docker.io/cube-sandbox-int.tencentcloudcr.com/cube-sandbox/cube-master:v0.7.1 linux/amd64

docker.io/cube-sandbox-int.tencentcloudcr.com/cube-sandbox/cube-master:v0.7.1 - Trivy安全扫描结果 扫描时间: 2026-09-18 14:13
全部漏洞信息
低危漏洞:14 中危漏洞:104 高危漏洞:4 严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-18 14:13

docker.io/cube-sandbox-int.tencentcloudcr.com/cube-sandbox/cube-master:v0.7.1 (ubuntu 24.04) (ubuntu)
低危漏洞:14 中危漏洞:97 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
busybox CVE-2023-42366 中危 1:1.36.1-6ubuntu3.1 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23

busybox CVE-2024-58251 中危 1:1.36.1-6ubuntu3.1 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14

busybox CVE-2025-46394 中危 1:1.36.1-6ubuntu3.1 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26

busybox CVE-2025-60876 中危 1:1.36.1-6ubuntu3.1 busybox: BusyBox wget: HTTP request-target allows header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-60876

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-11-10 20:15 修改: 2026-06-17 09:50

curl CVE-2026-13608 中危 8.5.0-2ubuntu10.13 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

curl CVE-2026-18924 中危 8.5.0-2ubuntu10.13 curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

curl CVE-2026-19931 中危 8.5.0-2ubuntu10.13 curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

curl CVE-2026-80230 中危 8.5.0-2ubuntu10.13 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

curl CVE-2026-82209 中危 8.5.0-2ubuntu10.13 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

iperf3 CVE-2024-26306 中危 3.16-1build2 iperf3: vulnerable to marvin attack if the authentication option is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26306

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2024-05-14 15:08 修改: 2026-06-17 07:17

iperf3 CVE-2024-53580 中危 3.16-1build2 iperf: Denial of Service in iperf Due to Improper JSON Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53580

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2024-12-18 23:15 修改: 2026-06-17 08:09

iperf3 CVE-2025-54349 中危 3.16-1build2 iperf3: iperf Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54349

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-08-03 02:15 修改: 2026-06-17 09:39

iperf3 CVE-2025-54350 中危 3.16-1build2 iperf3: iperf Authentication Decode Failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54350

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-08-03 02:15 修改: 2026-06-17 09:39

jq CVE-2026-41256 中危 1.7.1-3ubuntu0.24.04.2 jq: embedded NUL truncates top-level jq programs loaded with -f

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46

jq CVE-2026-41257 中危 1.7.1-3ubuntu0.24.04.2 jq: signed-int overflow in stack_reallocate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46

jq CVE-2026-43895 中危 1.7.1-3ubuntu0.24.04.2 jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50

jq CVE-2026-43896 中危 1.7.1-3ubuntu0.24.04.2 jq: stack overflow in recursive object merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50

jq CVE-2026-44777 中危 1.7.1-3ubuntu0.24.04.2 jq: stack overflow in module loading on mutual include

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51

libc-bin CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

libc-bin CVE-2026-19499 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16

libc-bin CVE-2026-19542 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16

libc-bin CVE-2026-6368 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc-bin CVE-2026-6791 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc-bin CVE-2026-77117 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16

libc-bin CVE-2026-80489 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16

libc6 CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

libc6 CVE-2026-19499 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16

libc6 CVE-2026-19542 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16

libc6 CVE-2026-6368 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc6 CVE-2026-6791 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc6 CVE-2026-77117 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16

libc6 CVE-2026-80489 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16

libcurl3t64-gnutls CVE-2026-13608 中危 8.5.0-2ubuntu10.13 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl3t64-gnutls CVE-2026-18924 中危 8.5.0-2ubuntu10.13 curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl3t64-gnutls CVE-2026-19931 中危 8.5.0-2ubuntu10.13 curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl3t64-gnutls CVE-2026-80230 中危 8.5.0-2ubuntu10.13 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl3t64-gnutls CVE-2026-82209 中危 8.5.0-2ubuntu10.13 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-13608 中危 8.5.0-2ubuntu10.13 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-18924 中危 8.5.0-2ubuntu10.13 curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-19931 中危 8.5.0-2ubuntu10.13 curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-80230 中危 8.5.0-2ubuntu10.13 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-82209 中危 8.5.0-2ubuntu10.13 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libdevmapper1.02.1 CVE-2026-19617 中危 2:1.02.185-3ubuntu3.2 libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19617

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-08-14 06:17 修改: 2026-09-01 13:18

libexpat1 CVE-2025-59375 中危 2.6.1-2ubuntu0.4 firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46

libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56

libexpat1 CVE-2026-32776 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-32777 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-32778 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-41080 中危 2.6.1-2ubuntu0.4 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18

libexpat1 CVE-2026-45186 中危 2.6.1-2ubuntu0.4 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-05-10 07:16 修改: 2026-09-16 13:17

libexpat1 CVE-2026-50219 中危 2.6.1-2ubuntu0.4 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10

libexpat1 CVE-2026-56131 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56132 中危 2.6.1-2ubuntu0.4 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56403 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56404 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56405 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14

libexpat1 CVE-2026-56406 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29

libexpat1 CVE-2026-56407 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28

libexpat1 CVE-2026-56408 中危 2.6.1-2ubuntu0.4 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27

libexpat1 CVE-2026-56409 中危 2.6.1-2ubuntu0.4 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21

libexpat1 CVE-2026-56410 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18

libexpat1 CVE-2026-56411 中危 2.6.1-2ubuntu0.4 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16

libexpat1 CVE-2026-56412 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31

libexpat1 CVE-2026-66046 中危 2.6.1-2ubuntu0.4 expat: Expat: Denial of Service via quadratic complexity in attribute processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-08-18 15:16 修改: 2026-08-20 16:17

libexpat1 CVE-2026-72522 中危 2.6.1-2ubuntu0.4 expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-08-10 04:16 修改: 2026-08-31 19:33

libexpat1 CVE-2026-76641 中危 2.6.1-2ubuntu0.4 CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17

libexpat1 CVE-2026-76957 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-08-20 05:16 修改: 2026-09-08 20:56

libiperf0 CVE-2024-26306 中危 3.16-1build2 iperf3: vulnerable to marvin attack if the authentication option is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26306

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2024-05-14 15:08 修改: 2026-06-17 07:17

libiperf0 CVE-2024-53580 中危 3.16-1build2 iperf: Denial of Service in iperf Due to Improper JSON Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53580

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2024-12-18 23:15 修改: 2026-06-17 08:09

libiperf0 CVE-2025-54349 中危 3.16-1build2 iperf3: iperf Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54349

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-08-03 02:15 修改: 2026-06-17 09:39

libiperf0 CVE-2025-54350 中危 3.16-1build2 iperf3: iperf Authentication Decode Failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54350

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-08-03 02:15 修改: 2026-06-17 09:39

libjq1 CVE-2026-41256 中危 1.7.1-3ubuntu0.24.04.2 jq: embedded NUL truncates top-level jq programs loaded with -f

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46

libjq1 CVE-2026-41257 中危 1.7.1-3ubuntu0.24.04.2 jq: signed-int overflow in stack_reallocate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46

libjq1 CVE-2026-43895 中危 1.7.1-3ubuntu0.24.04.2 jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50

libjq1 CVE-2026-43896 中危 1.7.1-3ubuntu0.24.04.2 jq: stack overflow in recursive object merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50

libjq1 CVE-2026-44777 中危 1.7.1-3ubuntu0.24.04.2 jq: stack overflow in module loading on mutual include

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51

liblmdb0 CVE-2026-22185 中危 0.9.31-1build1 OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22185

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-01-07 21:16 修改: 2026-06-17 10:19

libsqlite3-0 CVE-2026-39113 中危 3.45.1-1ubuntu2.7 3.45.1-1ubuntu2.8 Buffer Overflow vulnerability in SQLite affected version source s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39113

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-08-25 21:17 修改: 2026-09-09 16:04

libxml2 CVE-2026-74860 中危 2.9.14+dfsg-1.3ubuntu3.8 libxml2: double-free/UAF in libxml2 Python bindings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74860

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-09-08 12:16 修改: 2026-09-10 20:17

libxml2 CVE-2026-86140 中危 2.9.14+dfsg-1.3ubuntu3.8 libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86140

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-09-05 05:17 修改: 2026-09-15 19:39

perl-base CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17

perl-base CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42

python3-pip CVE-2024-35195 中危 24.0+dfsg-1ubuntu1.3 requests: subsequent requests to the same host ignore cert verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35195

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2024-05-20 21:15 修改: 2026-06-17 07:34

python3-pip CVE-2025-66418 中危 24.0+dfsg-1ubuntu1.3 urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66418

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2025-12-05 16:15 修改: 2026-06-17 09:56

python3-pip CVE-2025-66471 中危 24.0+dfsg-1ubuntu1.3 urllib3: urllib3 Streaming API improperly handles highly compressed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66471

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2025-12-05 17:16 修改: 2026-06-17 09:56

python3-pip CVE-2026-21441 中危 24.0+dfsg-1ubuntu1.3 urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21441

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-01-07 22:15 修改: 2026-09-15 12:16

python3-wheel CVE-2026-24049 中危 0.42.0-2 wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24049

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-01-22 05:16 修改: 2026-09-10 13:17

tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-03 17:16 修改: 2026-09-10 18:17

tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-03 16:16 修改: 2026-09-10 18:17

vim CVE-2026-51400 中危 2:9.1.0016-1ubuntu7.20 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51400

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:38

vim CVE-2026-51401 中危 2:9.1.0016-1ubuntu7.20 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51401

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:33

vim-common CVE-2026-51400 中危 2:9.1.0016-1ubuntu7.20 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51400

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:38

vim-common CVE-2026-51401 中危 2:9.1.0016-1ubuntu7.20 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51401

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:33

vim-runtime CVE-2026-51400 中危 2:9.1.0016-1ubuntu7.20 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51400

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:38

vim-runtime CVE-2026-51401 中危 2:9.1.0016-1ubuntu7.20 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51401

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:33

wget CVE-2021-31879 中危 1.21.4-1ubuntu4.5 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52

zlib1g CVE-2026-85091 中危 1:1.3.dfsg-3.1ubuntu2.2 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41

libllvm18 CVE-2024-7883 低危 1:18.1.3-1ubuntu1 clang: CMSE secure state may leak from stack to floating-point registers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7883

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2024-10-31 17:15 修改: 2026-06-17 08:21

libdw1t64 CVE-2025-1376 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39

python3-pip CVE-2026-1703 低危 24.0+dfsg-1ubuntu1.3 pip: pip: Information disclosure via path traversal when installing crafted wheel archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703

镜像层: sha256:b9037f71097239949f9c3b0a63521385c0ace03e8a5d0be707d007bfdb87a9cc

发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16

libelf1t64 CVE-2025-1352 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38

libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libelf1t64 CVE-2025-1376 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39

libclang1-18 CVE-2024-7883 低危 1:18.1.3-1ubuntu1 clang: CMSE secure state may leak from stack to floating-point registers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7883

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2024-10-31 17:15 修改: 2026-06-17 08:21

login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

libbpf1 CVE-2025-29481 低危 1:1.3.0-2build2 libbpf: Heap Buffer Overflow in libbpf

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29481

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-04-07 20:15 修改: 2026-06-17 09:05

libclang-cpp18 CVE-2024-7883 低危 1:18.1.3-1ubuntu1 clang: CMSE secure state may leak from stack to floating-point registers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7883

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2024-10-31 17:15 修改: 2026-06-17 08:21

libicu74 CVE-2025-5222 低危 74.2-1ubuntu3.1 icu: Stack buffer overflow in the SRBRoot::addTag function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-05-27 21:15 修改: 2026-09-03 15:17

libdw1t64 CVE-2025-1352 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352

镜像层: sha256:5e43c92a032d2df2364972acf0165714c3ee5f3d2fde1949a3d08eecee71be5e

发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38

Python (python-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
usr/local/services/cubetoolbox/CubeMaster/bin/cubemaster (gobinary)
低危漏洞:0 中危漏洞:5 高危漏洞:4 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/quic-go/quic-go CVE-2025-59530 高危 v0.54.0 0.49.1, 0.54.1 github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59530

镜像层: sha256:6aa3d483b3cf5a64f90f6e6ba49395e8d85144b2a5f9abd9e9cbe42640c7d28f

发布日期: 2025-10-10 16:15 修改: 2026-06-17 09:46

google.golang.org/grpc CVE-2026-84304 高危 v1.80.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304

镜像层: sha256:6aa3d483b3cf5a64f90f6e6ba49395e8d85144b2a5f9abd9e9cbe42640c7d28f

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09

google.golang.org/grpc CVE-2026-84445 高危 v1.80.0 1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445

镜像层: sha256:6aa3d483b3cf5a64f90f6e6ba49395e8d85144b2a5f9abd9e9cbe42640c7d28f

发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17

google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.80.0 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:6aa3d483b3cf5a64f90f6e6ba49395e8d85144b2a5f9abd9e9cbe42640c7d28f

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03

golang.org/x/crypto CVE-2026-78662 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:6aa3d483b3cf5a64f90f6e6ba49395e8d85144b2a5f9abd9e9cbe42640c7d28f

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33

github.com/quic-go/quic-go CVE-2025-64702 中危 v0.54.0 0.57.0 github.com/quic-go/quic-go/http3: quic-go HTTP/3 QPACK Header Expansion DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64702

镜像层: sha256:6aa3d483b3cf5a64f90f6e6ba49395e8d85144b2a5f9abd9e9cbe42640c7d28f

发布日期: 2025-12-11 21:15 修改: 2026-06-17 09:55

github.com/quic-go/quic-go CVE-2026-40898 中危 v0.54.0 0.59.1 github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40898

镜像层: sha256:6aa3d483b3cf5a64f90f6e6ba49395e8d85144b2a5f9abd9e9cbe42640c7d28f

发布日期: 2026-06-04 19:16 修改: 2026-07-22 20:10

golang.org/x/crypto CVE-2026-56855 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:6aa3d483b3cf5a64f90f6e6ba49395e8d85144b2a5f9abd9e9cbe42640c7d28f

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34

google.golang.org/grpc CVE-2026-84303 中危 v1.80.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303

镜像层: sha256:6aa3d483b3cf5a64f90f6e6ba49395e8d85144b2a5f9abd9e9cbe42640c7d28f

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09

golang.org/x/crypto GO-2026-5932 未知 v0.55.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:6aa3d483b3cf5a64f90f6e6ba49395e8d85144b2a5f9abd9e9cbe42640c7d28f

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

usr/local/services/cubetoolbox/CubeMaster/plugin/cube-volume-s3 (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56855 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:7678ba1ae0599daf10764333740e2688883302ed482f70dfad5aaaffab53ea27

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34

golang.org/x/crypto CVE-2026-78662 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:7678ba1ae0599daf10764333740e2688883302ed482f70dfad5aaaffab53ea27

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33

golang.org/x/crypto GO-2026-5932 未知 v0.55.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:7678ba1ae0599daf10764333740e2688883302ed482f70dfad5aaaffab53ea27

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×