docker.io/easzlab/kubeasz:3.6.9 linux/amd64

docker.io/easzlab/kubeasz:3.6.9 - Trivy安全扫描结果 扫描时间: 2026-07-16 17:20
全部漏洞信息
低危漏洞:32 中危漏洞:63 高危漏洞:29 严重漏洞:9

系统OS: alpine 3.17.3 扫描引擎: Trivy 扫描时间: 2026-07-16 17:20

docker.io/easzlab/kubeasz:3.6.9 (alpine 3.17.3) (alpine)
低危漏洞:26 中危漏洞:44 高危漏洞:20 严重漏洞:9
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
krb5-libs CVE-2024-37371 严重 1.20.1-r0 1.20.2-r1 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libexpat CVE-2024-45491 严重 2.5.0-r0 2.6.3-r0 libexpat: Integer Overflow or Wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54
libexpat CVE-2024-45492 严重 2.5.0-r0 2.6.3-r0 libexpat: integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54
openssh-client-common CVE-2023-28531 严重 9.1_p1-r2 9.1_p1-r3 openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28531

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-03-17 04:15 修改: 2026-07-14 12:16
openssh-client-common CVE-2023-38408 严重 9.1_p1-r2 9.1_p1-r4 openssh: Remote code execution in ssh-agent PKCS#11 support

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-07-20 03:15 修改: 2026-06-17 06:10
openssh-client-default CVE-2023-28531 严重 9.1_p1-r2 9.1_p1-r3 openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28531

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-03-17 04:15 修改: 2026-07-14 12:16
openssh-client-default CVE-2023-38408 严重 9.1_p1-r2 9.1_p1-r4 openssh: Remote code execution in ssh-agent PKCS#11 support

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-07-20 03:15 修改: 2026-06-17 06:10
openssh-keygen CVE-2023-28531 严重 9.1_p1-r2 9.1_p1-r3 openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28531

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-03-17 04:15 修改: 2026-07-14 12:16
openssh-keygen CVE-2023-38408 严重 9.1_p1-r2 9.1_p1-r4 openssh: Remote code execution in ssh-agent PKCS#11 support

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-07-20 03:15 修改: 2026-06-17 06:10
libexpat CVE-2024-28757 高危 2.5.0-r0 2.6.2-r0 expat: XML Entity Expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-03-10 05:15 修改: 2026-06-17 07:21
libexpat CVE-2024-45490 高危 2.5.0-r0 2.6.3-r0 libexpat: Negative Length Parsing Vulnerability in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54
libssl3 CVE-2023-5363 高危 3.0.8-r3 3.0.12-r0 openssl: Incorrect cipher key and IV length processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5363

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-10-25 18:17 修改: 2026-06-17 06:48
libssl3 CVE-2024-6119 高危 3.0.8-r3 3.0.15-r0 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-09-03 16:15 修改: 2026-06-17 08:17
libssl3 CVE-2025-15467 高危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-07-15 02:17
libssl3 CVE-2025-69421 高危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
musl CVE-2025-26519 高危 1.2.3-r4 1.2.3-r6 musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26519

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2025-02-14 04:15 修改: 2026-06-17 09:01
musl-utils CVE-2025-26519 高危 1.2.3-r4 1.2.3-r6 musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26519

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2025-02-14 04:15 修改: 2026-06-17 09:01
ncurses-libs CVE-2023-29491 高危 6.3_p20221119-r0 6.3_p20221119-r1 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2023-04-14 01:15 修改: 2026-06-17 05:50
ncurses-terminfo-base CVE-2023-29491 高危 6.3_p20221119-r0 6.3_p20221119-r1 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2023-04-14 01:15 修改: 2026-06-17 05:50
libcrypto3 CVE-2024-6119 高危 3.0.8-r3 3.0.15-r0 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-09-03 16:15 修改: 2026-06-17 08:17
libcrypto3 CVE-2025-15467 高危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-07-15 02:17
openssh-client-common CVE-2024-6387 高危 9.1_p1-r2 9.1_p1-r6 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-07-01 13:15 修改: 2026-06-17 08:17
libcrypto3 CVE-2025-69421 高危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
krb5-libs CVE-2024-37370 高危 1.20.1-r0 1.20.2-r1 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
openssh-client-default CVE-2024-6387 高危 9.1_p1-r2 9.1_p1-r6 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-07-01 13:15 修改: 2026-06-17 08:17
libcrypto3 CVE-2023-5363 高危 3.0.8-r3 3.0.12-r0 openssl: Incorrect cipher key and IV length processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5363

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-10-25 18:17 修改: 2026-06-17 06:48
libexpat CVE-2023-52425 高危 2.5.0-r0 2.6.0-r0 expat: parsing large tokens can trigger a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-02-04 20:15 修改: 2026-06-17 06:42
openssh-keygen CVE-2024-6387 高危 9.1_p1-r2 9.1_p1-r6 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-07-01 13:15 修改: 2026-06-17 08:17
sqlite-libs CVE-2023-7104 高危 3.40.1-r0 3.40.1-r1 sqlite: heap-buffer-overflow at sessionfuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2023-12-29 10:15 修改: 2026-06-17 06:52
krb5-libs CVE-2023-36054 中危 1.20.1-r0 1.20.2-r0 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
libexpat CVE-2023-52426 中危 2.5.0-r0 2.6.0-r0 expat: recursive XML entity expansion vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-02-04 20:15 修改: 2026-06-17 06:42
libexpat CVE-2024-50602 中危 2.5.0-r0 2.6.4-r0 libexpat: expat: DoS via XML_ResumeParser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-10-27 05:15 修改: 2026-06-17 08:04
busybox CVE-2023-42365 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23
busybox CVE-2023-42366 中危 1.35.0-r29 1.35.0-r30 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23
busybox-binsh CVE-2023-42363 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free in awk

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 22:15 修改: 2026-06-17 06:23
busybox-binsh CVE-2023-42364 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23
libssl3 CVE-2023-1255 中危 3.0.8-r3 3.0.8-r4 openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1255

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-04-20 17:15 修改: 2026-06-17 05:27
libssl3 CVE-2023-2650 中危 3.0.8-r3 3.0.9-r0 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53
libssl3 CVE-2023-2975 中危 3.0.8-r3 3.0.9-r2 openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2975

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-07-14 12:15 修改: 2026-06-17 05:53
libssl3 CVE-2023-3446 中危 3.0.8-r3 3.0.9-r3 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14
libssl3 CVE-2023-3817 中危 3.0.8-r3 3.0.10-r0 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14
libssl3 CVE-2023-5678 中危 3.0.8-r3 3.0.12-r1 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49
libssl3 CVE-2023-6129 中危 3.0.8-r3 3.0.12-r2 openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-01-09 17:15 修改: 2026-06-17 06:50
libssl3 CVE-2024-0727 中危 3.0.8-r3 3.0.12-r4 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54
libssl3 CVE-2025-69419 中危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-9230 中危 3.0.8-r3 3.0.19-r0 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libcrypto3 CVE-2023-1255 中危 3.0.8-r3 3.0.8-r4 openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1255

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-04-20 17:15 修改: 2026-06-17 05:27
libcrypto3 CVE-2023-2650 中危 3.0.8-r3 3.0.9-r0 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53
libcrypto3 CVE-2023-2975 中危 3.0.8-r3 3.0.9-r2 openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2975

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-07-14 12:15 修改: 2026-06-17 05:53
libcrypto3 CVE-2023-3446 中危 3.0.8-r3 3.0.9-r3 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14
libcrypto3 CVE-2023-3817 中危 3.0.8-r3 3.0.10-r0 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14
libcrypto3 CVE-2023-5678 中危 3.0.8-r3 3.0.12-r1 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49
libcrypto3 CVE-2023-6129 中危 3.0.8-r3 3.0.12-r2 openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-01-09 17:15 修改: 2026-06-17 06:50
openssh-client-common CVE-2023-48795 中危 9.1_p1-r2 9.1_p1-r5 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 16:15 修改: 2026-06-17 06:34
openssh-client-common CVE-2023-51384 中危 9.1_p1-r2 9.1_p1-r5 openssh: destination constraints only apply to first PKCS#11 key

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51384

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 19:15 修改: 2026-07-14 13:17
openssh-client-common CVE-2023-51385 中危 9.1_p1-r2 9.1_p1-r5 openssh: potential command injection via shell metacharacters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 19:15 修改: 2026-06-17 06:40
libcrypto3 CVE-2024-0727 中危 3.0.8-r3 3.0.12-r4 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54
libcrypto3 CVE-2025-69419 中危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2025-9230 中危 3.0.8-r3 3.0.19-r0 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
openssh-client-default CVE-2023-48795 中危 9.1_p1-r2 9.1_p1-r5 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 16:15 修改: 2026-06-17 06:34
openssh-client-default CVE-2023-51384 中危 9.1_p1-r2 9.1_p1-r5 openssh: destination constraints only apply to first PKCS#11 key

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51384

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 19:15 修改: 2026-07-14 13:17
openssh-client-default CVE-2023-51385 中危 9.1_p1-r2 9.1_p1-r5 openssh: potential command injection via shell metacharacters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 19:15 修改: 2026-06-17 06:40
busybox-binsh CVE-2023-42365 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23
busybox-binsh CVE-2023-42366 中危 1.35.0-r29 1.35.0-r30 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23
busybox CVE-2023-42363 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free in awk

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 22:15 修改: 2026-06-17 06:23
openssh-keygen CVE-2023-48795 中危 9.1_p1-r2 9.1_p1-r5 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 16:15 修改: 2026-06-17 06:34
openssh-keygen CVE-2023-51384 中危 9.1_p1-r2 9.1_p1-r5 openssh: destination constraints only apply to first PKCS#11 key

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51384

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 19:15 修改: 2026-07-14 13:17
openssh-keygen CVE-2023-51385 中危 9.1_p1-r2 9.1_p1-r5 openssh: potential command injection via shell metacharacters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 19:15 修改: 2026-06-17 06:40
busybox CVE-2023-42364 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23
ssl_client CVE-2023-42363 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free in awk

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 22:15 修改: 2026-06-17 06:23
ssl_client CVE-2023-42364 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23
ssl_client CVE-2023-42365 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23
ssl_client CVE-2023-42366 中危 1.35.0-r29 1.35.0-r30 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23
libcrypto3 CVE-2025-69420 低危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2025-9232 低危 3.0.8-r3 3.0.19-r0 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libcrypto3 CVE-2026-22795 低危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libcrypto3 CVE-2026-22796 低危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libcrypto3 CVE-2023-6237 低危 3.0.8-r3 3.0.12-r3 openssl: Excessive time spent checking invalid RSA public keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6237

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-04-25 07:15 修改: 2026-06-17 06:50
libcrypto3 CVE-2024-13176 低危 3.0.8-r3 3.0.19-r0 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01
libcrypto3 CVE-2024-2511 低危 3.0.8-r3 3.0.12-r5 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24
libcrypto3 CVE-2024-4603 低危 3.0.8-r3 3.0.13-r0 openssl: Excessive time spent checking DSA keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-05-16 16:15 修改: 2026-06-17 08:02
libcrypto3 CVE-2024-4741 低危 3.0.8-r3 3.0.14-r0 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02
libcrypto3 CVE-2024-5535 低危 3.0.8-r3 3.0.14-r0 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16
libcrypto3 CVE-2024-9143 低危 3.0.8-r3 3.0.15-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24
libcrypto3 CVE-2025-68160 低危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libssl3 CVE-2023-6237 低危 3.0.8-r3 3.0.12-r3 openssl: Excessive time spent checking invalid RSA public keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6237

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-04-25 07:15 修改: 2026-06-17 06:50
libssl3 CVE-2024-13176 低危 3.0.8-r3 3.0.19-r0 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01
libssl3 CVE-2024-2511 低危 3.0.8-r3 3.0.12-r5 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24
libssl3 CVE-2024-4603 低危 3.0.8-r3 3.0.13-r0 openssl: Excessive time spent checking DSA keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-05-16 16:15 修改: 2026-06-17 08:02
libssl3 CVE-2024-4741 低危 3.0.8-r3 3.0.14-r0 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02
libssl3 CVE-2024-5535 低危 3.0.8-r3 3.0.14-r0 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16
libssl3 CVE-2024-9143 低危 3.0.8-r3 3.0.15-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24
libssl3 CVE-2025-68160 低危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libssl3 CVE-2025-69418 低危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-69420 低危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-9232 低危 3.0.8-r3 3.0.19-r0 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2026-22795 低危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl3 CVE-2026-22796 低危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libcrypto3 CVE-2025-69418 低危 3.0.8-r3 3.0.19-r0 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
Python (python-pkg)
低危漏洞:6 中危漏洞:19 高危漏洞:9 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
ansible-core CVE-2024-8775 高危 2.14.4 2.17.6, 2.16.13 ansible-core: Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8775

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-09-14 03:15 修改: 2026-06-17 08:23
cryptography CVE-2023-38325 高危 40.0.2 41.0.2 python-cryptography: SSH certificate encoding/parsing incompatibility with OpenSSH

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38325

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-07-14 20:15 修改: 2026-06-17 06:09
cryptography CVE-2023-50782 高危 40.0.2 42.0.0 python-cryptography: Bleichenbacher timing oracle attack against RSA decryption - incomplete fix for CVE-2020-25659

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50782

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-02-05 21:15 修改: 2026-06-17 06:39
cryptography CVE-2024-26130 高危 40.0.2 42.0.4 python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26130

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-02-21 17:15 修改: 2026-06-17 07:17
cryptography CVE-2026-26007 高危 40.0.2 46.0.5 cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26007

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2026-02-10 22:17 修改: 2026-07-15 02:18
cryptography GHSA-537c-gmf6-5ccf 高危 40.0.2 48.0.1 Vulnerable OpenSSL included in cryptography wheels

漏洞详情: https://github.com/advisories/GHSA-537c-gmf6-5ccf

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2026-06-15 20:12 修改: 2026-06-15 20:12
setuptools CVE-2024-6345 高危 65.5.1 70.0.0 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:c45401fc392cf294760e44b9801cedea9b963c1d5d423fa672116111ed734691

发布日期: 2024-07-15 01:15 修改: 2026-06-17 08:17
setuptools CVE-2025-47273 高危 65.5.1 78.1.1 setuptools: Path Traversal Vulnerability in setuptools PackageIndex

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273

镜像层: sha256:c45401fc392cf294760e44b9801cedea9b963c1d5d423fa672116111ed734691

发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27
wheel CVE-2026-24049 高危 0.40.0 0.46.2 wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24049

镜像层: sha256:c45401fc392cf294760e44b9801cedea9b963c1d5d423fa672116111ed734691

发布日期: 2026-01-22 05:16 修改: 2026-07-15 02:18
ansible-core CVE-2023-5764 中危 2.14.4 2.16.1, 2.15.8, 2.14.12 ansible: Template Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5764

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-12 22:15 修改: 2026-06-17 06:49
ansible-core CVE-2024-0690 中危 2.14.4 2.14.14, 2.16.3, 2.15.9 ansible-core: possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0690

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-02-06 12:15 修改: 2026-06-17 06:54
ansible-core CVE-2024-9902 中危 2.14.4 2.14.18rc1, 2.15.13rc1, 2.16.13rc1, 2.17.6rc1, 2.18.0rc2 ansible-core: Ansible-core user may read/write unauthorized content

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9902

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-11-06 10:15 修改: 2026-06-17 08:25
Jinja2 CVE-2024-34064 中危 3.1.2 3.1.4 jinja2: accepts keys containing non-attribute characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34064

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-05-06 15:15 修改: 2026-06-17 07:32
Jinja2 CVE-2024-56201 中危 3.1.2 3.1.5 jinja2: Jinja has a sandbox breakout through malicious filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56201

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-12-23 16:15 修改: 2026-06-17 08:11
Jinja2 CVE-2024-56326 中危 3.1.2 3.1.5 jinja2: Jinja has a sandbox breakout through indirect reference to format method

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56326

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-12-23 16:15 修改: 2026-06-17 08:12
Jinja2 CVE-2025-27516 中危 3.1.2 3.1.6 jinja2: Jinja sandbox breakout through attr filter selecting format method

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27516

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2025-03-05 21:15 修改: 2026-06-17 09:03
ansible CVE-2023-5115 中危 7.4.0 8.5.0 Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5115

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 14:15 修改: 2026-06-17 06:47
cryptography CVE-2023-49083 中危 40.0.2 41.0.6 python-cryptography: NULL-dereference when loading PKCS7 certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-49083

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-11-29 19:15 修改: 2026-06-17 06:35
cryptography CVE-2024-0727 中危 40.0.2 42.0.2 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54
cryptography GHSA-h4gh-qq45-vh27 中危 40.0.2 43.0.1 pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels

漏洞详情: https://github.com/advisories/GHSA-h4gh-qq45-vh27

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-09-03 21:59 修改: 2024-09-03 21:59
pip CVE-2023-5752 中危 23.1 23.3 pip: Mercurial configuration injectable in repo revision when installing via pip

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5752

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-10-25 18:17 修改: 2026-06-17 06:49
pip CVE-2025-8869 中危 23.1 25.3 pip: pip missing checks on symbolic link extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
pip CVE-2026-3219 中危 23.1 26.1 pip: pip: Incorrect file installation due to improper archive handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
pip CVE-2026-6357 中危 23.1 26.1 pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
pip CVE-2026-8643 中危 23.1 26.1.2 python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2026-06-01 17:17 修改: 2026-07-15 01:17
ansible CVE-2025-14010 中危 7.4.0 12.2.0 ansible-collection-community-general: ansible-collection-community-general: Keycloak user module leaks credentials in verbose output

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14010

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2025-12-04 10:16 修改: 2026-06-17 08:35
Jinja2 CVE-2024-22195 中危 3.1.2 3.1.3 jinja2: HTML attribute injection when passing user input as keys to xmlattr filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22195

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-01-11 03:15 修改: 2026-06-17 07:10
ansible-core CVE-2023-4237 中危 2.14.4 platform: ec2_key module prints out the private key directly to the standard output

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4237

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-10-04 15:15 修改: 2026-06-17 06:37
cryptography GHSA-jm77-qphf-c4w8 低危 40.0.2 41.0.3 pyca/cryptography's wheels include vulnerable OpenSSL

漏洞详情: https://github.com/advisories/GHSA-jm77-qphf-c4w8

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-08-01 22:34 修改: 2023-08-01 22:34
cryptography GHSA-v8gr-m533-ghj9 低危 40.0.2 41.0.4 Vulnerable OpenSSL included in cryptography wheels

漏洞详情: https://github.com/advisories/GHSA-v8gr-m533-ghj9

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-09-21 17:07 修改: 2023-09-21 17:07
pip CVE-2026-1703 低危 23.1 26.0 pip: pip: Information disclosure via path traversal when installing crafted wheel archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16
ansible-core CVE-2024-11079 低危 2.14.4 2.18.1rc1, 2.17.7rc1, 2.16.14rc1 ansible-core: Unsafe Tagging Bypass via hostvars Object in Ansible-Core

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11079

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-11-12 00:15 修改: 2026-06-30 00:16
cryptography CVE-2026-34073 低危 40.0.2 46.0.6 python-cryptography: Cryptography: Security bypass due to improper DNS name constraint validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34073

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
cryptography GHSA-5cpq-8wj7-hf2v 低危 40.0.2 41.0.0 Vulnerable OpenSSL included in cryptography wheels

漏洞详情: https://github.com/advisories/GHSA-5cpq-8wj7-hf2v

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-06-02 17:13 修改: 2023-06-02 17:13
/etc/kubeasz/roles/cluster-addon/templates/argocd/repository/repo-charts-git.yaml ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/etc/kubeasz/roles/cluster-addon/templates/argocd/repository/repo-values-git.yaml ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×