docker.io/easychen/cookiecloud:2023.01.20.16.39 linux/amd64

docker.io/easychen/cookiecloud:2023.01.20.16.39 - Trivy安全扫描结果 扫描时间: 2026-09-10 16:41
全部漏洞信息
低危漏洞:14 中危漏洞:24 高危漏洞:62 严重漏洞:2

系统OS: alpine 3.15.6 扫描引擎: Trivy 扫描时间: 2026-09-10 16:41

docker.io/easychen/cookiecloud:2023.01.20.16.39 (alpine 3.15.6) (alpine)
低危漏洞:0 中危漏洞:12 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto1.1 CVE-2022-4450 高危 1.1.1q-r0 1.1.1t-r0 openssl: double free after calling PEM_read_bio_ex

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20
libcrypto1.1 CVE-2023-0215 高危 1.1.1q-r0 1.1.1t-r0 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25
libcrypto1.1 CVE-2023-0286 高危 1.1.1q-r0 1.1.1t-r0 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25
libcrypto1.1 CVE-2023-0464 高危 1.1.1q-r0 1.1.1t-r2 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25
libssl1.1 CVE-2022-4450 高危 1.1.1q-r0 1.1.1t-r0 openssl: double free after calling PEM_read_bio_ex

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20
libssl1.1 CVE-2023-0215 高危 1.1.1q-r0 1.1.1t-r0 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25
libssl1.1 CVE-2023-0286 高危 1.1.1q-r0 1.1.1t-r0 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25
libssl1.1 CVE-2023-0464 高危 1.1.1q-r0 1.1.1t-r2 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25
libcrypto1.1 CVE-2023-3817 中危 1.1.1q-r0 1.1.1v-r0 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14
libcrypto1.1 CVE-2023-5678 中危 1.1.1q-r0 1.1.1w-r1 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49
libcrypto1.1 CVE-2022-4304 中危 1.1.1q-r0 1.1.1t-r0 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20
libcrypto1.1 CVE-2023-0465 中危 1.1.1q-r0 1.1.1t-r2 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25
libcrypto1.1 CVE-2023-2650 中危 1.1.1q-r0 1.1.1u-r0 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53
libcrypto1.1 CVE-2023-3446 中危 1.1.1q-r0 1.1.1u-r2 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14
libssl1.1 CVE-2022-4304 中危 1.1.1q-r0 1.1.1t-r0 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20
libssl1.1 CVE-2023-0465 中危 1.1.1q-r0 1.1.1t-r2 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25
libssl1.1 CVE-2023-2650 中危 1.1.1q-r0 1.1.1u-r0 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53
libssl1.1 CVE-2023-3446 中危 1.1.1q-r0 1.1.1u-r2 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14
libssl1.1 CVE-2023-3817 中危 1.1.1q-r0 1.1.1v-r0 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14
libssl1.1 CVE-2023-5678 中危 1.1.1q-r0 1.1.1w-r1 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:34d5ebaa5410d2ab4154bbd7c3c99c385ec509eb9c1d03d5486aff01bbd618c5

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49
Node.js (node-pkg)
低危漏洞:14 中危漏洞:12 高危漏洞:54 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
crypto-js CVE-2023-46233 严重 4.1.1 4.2.0 crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46233

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2023-10-25 21:15 修改: 2026-06-23 18:17
tar CVE-2026-59873 严重 6.1.11 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
brace-expansion CVE-2026-13149 高危 1.1.11 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-13149 高危 1.1.11 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 1.1.11 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-14257 高危 1.1.11 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-14257 高危 1.1.11 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-69152 高危 1.1.11 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-69152 高危 1.1.11 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-69152 高危 1.1.11 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-13149 高危 2.0.1 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 2.0.1 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52
brace-expansion CVE-2026-69152 高危 2.0.1 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
braces CVE-2024-4068 高危 3.0.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01
body-parser CVE-2024-45590 高危 1.20.1 1.20.3 body-parser: Denial of Service Vulnerability in body-parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45590

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2024-09-10 16:15 修改: 2026-06-17 07:54
http-cache-semantics CVE-2022-25881 高危 4.1.0 4.1.1 http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25881

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2023-01-31 05:15 修改: 2026-06-17 04:34
ip CVE-2024-29415 高危 2.0.0 node-ip: Incomplete fix for CVE-2023-42282

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29415

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2024-05-27 20:15 修改: 2026-06-17 07:22
minimatch CVE-2026-26996 高危 3.1.2 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-26996 高危 3.1.2 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-26996 高危 3.1.2 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27903 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27903 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-26996 高危 5.1.0 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 5.1.0 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 5.1.0 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
multer CVE-2025-47935 高危 1.4.5-lts.1 2.0.0 Multer vulnerable to Denial of Service via memory leaks from unclosed streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47935

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2025-05-19 20:15 修改: 2026-06-17 09:28
multer CVE-2025-47944 高危 1.4.5-lts.1 2.0.0 Multer vulnerable to Denial of Service from maliciously crafted requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47944

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2025-05-19 20:15 修改: 2026-06-17 09:28
multer CVE-2025-48997 高危 1.4.5-lts.1 2.0.1 multer: Multer vulnerable to Denial of Service via unhandled exception

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48997

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2025-06-03 19:15 修改: 2026-06-17 09:30
multer CVE-2025-7338 高危 1.4.5-lts.1 2.0.2 multer: Multer Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7338

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2025-07-17 16:15 修改: 2026-06-17 10:04
multer CVE-2026-2359 高危 1.4.5-lts.1 2.1.0 multer: Multer: Denial of Service via dropped file upload connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2359

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-02-27 16:16 修改: 2026-07-15 02:19
multer CVE-2026-3304 高危 1.4.5-lts.1 2.1.0 multer: Multer: Denial of Service via malformed requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3304

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-02-27 16:16 修改: 2026-07-15 02:20
multer CVE-2026-3520 高危 1.4.5-lts.1 2.1.1 multer: Multer: Denial of Service via malformed requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3520

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-03-04 17:16 修改: 2026-07-15 02:21
multer CVE-2026-5079 高危 1.4.5-lts.1 2.2.0, 3.0.0-alpha.2 multer: Multer: Denial of Service via deeply nested field names in multipart form data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5079

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-06-15 14:16 修改: 2026-06-17 10:58
multer CVE-2026-77078 高危 1.4.5-lts.1 2.3.0 multer vulnerable to Denial of Service via crafted multipart field names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77078

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-08-28 22:16 修改: 2026-09-02 14:46
multer CVE-2026-82333 高危 1.4.5-lts.1 2.3.0 multer vulnerable to Denial of Service via oversized array index in field names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82333

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-08-28 22:16 修改: 2026-09-02 14:45
pacote CVE-2026-9496 高危 13.6.2 21.5.1 Versions of the package pacote from 11.2.7 and before 21.5.1 are vulne ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9496

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-05-26 07:16 修改: 2026-07-23 11:10
path-to-regexp CVE-2024-45296 高危 0.1.7 1.9.0, 0.1.10, 8.0.0, 3.3.0, 6.3.0 path-to-regexp: Backtracking regular expressions cause ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45296

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2024-09-09 19:15 修改: 2026-06-17 07:53
path-to-regexp CVE-2024-52798 高危 0.1.7 0.1.12 path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52798

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2024-12-05 23:15 修改: 2026-06-17 08:07
path-to-regexp CVE-2026-4867 高危 0.1.7 0.1.13 path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4867

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:57
picomatch CVE-2026-33671 高危 2.3.1 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
semver CVE-2022-25883 高危 5.7.1 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 7.0.0 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
semver CVE-2022-25883 高危 7.3.7 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2023-06-21 05:15 修改: 2026-06-17 04:34
brace-expansion CVE-2026-13149 高危 1.1.11 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
tar CVE-2026-23745 高危 6.1.11 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-01-16 22:16 修改: 2026-09-07 13:18
tar CVE-2026-23950 高危 6.1.11 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-01-20 01:15 修改: 2026-08-24 13:17
tar CVE-2026-24842 高危 6.1.11 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-01-28 01:16 修改: 2026-09-07 13:18
tar CVE-2026-26960 高危 6.1.11 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-29786 高危 6.1.11 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-03-07 16:15 修改: 2026-09-01 13:18
tar CVE-2026-31802 高危 6.1.11 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-59874 高危 6.1.11 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-73566 高危 6.1.11 7.5.21 tar: node-tar: Denial of Service via crafted long-path tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
brace-expansion CVE-2026-33750 中危 1.1.11 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
picomatch CVE-2026-33672 中危 2.3.1 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
qs CVE-2025-15284 中危 6.11.0 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
qs CVE-2026-82417 中危 6.11.0 6.16.0 qs: qs: Denial of Service via improper validation in stringify function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82417

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-08-30 00:16 修改: 2026-09-03 18:00
express CVE-2024-29041 中危 4.18.2 4.19.2, 5.0.0-beta.3 express: cause malformed URLs to be evaluated

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29041

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2024-03-25 21:15 修改: 2026-06-17 07:22
brace-expansion CVE-2026-33750 中危 1.1.11 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
brace-expansion CVE-2026-33750 中危 2.0.1 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
brace-expansion CVE-2026-33750 中危 1.1.11 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
tar CVE-2024-28863 中危 6.1.11 6.2.1 node-tar: denial of service while parsing a tar file due to lack of folders depth validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28863

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2024-03-21 23:15 修改: 2026-06-17 07:21
tar CVE-2026-53655 中危 6.1.11 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 6.1.11 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 6.1.11 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
serve-static CVE-2024-43800 低危 1.15.0 1.16.0, 2.1.0 serve-static: Improper Sanitization in serve-static

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43800

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51
cookie CVE-2024-47764 低危 0.5.0 0.7.0 cookie: cookie accepts cookie name, path, and domain with out of bounds characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47764

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2024-10-04 20:15 修改: 2026-06-17 07:57
@tootallnate/once CVE-2026-3449 低危 2.0.0 3.0.1, 2.0.1 @tootallnate/once: @tootallnate/once: Denial of Service due to incorrect control flow scoping with AbortSignal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3449

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-03-03 05:17 修改: 2026-06-17 10:43
diff CVE-2026-24001 低危 5.1.0 8.0.3, 5.2.2, 4.0.4, 3.5.1 jsdiff: denial of service vulnerability in parsePatch and applyPatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24001

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2026-01-22 03:15 修改: 2026-07-15 02:18
body-parser CVE-2026-12590 低危 1.20.1 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
express CVE-2024-43796 低危 4.18.2 4.20.0, 5.0.0 express: Improper Input Handling in Express Redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43796

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51
brace-expansion CVE-2025-5889 低危 1.1.11 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
brace-expansion CVE-2025-5889 低危 1.1.11 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
ip CVE-2023-42282 低危 2.0.0 2.0.1, 1.1.9 nodejs-ip: arbitrary code execution via the isPublic() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42282

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2024-02-08 17:15 修改: 2026-06-17 06:23
qs CVE-2026-2391 低危 6.11.0 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
brace-expansion CVE-2025-5889 低危 2.0.1 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
brace-expansion CVE-2025-5889 低危 1.1.11 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:dc1019a442446394f979a1f8e0809dc8a13dbfa6a12bfac57b45f9feac3c953f

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
multer CVE-2026-77063 低危 1.4.5-lts.1 2.3.0 multer vulnerable to file size limit bypass via async fileFilter race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77063

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2026-08-28 22:16 修改: 2026-09-02 14:46
send CVE-2024-43799 低危 0.18.0 0.19.0 send: Code Execution Vulnerability in Send Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43799

镜像层: sha256:ac74064e9fda8a6855e637cd2fb979063935bde6b7ede698729aafd5aca803e5

发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×