docker.io/hanxi/xiaomusic:v0.6.1 linux/amd64

docker.io/hanxi/xiaomusic:v0.6.1 - Trivy安全扫描结果 扫描时间: 2026-08-22 10:40
全部漏洞信息
低危漏洞:27 中危漏洞:57 高危漏洞:37 严重漏洞:1

系统OS: alpine 3.23.4 扫描引擎: Trivy 扫描时间: 2026-08-22 10:40

docker.io/hanxi/xiaomusic:v0.6.1 (alpine 3.23.4) (alpine)
低危漏洞:24 中危漏洞:34 高危漏洞:15 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
nodejs CVE-2026-48930 严重 24.14.1-r0 24.17.0-r0 nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48930

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:19
libcrypto3 CVE-2026-45447 高危 3.5.6-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-08-17 12:18
libexpat CVE-2026-45186 高危 2.7.5-r0 2.8.1-r0 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-05-10 07:16 修改: 2026-07-24 20:10
libexpat CVE-2026-56408 高危 2.7.5-r0 2.8.2-r0 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libjxl CVE-2026-1837 高危 0.11.1-r3 0.11.2-r0 libjxl: libjxl: Out-of-bounds write in grayscale color transformation when using LCMS2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1837

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-02-11 16:16 修改: 2026-07-15 02:18
libssl3 CVE-2026-45447 高危 3.5.6-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-08-17 12:18
libxml2 CVE-2026-6732 高危 2.13.9-r0 2.13.9-r1 libxml2: libxml2: Denial of Service via crafted XSD-validated document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6732

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-04-23 23:16 修改: 2026-06-30 20:16
c-ares CVE-2026-33630 高危 1.34.6-r0 1.34.8-r0 c-ares: c-ares: Use-after-free / double-free in query-completion handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33630

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
nodejs CVE-2026-48615 高危 24.14.1-r0 24.17.0-r0 nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48615

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:18
nodejs CVE-2026-48617 高危 24.14.1-r0 24.17.0-r0 nodejs: Node.js: Permission Model bypass via `process.report.writeReport()` path misvalidation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48617

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-18 17:16 修改: 2026-08-19 20:02
nodejs CVE-2026-48619 高危 24.14.1-r0 24.17.0-r0 nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48619

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:18
nodejs CVE-2026-48933 高危 24.14.1-r0 24.17.0-r0 nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48933

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-26 02:16 修改: 2026-08-10 13:19
nodejs CVE-2026-48937 高危 24.14.1-r0 24.17.0-r0 nodejs: Node.js HTTP/2 Server: Denial of Service due to continued data acceptance after GOAWAY frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48937

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-18 19:16 修改: 2026-08-18 17:54
nodejs CVE-2026-56846 高危 24.14.1-r0 24.18.1-r0 nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56846

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-08-04 01:16 修改: 2026-08-04 16:16
nodejs CVE-2026-56848 高危 24.14.1-r0 24.18.1-r0 nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56848

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-08-04 17:16 修改: 2026-08-04 18:16
nodejs CVE-2026-58043 高危 24.14.1-r0 24.18.1-r0 nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58043

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-07-30 06:25 修改: 2026-07-31 04:17
libexpat CVE-2026-56409 中危 2.7.5-r0 2.8.2-r0 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat CVE-2026-56410 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat CVE-2026-56411 中危 2.7.5-r0 2.8.2-r0 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat CVE-2026-56412 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libcrypto3 CVE-2026-42764 中危 3.5.6-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libjxl CVE-2025-12474 中危 0.11.1-r3 0.11.2-r0 libjxl: libjxl: Uninitialized memory read in decoder due to incorrect optimization in patch handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12474

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-02-11 16:15 修改: 2026-06-17 08:32
libpng CVE-2026-40930 中危 1.6.57-r0 1.6.58-r1 LIBPNG is a reference library for use in applications that process PNG ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40930

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-04 16:16 修改: 2026-07-22 20:10
libcrypto3 CVE-2026-45445 中危 3.5.6-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34182 中危 3.5.6-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34183 中危 3.5.6-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42764 中危 3.5.6-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45445 中危 3.5.6-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34182 中危 3.5.6-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34183 中危 3.5.6-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libexpat CVE-2026-50219 中危 2.7.5-r0 2.8.2-r0 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
libexpat CVE-2026-56131 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat CVE-2026-56132 中危 2.7.5-r0 2.8.2-r0 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat CVE-2026-56403 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat CVE-2026-56404 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat CVE-2026-56405 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat CVE-2026-56406 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat CVE-2026-56407 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
nodejs CVE-2026-48618 中危 24.14.1-r0 24.17.0-r0 nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48618

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-26 02:16 修改: 2026-08-10 13:19
nodejs CVE-2026-48928 中危 24.14.1-r0 24.17.0-r0 Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48928

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:19
nodejs CVE-2026-48934 中危 24.14.1-r0 24.17.0-r0 nodejs: Node.js: Certification validation bypass in TLS host verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48934

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-26 02:16 修改: 2026-06-29 14:16
nodejs CVE-2026-56850 中危 24.14.1-r0 24.18.1-r0 nodejs: Node.js: mTLS client identities can be reused due to HTTPS Agent connection flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56850

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-07-30 06:25 修改: 2026-07-30 16:33
nodejs CVE-2026-58039 中危 24.14.1-r0 24.18.1-r0 nodejs: Information disclosure due to improper permission enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58039

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-07-31 01:16 修改: 2026-07-31 16:17
nodejs CVE-2026-58040 中危 24.14.1-r0 24.18.1-r0 nodejs: HTTPS Agent TLS session reuse skips hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58040

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-07-30 06:25 修改: 2026-07-30 14:17
nodejs CVE-2026-58041 中危 24.14.1-r0 24.18.1-r0 nodejs: Node.js node:sqlite: Unintended data modification due to stale statement iterator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58041

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-08-04 01:16 修改: 2026-08-04 16:16
nodejs CVE-2026-58042 中危 24.14.1-r0 24.18.1-r0 nodejs: Node.js: Denial of Service via DNS responses with excessive A records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58042

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-08-04 01:16 修改: 2026-08-04 16:16
nodejs CVE-2026-58044 中危 24.14.1-r0 24.18.1-r0 nodejs: Node.js: Request smuggling via HTTP client header truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58044

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-08-04 01:16 修改: 2026-08-04 16:16
nodejs CVE-2026-58045 中危 24.14.1-r0 24.18.1-r0 nodejs: Node.js: Denial of Service vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58045

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-08-04 01:16 修改: 2026-08-04 16:16
sqlite-libs CVE-2026-11822 中危 3.51.2-r0 3.53.4-r0 SQLite before 3.53.2 contains memory corruption vulnerabilities in the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:d457bf49462c638c34274b8fb5d7c23274c402b15b6c4b117f66464b7655d290

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
sqlite-libs CVE-2026-11824 中危 3.51.2-r0 3.53.4-r0 SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:d457bf49462c638c34274b8fb5d7c23274c402b15b6c4b117f66464b7655d290

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libcrypto3 CVE-2026-42767 低危 3.5.6-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libexpat CVE-2026-41080 低危 2.7.5-r0 2.8.1-r0 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
libcrypto3 CVE-2026-42768 低危 3.5.6-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42769 低危 3.5.6-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42770 低危 3.5.6-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45446 低危 3.5.6-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-7383 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-9076 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34180 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34181 低危 3.5.6-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34180 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34181 低危 3.5.6-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42766 低危 3.5.6-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42767 低危 3.5.6-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42768 低危 3.5.6-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42769 低危 3.5.6-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42770 低危 3.5.6-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45446 低危 3.5.6-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-7383 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
nodejs CVE-2026-48931 低危 24.14.1-r0 24.17.0-r0 nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48931

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-22 20:16 修改: 2026-07-03 01:16
nodejs CVE-2026-48935 低危 24.14.1-r0 24.17.0-r0 nodejs: Node.js: Unauthorized file metadata modification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48935

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:14
nodejs CVE-2026-56847 低危 24.14.1-r0 24.18.1-r0 nodejs: Node.js: Permission Model flaw allows trace logs to bypass filesystem write restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56847

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 2026-07-30 06:25 修改: 2026-07-30 16:33
libssl3 CVE-2026-9076 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42766 低危 3.5.6-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
mbedtls CVE-2026-50585 未知 3.6.6-r0 3.6.7-r0 Title Not Available

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50585

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-50586 未知 3.6.6-r0 3.6.7-r0 [Unknown description]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50586

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-50587 未知 3.6.6-r0 3.6.7-r0 Title Not Available

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50587

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-50588 未知 3.6.6-r0 3.6.7-r0 [Unknown description]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50588

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-50640 未知 3.6.6-r0 3.6.7-r0 Title Not Available

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50640

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-50713 未知 3.6.6-r0 3.6.7-r0 [Unknown description]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50713

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-54435 未知 3.6.6-r0 3.6.7-r0 Title Not Available

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54435

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-54441 未知 3.6.6-r0 3.6.7-r0 Title Not Available

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54441

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-25832 未知 3.6.6-r0 3.6.7-r0 [Unknown description]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25832

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-35336 未知 3.6.6-r0 3.6.7-r0 Title Not Available

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35336

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-49300 未知 3.6.6-r0 3.6.7-r0 [Unknown description]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49300

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-50579 未知 3.6.6-r0 3.6.7-r0 [Unknown description]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50579

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-50580 未知 3.6.6-r0 3.6.7-r0 Title Not Available

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50580

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-50581 未知 3.6.6-r0 3.6.7-r0 Title Not Available

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50581

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-50583 未知 3.6.6-r0 3.6.7-r0 [Unknown description]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50583

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mbedtls CVE-2026-50584 未知 3.6.6-r0 3.6.7-r0 Title Not Available

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50584

镜像层: sha256:88d80bbe87c4cc311afe3eb1cb1632434f0bb50265004be5f0b6c45d3b05d0e4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
Node.js (node-pkg)
低危漏洞:2 中危漏洞:15 高危漏洞:6 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
axios GHSA-gcfj-64vw-6mp9 高危 1.17.0 0.33.0, 1.18.0 Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning

漏洞详情: https://github.com/advisories/GHSA-gcfj-64vw-6mp9

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-20 22:40 修改: 2026-07-20 22:40
form-data CVE-2026-12143 高危 4.0.5 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-06-12 19:16 修改: 2026-08-21 13:16
undici CVE-2026-12151 高危 7.27.2 6.27.0, 7.28.0, 8.5.0 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-06-17 17:16 修改: 2026-08-20 13:16
undici CVE-2026-13697 高危 7.27.2 7.29.0, 8.9.0 undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13697

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-29 17:16 修改: 2026-08-04 14:17
undici CVE-2026-6734 高危 7.27.2 7.28.0, 8.2.0 undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6734

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-06-17 18:18 修改: 2026-08-20 13:19
undici CVE-2026-9697 高危 7.27.2 7.28.0, 8.5.0 undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9697

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-06-17 18:18 修改: 2026-08-20 13:19
axios GHSA-jqh4-m9w3-8hp9 中危 1.17.0 1.18.0 Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`

漏洞详情: https://github.com/advisories/GHSA-jqh4-m9w3-8hp9

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-20 22:27 修改: 2026-07-20 22:27
axios GHSA-mmx7-hfxf-jppx 中危 1.17.0 1.18.0, 0.33.0 Axios: Prototype pollution gadgets can alter axios request construction

漏洞详情: https://github.com/advisories/GHSA-mmx7-hfxf-jppx

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-20 22:25 修改: 2026-07-20 22:25
axios GHSA-mwf2-3pr3-8698 中危 1.17.0 1.18.0 Axios: HTTP/2 streamed uploads bypass `maxBodyLength`

漏洞详情: https://github.com/advisories/GHSA-mwf2-3pr3-8698

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-20 22:37 修改: 2026-07-20 22:37
axios GHSA-pmv8-rq9r-6j72 中危 1.17.0 0.33.0, 1.18.0 Axios: Deep formToJSON Key Recursion Can Cause Denial of Service

漏洞详情: https://github.com/advisories/GHSA-pmv8-rq9r-6j72

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-20 17:48 修改: 2026-07-20 17:48
axios CVE-2026-67314 中危 1.17.0 1.18.0 axios: axios: Outbound Request Tampering via Prototype Pollution in Basic Auth

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67314

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-08-01 13:17 修改: 2026-08-03 19:16
axios GHSA-42h9-826w-cgv3 中危 1.17.0 0.33.0, 1.18.0 Axios: Excessive recursion in formDataToJSON can cause denial of service

漏洞详情: https://github.com/advisories/GHSA-42h9-826w-cgv3

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-20 17:58 修改: 2026-07-20 17:58
axios GHSA-7q8q-rj6j-mhjq 中危 1.17.0 0.33.0, 1.18.0 Axios: Nested axios option objects can consume polluted prototype values

漏洞详情: https://github.com/advisories/GHSA-7q8q-rj6j-mhjq

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-20 22:37 修改: 2026-07-20 22:37
axios GHSA-f4gw-2p7v-4548 中危 1.17.0 1.18.0, 0.33.0 Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios

漏洞详情: https://github.com/advisories/GHSA-f4gw-2p7v-4548

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-20 22:20 修改: 2026-07-20 22:20
axios GHSA-hcpx-6fm6-wx23 中危 1.17.0 0.33.0, 1.18.0 Axios form serializer maxDepth bypass via {} metatoken

漏洞详情: https://github.com/advisories/GHSA-hcpx-6fm6-wx23

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-20 22:38 修改: 2026-07-20 22:38
undici CVE-2026-14643 中危 7.27.2 7.29.0, 8.9.0 undici: undici: Cross-user information disclosure due to improper Cache-Control directive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14643

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:53
undici CVE-2026-15157 中危 7.27.2 6.28.0, 7.29.0, 8.9.0 undici: undici: HTTP header injection via unvalidated blob-like body type property

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
undici CVE-2026-16728 中危 7.27.2 6.28.0, 7.29.0, 8.9.0 undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
undici CVE-2026-16729 中危 7.27.2 6.28.0, 7.29.0, 8.9.0 undici: Undici: Cookie attribute injection allows bypassing security protections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18
undici CVE-2026-9678 中危 7.27.2 7.28.0, 8.5.0 undici: Undici: Information disclosure due to improper cache-control header parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9678

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:44
undici CVE-2026-9679 中危 7.27.2 6.27.0, 7.28.0, 8.5.0 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
undici CVE-2026-11525 低危 7.27.2 6.27.0, 7.28.0, 8.5.0 undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici CVE-2026-6733 低危 7.27.2 6.27.0, 7.28.0, 8.5.0 undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733

镜像层: sha256:b0060e90497921f3c5e894e3bdb5e589322a70c359fb09648dec2857770e5353

发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
Python (python-pkg)
低危漏洞:1 中危漏洞:8 高危漏洞:16 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
aiohttp CVE-2026-69244 高危 3.14.1 3.14.3 aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69244

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-08-03 21:16 修改: 2026-08-04 15:16
pillow CVE-2026-54058 高危 12.2.0 12.3.0 Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54058

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-14 17:17 修改: 2026-08-06 15:46
pillow CVE-2026-54059 高危 12.2.0 12.3.0 python-pillow: Pillow: Denial of Service via crafted PCF font data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54059

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
pillow CVE-2026-54060 高危 12.2.0 12.3.0 python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54060

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
pillow CVE-2026-55379 高危 12.2.0 12.3.0 python-pillow: Pillow: Denial of Service via crafted BDF font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55379

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:59
pillow CVE-2026-55380 高危 12.2.0 12.3.0 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55380

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
pillow CVE-2026-59197 高危 12.2.0 12.3.0 Pillow: Pillow: Native heap out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59197

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-14 17:17 修改: 2026-07-21 19:17
pillow CVE-2026-59199 高危 12.2.0 12.3.0 Pillow: Pillow: Denial of Service via out-of-bounds write in image processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59199

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-14 16:17 修改: 2026-07-15 16:16
pillow CVE-2026-59200 高危 12.2.0 12.3.0 Pillow: Pillow: Denial of service via crafted PDF stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59200

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-14 17:17 修改: 2026-07-21 15:52
pillow CVE-2026-59204 高危 12.2.0 12.3.0 Pillow: Pillow: Denial of Service via crafted JPEG2000 image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59204

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-14 16:17 修改: 2026-07-21 19:17
pillow CVE-2026-59205 高危 12.2.0 12.3.0 Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59205

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-14 16:17 修改: 2026-07-14 20:09
starlette CVE-2026-54283 高危 1.2.1 1.3.1 starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54283

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:16
yt-dlp CVE-2026-50023 高危 2026.6.6.234447.dev0 2026.6.9 yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50023

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-06-23 17:17 修改: 2026-06-26 20:12
yt-dlp CVE-2026-50574 高危 2026.6.6.234447.dev0 2026.6.9 yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50574

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-06-23 17:17 修改: 2026-06-26 20:11
yt-dlp CVE-2026-55404 高危 2026.6.6.234447.dev0 2026.7.4 yt-dlp and youtube-dl are command-line audio/video downloaders. Prior ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55404

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-08 20:16 修改: 2026-07-13 17:01
yt-dlp GHSA-69qj-pvh9-c5wg 高危 2026.6.6.234447.dev0 2026.6.9 yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp

漏洞详情: https://github.com/advisories/GHSA-69qj-pvh9-c5wg

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-06-16 22:29 修改: 2026-06-16 22:29
pip CVE-2026-8643 中危 26.1.1 26.1.2 python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643

镜像层: sha256:d457bf49462c638c34274b8fb5d7c23274c402b15b6c4b117f66464b7655d290

发布日期: 2026-06-01 17:17 修改: 2026-08-19 12:18
setuptools CVE-2026-59890 中危 82.0.1 83.0.0 setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
aiohttp CVE-2026-59881 中危 3.14.1 3.14.2 aiohttp: AIOHTTP: Denial of Service via unnegotiated WebSocket compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59881

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-30 19:18 修改: 2026-07-30 20:03
aiohttp CVE-2026-69243 中危 3.14.1 3.14.2 aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69243

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-08-03 21:16 修改: 2026-08-05 16:17
pillow CVE-2026-55798 中危 12.2.0 12.3.0 python-pillow: Pillow: Arbitrary command injection via shell metacharacters in file paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55798

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
pillow CVE-2026-59198 中危 12.2.0 12.3.0 Pillow: Pillow: Information disclosure via TGA RLE encoder out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59198

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-14 16:17 修改: 2026-07-14 20:18
pillow CVE-2026-59203 中危 12.2.0 12.3.0 Pillow: Pillow: Denial of Service via crafted EPS file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59203

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-07-14 16:17 修改: 2026-07-15 14:18
yt-dlp CVE-2026-50019 中危 2026.6.6.234447.dev0 2026.6.9 yt-dlp is a command-line audio/video downloader. From 2023.09.24 until ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50019

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-06-23 17:17 修改: 2026-06-26 20:12
starlette CVE-2026-54282 低危 1.2.1 1.3.0 starlette: Starlette: Information disclosure due to improper HTTP request path validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54282

镜像层: sha256:b54094f04eeb2b10bae1ac1392d1f2aec04c2b2f8dd90637ae6bdc382c293d46

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:18
/app/.venv/lib/python3.14/site-packages/yt_dlp/extractor/adultswim.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/app/.venv/lib/python3.14/site-packages/yt_dlp/extractor/aenetworks.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/app/.venv/lib/python3.14/site-packages/yt_dlp/extractor/blackboardcollaborate.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/app/.venv/lib/python3.14/site-packages/yt_dlp/extractor/cloudflarestream.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/app/.venv/lib/python3.14/site-packages/yt_dlp/extractor/espn.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/app/.venv/lib/python3.14/site-packages/yt_dlp/extractor/go.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/app/.venv/lib/python3.14/site-packages/yt_dlp/extractor/nbc.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/app/.venv/lib/python3.14/site-packages/yt_dlp/extractor/shahid.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/app/.venv/lib/python3.14/site-packages/yt_dlp/extractor/tbs.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/app/.venv/lib/python3.14/site-packages/yt_dlp/extractor/vice.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×