-28 22:15 修改: 2026-06-17 09:43
github.com/mojocn/base64Captcha CVE-2023-45292 中危 v0.0.0-20190801020520-752b1cd608b2 1.3.6 Always incorrect control flow in github.com/mojocn/base64Captcha

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45292

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2023-12-11 22:15 修改: 2026-06-17 06:28
github.com/nwaples/rardecode/v2 CVE-2025-11579 中危 v2.1.0 2.2.0 github.com/nwaples/rardecode: RarDecode Out Of Memory Crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11579

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2025-10-10 12:15 修改: 2026-06-17 08:30
golang.org/x/crypto CVE-2026-39831 中危 v0.48.0 0.52.0 The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nis ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39832 中危 v0.48.0 0.52.0 When adding a key to a remote agent constraint extensions such as rest ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39833 中危 v0.48.0 0.52.0 The in-memory keyring returned by NewKeyring() silently accepted keys ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/crypto CVE-2026-39834 中危 v0.48.0 0.52.0 When writing data larger than 4GB in a single Write call on an SSH cha ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:42
golang.org/x/net CVE-2026-27141 中危 v0.50.0 0.51.0 golang.org/x/net/http2: golang.org/x/net/http2: Denial of Service due to malformed HTTP/2 frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27141

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-02-26 20:31 修改: 2026-06-17 10:26
golang.org/x/crypto CVE-2026-46598 中危 v0.48.0 0.52.0 golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 04:16 修改: 2026-06-17 10:53
golang.org/x/image CVE-2026-33812 中危 v0.38.0 0.39.0 golang.org/x/image: golang: golang.org/x/image: Denial of Service due to excessive memory allocation when parsing malicious font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33812

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-04-21 20:16 修改: 2026-06-17 10:38
golang.org/x/image CVE-2026-33813 中危 v0.38.0 0.42.0 golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33813

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-04-21 20:16 修改: 2026-06-17 10:38
stdlib CVE-2025-61728 中危 v1.25.5 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib CVE-2025-61730 中危 v1.25.5 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib CVE-2026-27142 中危 v1.25.5 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
stdlib CVE-2026-32282 中危 v1.25.5 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-04-08 02:16 修改: 2026-06-17 10:35
stdlib CVE-2026-32288 中危 v1.25.5 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-04-08 02:16 修改: 2026-06-17 10:35
stdlib CVE-2026-32289 中危 v1.25.5 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-04-08 02:16 修改: 2026-06-17 10:35
stdlib CVE-2026-39825 中危 v1.25.5 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-39826 中危 v1.25.5 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-42507 中危 v1.25.5 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-06-02 23:16 修改: 2026-06-17 10:47
stdlib CVE-2026-27139 低危 v1.25.5 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
golang.org/x/sys CVE-2026-39824 未知 v0.41.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-22 20:16 修改: 2026-06-17 10:42
golang.org/x/image CVE-2026-42500 未知 v0.38.0 0.41.0 Decoding a paletted BMP file with an out-of-range palette index result ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42500

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-29 20:16 修改: 2026-06-17 10:47
golang.org/x/image CVE-2026-46599 未知 v0.38.0 0.41.0 The TIFF decoder does not place a limit on the size of PackBits-compre ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46599

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 2026-05-29 20:16 修改: 2026-06-17 10:53
golang.org/x/image CVE-2026-46601 未知 v0.38.0 0.43.0 Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46601

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/image CVE-2026-46602 未知 v0.38.0 0.43.0 Lack of limit on tile sizes in x/image/tiff in golang.org/x/image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46602

镜像层: sha256:f5a169d058ef79b64769b1c3f633dd6567b0a632da7ce5d4aea3b1d060e84aa6

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×