docker.io/gitlab/gitlab-ce:11.9.9-ce.0 linux/amd64

docker.io/gitlab/gitlab-ce:11.9.9-ce.0 - Trivy安全扫描结果 扫描时间: 2026-07-20 16:55
全部漏洞信息
低危漏洞:125 中危漏洞:238 高危漏洞:133 严重漏洞:25

系统OS: ubuntu 16.04 扫描引擎: Trivy 扫描时间: 2026-07-20 16:55

docker.io/gitlab/gitlab-ce:11.9.9-ce.0 (ubuntu 16.04) (ubuntu)
低危漏洞:106 中危漏洞:129 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libssl1.0.0 CVE-2020-1971 高危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.18 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02
openssl CVE-2020-1971 高危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.18 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02
apt-transport-https CVE-2020-27350 中危 1.2.31 1.2.32ubuntu0.2 APT had several integer overflows and underflows while parsing .deb pa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27350

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-12-10 04:15 修改: 2026-06-17 03:09
apt-transport-https CVE-2020-3810 中危 1.2.31 1.2.32ubuntu0.1 Missing input validation in the ar/tar implementations of APT before v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-3810

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-05-15 14:15 修改: 2026-06-17 03:19
e2fslibs CVE-2019-5094 中危 1.42.13-1ubuntu1 1.42.13-1ubuntu1.1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37
e2fslibs CVE-2019-5188 中危 1.42.13-1ubuntu1 1.42.13-1ubuntu1.2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37
e2fsprogs CVE-2019-5094 中危 1.42.13-1ubuntu1 1.42.13-1ubuntu1.1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37
e2fsprogs CVE-2019-5188 中危 1.42.13-1ubuntu1 1.42.13-1ubuntu1.2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37
libapt-pkg5.0 CVE-2020-27350 中危 1.2.29ubuntu0.1 1.2.32ubuntu0.2 APT had several integer overflows and underflows while parsing .deb pa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27350

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-12-10 04:15 修改: 2026-06-17 03:09
libapt-pkg5.0 CVE-2020-3810 中危 1.2.29ubuntu0.1 1.2.32ubuntu0.1 Missing input validation in the ar/tar implementations of APT before v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-3810

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-05-15 14:15 修改: 2026-06-17 03:19
libbsd0 CVE-2019-20367 中危 0.8.2-1 0.8.2-1ubuntu0.1 nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a com ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20367

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-01-08 17:15 修改: 2026-06-17 02:30
libbz2-1.0 CVE-2019-12900 中危 1.0.6-8 1.0.6-8ubuntu0.1 bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-06-19 23:15 修改: 2026-06-17 02:15
libc-bin CVE-2017-18269 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: memory corruption in memcpy-sse2-unaligned.S

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18269

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:12
libc-bin CVE-2018-11236 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11236

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35
libc-bin CVE-2018-11237 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11237

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35
libc-bin CVE-2018-6485 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: Integer overflow in posix_memalign in memalign functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6485

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-02-01 14:29 修改: 2026-06-17 02:01
libc-bin CVE-2020-1751 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: array overflow in backtrace functions for powerpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1751

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-04-17 19:15 修改: 2026-06-17 03:02
libc6 CVE-2017-18269 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: memory corruption in memcpy-sse2-unaligned.S

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18269

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:12
libc6 CVE-2018-11236 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11236

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35
libc6 CVE-2018-11237 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11237

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35
libc6 CVE-2018-6485 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: Integer overflow in posix_memalign in memalign functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6485

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-02-01 14:29 修改: 2026-06-17 02:01
libc6 CVE-2020-1751 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: array overflow in backtrace functions for powerpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1751

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-04-17 19:15 修改: 2026-06-17 03:02
libcomerr2 CVE-2019-5094 中危 1.42.13-1ubuntu1 1.42.13-1ubuntu1.1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37
libcomerr2 CVE-2019-5188 中危 1.42.13-1ubuntu1 1.42.13-1ubuntu1.2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37
libcurl3-gnutls CVE-2019-5436 中危 7.47.0-1ubuntu2.12 7.47.0-1ubuntu2.13 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5436

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-05-28 19:29 修改: 2026-06-17 02:37
libcurl3-gnutls CVE-2019-5482 中危 7.47.0-1ubuntu2.12 7.47.0-1ubuntu2.14 curl: heap buffer overflow in function tftp_receive_packet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5482

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-16 19:15 修改: 2026-06-17 02:37
libcurl3-gnutls CVE-2020-8177 中危 7.47.0-1ubuntu2.12 7.47.0-1ubuntu2.15 curl: Incorrect argument check can allow remote servers to overwrite local files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8177

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:25
libcurl3-gnutls CVE-2020-8285 中危 7.47.0-1ubuntu2.12 7.47.0-1ubuntu2.18 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26
libcurl3-gnutls CVE-2020-8286 中危 7.47.0-1ubuntu2.12 7.47.0-1ubuntu2.18 curl: Inferior OCSP verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8286

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26
libcurl3-gnutls CVE-2021-22876 中危 7.47.0-1ubuntu2.12 7.47.0-1ubuntu2.19 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-04-01 18:15 修改: 2026-06-17 03:37
libdb5.3 CVE-2019-8457 中危 5.3.28-11ubuntu0.1 5.3.28-11ubuntu0.2 sqlite: heap out-of-bound read in function rtreenode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42
libexpat1 CVE-2019-15903 中危 2.1.0-7ubuntu0.16.04.3 2.1.0-7ubuntu0.16.04.5 expat: heap-based buffer over-read via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15903

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-04 06:15 修改: 2026-06-17 02:21
libgcrypt20 CVE-2019-13627 中危 1.6.5-2ubuntu0.5 1.6.5-2ubuntu0.6 libgcrypt: ECDSA timing attack allowing private key leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13627

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-09-25 15:15 修改: 2026-06-17 02:17
libgnutls30 CVE-2018-10844 中危 3.4.10-4ubuntu1.4 3.4.10-4ubuntu1.5 gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10844

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2018-08-22 13:29 修改: 2026-06-17 01:34
libgnutls30 CVE-2018-10845 中危 3.4.10-4ubuntu1.4 3.4.10-4ubuntu1.5 gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10845

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2018-08-22 13:29 修改: 2026-06-17 01:34
libgnutls30 CVE-2018-10846 中危 3.4.10-4ubuntu1.4 3.4.10-4ubuntu1.5 gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10846

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2018-08-22 13:29 修改: 2026-06-17 01:34
libgssapi-krb5-2 CVE-2020-28196 中危 1.13.2+dfsg-5ubuntu2.1 1.13.2+dfsg-5ubuntu2.2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10
libhogweed4 CVE-2021-20305 中危 3.2-1ubuntu0.16.04.1 3.2-1ubuntu0.16.04.2 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-04-05 22:15 修改: 2026-06-17 03:33
libk5crypto3 CVE-2020-28196 中危 1.13.2+dfsg-5ubuntu2.1 1.13.2+dfsg-5ubuntu2.2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10
libkrb5-3 CVE-2020-28196 中危 1.13.2+dfsg-5ubuntu2.1 1.13.2+dfsg-5ubuntu2.2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10
libkrb5support0 CVE-2020-28196 中危 1.13.2+dfsg-5ubuntu2.1 1.13.2+dfsg-5ubuntu2.2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10
libldap-2.4-2 CVE-2019-13565 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.6 openldap: ACL restrictions bypass due to sasl_ssf value being set permanently

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13565

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-07-26 13:15 修改: 2026-06-17 02:16
libldap-2.4-2 CVE-2020-12243 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.8 openldap: denial of service via nested boolean expressions in LDAP search filters

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12243

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-04-28 19:15 修改: 2026-06-17 02:51
libldap-2.4-2 CVE-2020-25692 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.10 openldap: NULL pointer dereference for unauthenticated packet in slapd

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25692

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-12-08 01:15 修改: 2026-06-17 03:07
libldap-2.4-2 CVE-2020-25709 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.11 openldap: assertion failure in Certificate List syntax validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25709

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-05-18 12:15 修改: 2026-06-17 03:07
libldap-2.4-2 CVE-2020-25710 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.11 openldap: assertion failure in CSN normalization with invalid input

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25710

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-05-28 11:15 修改: 2026-06-17 03:07
libldap-2.4-2 CVE-2020-36221 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.12 openldap: Integer underflow in serialNumberAndIssuerCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36221

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15
libldap-2.4-2 CVE-2020-36222 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.12 openldap: Assertion failure in slapd in the saslAuthzTo validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36222

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15
libldap-2.4-2 CVE-2020-36223 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.12 openldap: Out-of-bounds read in Values Return Filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36223

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15
libldap-2.4-2 CVE-2020-36224 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.12 openldap: Invalid pointer free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36224

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15
libldap-2.4-2 CVE-2020-36225 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.12 openldap: Double free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36225

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15
libldap-2.4-2 CVE-2020-36226 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.12 openldap: Denial of service via length miscalculation in slap_parse_user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36226

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15
libldap-2.4-2 CVE-2020-36227 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.12 openldap: Infinite loop in slapd with the cancel_extop Cancel operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36227

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15
libldap-2.4-2 CVE-2020-36228 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.12 openldap: Integer underflow in issuerAndThisUpdateCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36228

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15
libldap-2.4-2 CVE-2020-36229 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.12 openldap: Type confusion in ad_keystring in ad.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36229

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15
libldap-2.4-2 CVE-2020-36230 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.12 openldap: Assertion failure in ber_next_element in decode.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36230

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-26 18:15 修改: 2026-06-17 03:15
libldap-2.4-2 CVE-2021-27212 中危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.13 openldap: Assertion failure in slapd in the issuerAndThisUpdateCheck function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27212

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-02-14 03:15 修改: 2026-06-17 03:44
libnettle6 CVE-2021-20305 中危 3.2-1ubuntu0.16.04.1 3.2-1ubuntu0.16.04.2 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-04-05 22:15 修改: 2026-06-17 03:33
libp11-kit0 CVE-2020-29361 中危 0.23.2-5~ubuntu16.04.1 0.23.2-5~ubuntu16.04.2 p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29361

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11
libp11-kit0 CVE-2020-29362 中危 0.23.2-5~ubuntu16.04.1 0.23.2-5~ubuntu16.04.2 p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29362

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11
libpython3.5 CVE-2018-20852 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: Cookie domain check returns incorrect results

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20852

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-07-13 21:15 修改: 2026-06-17 01:53
libpython3.5 CVE-2019-10160 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10160

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-06-07 18:29 修改: 2026-06-17 02:10
libpython3.5 CVE-2019-16056 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.9 python: email.utils.parseaddr wrongly parses email addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16056

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-06 18:15 修改: 2026-06-17 02:21
libpython3.5 CVE-2019-18348 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.10 python: CRLF injection via the host part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18348

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-10-23 17:15 修改: 2026-06-17 02:24
libpython3.5 CVE-2019-20907 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.11 python: infinite loop in the tarfile module via crafted TAR archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20907

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-07-13 13:15 修改: 2026-06-17 02:31
libpython3.5 CVE-2019-9636 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: Information Disclosure due to urlsplit improper NFKC normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9636

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-08 21:29 修改: 2026-06-17 02:44
libpython3.5 CVE-2019-9740 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: CRLF injection via the query part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9740

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-13 03:29 修改: 2026-06-17 02:44
libpython3.5 CVE-2019-9947 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: CRLF injection via the path part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9947

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-23 18:29 修改: 2026-06-17 02:44
libpython3.5 CVE-2019-9948 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9948

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-23 18:29 修改: 2026-06-17 02:44
libpython3.5 CVE-2020-26116 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.12 python: CRLF injection via HTTP request method in httplib/http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26116

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-09-27 04:15 修改: 2026-06-17 03:07
libpython3.5 CVE-2021-3177 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.13 python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3177

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-19 06:15 修改: 2026-06-17 04:04
libpython3.5-minimal CVE-2018-20852 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: Cookie domain check returns incorrect results

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20852

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-07-13 21:15 修改: 2026-06-17 01:53
libpython3.5-minimal CVE-2019-10160 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10160

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-06-07 18:29 修改: 2026-06-17 02:10
libpython3.5-minimal CVE-2019-16056 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.9 python: email.utils.parseaddr wrongly parses email addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16056

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-06 18:15 修改: 2026-06-17 02:21
libpython3.5-minimal CVE-2019-18348 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.10 python: CRLF injection via the host part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18348

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-10-23 17:15 修改: 2026-06-17 02:24
libpython3.5-minimal CVE-2019-20907 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.11 python: infinite loop in the tarfile module via crafted TAR archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20907

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-07-13 13:15 修改: 2026-06-17 02:31
libpython3.5-minimal CVE-2019-9636 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: Information Disclosure due to urlsplit improper NFKC normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9636

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-08 21:29 修改: 2026-06-17 02:44
libpython3.5-minimal CVE-2019-9740 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: CRLF injection via the query part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9740

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-13 03:29 修改: 2026-06-17 02:44
libpython3.5-minimal CVE-2019-9947 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: CRLF injection via the path part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9947

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-23 18:29 修改: 2026-06-17 02:44
libpython3.5-minimal CVE-2019-9948 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9948

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-23 18:29 修改: 2026-06-17 02:44
libpython3.5-minimal CVE-2020-26116 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.12 python: CRLF injection via HTTP request method in httplib/http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26116

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-09-27 04:15 修改: 2026-06-17 03:07
libpython3.5-minimal CVE-2021-3177 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.13 python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3177

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-19 06:15 修改: 2026-06-17 04:04
libpython3.5-stdlib CVE-2018-20852 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: Cookie domain check returns incorrect results

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20852

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-07-13 21:15 修改: 2026-06-17 01:53
libpython3.5-stdlib CVE-2019-10160 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10160

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-06-07 18:29 修改: 2026-06-17 02:10
libpython3.5-stdlib CVE-2019-16056 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.9 python: email.utils.parseaddr wrongly parses email addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16056

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-06 18:15 修改: 2026-06-17 02:21
libpython3.5-stdlib CVE-2019-18348 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.10 python: CRLF injection via the host part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18348

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-10-23 17:15 修改: 2026-06-17 02:24
libpython3.5-stdlib CVE-2019-20907 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.11 python: infinite loop in the tarfile module via crafted TAR archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20907

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-07-13 13:15 修改: 2026-06-17 02:31
libpython3.5-stdlib CVE-2019-9636 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: Information Disclosure due to urlsplit improper NFKC normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9636

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-08 21:29 修改: 2026-06-17 02:44
libpython3.5-stdlib CVE-2019-9740 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: CRLF injection via the query part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9740

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-13 03:29 修改: 2026-06-17 02:44
libpython3.5-stdlib CVE-2019-9947 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: CRLF injection via the path part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9947

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-23 18:29 修改: 2026-06-17 02:44
libpython3.5-stdlib CVE-2019-9948 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9948

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-23 18:29 修改: 2026-06-17 02:44
libpython3.5-stdlib CVE-2020-26116 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.12 python: CRLF injection via HTTP request method in httplib/http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26116

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-09-27 04:15 修改: 2026-06-17 03:07
libpython3.5-stdlib CVE-2021-3177 中危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.13 python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3177

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-01-19 06:15 修改: 2026-06-17 04:04
libsasl2-2 CVE-2019-19906 中危 2.1.26.dfsg1-14ubuntu0.1 2.1.26.dfsg1-14ubuntu0.2 cyrus-sasl: denial of service in _sasl_add_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19906

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-12-19 18:15 修改: 2026-06-17 02:27
libsasl2-modules-db CVE-2019-19906 中危 2.1.26.dfsg1-14ubuntu0.1 2.1.26.dfsg1-14ubuntu0.2 cyrus-sasl: denial of service in _sasl_add_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19906

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-12-19 18:15 修改: 2026-06-17 02:27
libseccomp2 CVE-2019-9893 中危 2.3.1-2.1ubuntu2~16.04.1 2.4.1-0ubuntu0.16.04.2 libseccomp: incorrect generation of syscall filters in libseccomp

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9893

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-03-21 16:01 修改: 2026-06-17 02:44
libsqlite3-0 CVE-2018-20346 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.2 sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20346

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2018-12-21 21:29 修改: 2026-06-17 01:52
libsqlite3-0 CVE-2018-20506 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.2 sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20506

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-04-03 18:29 修改: 2026-06-17 01:52
libsqlite3-0 CVE-2019-13734 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.4 sqlite: fts3: improve shadow table corruption detection

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13734

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-12-10 22:15 修改: 2026-06-17 02:17
libsqlite3-0 CVE-2019-13750 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.4 sqlite: dropping of shadow tables not restricted in defensive mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13750

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-12-10 22:15 修改: 2026-06-17 02:17
libsqlite3-0 CVE-2019-13751 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.4 sqlite: fts3: improve detection of corrupted records

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13751

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-12-10 22:15 修改: 2026-06-17 02:17
libsqlite3-0 CVE-2019-13752 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.4 sqlite: fts3: improve shadow table corruption detection

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13752

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-12-10 22:15 修改: 2026-06-17 02:17
libsqlite3-0 CVE-2019-13753 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.4 sqlite: fts3: incorrectly removed corruption check

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13753

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-12-10 22:15 修改: 2026-06-17 02:17
libsqlite3-0 CVE-2019-19926 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.4 sqlite: error mishandling because of incomplete fix of CVE-2019-19880

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19926

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-12-23 01:15 修改: 2026-06-17 02:27
libsqlite3-0 CVE-2019-8457 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.2 sqlite: heap out-of-bound read in function rtreenode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42
libsqlite3-0 CVE-2019-9936 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.2 sqlite: heap-based buffer over-read in function fts5HashEntrySort in sqlite3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9936

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-22 08:29 修改: 2026-06-17 02:44
libsqlite3-0 CVE-2020-13434 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.5 sqlite: integer overflow in sqlite3_str_vappendf function in printf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13434

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-05-24 22:15 修改: 2026-06-17 02:53
libsqlite3-0 CVE-2020-13630 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.5 sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13630

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-05-27 15:15 修改: 2026-06-17 02:53
libsqlite3-0 CVE-2020-13632 中危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.5 sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13632

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-05-27 15:15 修改: 2026-06-17 02:53
libss2 CVE-2019-5094 中危 1.42.13-1ubuntu1 1.42.13-1ubuntu1.1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37
libss2 CVE-2019-5188 中危 1.42.13-1ubuntu1 1.42.13-1ubuntu1.2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37
apt CVE-2020-27350 中危 1.2.29ubuntu0.1 1.2.32ubuntu0.2 APT had several integer overflows and underflows while parsing .deb pa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27350

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-12-10 04:15 修改: 2026-06-17 03:09
libssl1.0.0 CVE-2021-23841 中危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.19 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libsystemd0 CVE-2019-3842 中危 229-4ubuntu21.16 229-4ubuntu21.21 systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-04-09 21:29 修改: 2026-06-17 02:35
libsystemd0 CVE-2020-1712 中危 229-4ubuntu21.16 229-4ubuntu21.27 systemd: use-after-free when asynchronous polkit queries are performed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1712

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-03-31 17:15 修改: 2026-06-17 03:02
libudev1 CVE-2019-3842 中危 229-4ubuntu21.16 229-4ubuntu21.21 systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-04-09 21:29 修改: 2026-06-17 02:35
libudev1 CVE-2020-1712 中危 229-4ubuntu21.16 229-4ubuntu21.27 systemd: use-after-free when asynchronous polkit queries are performed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1712

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-03-31 17:15 修改: 2026-06-17 03:02
multiarch-support CVE-2017-18269 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: memory corruption in memcpy-sse2-unaligned.S

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18269

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:12
multiarch-support CVE-2018-11236 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11236

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35
multiarch-support CVE-2018-11237 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11237

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35
multiarch-support CVE-2018-6485 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: Integer overflow in posix_memalign in memalign functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6485

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-02-01 14:29 修改: 2026-06-17 02:01
multiarch-support CVE-2020-1751 中危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: array overflow in backtrace functions for powerpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1751

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-04-17 19:15 修改: 2026-06-17 03:02
apt CVE-2020-3810 中危 1.2.29ubuntu0.1 1.2.32ubuntu0.1 Missing input validation in the ar/tar implementations of APT before v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-3810

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-05-15 14:15 修改: 2026-06-17 03:19
openssl CVE-2021-23841 中危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.19 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
systemd CVE-2019-3842 中危 229-4ubuntu21.16 229-4ubuntu21.21 systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-04-09 21:29 修改: 2026-06-17 02:35
systemd CVE-2020-1712 中危 229-4ubuntu21.16 229-4ubuntu21.27 systemd: use-after-free when asynchronous polkit queries are performed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1712

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-03-31 17:15 修改: 2026-06-17 03:02
systemd-sysv CVE-2019-3842 中危 229-4ubuntu21.16 229-4ubuntu21.21 systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-04-09 21:29 修改: 2026-06-17 02:35
systemd-sysv CVE-2020-1712 中危 229-4ubuntu21.16 229-4ubuntu21.27 systemd: use-after-free when asynchronous polkit queries are performed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1712

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-03-31 17:15 修改: 2026-06-17 03:02
vim CVE-2019-12735 中危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.3 vim/neovim: ': source!' command allows arbitrary command execution via modelines

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12735

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-06-05 14:29 修改: 2026-06-17 02:15
vim-common CVE-2019-12735 中危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.3 vim/neovim: ': source!' command allows arbitrary command execution via modelines

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12735

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-06-05 14:29 修改: 2026-06-17 02:15
vim-runtime CVE-2019-12735 中危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.3 vim/neovim: ': source!' command allows arbitrary command execution via modelines

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12735

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-06-05 14:29 修改: 2026-06-17 02:15
libpython3.5-stdlib CVE-2019-17514 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.11 python: potentially misleading information about whether sorting in library/glob.html

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17514

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-10-12 13:15 修改: 2026-06-17 02:24
libpython3.5-stdlib CVE-2019-5010 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: NULL pointer dereference using a specially crafted X509 certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5010

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-10-31 21:15 修改: 2026-06-17 02:36
libpython3.5-stdlib CVE-2019-9674 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.11 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9674

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-02-04 15:15 修改: 2026-06-17 02:44
libpython3.5-stdlib CVE-2020-14422 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.11 python: DoS via inefficiency in IPv{4,6}Interface classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14422

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-06-18 14:15 修改: 2026-06-17 02:54
libpython3.5-stdlib CVE-2020-27619 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.13 python: Unsafe use of eval() on data retrieved via HTTP in the test suite

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-10-22 03:16 修改: 2026-06-17 03:09
libpython3.5-stdlib CVE-2020-8492 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.10 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8492

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-01-30 19:15 修改: 2026-06-17 03:26
libpython3.5 CVE-2019-17514 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.11 python: potentially misleading information about whether sorting in library/glob.html

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17514

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-10-12 13:15 修改: 2026-06-17 02:24
libpython3.5 CVE-2019-5010 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: NULL pointer dereference using a specially crafted X509 certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5010

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-10-31 21:15 修改: 2026-06-17 02:36
libpython3.5 CVE-2019-9674 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.11 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9674

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-02-04 15:15 修改: 2026-06-17 02:44
libpython3.5 CVE-2020-14422 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.11 python: DoS via inefficiency in IPv{4,6}Interface classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14422

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-06-18 14:15 修改: 2026-06-17 02:54
libpython3.5 CVE-2020-27619 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.13 python: Unsafe use of eval() on data retrieved via HTTP in the test suite

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-10-22 03:16 修改: 2026-06-17 03:09
libpython3.5 CVE-2020-8492 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.10 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8492

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-01-30 19:15 修改: 2026-06-17 03:26
libc6 CVE-2019-19126 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-11-19 22:15 修改: 2026-06-17 02:26
libc6 CVE-2019-9169 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9169

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-02-26 02:29 修改: 2026-06-17 02:43
libc6 CVE-2020-10029 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-03-04 15:15 修改: 2026-06-17 02:47
libc6 CVE-2020-1752 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-04-30 17:15 修改: 2026-06-17 03:02
libc6 CVE-2020-6096 低危 2.23-0ubuntu11 2.23-0ubuntu11.3 glibc: signed comparison vulnerability in the ARMv7 memcpy function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-04-01 22:15 修改: 2026-06-17 03:22
libldap-2.4-2 CVE-2019-13057 低危 2.4.42+dfsg-2ubuntu3.4 2.4.42+dfsg-2ubuntu3.6 openldap: Information disclosure issue in slapd component

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13057

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-07-26 13:15 修改: 2026-06-17 02:15
libc-bin CVE-2019-9169 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9169

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-02-26 02:29 修改: 2026-06-17 02:43
libc-bin CVE-2020-10029 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-03-04 15:15 修改: 2026-06-17 02:47
libc-bin CVE-2020-1752 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-04-30 17:15 修改: 2026-06-17 03:02
libc-bin CVE-2020-6096 低危 2.23-0ubuntu11 2.23-0ubuntu11.3 glibc: signed comparison vulnerability in the ARMv7 memcpy function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-04-01 22:15 修改: 2026-06-17 03:22
libsqlite3-0 CVE-2016-6153 低危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.2 sqlite: Tempdir selection vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6153

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2016-09-26 16:59 修改: 2026-06-17 00:50
libsqlite3-0 CVE-2017-10989 低危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.2 sqlite: Heap-buffer overflow in the getNodeSize function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10989

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-07-07 12:29 修改: 2026-06-17 01:01
libsqlite3-0 CVE-2017-13685 低危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.2 sqlite: Local DoS via dump_callback function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13685

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-08-29 06:29 修改: 2026-06-17 01:04
libsqlite3-0 CVE-2017-2518 低危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.2 An issue was discovered in certain Apple products. iOS before 10.3.2 i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-2518

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-05-22 05:29 修改: 2026-06-17 01:16
libsqlite3-0 CVE-2017-2519 低危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.2 An issue was discovered in certain Apple products. iOS before 10.3.2 i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-2519

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-05-22 05:29 修改: 2026-06-17 01:16
libsqlite3-0 CVE-2017-2520 低危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.2 An issue was discovered in certain Apple products. iOS before 10.3.2 i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-2520

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-05-22 05:29 修改: 2026-06-17 01:16
libsqlite3-0 CVE-2019-16168 低危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.3 sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16168

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-09 17:15 修改: 2026-06-17 02:21
libsqlite3-0 CVE-2019-20218 低危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.4 sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20218

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-01-02 14:16 修改: 2026-06-17 02:30
libsqlite3-0 CVE-2019-5827 低危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.3 sqlite: out-of-bounds access due to the use of 32-bit memory allocator interfaces

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5827

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-06-27 17:15 修改: 2026-06-17 02:38
libsqlite3-0 CVE-2019-9937 低危 3.11.0-1ubuntu1.1 3.11.0-1ubuntu1.2 sqlite: null-pointer dereference in function fts5ChunkIterate in sqlite3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9937

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-03-22 08:29 修改: 2026-06-17 02:44
libbz2-1.0 CVE-2016-3189 低危 1.0.6-8 1.0.6-8ubuntu0.1 bzip2: heap use after free in bzip2recover

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3189

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2016-06-30 17:59 修改: 2026-06-17 00:45
libpython3.5-minimal CVE-2018-20406 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: Integer overflow in Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20406

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2018-12-23 23:29 修改: 2026-06-17 01:52
libpython3.5-minimal CVE-2019-16935 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.9 python: XSS vulnerability in the documentation XML-RPC server in server_title field

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16935

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-28 02:15 修改: 2026-06-17 02:22
libpython3.5-minimal CVE-2019-17514 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.11 python: potentially misleading information about whether sorting in library/glob.html

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17514

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-10-12 13:15 修改: 2026-06-17 02:24
libssl1.0.0 CVE-2019-1547 低危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.16 openssl: side-channel weak encryption vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libssl1.0.0 CVE-2019-1551 低危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.16 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-12-06 18:15 修改: 2026-06-17 02:28
libssl1.0.0 CVE-2019-1563 低危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.16 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
libssl1.0.0 CVE-2020-1968 低危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.17 openssl: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1968

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-09-09 14:15 修改: 2026-06-17 03:02
libssl1.0.0 CVE-2021-23840 低危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.19 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libpython3.5-minimal CVE-2019-5010 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: NULL pointer dereference using a specially crafted X509 certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5010

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-10-31 21:15 修改: 2026-06-17 02:36
libpython3.5-minimal CVE-2019-9674 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.11 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9674

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-02-04 15:15 修改: 2026-06-17 02:44
libsystemd0 CVE-2018-16888 低危 229-4ubuntu21.16 229-4ubuntu21.27 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
libsystemd0 CVE-2019-20386 低危 229-4ubuntu21.16 229-4ubuntu21.27 systemd: memory leak in button_open() in login/logind-button.c when udev events are received

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-01-21 06:15 修改: 2026-06-17 02:30
libpython3.5-minimal CVE-2020-14422 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.11 python: DoS via inefficiency in IPv{4,6}Interface classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14422

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-06-18 14:15 修改: 2026-06-17 02:54
libpython3.5-minimal CVE-2020-27619 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.13 python: Unsafe use of eval() on data retrieved via HTTP in the test suite

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-10-22 03:16 修改: 2026-06-17 03:09
libudev1 CVE-2018-16888 低危 229-4ubuntu21.16 229-4ubuntu21.27 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
libudev1 CVE-2019-20386 低危 229-4ubuntu21.16 229-4ubuntu21.27 systemd: memory leak in button_open() in login/logind-button.c when udev events are received

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-01-21 06:15 修改: 2026-06-17 02:30
libpython3.5-minimal CVE-2020-8492 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.10 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8492

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-01-30 19:15 修改: 2026-06-17 03:26
bash CVE-2019-9924 低危 4.3-14ubuntu1.2 4.3-14ubuntu1.4 bash: BASH_CMD is writable in restricted bash shells

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9924

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-03-22 08:29 修改: 2026-06-17 02:44
libc-bin CVE-2009-5155 低危 2.23-0ubuntu11 2.23-0ubuntu11.3 glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result

漏洞详情: https://avd.aquasec.com/nvd/cve-2009-5155

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-02-26 02:29 修改: 2024-11-21 01:11
libc-bin CVE-2017-12133 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: Use-after-free read access in clntudp_call in sunrpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12133

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2017-09-07 13:29 修改: 2026-06-17 01:02
libcurl3-gnutls CVE-2020-8231 低危 7.47.0-1ubuntu2.12 7.47.0-1ubuntu2.16 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26
multiarch-support CVE-2009-5155 低危 2.23-0ubuntu11 2.23-0ubuntu11.3 glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result

漏洞详情: https://avd.aquasec.com/nvd/cve-2009-5155

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-02-26 02:29 修改: 2024-11-21 01:11
multiarch-support CVE-2017-12133 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: Use-after-free read access in clntudp_call in sunrpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12133

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2017-09-07 13:29 修改: 2026-06-17 01:02
multiarch-support CVE-2019-19126 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-11-19 22:15 修改: 2026-06-17 02:26
multiarch-support CVE-2019-9169 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9169

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-02-26 02:29 修改: 2026-06-17 02:43
multiarch-support CVE-2020-10029 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-03-04 15:15 修改: 2026-06-17 02:47
multiarch-support CVE-2020-1752 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-04-30 17:15 修改: 2026-06-17 03:02
multiarch-support CVE-2020-6096 低危 2.23-0ubuntu11 2.23-0ubuntu11.3 glibc: signed comparison vulnerability in the ARMv7 memcpy function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6096

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-04-01 22:15 修改: 2026-06-17 03:22
libcurl3-gnutls CVE-2020-8284 低危 7.47.0-1ubuntu2.12 7.47.0-1ubuntu2.18 curl: FTP PASV command response can cause curl to connect to arbitrary host

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8284

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-12-14 20:15 修改: 2026-06-17 03:26
libc-bin CVE-2019-19126 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-11-19 22:15 修改: 2026-06-17 02:26
openssl CVE-2019-1547 低危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.16 openssl: side-channel weak encryption vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
openssl CVE-2019-1551 低危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.16 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-12-06 18:15 修改: 2026-06-17 02:28
openssl CVE-2019-1563 低危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.16 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28
openssl CVE-2020-1968 低危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.17 openssl: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1968

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-09-09 14:15 修改: 2026-06-17 03:02
openssl CVE-2021-23840 低危 1.0.2g-1ubuntu4.15 1.0.2g-1ubuntu4.19 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
perl-base CVE-2020-10543 低危 5.22.1-9ubuntu0.6 5.22.1-9ubuntu0.9 perl: heap-based buffer overflow in regular expression compiler leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10543

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-06-05 14:15 修改: 2026-06-17 02:47
perl-base CVE-2020-10878 低危 5.22.1-9ubuntu0.6 5.22.1-9ubuntu0.9 perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10878

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-06-05 14:15 修改: 2026-06-17 02:48
perl-base CVE-2020-12723 低危 5.22.1-9ubuntu0.6 5.22.1-9ubuntu0.9 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12723

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-06-05 15:15 修改: 2026-06-17 02:52
libc6 CVE-2009-5155 低危 2.23-0ubuntu11 2.23-0ubuntu11.3 glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result

漏洞详情: https://avd.aquasec.com/nvd/cve-2009-5155

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-02-26 02:29 修改: 2024-11-21 01:11
libexpat1 CVE-2018-20843 低危 2.1.0-7ubuntu0.16.04.3 2.1.0-7ubuntu0.16.04.4 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20843

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-06-24 17:15 修改: 2026-06-17 01:53
systemd CVE-2018-16888 低危 229-4ubuntu21.16 229-4ubuntu21.27 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
systemd CVE-2019-20386 低危 229-4ubuntu21.16 229-4ubuntu21.27 systemd: memory leak in button_open() in login/logind-button.c when udev events are received

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-01-21 06:15 修改: 2026-06-17 02:30
libc6 CVE-2017-12133 低危 2.23-0ubuntu11 2.23-0ubuntu11.2 glibc: Use-after-free read access in clntudp_call in sunrpc

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12133

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2017-09-07 13:29 修改: 2026-06-17 01:02
libpython3.5 CVE-2018-20406 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: Integer overflow in Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20406

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2018-12-23 23:29 修改: 2026-06-17 01:52
systemd-sysv CVE-2018-16888 低危 229-4ubuntu21.16 229-4ubuntu21.27 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45
systemd-sysv CVE-2019-20386 低危 229-4ubuntu21.16 229-4ubuntu21.27 systemd: memory leak in button_open() in login/logind-button.c when udev events are received

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2020-01-21 06:15 修改: 2026-06-17 02:30
tar CVE-2018-20482 低危 1.28-2.1ubuntu0.1 1.28-2.1ubuntu0.2 tar: Infinite read loop in sparse_dump_region function in sparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20482

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2018-12-26 18:29 修改: 2026-06-17 01:52
tar CVE-2019-9923 低危 1.28-2.1ubuntu0.1 1.28-2.1ubuntu0.2 tar: null-pointer dereference in pax_decode_header in sparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9923

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2019-03-22 08:29 修改: 2026-06-17 02:44
libpython3.5 CVE-2019-16935 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.9 python: XSS vulnerability in the documentation XML-RPC server in server_title field

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16935

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-28 02:15 修改: 2026-06-17 02:22
vim CVE-2017-11109 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.4 vim: Use-after-free via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11109

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-07-08 17:29 修改: 2026-06-17 01:01
vim CVE-2017-17087 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.5 vim: Sets the group ownership of a .swp file to the editor's primary group

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17087

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-12-01 08:29 修改: 2026-06-17 01:10
vim CVE-2017-5953 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.3 vim: Tree length values not validated properly when handling a spell file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5953

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-02-10 07:59 修改: 2026-06-17 01:21
vim CVE-2017-6349 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.4 vim: Integer overflow at a u_read_undo memory allocation site

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6349

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-02-27 07:59 修改: 2026-06-17 01:22
vim CVE-2017-6350 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.4 vim: Integer overflow at an unserialize_uep memory allocation site

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6350

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-02-27 07:59 修改: 2026-06-17 01:22
vim CVE-2019-20807 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.5 vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20807

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-05-28 14:15 修改: 2026-06-17 02:31
libpython3.5-stdlib CVE-2018-20406 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.8 python: Integer overflow in Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20406

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2018-12-23 23:29 修改: 2026-06-17 01:52
vim-common CVE-2017-11109 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.4 vim: Use-after-free via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11109

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-07-08 17:29 修改: 2026-06-17 01:01
vim-common CVE-2017-17087 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.5 vim: Sets the group ownership of a .swp file to the editor's primary group

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17087

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-12-01 08:29 修改: 2026-06-17 01:10
vim-common CVE-2017-5953 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.3 vim: Tree length values not validated properly when handling a spell file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5953

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-02-10 07:59 修改: 2026-06-17 01:21
vim-common CVE-2017-6349 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.4 vim: Integer overflow at a u_read_undo memory allocation site

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6349

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-02-27 07:59 修改: 2026-06-17 01:22
vim-common CVE-2017-6350 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.4 vim: Integer overflow at an unserialize_uep memory allocation site

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6350

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-02-27 07:59 修改: 2026-06-17 01:22
vim-common CVE-2019-20807 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.5 vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20807

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-05-28 14:15 修改: 2026-06-17 02:31
libpython3.5-stdlib CVE-2019-16935 低危 3.5.2-2ubuntu0~16.04.5 3.5.2-2ubuntu0~16.04.9 python: XSS vulnerability in the documentation XML-RPC server in server_title field

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16935

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2019-09-28 02:15 修改: 2026-06-17 02:22
vim-runtime CVE-2017-11109 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.4 vim: Use-after-free via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11109

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-07-08 17:29 修改: 2026-06-17 01:01
vim-runtime CVE-2017-17087 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.5 vim: Sets the group ownership of a .swp file to the editor's primary group

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17087

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-12-01 08:29 修改: 2026-06-17 01:10
vim-runtime CVE-2017-5953 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.3 vim: Tree length values not validated properly when handling a spell file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5953

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-02-10 07:59 修改: 2026-06-17 01:21
vim-runtime CVE-2017-6349 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.4 vim: Integer overflow at a u_read_undo memory allocation site

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6349

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-02-27 07:59 修改: 2026-06-17 01:22
vim-runtime CVE-2017-6350 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.4 vim: Integer overflow at an unserialize_uep memory allocation site

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6350

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2017-02-27 07:59 修改: 2026-06-17 01:22
vim-runtime CVE-2019-20807 低危 2:7.4.1689-3ubuntu1.2 2:7.4.1689-3ubuntu1.5 vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20807

镜像层: sha256:aa277149fef666a983a801f7f2ed66663cc9b7168ca863c1b07e05f7807f61ca

发布日期: 2020-05-28 14:15 修改: 2026-06-17 02:31
zlib1g CVE-2016-9840 低危 1:1.2.8.dfsg-2ubuntu4.1 1:1.2.8.dfsg-2ubuntu4.3 zlib: Out-of-bound pointer arithmetic in inftrees.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9840

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2017-05-23 04:29 修改: 2026-07-14 12:16
zlib1g CVE-2016-9841 低危 1:1.2.8.dfsg-2ubuntu4.1 1:1.2.8.dfsg-2ubuntu4.3 zlib: Out-of-bounds pointer arithmetic in inffast.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9841

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2017-05-23 04:29 修改: 2026-07-14 12:16
zlib1g CVE-2016-9842 低危 1:1.2.8.dfsg-2ubuntu4.1 1:1.2.8.dfsg-2ubuntu4.3 zlib: Undefined left shift of negative number

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9842

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2017-05-23 04:29 修改: 2026-07-14 12:16
zlib1g CVE-2016-9843 低危 1:1.2.8.dfsg-2ubuntu4.1 1:1.2.8.dfsg-2ubuntu4.3 zlib: Big-endian out-of-bounds pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9843

镜像层: sha256:aa54c2bc12290df2851a94b8834cae75e4627219d2b423d4d3db8b0a497e79a2

发布日期: 2017-05-23 04:29 修改: 2026-06-17 00:56
Node.js (node-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Ruby (gemspec)
低危漏洞:19 中危漏洞:109 高危漏洞:131 严重漏洞:25
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
activerecord CVE-2022-32224 严重 5.0.7.1 ~> 5.2.8, >= 5.2.8.1, ~> 6.0.5, >= 6.0.5.1, ~> 6.1.6, >= 6.1.6.1, >= 7.0.3.1 activerecord: Possible RCE escalation bug with Serialized Columns in Active Record

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32224

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:46
activesupport CVE-2020-8165 严重 5.0.7 ~> 5.2.4, >= 5.2.4.3, >= 6.0.3.1 rubygem-activesupport: potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8165

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-06-19 18:15 修改: 2026-06-17 03:25
activesupport CVE-2020-8165 严重 5.0.7.1 ~> 5.2.4, >= 5.2.4.3, >= 6.0.3.1 rubygem-activesupport: potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8165

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-06-19 18:15 修改: 2026-06-17 03:25
bundler CVE-2016-7954 严重 1.16.6 >= 2.0.0 rubygem-bundler: Code execution via gem name collision in bundler

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7954

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2016-12-22 22:59 修改: 2026-06-17 00:53
commonmarker CVE-2024-22051 严重 0.17.13 >= 0.23.4 commonmarker: integer overflow in cmark-gfm's table row parsing may lead to heap memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22051

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-01-04 21:15 修改: 2026-07-14 23:17
concurrent-ruby CVE-2026-54906 严重 1.1.3 >= 1.3.7 concurrent-ruby: rubygem-concurrent-ruby: concurrent-ruby: Synchronization flaw in ReadWriteLock allows unauthorized lock release and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54906

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-24 17:17 修改: 2026-06-26 20:00
devise CVE-2019-5421 严重 4.4.3 >= 4.6.0 Plataformatec Devise version 4.5.0 and earlier, using the lockable mod ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5421

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-04-03 15:29 修改: 2026-06-17 02:37
diffy CVE-2022-33127 严重 3.1.0 >= 3.4.1 rubygem-diffy: remote code execution from user controlled diff file paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-33127

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-06-23 17:15 修改: 2026-06-17 04:48
nokogiri CVE-2019-11068 严重 1.10.1 >= 1.10.3 libxslt: xsltCheckRead and xsltCheckWrite routines security bypass by crafted URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11068

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-04-10 20:29 修改: 2026-06-17 02:12
nokogiri CVE-2019-5477 严重 1.10.1 >= 1.10.4 A command injection vulnerability in Nokogiri v1.10.3 and earlier allo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5477

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-08-16 16:15 修改: 2026-06-17 02:37
nokogiri GHSA-353f-x4gh-cqq8 严重 1.10.1 >= 1.18.9 Nokogiri patches vendored libxml2 to resolve multiple CVEs

漏洞详情: https://github.com/advisories/GHSA-353f-x4gh-cqq8

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-07-21 19:35 修改: 2025-07-21 19:35
omniauth CVE-2020-36599 严重 1.9.0 ~> 1.9.2, >= 2.0.0 lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36599

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-08-18 23:15 修改: 2026-06-17 03:15
omniauth-saml CVE-2024-45409 严重 1.10.0 >= 1.10.5, < 2.0.0, ~> 2.1.2, >= 2.2.1 The Ruby SAML library is for implementing the client side of a SAML au ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45409

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-09-10 19:15 修改: 2026-06-17 07:54
omniauth-saml GHSA-cvp8-5r8g-fhvq 严重 1.10.0 2.1.2, 1.10.5, 2.2.1 omniauth-saml vulnerable to Improper Verification of Cryptographic Signature

漏洞详情: https://github.com/advisories/GHSA-cvp8-5r8g-fhvq

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-09-11 21:08 修改: 2024-09-19 18:25
omniauth-saml GHSA-hw46-3hmr-x9xv 严重 1.10.0 ~> 1.10.6, ~> 2.1.3, >= 2.2.3 omniauth-saml has dependency on ruby-saml version with Signature Wrapping Attack issue

漏洞详情: https://github.com/advisories/GHSA-hw46-3hmr-x9xv

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-03-12 19:42 修改: 2025-05-22 17:13
puma CVE-2022-24790 严重 3.12.0 ~> 4.3.12, >= 5.6.4 puma-5.6.4: http request smuggling vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24790

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-03-30 22:15 修改: 2026-06-17 04:32
rack CVE-2022-30123 严重 2.0.6 ~> 2.0.9, >= 2.0.9.1, ~> 2.1.4, >= 2.1.4.1, >= 2.2.3.1 rubygem-rack: crafted requests can cause shell escape sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30123

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:43
rack CVE-2022-30123 严重 2.0.7 ~> 2.0.9, >= 2.0.9.1, ~> 2.1.4, >= 2.1.4.1, >= 2.2.3.1 rubygem-rack: crafted requests can cause shell escape sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30123

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:43
ruby-saml CVE-2024-45409 严重 1.7.2 ~> 1.12.3, >= 1.17.0 The Ruby SAML library is for implementing the client side of a SAML au ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45409

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-09-10 19:15 修改: 2026-06-17 07:54
ruby-saml CVE-2025-25291 严重 1.7.2 ~> 1.12.4, >= 1.18.0 ruby-saml provides security assertion markup language (SAML) single si ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25291

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-03-12 21:15 修改: 2026-06-17 09:00
ruby-saml CVE-2025-25292 严重 1.7.2 ~> 1.12.4, >= 1.18.0 ruby-saml provides security assertion markup language (SAML) single si ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25292

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-03-12 21:15 修改: 2026-06-17 09:00
ruby-saml CVE-2025-66567 严重 1.7.2 >= 1.18.0 Ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66567

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-12-09 16:18 修改: 2026-06-17 09:57
ruby-saml CVE-2025-66568 严重 1.7.2 >= 1.18.0 Ruby-saml allows a Libxml2 Canonicalization error to bypass Digest/Signature validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66568

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-12-09 16:18 修改: 2026-06-17 09:57
stringio CVE-2024-27280 严重 0.0.1 >= 3.0.1.1 ruby: Buffer overread vulnerability in StringIO

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27280

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-05-14 15:11 修改: 2026-06-17 07:19
zlib CVE-2026-27820 严重 1.0.0 ~> 3.0.1, ~> 3.1.2, >= 3.2.3 zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27820

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-16 18:16 修改: 2026-06-17 10:27
carrierwave CVE-2021-21305 高危 1.3.1 ~> 1.3.2, >= 2.1.1 CarrierWave is an open-source RubyGem which provides a simple and flex ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21305

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35
actionpack CVE-2022-23633 高危 5.0.7.1 ~> 5.2.6, >= 5.2.6.2, ~> 6.0.4, >= 6.0.4.6, ~> 6.1.4, >= 6.1.4.6, >= 7.0.2.2 rubygem-actionpack: information leak between requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23633

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-02-11 21:15 修改: 2026-06-17 04:30
commonmarker CVE-2023-37463 高危 0.17.13 >= 0.23.10 cmark-gfm is an extended version of the C reference implementation of ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37463

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-07-13 20:15 修改: 2026-06-17 06:08
commonmarker GHSA-48wp-p9qv-4j64 高危 0.17.13 >= 0.23.9 Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service

漏洞详情: https://github.com/advisories/GHSA-48wp-p9qv-4j64

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-04-11 22:08 修改: 2023-04-11 22:08
actionpack CVE-2023-22792 高危 5.0.7.1 ~> 5.2.8, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 rubygem-actionpack: Denial of Service in Action Dispatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22792

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:36
concurrent-ruby CVE-2026-54904 高危 1.1.3 >= 1.3.7 concurrent-ruby: rubygem-concurrent-ruby: concurrent-ruby: Denial of Service due to infinite loop in AtomicReference#update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54904

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-24 17:17 修改: 2026-06-26 19:26
date CVE-2021-41817 高危 1.0.0 ~> 2.0.1, ~> 3.0.2, ~> 3.1.2, >= 3.2.1 ruby: Regular expression denial of service vulnerability of Date parsing methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41817

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-01-01 05:15 修改: 2026-06-17 04:08
actionpack CVE-2023-22795 高危 5.0.7.1 ~> 5.2.8, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 rubygem-actionpack: Denial of Service in Action Dispatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22795

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:36
actionview CVE-2019-5418 高危 5.0.7.1 ~> 4.2.11, >= 4.2.11.1, ~> 5.0.7, >= 5.0.7.2, ~> 5.1.6, >= 5.1.6.2, ~> 5.2.2, >= 5.2.2.1, >= 6.0.0.beta3 rubygem-actionpack: render file directory traversal in Action View

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5418

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-03-27 14:29 修改: 2026-06-17 02:37
doorkeeper CVE-2018-1000211 高危 4.3.2 >= 4.4.0, >= 5.0.0.rc2 Doorkeeper version 4.2.0 and later contains a Incorrect Access Control ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000211

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2018-07-13 18:29 修改: 2026-06-17 01:32
faraday CVE-2026-54297 高危 0.12.2 ~> 1.10.6, >= 2.14.3 faraday: Faraday: Denial of Service via crafted nested query strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54297

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-24 17:17 修改: 2026-07-15 01:16
faraday CVE-2026-54297 高危 0.15.3 ~> 1.10.6, >= 2.14.3 faraday: Faraday: Denial of Service via crafted nested query strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54297

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-24 17:17 修改: 2026-07-15 01:16
faraday CVE-2026-54297 高危 0.15.4 ~> 1.10.6, >= 2.14.3 faraday: Faraday: Denial of Service via crafted nested query strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54297

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-24 17:17 修改: 2026-07-15 01:16
globalid CVE-2023-22799 高危 0.4.1 >= 1.0.1 rubygem-globalid: ReDoS vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22799

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:36
google-protobuf CVE-2021-22569 高危 3.6.1 >= 3.19.2 protobuf-java: potential DoS in the parsing procedure for binary data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:37
google-protobuf CVE-2021-22569 高危 3.6.1 >= 3.19.2 protobuf-java: potential DoS in the parsing procedure for binary data

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22569

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:37
google-protobuf CVE-2024-7254 高危 3.6.1 ~> 3.25.5, ~> 4.27.5, >= 4.28.2 protobuf: StackOverflow vulnerability in Protocol Buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
google-protobuf CVE-2024-7254 高危 3.6.1 ~> 3.25.5, ~> 4.27.5, >= 4.28.2 protobuf: StackOverflow vulnerability in Protocol Buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
grpc CVE-2023-1428 高危 1.15.0 >= 1.53.0 gRPC: Reachable Assertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1428

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-06-09 11:15 修改: 2026-06-17 05:27
grpc CVE-2023-32731 高危 1.15.0 >= 1.53.1 gRPC: sensitive information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32731

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-06-09 11:15 修改: 2026-06-17 05:59
grpc CVE-2023-33953 高危 1.15.0 ~> 1.53.2, ~> 1.54.3, ~> 1.55.2, >= 1.56.2 gRPC: hpack table accounting errors can lead to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33953

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-08-09 13:15 修改: 2026-06-17 06:02
httparty CVE-2025-68696 高危 0.13.7 >= 0.24.0 httparty: Httparty: Server-Side Request Forgery (SSRF) allows information disclosure and unauthorized internal access.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68696

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-12-23 23:15 修改: 2026-06-17 09:59
json CVE-2020-10663 高危 1.8.6 >= 2.3.0 rubygem-json: Unsafe object creation vulnerability in JSON

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10663

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-04-28 21:15 修改: 2026-06-17 02:48
json CVE-2020-10663 高危 2.1.0 >= 2.3.0 rubygem-json: Unsafe object creation vulnerability in JSON

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10663

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-04-28 21:15 修改: 2026-06-17 02:48
json-jwt CVE-2019-18848 高危 1.9.4 >= 1.11.0 The json-jwt gem before 1.11.0 for Ruby lacks an element count during ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18848

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-11-12 15:15 修改: 2026-06-17 02:25
jwt CVE-2026-45363 高危 2.1.0 ~> 2.10.3, >= 3.2.0 ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45363

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-07-14 22:16 修改: 2026-07-15 20:23
kubeclient CVE-2022-0759 高危 4.2.2 >= 4.9.3 kubeclient: kubeconfig parsing error can lead to MITM attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0759

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-03-25 19:15 修改: 2026-06-17 04:21
loofah CVE-2022-23514 高危 2.2.3 >= 2.19.1 rubygem-loofah: inefficient regular expression leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23514

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-12-14 14:15 修改: 2026-06-17 04:30
loofah CVE-2022-23516 高危 2.2.3 >= 2.19.1 rubygem-loofah: Uncontrolled Recursion leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23516

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-12-14 14:15 修改: 2026-06-17 04:30
mini_magick CVE-2019-13574 高危 4.8.0 >= 4.9.4 In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13574

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-07-12 03:15 修改: 2026-06-17 02:17
actionview CVE-2019-5419 高危 5.0.7.1 >= 6.0.0.beta3, ~> 5.2.2, >= 5.2.2.1, ~> 5.1.6, >= 5.1.6.2, ~> 5.0.7, >= 5.0.7.2, ~> 4.2.11, >= 4.2.11.1 rubygem-actionpack: denial of service vulnerability in Action View

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5419

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-03-27 14:29 修改: 2026-06-17 02:37
RedCloth CVE-2023-31606 高危 4.3.2 4.3.3 RedCloth: Regular expression denial of service in sanitize_html function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31606

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-06-06 17:15 修改: 2026-06-17 05:57
activerecord CVE-2022-44566 高危 5.0.7.1 ~> 5.2.8, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 rubygem-activerecord: Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44566

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:08
nokogiri CVE-2018-25032 高危 1.10.1 >= 1.13.4 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-03-25 09:15 修改: 2026-07-14 12:16
nokogiri CVE-2019-13118 高危 1.10.1 >= 1.10.5 libxslt: read of uninitialized stack data due to too narrow xsl:number instruction and an invalid character

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13118

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-07-01 02:15 修改: 2026-06-17 02:16
nokogiri CVE-2019-18197 高危 1.10.1 >= 1.10.5 libxslt: use after free in xsltCopyText in transform.c could lead to information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18197

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-10-18 21:15 修改: 2026-06-17 02:24
nokogiri CVE-2019-5815 高危 1.10.1 >= 1.10.5 chromium-browser: Heap buffer overflow in Blink

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5815

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-12-11 01:15 修改: 2026-06-17 02:38
nokogiri CVE-2020-7595 高危 1.10.1 >= 1.10.8 libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7595

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-01-21 23:15 修改: 2026-06-17 03:25
nokogiri CVE-2021-30560 高危 1.10.1 >= 1.13.2 Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-30560

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-08-03 19:15 修改: 2026-06-17 03:50
nokogiri CVE-2021-3517 高危 1.10.1 >= 1.11.4 libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3517

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-05-19 14:15 修改: 2026-06-17 04:05
nokogiri CVE-2021-3518 高危 1.10.1 >= 1.11.4 libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3518

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-05-18 12:15 修改: 2026-06-17 04:05
nokogiri CVE-2021-41098 高危 1.10.1 >= 1.12.5 rubygem-nokogiri: XEE on JRuby

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41098

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-09-27 20:15 修改: 2026-06-17 04:07
nokogiri CVE-2022-24836 高危 1.10.1 >= 1.13.4 nokogiri: ReDoS in HTML encoding detection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24836

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-04-11 22:15 修改: 2026-06-17 04:32
nokogiri CVE-2022-24839 高危 1.10.1 >= 1.13.4 nokogiri: Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24839

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-04-11 22:15 修改: 2026-06-17 04:32
nokogiri CVE-2022-29181 高危 1.10.1 >= 1.13.6 rubygem-nokogiri: Improper Handling of Unexpected Data Type in Nokogiri

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29181

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-05-20 19:15 修改: 2026-06-17 04:39
nokogiri GHSA-7rrm-v45f-jp64 高危 1.10.1 >= 1.11.4 Update packaged dependency libxml2 from 2.9.10 to 2.9.12

漏洞详情: https://github.com/advisories/GHSA-7rrm-v45f-jp64

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-05-17 20:52 修改: 2023-07-07 17:19
nokogiri GHSA-c4rq-3m3g-8wgx 高危 1.10.1 >= 1.19.3 Nokogiri CSS selector tokenizer has regular expression backtracking

漏洞详情: https://github.com/advisories/GHSA-c4rq-3m3g-8wgx

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-05-06 18:24 修改: 2026-05-06 18:24
nokogiri GHSA-cgx6-hpwq-fhv5 高危 1.10.1 >= 1.13.5 Integer Overflow or Wraparound in libxml2 affects Nokogiri

漏洞详情: https://github.com/advisories/GHSA-cgx6-hpwq-fhv5

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-05-18 20:06 修改: 2022-05-18 20:06
nokogiri GHSA-fq42-c5rg-92c2 高危 1.10.1 1.13.2 Vulnerable dependencies in Nokogiri

漏洞详情: https://github.com/advisories/GHSA-fq42-c5rg-92c2

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-02-25 20:32 修改: 2022-02-25 20:32
nokogiri GHSA-gx8x-g87m-h5q6 高危 1.10.1 1.13.4 Denial of Service (DoS) in Nokogiri on JRuby

漏洞详情: https://github.com/advisories/GHSA-gx8x-g87m-h5q6

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-04-11 21:38 修改: 2022-04-11 21:38
nokogiri GHSA-mrxw-mxhj-p664 高危 1.10.1 >= 1.18.4 Nokogiri updates packaged libxslt to v1.1.43 to resolve multiple CVEs

漏洞详情: https://github.com/advisories/GHSA-mrxw-mxhj-p664

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-03-14 18:51 修改: 2025-03-21 15:43
nokogiri GHSA-v6gp-9mmm-c6p5 高危 1.10.1 1.13.4 Out-of-bounds Write in zlib affects Nokogiri

漏洞详情: https://github.com/advisories/GHSA-v6gp-9mmm-c6p5

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-04-11 21:21 修改: 2022-04-11 21:21
oauth CVE-2016-11086 高危 0.5.4 >= 0.5.5 lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby doe ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-11086

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-09-24 20:15 修改: 2026-06-17 00:40
oauth2 GHSA-pp92-crg2-gfv9 高危 1.4.1 >= 2.0.22 Protocol-relative redirect Location overrides authority in OAuth2::Client#request, leaking bearer Authorization to attacker host

漏洞详情: https://github.com/advisories/GHSA-pp92-crg2-gfv9

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
actionpack CVE-2020-8164 高危 5.0.7.1 ~> 5.2.4, >= 5.2.4.3, >= 6.0.3.1 rubygem-actionpack: possible strong parameters bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8164

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-06-19 17:15 修改: 2026-06-17 03:25
omniauth CVE-2015-9284 高危 1.9.0 >= 2.0.0 rubygem-omniauth: request phase of the OmniAuth Ruby gem is vulnerable to Cross-Site Request Forgery leading to connection without user intent

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-9284

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-04-26 15:29 修改: 2024-11-21 02:40
activesupport CVE-2023-22796 高危 5.0.7 ~> 5.2.8, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 rubygem-activesupport: Regular Expression Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22796

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:36
activesupport CVE-2026-33176 高危 5.0.7 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 Rails: Active Support: Active Support: Denial of Service via large scientific notation strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33176

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-03-24 00:16 修改: 2026-06-17 10:37
actionpack CVE-2021-22885 高危 5.0.7.1 ~> 5.2.4.6, ~> 5.2.6, ~> 6.0.3, >= 6.0.3.7, >= 6.1.3.2 rubygem-actionpack: Possible Information Disclosure / Unintended Method Execution in Action Pack

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22885

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-05-27 12:15 修改: 2026-06-17 03:37
activesupport CVE-2023-22796 高危 5.0.7.1 ~> 5.2.8, ~> 6.1.7, >= 6.1.7.1, >= 7.0.4.1 rubygem-activesupport: Regular Expression Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22796

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:36
puma CVE-2019-16770 高危 3.12.0 ~> 3.12.2, >= 4.3.1 rubygem-puma: keepalive requests from poorly-behaved client leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16770

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-12-05 20:15 修改: 2026-06-17 02:22
puma CVE-2020-11076 高危 3.12.0 ~> 3.12.5, >= 4.3.4 rubygem-puma: HTTP Smuggling via an invalid Transfer-Encoding Header

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11076

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-05-22 15:15 修改: 2026-06-17 02:48
puma CVE-2021-29509 高危 3.12.0 ~> 4.3.8, >= 5.3.1 rubygem-puma: incomplete fix for CVE-2019-16770 allows Denial of Service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29509

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-05-11 17:15 修改: 2026-06-17 03:47
puma CVE-2022-23634 高危 3.12.0 ~> 4.3.11, >= 5.6.2 rubygem-puma: rubygem-rails: information leak between requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23634

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-02-11 22:15 修改: 2026-06-17 04:30
activesupport CVE-2026-33176 高危 5.0.7.1 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 Rails: Active Support: Active Support: Denial of Service via large scientific notation strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33176

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-03-24 00:16 修改: 2026-06-17 10:37
rack CVE-2020-8161 高危 2.0.6 ~> 2.1.3, >= 2.2.0 rubygem-rack: directory traversal in Rack::Directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8161

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-07-02 19:15 修改: 2026-06-17 03:25
rack CVE-2020-8184 高危 2.0.6 ~> 2.1.4, >= 2.2.3 rubygem-rack: percent-encoded cookies can be used to overwrite existing prefixed cookie names

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8184

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-06-19 17:15 修改: 2026-06-17 03:26
rack CVE-2022-30122 高危 2.0.6 ~> 2.0.9, >= 2.0.9.1, ~> 2.1.4, >= 2.1.4.1, >= 2.2.3.1 rubygem-rack: crafted multipart POST request may cause a DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30122

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:43
rack CVE-2022-44570 高危 2.0.6 ~> 2.0.9, >= 2.0.9.2, ~> 2.1.4, >= 2.1.4.2, ~> 2.2.6, >= 2.2.6.2, >= 3.0.4.1 rubygem-rack: denial of service in Content-Disposition parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44570

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:08
rack CVE-2022-44571 高危 2.0.6 ~> 2.0.9, >= 2.0.9.2, ~> 2.1.4, >= 2.1.4.2, ~> 2.2.6, >= 2.2.6.1, >= 3.0.4.1 rubygem-rack: denial of service in Content-Disposition parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44571

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:08
rack CVE-2022-44572 高危 2.0.6 ~> 2.0.9, >= 2.0.9.2, ~> 2.1.4, >= 2.1.4.2, ~> 2.2.6, >= 2.2.6.1, >= 3.0.4.1 rubygem-rack: denial of service in Content-Disposition parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44572

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:08
rack CVE-2023-27530 高危 2.0.6 ~> 2.0.9, >= 2.0.9.3, ~> 2.1.4, >= 2.1.4.3, ~> 2.2.6, >= 2.2.6.3, >= 3.0.4.2 rubygem-rack: Denial of service in Multipart MIME parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27530

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-03-10 22:15 修改: 2026-06-17 05:45
rack CVE-2024-26141 高危 2.0.6 ~> 2.2.8, >= 2.2.8.1, >= 3.0.9.1 rubygem-rack: Possible DoS Vulnerability with Range Header in Rack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26141

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-02-29 00:15 修改: 2026-06-17 07:17
rack CVE-2024-26146 高危 2.0.6 ~> 2.0.9, >= 2.0.9.4, ~> 2.1.4, >= 2.1.4.4, ~> 2.2.8, >= 2.2.8.1, >= 3.0.9.1 rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26146

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-02-29 00:15 修改: 2026-06-17 07:17
rack CVE-2025-27111 高危 2.0.6 ~> 2.2.12, ~> 3.0.13, >= 3.1.11 rack: rubygem-rack: Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27111

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-03-04 16:15 修改: 2026-06-17 09:03
rack CVE-2025-27610 高危 2.0.6 ~> 2.2.13, ~> 3.0.14, >= 3.1.12 rack: rubygem-rack: Local File Inclusion in Rack::Static

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27610

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-03-10 23:15 修改: 2026-06-17 09:03
rack CVE-2025-46727 高危 2.0.6 ~> 2.2.14, ~> 3.0.16, >= 3.1.14 rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46727

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-05-07 23:15 修改: 2026-06-17 09:26
rack CVE-2025-59830 高危 2.0.6 >= 2.2.18 rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59830

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-09-25 15:16 修改: 2026-06-17 09:46
rack CVE-2025-61770 高危 2.0.6 ~> 2.2.19, ~> 3.1.17, >= 3.2.2 rack: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61770

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-10-07 15:16 修改: 2026-06-17 09:50
rack CVE-2025-61771 高危 2.0.6 ~> 2.2.19, ~> 3.1.17, >= 3.2.2 rack: Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61771

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-10-07 15:16 修改: 2026-06-17 09:50
rack CVE-2025-61772 高危 2.0.6 ~> 2.2.19, ~> 3.1.17, >= 3.2.2 rack: Rack memory exhaustion denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61772

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-10-07 15:16 修改: 2026-06-17 09:50
rack CVE-2025-61919 高危 2.0.6 ~> 2.2.20, ~> 3.1.18, >= 3.2.3 rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61919

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-10-10 20:15 修改: 2026-06-17 09:51
rack CVE-2026-22860 高危 2.0.6 ~> 2.2.22, ~> 3.1.20, >= 3.2.5 rubygem-rack: Rack Directory Traversal via Rack:Directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22860

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-02-18 19:21 修改: 2026-07-15 02:18
rack CVE-2026-34785 高危 2.0.6 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 github.com/rack/rack: Rack: Information disclosure via incorrect static file serving prefix check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34785

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-07-15 02:20
rack CVE-2026-34829 高危 2.0.6 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: Denial of Service via unbounded multipart file upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34829

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-07-15 02:20
addressable CVE-2021-32740 高危 2.5.2 >= 2.8.0 rubygem-addressable: ReDoS in templates

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32740

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-07-06 15:15 修改: 2026-06-17 03:53
rack CVE-2020-8161 高危 2.0.7 ~> 2.1.3, >= 2.2.0 rubygem-rack: directory traversal in Rack::Directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8161

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-07-02 19:15 修改: 2026-06-17 03:25
rack CVE-2020-8184 高危 2.0.7 ~> 2.1.4, >= 2.2.3 rubygem-rack: percent-encoded cookies can be used to overwrite existing prefixed cookie names

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8184

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-06-19 17:15 修改: 2026-06-17 03:26
rack CVE-2022-30122 高危 2.0.7 ~> 2.0.9, >= 2.0.9.1, ~> 2.1.4, >= 2.1.4.1, >= 2.2.3.1 rubygem-rack: crafted multipart POST request may cause a DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30122

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:43
rack CVE-2022-44570 高危 2.0.7 ~> 2.0.9, >= 2.0.9.2, ~> 2.1.4, >= 2.1.4.2, ~> 2.2.6, >= 2.2.6.2, >= 3.0.4.1 rubygem-rack: denial of service in Content-Disposition parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44570

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:08
rack CVE-2022-44571 高危 2.0.7 ~> 2.0.9, >= 2.0.9.2, ~> 2.1.4, >= 2.1.4.2, ~> 2.2.6, >= 2.2.6.1, >= 3.0.4.1 rubygem-rack: denial of service in Content-Disposition parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44571

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:08
rack CVE-2022-44572 高危 2.0.7 ~> 2.0.9, >= 2.0.9.2, ~> 2.1.4, >= 2.1.4.2, ~> 2.2.6, >= 2.2.6.1, >= 3.0.4.1 rubygem-rack: denial of service in Content-Disposition parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44572

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:08
rack CVE-2023-27530 高危 2.0.7 ~> 2.0.9, >= 2.0.9.3, ~> 2.1.4, >= 2.1.4.3, ~> 2.2.6, >= 2.2.6.3, >= 3.0.4.2 rubygem-rack: Denial of service in Multipart MIME parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27530

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-03-10 22:15 修改: 2026-06-17 05:45
rack CVE-2024-26141 高危 2.0.7 ~> 2.2.8, >= 2.2.8.1, >= 3.0.9.1 rubygem-rack: Possible DoS Vulnerability with Range Header in Rack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26141

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-02-29 00:15 修改: 2026-06-17 07:17
rack CVE-2024-26146 高危 2.0.7 ~> 2.0.9, >= 2.0.9.4, ~> 2.1.4, >= 2.1.4.4, ~> 2.2.8, >= 2.2.8.1, >= 3.0.9.1 rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26146

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-02-29 00:15 修改: 2026-06-17 07:17
rack CVE-2025-27111 高危 2.0.7 ~> 2.2.12, ~> 3.0.13, >= 3.1.11 rack: rubygem-rack: Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27111

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-03-04 16:15 修改: 2026-06-17 09:03
rack CVE-2025-27610 高危 2.0.7 ~> 2.2.13, ~> 3.0.14, >= 3.1.12 rack: rubygem-rack: Local File Inclusion in Rack::Static

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27610

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-03-10 23:15 修改: 2026-06-17 09:03
rack CVE-2025-46727 高危 2.0.7 ~> 2.2.14, ~> 3.0.16, >= 3.1.14 rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46727

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-05-07 23:15 修改: 2026-06-17 09:26
rack CVE-2025-59830 高危 2.0.7 >= 2.2.18 rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59830

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-09-25 15:16 修改: 2026-06-17 09:46
rack CVE-2025-61770 高危 2.0.7 ~> 2.2.19, ~> 3.1.17, >= 3.2.2 rack: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61770

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-10-07 15:16 修改: 2026-06-17 09:50
rack CVE-2025-61771 高危 2.0.7 ~> 2.2.19, ~> 3.1.17, >= 3.2.2 rack: Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61771

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-10-07 15:16 修改: 2026-06-17 09:50
rack CVE-2025-61772 高危 2.0.7 ~> 2.2.19, ~> 3.1.17, >= 3.2.2 rack: Rack memory exhaustion denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61772

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-10-07 15:16 修改: 2026-06-17 09:50
rack CVE-2025-61919 高危 2.0.7 ~> 2.2.20, ~> 3.1.18, >= 3.2.3 rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61919

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-10-10 20:15 修改: 2026-06-17 09:51
rack CVE-2026-22860 高危 2.0.7 ~> 2.2.22, ~> 3.1.20, >= 3.2.5 rubygem-rack: Rack Directory Traversal via Rack:Directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22860

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-02-18 19:21 修改: 2026-07-15 02:18
rack CVE-2026-34785 高危 2.0.7 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 github.com/rack/rack: Rack: Information disclosure via incorrect static file serving prefix check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34785

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-07-15 02:20
rack CVE-2026-34829 高危 2.0.7 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: Denial of Service via unbounded multipart file upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34829

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-07-15 02:20
rails-html-sanitizer CVE-2022-23517 高危 1.0.4 >= 1.4.4 rubygem-rails-html-sanitizer: Inefficient Regular Expression leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23517

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-12-14 17:15 修改: 2026-06-17 04:30
rake CVE-2020-8130 高危 12.3.0 >= 12.3.3 rake: OS Command Injection via egrep in Rake::FileList

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8130

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-02-24 15:15 修改: 2026-06-17 03:25
rake CVE-2020-8130 高危 12.3.2 >= 12.3.3 rake: OS Command Injection via egrep in Rake::FileList

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8130

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-02-24 15:15 修改: 2026-06-17 03:25
rdoc CVE-2021-31799 高危 4.3.0 ~> 6.1.2.1, ~> 6.2.1.1, >= 6.3.1 rubygem-rdoc: Command injection vulnerability in RDoc

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31799

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-07-30 14:15 修改: 2026-06-17 03:52
rdoc CVE-2021-31799 高危 6.0.1 ~> 6.1.2.1, ~> 6.2.1.1, >= 6.3.1 rubygem-rdoc: Command injection vulnerability in RDoc

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31799

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-07-30 14:15 修改: 2026-06-17 03:52
rdoc CVE-2021-31799 高危 6.0.4 ~> 6.1.2.1, ~> 6.2.1.1, >= 6.3.1 rubygem-rdoc: Command injection vulnerability in RDoc

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31799

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-07-30 14:15 修改: 2026-06-17 03:52
addressable CVE-2026-35611 高危 2.5.2 >= 2.9.0 addressable: Addressable: Denial of Service via crafted URI templates

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35611

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-07 17:16 修改: 2026-06-17 10:40
addressable CVE-2021-32740 高危 2.6.0 >= 2.8.0 rubygem-addressable: ReDoS in templates

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32740

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-07-06 15:15 修改: 2026-06-17 03:53
addressable CVE-2026-35611 高危 2.6.0 >= 2.9.0 addressable: Addressable: Denial of Service via crafted URI templates

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35611

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-07 17:16 修改: 2026-06-17 10:40
bcrypt CVE-2026-33306 高危 3.1.12 >= 3.1.22 github.com/bcrypt-ruby/bcrypt-ruby: bcrypt-ruby (JRuby): Weakened password hashing due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33306

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-03-24 01:17 修改: 2026-06-17 10:37
actionpack CVE-2021-22904 高危 5.0.7.1 ~> 5.2.4.6, ~> 5.2.6, ~> 6.0.3, >= 6.0.3.7, >= 6.1.3.2 rails: Possible DoS Vulnerability in Action Controller Token Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22904

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-06-11 16:15 修改: 2026-06-17 03:37
ruby-saml CVE-2025-25293 高危 1.7.2 ~> 1.12.4, >= 1.18.0 ruby-saml provides security assertion markup language (SAML) single si ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25293

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-03-12 21:15 修改: 2026-06-17 09:00
sanitize CVE-2020-4054 高危 4.6.6 >= 5.2.1 In Sanitize (RubyGem sanitize) greater than or equal to 3.0.0 and less ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-4054

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-06-16 22:15 修改: 2026-06-17 03:19
sanitize CVE-2023-36823 高危 4.6.6 >= 6.0.2 Sanitize is an allowlist-based HTML and CSS sanitizer. Using carefully ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36823

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-07-06 16:15 修改: 2026-06-17 06:07
sidekiq CVE-2022-23837 高危 5.2.5 >= 6.4.0, ~> 5.2.10 sidekiq: WebUI Denial of Service caused by number of days on graph

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23837

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-01-21 21:15 修改: 2026-06-17 04:30
sidekiq CVE-2022-23837 高危 5.2.7 >= 6.4.0, ~> 5.2.10 sidekiq: WebUI Denial of Service caused by number of days on graph

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23837

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-01-21 21:15 修改: 2026-06-17 04:30
sinatra CVE-2022-29970 高危 2.0.5 >= 2.2.0 sinatra: path traversal possible outside of public_dir when serving static files

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29970

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-05-02 05:15 修改: 2026-06-17 04:41
sinatra CVE-2022-45442 高危 2.0.5 ~> 2.2.3, >= 3.0.4 sinatra: Reflected File Download attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45442

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-11-28 21:15 修改: 2026-06-17 05:10
sinatra CVE-2025-61921 高危 2.0.5 >= 4.2.0 sinatra: Sinatra has ReDoS vulnerability in ETag header value generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61921

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-10-10 20:15 修改: 2026-06-17 09:51
bundler CVE-2019-3881 高危 1.16.6 >= 2.1.0 rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3881

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-09-04 12:15 修改: 2026-06-17 02:35
tzinfo CVE-2022-31163 高危 1.2.5 ~> 0.3.61, >= 1.2.10 rubygem-tzinfo: arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31163

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-07-22 04:15 修改: 2026-06-17 04:44
webrick CVE-2020-25613 高危 1.4.2 >= 1.6.1 ruby: Potential HTTP request smuggling in WEBrick

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25613

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-10-06 13:15 修改: 2026-06-17 03:06
webrick CVE-2024-47220 高危 1.4.2 1.8.2 WEBrick: HTTP request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47220

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-09-22 01:15 修改: 2026-07-17 16:17
websocket-extensions CVE-2020-7663 高危 0.1.3 >= 0.1.5 rubygem-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7663

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-06-02 19:15 修改: 2026-06-17 03:25
bundler CVE-2020-36327 高危 1.16.6 = 2.2.10, >= 2.2.18 rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36327

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-04-29 03:15 修改: 2026-06-17 03:15
actionview CVE-2026-33168 中危 5.0.7.1 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 actionview: Action View: Cross-Site Scripting (XSS) via blank HTML attribute names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33168

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-03-23 23:17 修改: 2026-06-17 10:37
actionpack CVE-2020-8166 中危 5.0.7.1 ~> 5.2.4, >= 5.2.4.3, >= 6.0.3.1 rubygem-actionpack: ability to forge per-form CSRF tokens given a global CSRF token

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8166

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-07-02 19:15 修改: 2026-06-17 03:25
commonmarker GHSA-4qw4-jpp4-8gvp 中危 0.17.13 >= 0.23.6 Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service

漏洞详情: https://github.com/advisories/GHSA-4qw4-jpp4-8gvp

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-09-21 18:18 修改: 2022-09-21 18:18
json-jwt CVE-2023-51774 中危 1.9.4 ~> 1.15.3, >= 1.15.3.1, >= 1.16.6 json-jwt: bypass of identity checks via a sign/encryption confusion attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51774

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-02-29 01:42 修改: 2026-06-17 06:41
commonmarker GHSA-636f-xm5j-pj9m 中危 0.17.13 >= 0.23.7 Several quadratic complexity bugs may lead to denial of service in Commonmarker

漏洞详情: https://github.com/advisories/GHSA-636f-xm5j-pj9m

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-01-24 18:12 修改: 2023-01-24 18:12
kaminari CVE-2020-11082 中危 1.0.1 >= 1.2.1 In Kaminari before 1.2.1, there is a vulnerability that would allow an ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11082

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-05-28 21:15 修改: 2026-06-17 02:49
commonmarker GHSA-7vh7-fw88-wj87 中危 0.17.13 0.23.10 Several quadratic complexity bugs may lead to denial of service in Commonmarker

漏洞详情: https://github.com/advisories/GHSA-7vh7-fw88-wj87

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-08-08 17:12 修改: 2023-08-08 17:12
activesupport CVE-2023-28120 中危 5.0.7.1 ~> 6.1.7, >= 6.1.7.3, >= 7.0.4.3 rubygem-activesupport: Possible XSS in SafeBuffer#bytesplice

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28120

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-01-09 01:15 修改: 2026-06-17 05:46
activesupport CVE-2026-33169 中危 5.0.7.1 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 rails: rails-activesupport: Active Support: Denial of Service via crafted long digit strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33169

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-03-24 00:16 修改: 2026-06-17 10:37
loofah CVE-2019-15587 中危 2.2.3 >= 2.3.1 rubygem-loofah: XXS when a crafted SVG element is republished

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15587

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-10-22 21:15 修改: 2026-06-17 02:20
loofah CVE-2022-23515 中危 2.2.3 >= 2.19.1 rubygem-loofah: Improper neutralization of data URIs leading to Cross Site Scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23515

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-12-14 14:15 修改: 2026-06-17 04:30
loofah GHSA-9wjq-cp2p-hrgf 中危 2.2.3 >= 2.25.2 SVG `href` attribute bypasses local-reference restriction in Loofah

漏洞详情: https://github.com/advisories/GHSA-9wjq-cp2p-hrgf

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
concurrent-ruby CVE-2026-54905 中危 1.1.3 >= 1.3.7 concurrent-ruby: Concurrent-ruby: Incorrect write lock granting leading to broken mutual exclusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54905

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-24 17:17 修改: 2026-06-26 20:01
css_parser CVE-2026-44312 中危 1.5.0 ~> 1.22.0, >= 2.1.0 css_parser is a Ruby CSS parser. Prior to 2.1.0 and 1.22.0, the CSS Pa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44312

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-05-14 17:16 修改: 2026-06-17 10:50
activesupport CVE-2026-33170 中危 5.0.7.1 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 Rails: Active Support: Active Support: Cross-Site Scripting (XSS) due to improper HTML safety flag propagation in SafeBuffer#%

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33170

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-03-24 00:16 修改: 2026-06-17 10:37
actionpack CVE-2023-28362 中危 5.0.7.1 ~> 6.1.7.4, >= 7.0.5.1 actionpack: Possible XSS via User Supplied Values to redirect_to

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28362

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-01-09 01:15 修改: 2026-06-17 05:47
devise CVE-2019-16109 中危 4.4.3 >= 4.7.1 Devise Gem for Ruby confirmation token validation with a blank string

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16109

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-09-08 20:15 修改: 2026-06-17 02:21
devise CVE-2026-32700 中危 4.4.3 >= 5.0.3 devise: Devise: Unauthorized email confirmation due to a race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32700

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-03-18 21:16 修改: 2026-06-17 10:36
devise CVE-2026-40295 中危 4.4.3 >= 5.0.4 Devise is an authentication solution for Rails based on Warden. In ver ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40295

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-05-22 20:16 修改: 2026-06-17 10:44
rack CVE-2019-16782 中危 2.0.6 ~> 1.6.12, >= 2.0.8 rubygem-rack: hijack sessions by using timing attacks targeting the session id

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16782

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-12-18 20:15 修改: 2026-06-17 02:22
rack CVE-2023-27539 中危 2.0.6 ~> 2.0, >= 2.2.6.4, >= 3.0.6.1 rubygem-rack: denial of service in header parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27539

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-01-09 01:15 修改: 2026-06-17 05:45
rack CVE-2024-25126 中危 2.0.6 ~> 2.2.8, >= 2.2.8.1, >= 3.0.9.1 rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25126

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-02-29 00:15 修改: 2026-06-17 07:15
rack CVE-2025-25184 中危 2.0.6 ~> 2.2.11, ~> 3.0.12, >= 3.1.10 rubygem-rack: Possible Log Injection in Rack::CommonLogger

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25184

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-02-12 17:15 修改: 2026-06-17 09:00
rack CVE-2025-32441 中危 2.0.6 >= 2.2.14 rack: Rack Session Reuse Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32441

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-05-07 23:15 修改: 2026-06-17 09:11
rack CVE-2025-61780 中危 2.0.6 ~> 2.2.20, ~> 3.1.18, >= 3.2.3 rubygem-rack: Improper handling of headers in `Rack::Sendfile` may allow proxy bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61780

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-10-10 17:15 修改: 2026-06-17 09:50
rack CVE-2026-25500 中危 2.0.6 ~> 2.2.22, ~> 3.1.20, >= 3.2.5 rubygem-rack: Rack stored XSS in Rack::Directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25500

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-02-18 20:18 修改: 2026-06-17 10:24
rack CVE-2026-34230 中危 2.0.6 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: Denial of Service via crafted Accept-Encoding header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34230

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:38
rack CVE-2026-34763 中危 2.0.6 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: Information disclosure via regular expression metacharacters in root path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34763

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:39
rack CVE-2026-34786 中危 2.0.6 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: Security header bypass via URL-encoded static path requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34786

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:39
rack CVE-2026-34826 中危 2.0.6 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: Denial of Service via malicious HTTP Range header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34826

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:39
rack CVE-2026-34830 中危 2.0.6 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: Information disclosure via regular expression injection in X-Accel-Mapping header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34830

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:39
rack CVE-2026-34831 中危 2.0.6 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: HTTP response desynchronization via incorrect Content-Length calculation with UTF-8 characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34831

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:39
devise-two-factor CVE-2021-43177 中危 3.0.0 >= 4.0.2 As a result of an incomplete fix for CVE-2015-7225, in versions of dev ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43177

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-04-11 20:15 修改: 2026-06-17 04:10
devise-two-factor CVE-2024-8796 中危 3.0.0 >= 6.0.0 Under the default configuration, Devise-Two-Factor versions >= 2.2.0 & ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8796

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-09-17 18:15 修改: 2026-06-17 08:23
activerecord CVE-2021-22880 中危 5.0.7.1 ~> 5.2.4, >= 5.2.4.5, ~> 6.0.3, >= 6.0.3.5, >= 6.1.2.1 rubygem-activerecord: crafted input may cause a regular expression DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22880

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-02-11 18:15 修改: 2026-06-17 03:37
activerecord CVE-2025-55193 中危 5.0.7.1 ~> 7.1.5, >= 7.1.5.2, ~> 7.2.2, >= 7.2.2.2, >= 8.0.2.1 activerecord: Active Record ANSI Injection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55193

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-08-13 23:15 修改: 2026-06-17 09:41
doorkeeper CVE-2023-34246 中危 4.3.2 >= 5.6.6 Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34246

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-06-12 17:15 修改: 2026-06-17 06:03
doorkeeper-openid_connect CVE-2019-9837 中危 1.5.0 >= 1.5.4 Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorke ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9837

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-03-21 16:01 修改: 2026-06-17 02:44
excon CVE-2019-16779 中危 0.62.0 >= 0.71.0 In RubyGem excon before 0.71.0, there was a race condition around pers ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16779

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-12-16 20:15 修改: 2026-06-17 02:22
excon CVE-2026-54171 中危 0.62.0 >= 1.5.0 Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54171

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-07-17 20:17 修改: 2026-07-17 20:17
actionview CVE-2020-15169 中危 5.0.7.1 ~> 5.2.4, >= 5.2.4.4, >= 6.0.3.3 rubygem-activeview: Cross-site scripting in translation helpers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15169

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-09-11 16:15 修改: 2026-06-17 02:56
faraday CVE-2026-25765 中危 0.12.2 ~> 1.10.5, >= 2.14.1 Faraday: Faraday: Server-Side Request Forgery via protocol-relative URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25765

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-02-09 21:15 修改: 2026-06-17 10:25
actionview CVE-2020-5267 中危 5.0.7.1 ~> 5.2.4, >= 5.2.4.2, >= 6.0.2.2 rubygem-actionview: views that use the `j` or `escape_javascript` methods are susceptible to XSS attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-5267

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-03-19 18:15 修改: 2026-06-17 03:21
faraday CVE-2026-25765 中危 0.15.3 ~> 1.10.5, >= 2.14.1 Faraday: Faraday: Server-Side Request Forgery via protocol-relative URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25765

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-02-09 21:15 修改: 2026-06-17 10:25
actionview CVE-2020-8167 中危 5.0.7.1 ~> 5.2.4, >= 5.2.4.3, >= 6.0.3.1 rubygem-actionview: CSRF vulnerability in rails-ujs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8167

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-06-19 18:15 修改: 2026-06-17 03:25
faraday CVE-2026-25765 中危 0.15.4 ~> 1.10.5, >= 2.14.1 Faraday: Faraday: Server-Side Request Forgery via protocol-relative URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25765

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-02-09 21:15 修改: 2026-06-17 10:25
fugit CVE-2024-43380 中危 1.1.7 >= 1.11.1 fugit: Improper input validation in "natural" parser may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43380

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-08-19 15:15 修改: 2026-06-17 07:50
activesupport CVE-2023-28120 中危 5.0.7 ~> 6.1.7, >= 6.1.7.3, >= 7.0.4.3 rubygem-activesupport: Possible XSS in SafeBuffer#bytesplice

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28120

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-01-09 01:15 修改: 2026-06-17 05:46
nokogiri CVE-2019-13117 中危 1.10.1 >= 1.10.5 libxslt: an xsl number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13117

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-07-01 02:15 修改: 2026-06-17 02:16
nokogiri CVE-2021-3537 中危 1.10.1 >= 1.11.4 libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3537

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-05-14 20:15 修改: 2026-06-17 04:05
nokogiri CVE-2022-23437 中危 1.10.1 >= 1.13.4 xerces-j2: infinite loop when handling specially crafted XML document payloads

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23437

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-01-24 15:15 修改: 2026-06-17 04:30
nokogiri GHSA-2qc6-mcvw-92cw 中危 1.10.1 >= 1.13.9 Update bundled libxml2 to v2.10.3 to resolve multiple CVEs

漏洞详情: https://github.com/advisories/GHSA-2qc6-mcvw-92cw

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-10-18 18:12 修改: 2022-10-18 18:13
nokogiri GHSA-5prr-v3j2-97mh 中危 1.10.1 >= 1.19.4 Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`

漏洞详情: https://github.com/advisories/GHSA-5prr-v3j2-97mh

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-19 16:36 修改: 2026-06-19 16:36
rack CVE-2019-16782 中危 2.0.7 ~> 1.6.12, >= 2.0.8 rubygem-rack: hijack sessions by using timing attacks targeting the session id

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16782

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-12-18 20:15 修改: 2026-06-17 02:22
rack CVE-2023-27539 中危 2.0.7 ~> 2.0, >= 2.2.6.4, >= 3.0.6.1 rubygem-rack: denial of service in header parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27539

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-01-09 01:15 修改: 2026-06-17 05:45
rack CVE-2024-25126 中危 2.0.7 ~> 2.2.8, >= 2.2.8.1, >= 3.0.9.1 rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25126

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-02-29 00:15 修改: 2026-06-17 07:15
rack CVE-2025-25184 中危 2.0.7 ~> 2.2.11, ~> 3.0.12, >= 3.1.10 rubygem-rack: Possible Log Injection in Rack::CommonLogger

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25184

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-02-12 17:15 修改: 2026-06-17 09:00
rack CVE-2025-32441 中危 2.0.7 >= 2.2.14 rack: Rack Session Reuse Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32441

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-05-07 23:15 修改: 2026-06-17 09:11
rack CVE-2025-61780 中危 2.0.7 ~> 2.2.20, ~> 3.1.18, >= 3.2.3 rubygem-rack: Improper handling of headers in `Rack::Sendfile` may allow proxy bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61780

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-10-10 17:15 修改: 2026-06-17 09:50
rack CVE-2026-25500 中危 2.0.7 ~> 2.2.22, ~> 3.1.20, >= 3.2.5 rubygem-rack: Rack stored XSS in Rack::Directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25500

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-02-18 20:18 修改: 2026-06-17 10:24
rack CVE-2026-34230 中危 2.0.7 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: Denial of Service via crafted Accept-Encoding header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34230

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:38
rack CVE-2026-34763 中危 2.0.7 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: Information disclosure via regular expression metacharacters in root path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34763

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:39
rack CVE-2026-34786 中危 2.0.7 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: Security header bypass via URL-encoded static path requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34786

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:39
rack CVE-2026-34826 中危 2.0.7 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: Denial of Service via malicious HTTP Range header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34826

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:39
rack CVE-2026-34830 中危 2.0.7 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: Information disclosure via regular expression injection in X-Accel-Mapping header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34830

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:39
rack CVE-2026-34831 中危 2.0.7 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 rack: Rack: HTTP response desynchronization via incorrect Content-Length calculation with UTF-8 characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34831

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:39
rack-cors CVE-2019-18978 中危 1.0.2 >= 1.0.4 An issue was discovered in the rack-cors (aka Rack CORS Middleware) ge ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18978

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-11-14 21:15 修改: 2026-06-17 02:25
nokogiri GHSA-pxvg-2qj5-37jq 中危 1.10.1 >= 1.14.3 Update packaged libxml2 to v2.10.4 to resolve multiple CVEs

漏洞详情: https://github.com/advisories/GHSA-pxvg-2qj5-37jq

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-04-11 21:48 修改: 2023-04-11 21:48
rails-html-sanitizer CVE-2022-23518 中危 1.0.4 >= 1.4.4 rubygem-rails-html-sanitizer: Improper neutralization of data URIs leading to Cross site scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23518

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-12-14 17:15 修改: 2026-06-17 04:30
rails-html-sanitizer CVE-2022-23519 中危 1.0.4 >= 1.4.4 rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23519

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-12-14 17:15 修改: 2026-06-17 04:30
rails-html-sanitizer CVE-2022-23520 中危 1.0.4 >= 1.4.4 rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23520

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-12-14 18:15 修改: 2026-06-17 04:30
rails-html-sanitizer CVE-2022-32209 中危 1.0.4 >= 1.4.3 rubygem-rails-html-sanitizer: possible xss with certain configurations

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32209

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-06-24 15:15 修改: 2026-06-17 04:46
nokogiri GHSA-v2fc-qm4h-8hqv 中危 1.10.1 >= 1.19.3 Nokogiri XSLT transform has a memory leak

漏洞详情: https://github.com/advisories/GHSA-v2fc-qm4h-8hqv

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-05-06 18:27 修改: 2026-05-06 18:27
nokogiri GHSA-wx95-c6cv-8532 中危 1.10.1 >= 1.19.1 Nokogiri does not check the return value from xmlC14NExecute

漏洞详情: https://github.com/advisories/GHSA-wx95-c6cv-8532

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-02-18 21:57 修改: 2026-02-18 21:57
nokogiri GHSA-xc9x-jj77-9p9j 中危 1.10.1 ~> 1.15.6, >= 1.16.2 Use-after-free in libxml2 via Nokogiri::XML::Reader

漏洞详情: https://github.com/advisories/GHSA-xc9x-jj77-9p9j

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-02-05 20:22 修改: 2025-05-23 19:16
rdoc CVE-2024-27281 中危 4.3.0 ~> 6.3.4, >= 6.3.4.1, ~> 6.4.1, >= 6.4.1.1, >= 6.5.1.1 ruby: RCE vulnerability with .rdoc_options in RDoc

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27281

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-05-14 15:11 修改: 2026-06-17 07:19
nokogiri GHSA-xxx9-3xcr-gjj3 中危 1.10.1 1.13.4 XML Injection in Xerces Java affects Nokogiri

漏洞详情: https://github.com/advisories/GHSA-xxx9-3xcr-gjj3

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-04-11 21:30 修改: 2022-04-11 21:30
rdoc CVE-2024-27281 中危 6.0.1 ~> 6.3.4, >= 6.3.4.1, ~> 6.4.1, >= 6.4.1.1, >= 6.5.1.1 ruby: RCE vulnerability with .rdoc_options in RDoc

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27281

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-05-14 15:11 修改: 2026-06-17 07:19
gon CVE-2020-25739 中危 6.2.0 >= 6.4.0 An issue was discovered in the gon gem before gon-6.4.0 for Ruby. Mult ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25739

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-09-23 14:15 修改: 2026-06-17 03:07
rdoc CVE-2024-27281 中危 6.0.4 ~> 6.3.4, >= 6.3.4.1, ~> 6.4.1, >= 6.4.1.1, >= 6.5.1.1 ruby: RCE vulnerability with .rdoc_options in RDoc

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27281

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-05-14 15:11 修改: 2026-06-17 07:19
activesupport CVE-2026-33169 中危 5.0.7 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 rails: rails-activesupport: Active Support: Denial of Service via crafted long digit strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33169

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-03-24 00:16 修改: 2026-06-17 10:37
bundler CVE-2021-43809 中危 1.16.6 >= 2.2.33 rubygem-bundler: unexpected code execution in Gemfiles

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43809

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-12-08 19:15 修改: 2026-06-17 04:11
activesupport CVE-2026-33170 中危 5.0.7 ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 Rails: Active Support: Active Support: Cross-Site Scripting (XSS) due to improper HTML safety flag propagation in SafeBuffer#%

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33170

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-03-24 00:16 修改: 2026-06-17 10:37
carrierwave CVE-2021-21288 中危 1.3.1 ~> 1.3.2, >= 2.1.1 CarrierWave is an open-source RubyGem which provides a simple and flex ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21288

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-02-08 20:15 修改: 2026-06-17 03:35
google-protobuf CVE-2022-3171 中危 3.6.1 ~> 3.16.3, ~> 3.19.6, ~> 3.20.3, >= 3.21.7 protobuf-java: timeout in parser leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58
google-protobuf CVE-2022-3171 中危 3.6.1 ~> 3.16.3, ~> 3.19.6, ~> 3.20.3, >= 3.21.7 protobuf-java: timeout in parser leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3171

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-10-12 23:15 修改: 2026-06-17 04:58
ruby-saml CVE-2025-54572 中危 1.7.2 >= 1.18.1 The Ruby SAML library is for implementing the client side of a SAML au ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54572

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-07-30 14:15 修改: 2026-06-17 09:40
rubyzip CVE-2019-16892 中危 1.2.2 >= 1.3.0 cfme: rubygem-rubyzip denial of service via crafted ZIP file

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16892

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2019-09-25 22:15 修改: 2026-06-17 02:22
carrierwave CVE-2023-49090 中危 1.3.1 ~> 2.2.5, >= 3.0.5 CarrierWave is a solution for file uploads for Rails, Sinatra and othe ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-49090

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-11-29 15:15 修改: 2026-06-17 06:35
carrierwave CVE-2024-29034 中危 1.3.1 ~> 2.2.6, >= 3.0.7 CarrierWave content-Type allowlist bypass vulnerability which possibly leads to XSS remained

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29034

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-03-24 20:15 修改: 2026-06-17 07:22
carrierwave CVE-2026-44587 中危 1.3.1 ~> 2.2.7, >= 3.1.3 CarrierWave is a framework to upload files from Ruby applications. In ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44587

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-17 13:20 修改: 2026-06-18 15:24
sidekiq CVE-2023-26141 中危 5.2.5 ~> 6.5.10, >= 7.1.3 sidekiq: DoS in dashboard-charts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26141

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-09-14 05:15 修改: 2026-06-17 05:42
grpc CVE-2023-32732 中危 1.15.0 >= 1.53.0 gRPC: denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32732

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-06-09 11:15 修改: 2026-06-17 05:59
sidekiq CVE-2023-26141 中危 5.2.7 ~> 6.5.10, >= 7.1.3 sidekiq: DoS in dashboard-charts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26141

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-09-14 05:15 修改: 2026-06-17 05:42
sidekiq-cron CVE-2025-67202 中危 1.0.4 >= 2.4.0 sidekiq-cron: Sidekiq-cron: Cross-site scripting vulnerability via crafted URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67202

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-05-07 15:16 修改: 2026-06-17 09:57
actionview CVE-2022-27777 中危 5.0.7.1 ~> 5.2.7, >= 5.2.7.1, ~> 6.0.4, >= 6.0.4.8, ~> 6.1.5, >= 6.1.5.1, >= 7.0.2.4 tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27777

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2022-05-26 17:15 修改: 2026-06-17 04:37
puma CVE-2020-11077 中危 3.12.0 ~> 3.12.6, >= 4.3.5 rubygem-puma: HTTP Smuggling through a proxy via Transfer-Encoding Header

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11077

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-05-22 15:15 修改: 2026-06-17 02:49
puma CVE-2020-5247 中危 3.12.0 ~> 3.12.4, >= 4.3.3 rubygem-puma: attacker is able to use newline characters to insert malicious content (HTTP Response Splitting), this could lead to XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-5247

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-02-28 17:15 修改: 2026-06-17 03:21
sinatra CVE-2024-21510 中危 2.0.5 >= 4.1.0 sinatra: Open Redirect Vulnerability in Sinatra via X-Forwarded-Host Header

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21510

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-11-01 05:15 修改: 2026-06-17 07:09
puma CVE-2020-5249 中危 3.12.0 ~> 3.12.4, >= 4.3.3 rubygem-puma: attacker is able to use carriage return character to insert malicious content (HTTP Response Splitting), this could lead to XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-5249

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-03-02 16:15 修改: 2026-06-17 03:21
puma CVE-2023-40175 中危 3.12.0 ~> 5.6.7, >= 6.3.1 rubygem-puma: HTTP request smuggling when parsing chunked transfer encoding bodies and zero-length content-length headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40175

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2023-08-18 22:15 修改: 2026-06-17 06:16
puma CVE-2024-21647 中危 3.12.0 ~> 5.6.8, >= 6.4.2 rubygem-puma: HTTP request smuggling when parsing chunked Transfer-Encoding Bodies

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21647

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-01-08 14:15 修改: 2026-06-17 07:09
puma CVE-2024-45614 中危 3.12.0 ~> 5.6.9, >= 6.4.3 rubygem-puma: Header normalization allows for client to clobber proxy set headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45614

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-09-19 23:15 修改: 2026-06-17 07:54
webrick CVE-2025-6442 中危 1.4.2 >= 1.8.2 webrick: Ruby WEBrick Request Smuggling Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6442

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-06-25 17:15 修改: 2026-06-17 10:01
websocket-driver CVE-2026-54463 中危 0.6.5 >= 0.8.1 websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54463

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-07-17 20:17 修改: 2026-07-17 20:17
websocket-driver CVE-2026-54464 中危 0.6.5 >= 0.8.1 ### Impact If this library is used in tandem with the `permessage-def ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54464

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-07-17 20:17 修改: 2026-07-17 20:17
websocket-driver CVE-2026-54465 中危 0.6.5 >= 0.8.1 websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54465

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-07-17 20:17 修改: 2026-07-17 20:17
httparty CVE-2024-22049 中危 0.13.7 >= 0.21.0 httparty before 0.21.0 is vulnerable to an assumed-immutable web param ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22049

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-01-04 21:15 修改: 2026-07-14 23:17
icalendar CVE-2026-33635 中危 2.4.1 >= 2.12.2 iCalendar is a Ruby library for dealing with iCalendar files in the iC ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33635

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:37
nokogiri GHSA-vvfq-8hwr-qm4m 低危 1.10.1 >= 1.18.3 Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171

漏洞详情: https://github.com/advisories/GHSA-vvfq-8hwr-qm4m

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-02-18 22:36 修改: 2025-03-10 22:36
nokogiri GHSA-wfpw-mmfh-qq69 低危 1.10.1 >= 1.19.4 Nokogiri: Possible Use-After-Free in XInclude Processing

漏洞详情: https://github.com/advisories/GHSA-wfpw-mmfh-qq69

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-19 16:37 修改: 2026-06-19 16:37
nokogiri GHSA-wjv4-x9w8-wm3h 低危 1.10.1 >= 1.19.4 Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

漏洞详情: https://github.com/advisories/GHSA-wjv4-x9w8-wm3h

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-19 16:36 修改: 2026-06-19 16:36
bindata CVE-2021-32823 低危 2.4.3 >= 2.4.10 In the bindata RubyGem before version 2.4.10 there is a potential deni ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32823

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-06-24 00:15 修改: 2026-06-17 03:53
actionpack CVE-2024-41128 低危 5.0.7.1 ~> 6.1.7.9, ~> 7.0.8, >= 7.0.8.5, ~> 7.1.4, >= 7.1.4.1, >= 7.2.1.1 rubygem-actionpack: Possible ReDoS vulnerability in query parameter filtering in Action Dispatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41128

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-10-16 18:15 修改: 2026-06-17 07:47
actionpack CVE-2024-47887 低危 5.0.7.1 ~> 6.1.7.9, ~> 7.0.8, >= 7.0.8.5, ~> 7.1.4, >= 7.1.4.1, >= 7.2.1.1 rubygem-actionpack: Possible ReDoS vulnerability in HTTP Token authentication in Action Controller

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47887

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-10-16 20:15 修改: 2026-06-17 07:57
puma CVE-2021-41136 低危 3.12.0 ~> 4.3.9, >= 5.5.1 rubygem-puma: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41136

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2021-10-12 16:15 修改: 2026-06-17 04:07
actionmailer CVE-2024-47889 低危 5.0.7.1 ~> 6.1.7.9, ~> 7.0.8, >= 7.0.8.5, ~> 7.1.4, >= 7.1.4.1, >= 7.2.1.1 rubygem-actionmailer: Possible ReDoS vulnerability in block_format in Action Mailer

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47889

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-10-16 21:15 修改: 2026-06-17 07:57
nokogiri CVE-2020-26247 低危 1.10.1 >= 1.11.0.rc4 rubygem-nokogiri: XML external entity injection via Nokogiri::XML::Schema

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26247

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2020-12-30 19:15 修改: 2026-06-17 03:07
thor CVE-2025-54314 低危 0.19.4 >= 1.4.0 thor: Thor Command Injection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54314

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-07-20 03:15 修改: 2026-06-17 09:39
rack CVE-2026-26961 低危 2.0.6 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 github.com/rack/rack: Rack: Content smuggling via multipart boundary parsing mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26961

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:26
rack CVE-2026-26961 低危 2.0.7 ~> 2.2.23, ~> 3.1.21, >= 3.2.6 github.com/rack/rack: Rack: Content smuggling via multipart boundary parsing mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26961

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:26
nokogiri GHSA-5v8h-3h3q-446p 低危 1.10.1 >= 1.19.4 Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

漏洞详情: https://github.com/advisories/GHSA-5v8h-3h3q-446p

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-19 16:35 修改: 2026-06-19 16:35
nokogiri GHSA-5w6v-399v-w3cc 低危 1.10.1 >= 1.18.8 Nokogiri updates packaged libxml2 to v2.13.8 to resolve CVE-2025-32414 and CVE-2025-32415

漏洞详情: https://github.com/advisories/GHSA-5w6v-399v-w3cc

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2025-04-21 21:55 修改: 2025-04-21 21:55
nokogiri GHSA-8678-w3jw-xfc2 低危 1.10.1 >= 1.19.4 Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247

漏洞详情: https://github.com/advisories/GHSA-8678-w3jw-xfc2

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-19 16:36 修改: 2026-06-19 16:36
nokogiri GHSA-9cv2-cfxc-v4v2 低危 1.10.1 >= 1.19.4 Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

漏洞详情: https://github.com/advisories/GHSA-9cv2-cfxc-v4v2

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-19 16:36 修改: 2026-06-19 16:36
nokogiri GHSA-p67v-3w7g-wjg7 低危 1.10.1 >= 1.19.4 Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

漏洞详情: https://github.com/advisories/GHSA-p67v-3w7g-wjg7

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-19 16:37 修改: 2026-06-19 16:37
nokogiri GHSA-phwj-rprq-35pp 低危 1.10.1 >= 1.19.4 Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

漏洞详情: https://github.com/advisories/GHSA-phwj-rprq-35pp

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2026-06-19 16:37 修改: 2026-06-19 16:37
nokogiri GHSA-r95h-9x8f-r3f7 低危 1.10.1 >= 1.16.5 Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459

漏洞详情: https://github.com/advisories/GHSA-r95h-9x8f-r3f7

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 2024-05-13 16:05 修改: 2024-05-15 19:27
crass GHSA-wwpr-jff3-395c 未知 1.0.4 >= 1.0.7 A large number of adjacent CSS comments can trigger a SystemStackError

漏洞详情: https://github.com/advisories/GHSA-wwpr-jff3-395c

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
rails-html-sanitizer GHSA-cj75-f6xr-r4g7 未知 1.0.4 >= 1.7.1 Possible XSS vulnerability with certain configurations of rails-html-sanitizer

漏洞详情: https://github.com/advisories/GHSA-cj75-f6xr-r4g7

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
nokogiri GHSA-g9g8-vgvw-g3vf 未知 1.10.1 >= 1.19.4 Possible invalid memory read when calling `Nokogiri::XML::Node#initialize_copy_with_args` with incorrect argument type

漏洞详情: https://github.com/advisories/GHSA-g9g8-vgvw-g3vf

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
crass GHSA-6jxj-px6v-747w 未知 1.0.4 >= 1.0.7 Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage

漏洞详情: https://github.com/advisories/GHSA-6jxj-px6v-747w

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
omniauth-saml GHSA-cgp2-2cmh-pf7x 未知 1.10.0 >= 2.2.4 Bad documentation for idp_cert_fingerprint_validator

漏洞详情: https://github.com/advisories/GHSA-cgp2-2cmh-pf7x

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
msgpack CVE-2026-54522 未知 1.2.6 >= 1.8.2 DFVULN-839 - Use-After-Free in MessagePack::Buffer#clear Enables Cross-Buffer Disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54522

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
websocket-driver GHSA-2x63-gw47-w4mm 未知 0.6.5 >= 0.8.2 Denial of service via malformed Host header

漏洞详情: https://github.com/advisories/GHSA-2x63-gw47-w4mm

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
crass GHSA-6wmf-3r64-vcwv 未知 1.0.4 >= 1.0.7 Large numeric exponents cause CPU and memory denial of service

漏洞详情: https://github.com/advisories/GHSA-6wmf-3r64-vcwv

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
crass GHSA-8vfg-2r28-hvhj 未知 1.0.4 >= 1.0.7 Non-ASCII characters cause superlinear CPU consumption

漏洞详情: https://github.com/advisories/GHSA-8vfg-2r28-hvhj

镜像层: sha256:72aa1029d5673bd3e6e8fd1f377e71465a1ca636c97664670801bd4e830c919b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
/etc/ssh/ssh_host_dsa_key ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/etc/ssh/ssh_host_ecdsa_key ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/etc/ssh/ssh_host_ed25519_key ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/etc/ssh/ssh_host_rsa_key ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/chef-13.6.4/spec/data/ssl/chef-rspec.key ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/chef-13.6.4/spec/data/ssl/key.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/chef-13.6.4/spec/data/ssl/private_key.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/chef-13.6.4/spec/data/ssl/private_key_with_whitespace.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/chef-13.6.4/spec/integration/client/client_spec.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/chef-13.6.4/spec/integration/client/ipv6_spec.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/chef-13.6.4/spec/integration/knife/common_options_spec.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/chef-13.6.4/spec/integration/knife/cookbook_api_ipv6_spec.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/chef-13.6.4/spec/unit/server_api_spec.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/chef-zero-13.1.0/lib/chef_zero.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/chef-zero-13.1.0/spec/support/secrets.json ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/chef-zero-13.1.0/spec/support/stickywicket.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/fog-aws-3.3.0/lib/fog/aws/models/compute/key_pairs.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/fog-google-1.8.2/ci/credentials.yml.template ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/fog-openstack-1.0.8/lib/fog/openstack/compute/requests/create_key_pair.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/googleauth-0.6.6/spec/googleauth/credentials_spec.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/httparty-0.13.7/spec/fixtures/ssl/generated/ca.key ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/httparty-0.13.7/spec/fixtures/ssl/generated/server.key ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/json-jwt-1.9.4/spec/fixtures/ecdsa/256/private_key.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/json-jwt-1.9.4/spec/fixtures/ecdsa/384/private_key.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/json-jwt-1.9.4/spec/fixtures/ecdsa/512/private_key.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/json-jwt-1.9.4/spec/interop/with_jsrsasign_spec.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/json-jwt-1.9.4/spec/json/jwt_spec.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/jwt-2.1.0/spec/fixtures/certs/ec256-private.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/jwt-2.1.0/spec/fixtures/certs/ec256-wrong-private.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/jwt-2.1.0/spec/fixtures/certs/ec384-private.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/jwt-2.1.0/spec/fixtures/certs/ec384-wrong-private.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/jwt-2.1.0/spec/fixtures/certs/ec512-private.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/jwt-2.1.0/spec/fixtures/certs/ec512-wrong-private.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/jwt-2.1.0/spec/fixtures/certs/rsa-1024-private.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/jwt-2.1.0/spec/fixtures/certs/rsa-2048-private.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/jwt-2.1.0/spec/fixtures/certs/rsa-2048-wrong-private.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/jwt-2.1.0/spec/fixtures/certs/rsa-4096-private.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/jwt-2.1.0/spec/jwt_spec.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/mixlib-authentication-1.4.2/spec/mixlib/authentication/mixlib_authentication_spec.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/opt/gitlab/embedded/lib/ruby/gems/2.5.0/gems/signet-0.11.0/spec/signet/oauth_1/signature_methods/rsa_sha1_spec.rb ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×