docker.io/forgejoclone/forgejo:16.0.3 linux/amd64

docker.io/forgejoclone/forgejo:16.0.3 - Trivy安全扫描结果 扫描时间: 2026-09-14 20:50
全部漏洞信息
低危漏洞:12 中危漏洞:47 高危漏洞:22 严重漏洞:0

系统OS: alpine 3.23.5 扫描引擎: Trivy 扫描时间: 2026-09-14 20:50

docker.io/forgejoclone/forgejo:16.0.3 (alpine 3.23.5) (alpine)
低危漏洞:12 中危漏洞:42 高危漏洞:20 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2026-11352 高危 8.20.0-r0 8.22.0-r0 curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:01
curl CVE-2026-11586 高危 8.20.0-r0 8.22.0-r0 curl: curl: Denial of Service via WebSocket PING flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 17:59
curl CVE-2026-12064 高危 8.20.0-r0 8.22.0-r0 curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
curl CVE-2026-8286 高危 8.20.0-r0 8.22.0-r0 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
curl CVE-2026-8458 高危 8.20.0-r0 8.22.0-r0 curl: libcurl: Unauthorized connection reuse due to a logical error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
curl CVE-2026-8925 高危 8.20.0-r0 8.22.0-r0 curl: curl: Double-free vulnerability in SASL authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
curl CVE-2026-8927 高危 8.20.0-r0 8.22.0-r0 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
curl CVE-2026-9547 高危 8.20.0-r0 8.22.0-r0 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
libcrypto3 CVE-2026-14456 高危 3.5.7-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libcurl CVE-2026-11352 高危 8.20.0-r0 8.22.0-r0 curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:01
libcurl CVE-2026-11586 高危 8.20.0-r0 8.22.0-r0 curl: curl: Denial of Service via WebSocket PING flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 17:59
libcurl CVE-2026-12064 高危 8.20.0-r0 8.22.0-r0 curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl CVE-2026-8286 高危 8.20.0-r0 8.22.0-r0 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libcurl CVE-2026-8458 高危 8.20.0-r0 8.22.0-r0 curl: libcurl: Unauthorized connection reuse due to a logical error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
libcurl CVE-2026-8925 高危 8.20.0-r0 8.22.0-r0 curl: curl: Double-free vulnerability in SASL authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
libcurl CVE-2026-8927 高危 8.20.0-r0 8.22.0-r0 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
libcurl CVE-2026-9547 高危 8.20.0-r0 8.22.0-r0 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
libexpat CVE-2026-76956 高危 2.8.3-r0 2.8.4-r0 libexpat: libexpat: Denial of Service via hash flooding attack with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76956

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-08-20 05:16 修改: 2026-09-08 21:08
libexpat CVE-2026-76957 高危 2.8.3-r0 2.8.4-r0 libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-08-20 05:16 修改: 2026-09-08 20:56
libssl3 CVE-2026-14456 高危 3.5.7-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
curl CVE-2026-8932 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
curl CVE-2026-9079 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
curl CVE-2026-9080 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
curl CVE-2026-9545 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Information disclosure via cached SSL session and early data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
curl CVE-2026-9546 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Information disclosure due to persistent Referer header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9546

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:53
curl CVE-2026-10536 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
libcrypto3 CVE-2026-18798 中危 3.5.7-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-63072 中危 3.5.7-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libcrypto3 CVE-2026-63076 中危 3.5.7-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
curl CVE-2026-11564 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Certificate validation bypass due to incorrect connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11564

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:00
curl CVE-2026-11856 中危 8.20.0-r0 8.22.0-r0 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
curl CVE-2026-13608 中危 8.20.0-r0 8.22.0-r0 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 19:59
curl CVE-2026-18924 中危 8.20.0-r0 8.22.0-r0 A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
curl CVE-2026-19931 中危 8.20.0-r0 8.22.0-r0 A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
curl CVE-2026-80229 中危 8.20.0-r0 8.22.0-r0 When performing transfers via libcurl\u2019s multi interface, pooled T ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:06
curl CVE-2026-80230 中危 8.20.0-r0 8.22.0-r0 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
curl CVE-2026-80255 中危 8.20.0-r0 8.22.0-r0 A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
libcurl CVE-2026-10536 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
libcurl CVE-2026-11564 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Certificate validation bypass due to incorrect connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11564

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:00
libcurl CVE-2026-11856 中危 8.20.0-r0 8.22.0-r0 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl CVE-2026-13608 中危 8.20.0-r0 8.22.0-r0 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 19:59
libcurl CVE-2026-18924 中危 8.20.0-r0 8.22.0-r0 A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libcurl CVE-2026-19931 中危 8.20.0-r0 8.22.0-r0 A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libcurl CVE-2026-80229 中危 8.20.0-r0 8.22.0-r0 When performing transfers via libcurl\u2019s multi interface, pooled T ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:06
libcurl CVE-2026-80230 中危 8.20.0-r0 8.22.0-r0 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
libcurl CVE-2026-80255 中危 8.20.0-r0 8.22.0-r0 A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
libcurl CVE-2026-82209 中危 8.20.0-r0 8.22.0-r0 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
libcurl CVE-2026-8924 中危 8.20.0-r0 8.22.0-r0 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
libcurl CVE-2026-8926 中危 8.20.0-r0 8.22.0-r0 curl: curl: Information disclosure via incorrect .netrc password lookup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
libcurl CVE-2026-8932 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
libcurl CVE-2026-9079 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
libcurl CVE-2026-9080 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
libcurl CVE-2026-9545 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Information disclosure via cached SSL session and early data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
libcurl CVE-2026-9546 中危 8.20.0-r0 8.22.0-r0 libcurl: libcurl: Information disclosure due to persistent Referer header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9546

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:53
curl CVE-2026-82209 中危 8.20.0-r0 8.22.0-r0 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
curl CVE-2026-8924 中危 8.20.0-r0 8.22.0-r0 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
libexpat CVE-2026-66046 中危 2.8.3-r0 2.8.4-r0 Expat through 2.8.3 contains a denial of service vulnerability caused ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-08-18 15:16 修改: 2026-08-20 16:17
libexpat CVE-2026-76641 中危 2.8.3-r0 2.8.4-r0 CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17
curl CVE-2026-8926 中危 8.20.0-r0 8.22.0-r0 curl: curl: Information disclosure via incorrect .netrc password lookup

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
libssl3 CVE-2026-18798 中危 3.5.7-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3 CVE-2026-63072 中危 3.5.7-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-63076 中危 3.5.7-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libcrypto3 CVE-2026-63074 低危 3.5.7-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libcrypto3 CVE-2026-63075 低危 3.5.7-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libcrypto3 CVE-2026-75803 低危 3.5.7-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libcrypto3 CVE-2026-14457 低危 3.5.7-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
libcrypto3 CVE-2026-54874 低危 3.5.7-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libcrypto3 CVE-2026-63073 低危 3.5.7-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-14457 低危 3.5.7-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
libssl3 CVE-2026-54874 低危 3.5.7-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-63073 低危 3.5.7-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-63074 低危 3.5.7-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
libssl3 CVE-2026-63075 低危 3.5.7-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
libssl3 CVE-2026-75803 低危 3.5.7-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
curl CVE-2026-80256 未知 8.20.0-r0 8.22.0-r0

漏洞详情:

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl CVE-2026-80231 未知 8.20.0-r0 8.22.0-r0 native CA store conn reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80231

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
libcurl CVE-2026-80256 未知 8.20.0-r0 8.22.0-r0

漏洞详情:

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl CVE-2026-82208 未知 8.20.0-r0 8.22.0-r0 With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_S ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82208

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
curl CVE-2026-82208 未知 8.20.0-r0 8.22.0-r0 With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_S ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82208

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
curl CVE-2026-80231 未知 8.20.0-r0 8.22.0-r0 native CA store conn reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80231

镜像层: sha256:40608d2a22e2cc2c77d816c220b2294d57eece4b5d8724d480b73b90fecb7065

发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
app/gitea/gitea (gobinary)
低危漏洞:0 中危漏洞:3 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
google.golang.org/grpc CVE-2026-84304 高危 v1.82.1 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304

镜像层: sha256:af7c1c76fd5abb70ef5ec1d73e2d88f5f7494cf0248dc577448b85066fd0aaf3

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc CVE-2026-84445 高危 v1.82.1 1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445

镜像层: sha256:af7c1c76fd5abb70ef5ec1d73e2d88f5f7494cf0248dc577448b85066fd0aaf3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/crypto CVE-2026-56855 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:af7c1c76fd5abb70ef5ec1d73e2d88f5f7494cf0248dc577448b85066fd0aaf3

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:af7c1c76fd5abb70ef5ec1d73e2d88f5f7494cf0248dc577448b85066fd0aaf3

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
google.golang.org/grpc CVE-2026-84303 中危 v1.82.1 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303

镜像层: sha256:af7c1c76fd5abb70ef5ec1d73e2d88f5f7494cf0248dc577448b85066fd0aaf3

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
golang.org/x/crypto GO-2026-5932 未知 v0.55.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:af7c1c76fd5abb70ef5ec1d73e2d88f5f7494cf0248dc577448b85066fd0aaf3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/local/bin/environment-to-ini (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2026-56855 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:5d13d60e742a0df98b1e4b925e243e7321a7068f80788c9821a784224f2caeaf

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto CVE-2026-78662 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:5d13d60e742a0df98b1e4b925e243e7321a7068f80788c9821a784224f2caeaf

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto GO-2026-5932 未知 v0.55.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:5d13d60e742a0df98b1e4b925e243e7321a7068f80788c9821a784224f2caeaf

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×