docker.io/heartexlabs/label-studio:latest linux/arm64

docker.io/heartexlabs/label-studio:latest - Trivy安全扫描结果 扫描时间: 2026-08-12 18:07 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:37 中危漏洞:106 高危漏洞:78 严重漏洞:3

系统OS: alpine 3.23.3 扫描引擎: Trivy 扫描时间: 2026-08-12 18:07

docker.io/heartexlabs/label-studio:latest (alpine 3.23.3) (alpine)
低危漏洞:27 中危漏洞:78 高危漏洞:33 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto3 CVE-2026-31789 严重 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-31789 严重 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
nginx CVE-2026-42945 严重 1.28.2-r1 1.28.3-r1 nginx: NGINX: Arbitrary Code Execution Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42945

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 16:16 修改: 2026-07-15 02:21
expat CVE-2026-45186 高危 2.7.4-r0 2.8.1-r0 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-10 07:16 修改: 2026-07-24 20:10
expat CVE-2026-56408 高危 2.7.4-r0 2.8.2-r0 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
c-ares CVE-2026-33630 高危 1.34.6-r0 1.34.8-r0 c-ares: c-ares: Use-after-free / double-free in query-completion handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33630

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcrypto3 CVE-2026-28387 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28388 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28389 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28390 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-45447 高危 3.5.5-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-08-10 13:19
libcurl CVE-2026-5773 高危 8.17.0-r1 8.20.0-r0 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl CVE-2026-6276 高危 8.17.0-r1 8.20.0-r0 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libexpat CVE-2026-45186 高危 2.7.4-r0 2.8.1-r0 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-10 07:16 修改: 2026-07-24 20:10
libexpat CVE-2026-56408 高危 2.7.4-r0 2.8.2-r0 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
curl CVE-2026-5773 高危 8.17.0-r1 8.20.0-r0 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libssl3 CVE-2026-28387 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28388 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28389 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28390 高危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-45447 高危 3.5.5-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-08-10 13:19
libxml2 CVE-2026-6732 高危 2.13.9-r0 2.13.9-r1 libxml2: libxml2: Denial of Service via crafted XSD-validated document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6732

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-04-23 23:16 修改: 2026-06-30 20:16
musl CVE-2026-40200 高危 1.2.5-r21 1.2.5-r23 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
musl-utils CVE-2026-40200 高危 1.2.5-r21 1.2.5-r23 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
nghttp2-libs CVE-2026-27135 高危 1.68.0-r0 1.68.1 nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27135

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-18 18:16 修改: 2026-07-15 02:19
curl CVE-2026-6276 高危 8.17.0-r1 8.20.0-r0 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
nginx CVE-2026-27651 高危 1.28.2-r1 1.28.3-r0 NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27651

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-24 15:16 修改: 2026-07-15 02:19
nginx CVE-2026-27654 高危 1.28.2-r1 1.28.3-r0 NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27654

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-24 15:16 修改: 2026-07-15 02:19
nginx CVE-2026-32647 高危 1.28.2-r1 1.28.3-r0 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32647

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-24 15:16 修改: 2026-07-15 02:20
nginx CVE-2026-42055 高危 1.28.2-r1 1.28.3-r4 nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42055

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-17 15:16 修改: 2026-08-10 15:39
nginx CVE-2026-42533 高危 1.28.2-r1 1.28.3-r6 nginx: NGINX: Arbitrary code execution via crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42533

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-07-15 15:16 修改: 2026-08-10 15:28
nginx CVE-2026-42946 高危 1.28.2-r1 1.28.3-r1 nginx: ngx_http_scgi_module: ngx_http_uwsgi_module: information disclosure and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42946

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 16:16 修改: 2026-06-18 14:12
nginx CVE-2026-49975 高危 1.28.2-r1 1.28.3-r3 httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49975

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-08 16:16 修改: 2026-08-05 13:23
nginx CVE-2026-60005 高危 1.28.2-r1 1.28.3-r6 nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60005

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-07-15 16:16 修改: 2026-08-06 18:19
nginx CVE-2026-9256 高危 1.28.2-r1 1.28.3-r2 nginx: ngx_http_rewrite_module: code execution and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9256

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-22 15:16 修改: 2026-07-24 13:18
zlib CVE-2026-22184 高危 1.3.1-r2 1.3.2-r0 zlib: zlib: Arbitrary code execution via buffer overflow in untgz utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22184

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-01-07 21:16 修改: 2026-07-15 02:18
curl CVE-2026-5545 中危 8.17.0-r1 8.20.0-r0 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
curl CVE-2026-6253 中危 8.17.0-r1 8.20.0-r0 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcrypto3 CVE-2026-2673 中危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31
libcrypto3 CVE-2026-31790 中危 3.5.5-r0 3.5.6-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-34182 中危 3.5.5-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34183 中危 3.5.5-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42764 中危 3.5.5-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45445 中危 3.5.5-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
curl CVE-2026-6429 中危 8.17.0-r1 8.20.0-r0 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
curl CVE-2026-7009 中危 8.17.0-r1 8.20.0-r0 curl: Curl: Certificate validation bypass due to OCSP stapling flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7009

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
libcurl CVE-2025-14017 中危 8.17.0-r1 8.19.0-r0 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
libcurl CVE-2026-1965 中危 8.17.0-r1 8.19.0-r0 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
libcurl CVE-2026-3783 中危 8.17.0-r1 8.19.0-r0 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl CVE-2026-3784 中危 8.17.0-r1 8.19.0-r0 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl CVE-2026-3805 中危 8.17.0-r1 8.19.0-r0 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl CVE-2026-4873 中危 8.17.0-r1 8.20.0-r0 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
libcurl CVE-2026-5545 中危 8.17.0-r1 8.20.0-r0 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl CVE-2026-6253 中危 8.17.0-r1 8.20.0-r0 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl CVE-2026-6429 中危 8.17.0-r1 8.20.0-r0 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl CVE-2026-7009 中危 8.17.0-r1 8.20.0-r0 curl: Curl: Certificate validation bypass due to OCSP stapling flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7009

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
libcurl CVE-2026-7168 中危 8.17.0-r1 8.20.0-r0 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
curl CVE-2026-7168 中危 8.17.0-r1 8.20.0-r0 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
curl CVE-2025-14017 中危 8.17.0-r1 8.19.0-r0 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
libexpat CVE-2026-32776 中危 2.7.4-r0 2.7.5-r0 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat CVE-2026-32777 中危 2.7.4-r0 2.7.5-r0 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat CVE-2026-32778 中危 2.7.4-r0 2.7.5-r0 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat CVE-2026-50219 中危 2.7.4-r0 2.8.2-r0 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
libexpat CVE-2026-56131 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat CVE-2026-56132 中危 2.7.4-r0 2.8.2-r0 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat CVE-2026-56403 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat CVE-2026-56404 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat CVE-2026-56405 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat CVE-2026-56406 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat CVE-2026-56407 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat CVE-2026-56409 中危 2.7.4-r0 2.8.2-r0 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat CVE-2026-56410 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat CVE-2026-56411 中危 2.7.4-r0 2.8.2-r0 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat CVE-2026-56412 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libmount CVE-2026-27456 中危 2.41.2-r0 2.41.4-r0 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
curl CVE-2026-1965 中危 8.17.0-r1 8.19.0-r0 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
expat CVE-2026-32776 中危 2.7.4-r0 2.7.5-r0 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
expat CVE-2026-32777 中危 2.7.4-r0 2.7.5-r0 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
expat CVE-2026-32778 中危 2.7.4-r0 2.7.5-r0 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
expat CVE-2026-50219 中危 2.7.4-r0 2.8.2-r0 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
expat CVE-2026-56131 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libssl3 CVE-2026-2673 中危 3.5.5-r0 3.5.6-r0 openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31
libssl3 CVE-2026-31790 中危 3.5.5-r0 3.5.6-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-34182 中危 3.5.5-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34183 中危 3.5.5-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42764 中危 3.5.5-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45445 中危 3.5.5-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libuuid CVE-2026-27456 中危 2.41.2-r0 2.41.4-r0 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:aef8364e701532926e6ccf66803204095236e0457bb04be6959548ba9f43470d

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
expat CVE-2026-56132 中危 2.7.4-r0 2.8.2-r0 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
expat CVE-2026-56403 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
musl CVE-2026-6042 中危 1.2.5-r21 1.2.5-r22 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
expat CVE-2026-56404 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
musl-utils CVE-2026-6042 中危 1.2.5-r21 1.2.5-r22 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
expat CVE-2026-56405 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
expat CVE-2026-56406 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
expat CVE-2026-56407 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
expat CVE-2026-56409 中危 2.7.4-r0 2.8.2-r0 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
expat CVE-2026-56410 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
expat CVE-2026-56411 中危 2.7.4-r0 2.8.2-r0 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
expat CVE-2026-56412 中危 2.7.4-r0 2.8.2-r0 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libblkid CVE-2026-27456 中危 2.41.2-r0 2.41.4-r0 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
curl CVE-2026-3783 中危 8.17.0-r1 8.19.0-r0 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl CVE-2026-3784 中危 8.17.0-r1 8.19.0-r0 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl CVE-2026-3805 中危 8.17.0-r1 8.19.0-r0 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
nginx CVE-2026-27784 中危 1.28.2-r1 1.28.3-r0 NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27784

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-24 15:16 修改: 2026-07-15 02:19
nginx CVE-2026-28755 中危 1.28.2-r1 1.28.3-r0 NGINX: NGINX: Certificate revocation bypass when OCSP is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28755

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-24 15:16 修改: 2026-06-17 10:28
nginx CVE-2026-40460 中危 1.28.2-r1 1.28.3-r1 nginx: NGINX: Authorization bypass via IP spoofing in HTTP/3 QUIC module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40460

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 16:16 修改: 2026-06-29 14:17
nginx CVE-2026-40701 中危 1.28.2-r1 1.28.3-r1 nginx: ngx_http_ssl_module: data corruption and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40701

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 16:16 修改: 2026-06-23 13:57
nginx CVE-2026-42934 中危 1.28.2-r1 1.28.3-r1 nginx: ngx_http_charset_module: information disclosure and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42934

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 16:16 修改: 2026-06-18 14:07
nginx CVE-2026-48142 中危 1.28.2-r1 1.28.3-r4 nginx: NGINX: Memory disclosure or denial of service via ngx_http_charset_module heap buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48142

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-06-17 15:16 修改: 2026-06-22 16:50
nginx CVE-2026-56434 中危 1.28.2-r1 1.28.3-r6 nginx: NGINX: Heap buffer over-read allows memory modification or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56434

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-07-15 15:16 修改: 2026-08-10 15:27
xz-libs CVE-2026-34743 中危 5.8.2-r0 5.8.3-r0 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:aef8364e701532926e6ccf66803204095236e0457bb04be6959548ba9f43470d

发布日期: 2026-04-02 19:21 修改: 2026-07-24 21:10
curl CVE-2026-4873 中危 8.17.0-r1 8.20.0-r0 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
zlib CVE-2026-27171 中危 1.3.1-r2 1.3.2-r0 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
expat CVE-2026-41080 低危 2.7.4-r0 2.8.1-r0 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
libexpat CVE-2026-41080 低危 2.7.4-r0 2.8.1-r0 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
curl CVE-2025-14819 低危 8.17.0-r1 8.19.0-r0 curl: libcurl: Improper certificate validation due to cached TLS settings reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14819

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
libcrypto3 CVE-2026-34180 低危 3.5.5-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34181 低危 3.5.5-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42766 低危 3.5.5-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42767 低危 3.5.5-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42768 低危 3.5.5-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42769 低危 3.5.5-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42770 低危 3.5.5-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45446 低危 3.5.5-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-7383 低危 3.5.5-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-9076 低危 3.5.5-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcurl CVE-2025-14524 低危 8.17.0-r1 8.19.0-r0 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
libcurl CVE-2025-14819 低危 8.17.0-r1 8.19.0-r0 curl: libcurl: Improper certificate validation due to cached TLS settings reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14819

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
libssl3 CVE-2026-34180 低危 3.5.5-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34181 低危 3.5.5-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42766 低危 3.5.5-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42767 低危 3.5.5-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42768 低危 3.5.5-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42769 低危 3.5.5-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42770 低危 3.5.5-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45446 低危 3.5.5-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
nginx CVE-2026-28753 低危 1.28.2-r1 1.28.3-r0 NGINX: NGINX Plus: NGINX Open Source: NGINX Plus and NGINX Open Source: Request manipulation via header injection in SMTP upstream requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28753

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-03-24 15:16 修改: 2026-06-17 10:28
libssl3 CVE-2026-7383 低危 3.5.5-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-9076 低危 3.5.5-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:45f3ea5848e8a25ca27718b640a21ffd8c8745d342a24e1d4ddfc8c449b0a724

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
curl CVE-2025-14524 低危 8.17.0-r1 8.19.0-r0 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:496016f6ebdde82fb9a281edf30aa7313c19fbb648253dfa6318dcd736a6be3d

发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
Python (python-pkg)
低危漏洞:10 中危漏洞:28 高危漏洞:45 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
PyJWT CVE-2026-32597 高危 2.10.1 2.12.0 pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32597

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-13 19:55 修改: 2026-07-22 12:17
PyJWT CVE-2026-48526 高危 2.10.1 2.13.0 python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48526

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-05-28 16:16 修改: 2026-08-06 13:18
black CVE-2026-32274 高危 24.8.0 26.3.1 black: Black: Arbitrary file writes from unsanitized user input in cache file name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32274

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-12 20:16 修改: 2026-08-03 21:16
cryptography CVE-2026-69247 高危 46.0.5 50.0.0 cryptography is a package designed to expose cryptographic primitives ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69247

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-08-03 22:16 修改: 2026-08-04 15:16
cryptography CVE-2026-69249 高危 46.0.5 49.0.0 python-cryptography is a package designed to expose cryptographic prim ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69249

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-08-03 22:16 修改: 2026-08-04 15:16
cryptography GHSA-537c-gmf6-5ccf 高危 46.0.5 48.0.1 Vulnerable OpenSSL included in cryptography wheels

漏洞详情: https://github.com/advisories/GHSA-537c-gmf6-5ccf

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-06-15 20:12 修改: 2026-06-15 20:12
datamodel-code-generator CVE-2026-54621 高危 0.26.1 0.60.1 `datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54621

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-28 22:17 修改: 2026-07-30 20:02
datamodel-code-generator CVE-2026-54653 高危 0.26.1 0.60.2 `datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54653

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-28 22:17 修改: 2026-08-06 20:14
datamodel-code-generator CVE-2026-54654 高危 0.26.1 0.60.2 `datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54654

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-28 22:17 修改: 2026-07-30 20:02
datamodel-code-generator CVE-2026-54690 高危 0.26.1 0.61.0 datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54690

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-28 22:17 修改: 2026-08-06 19:48
datamodel-code-generator CVE-2026-54691 高危 0.26.1 0.61.0 datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54691

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-28 22:17 修改: 2026-07-30 20:02
datamodel-code-generator CVE-2026-55389 高危 0.26.1 0.62.0 datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55389

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-28 22:17 修改: 2026-08-06 19:44
datamodel-code-generator CVE-2026-55391 高危 0.26.1 0.63.0 datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55391

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-28 22:17 修改: 2026-08-06 19:43
datamodel-code-generator CVE-2026-55415 高危 0.26.1 0.64.0 datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55415

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-28 22:17 修改: 2026-08-06 19:42
lxml CVE-2026-41066 高危 5.3.0 6.1.0 lxml: python: lxml: Information disclosure via untrusted XML input leading to local file read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41066

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46
lxml_html_clean CVE-2026-49825 高危 0.4.0 0.4.5 `lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49825

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
nltk CVE-2026-12061 高危 3.9.3 3.10.0 Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12061

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
nltk CVE-2026-12072 高危 3.9.3 3.10.0 Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12072

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
nltk CVE-2026-12074 高危 3.9.3 3.10.0 Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12074

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
nltk CVE-2026-12075 高危 3.9.3 3.10.0 Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12075

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
nltk CVE-2026-33231 高危 3.9.3 3.9.4 nltk: NLTK: Denial of Service via unauthenticated remote shutdown

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33231

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-20 23:16 修改: 2026-07-15 02:20
nltk CVE-2026-54293 高危 3.9.3 3.10.0 nltk: NLTK: Information Disclosure via Path Traversal in `nltk.data.load()`

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54293

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-06-22 19:17 修改: 2026-07-21 12:18
pillow CVE-2026-40192 高危 12.1.1 12.2.0 Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40192

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-04-15 23:16 修改: 2026-07-20 12:19
pillow CVE-2026-42311 高危 12.1.1 12.2.0 Pillow: python-pillow: Pillow: Arbitrary code execution via malicious PSD file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42311

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-05-09 06:16 修改: 2026-07-24 21:10
pillow CVE-2026-54058 高危 12.1.1 12.3.0 Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54058

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-14 17:17 修改: 2026-08-06 15:46
pillow CVE-2026-54059 高危 12.1.1 12.3.0 python-pillow: Pillow: Denial of Service via crafted PCF font data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54059

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
pillow CVE-2026-54060 高危 12.1.1 12.3.0 python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54060

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
pillow CVE-2026-55379 高危 12.1.1 12.3.0 python-pillow: Pillow: Denial of Service via crafted BDF font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55379

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:59
pillow CVE-2026-55380 高危 12.1.1 12.3.0 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55380

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
pillow CVE-2026-59197 高危 12.1.1 12.3.0 Pillow: Pillow: Native heap out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59197

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-14 17:17 修改: 2026-07-21 19:17
pillow CVE-2026-59199 高危 12.1.1 12.3.0 Pillow: Pillow: Denial of Service via out-of-bounds write in image processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59199

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-14 16:17 修改: 2026-07-15 16:16
pillow CVE-2026-59200 高危 12.1.1 12.3.0 Pillow: Pillow: Denial of service via crafted PDF stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59200

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-14 17:17 修改: 2026-07-21 15:52
pillow CVE-2026-59204 高危 12.1.1 12.3.0 Pillow: Pillow: Denial of Service via crafted JPEG2000 image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59204

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-14 16:17 修改: 2026-07-21 19:17
pillow CVE-2026-59205 高危 12.1.1 12.3.0 Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59205

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-14 16:17 修改: 2026-07-14 20:09
pyarrow CVE-2026-25087 高危 22.0.0 23.0.1 apache-arrow: Apache Arrow C++: Denial of Service via Use After Free vulnerability when reading IPC files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25087

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-02-17 14:16 修改: 2026-06-17 10:24
pyasn1 CVE-2026-30922 高危 0.6.2 0.6.3 pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-30922

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-18 04:17 修改: 2026-08-05 13:21
pyasn1 CVE-2026-59884 高危 0.6.2 0.6.4 python-pyasn1: pyasn1: Denial of Service via crafted BER input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59884

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:37
pyasn1 CVE-2026-59885 高危 0.6.2 0.6.4 pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59885

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:38
pyasn1 CVE-2026-59886 高危 0.6.2 0.6.4 pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59886

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:38
ujson CVE-2026-32874 高危 5.8.0 5.12.0 UltraJSON: UltraJSON: Denial of Service due to memory leak when parsing large integers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32874

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-20 02:16 修改: 2026-07-15 02:20
ujson CVE-2026-32875 高危 5.8.0 5.12.0 ultrajson: UltraJSON: Denial of Service via large indent parameter in JSON serialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32875

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-20 02:16 修改: 2026-07-15 02:20
ujson CVE-2026-44660 高危 5.8.0 5.12.1 python-ujson: UltraJSON: Memory leak leading to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44660

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-05-27 21:16 修改: 2026-06-17 10:51
urllib3 CVE-2026-44431 高危 2.6.3 2.7.0 urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44431

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-05-13 16:16 修改: 2026-06-26 12:16
urllib3 CVE-2026-44432 高危 2.6.3 2.7.0 urllib3: urllib3: Denial of Service due to excessive HTTP response decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44432

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-05-13 16:16 修改: 2026-08-07 12:17
wheel CVE-2026-24049 高危 0.45.1 0.46.2 wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24049

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-01-22 05:16 修改: 2026-08-10 13:18
cryptography CVE-2026-69248 中危 46.0.5 49.0.0 cryptography is a package designed to expose cryptographic primitives ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69248

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-08-03 22:16 修改: 2026-08-04 16:16
nltk CVE-2026-33230 中危 3.9.3 3.9.4 nltk: NLTK: Script execution via reflected cross-site scripting in WordNet Browser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33230

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-20 23:16 修改: 2026-06-17 10:37
pillow CVE-2026-42308 中危 12.1.1 12.2.0 Pillow: python: Pillow: Denial of Service via integer overflow in font processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42308

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-05-09 06:16 修改: 2026-07-24 21:10
pillow CVE-2026-42309 中危 12.1.1 12.2.0 Pillow: Pillow: Denial of Service via specially crafted coordinate input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42309

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-05-09 06:16 修改: 2026-07-24 21:10
pillow CVE-2026-42310 中危 12.1.1 12.2.0 Pillow: Pillow: Denial of Service via malicious PDF processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42310

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-05-09 06:16 修改: 2026-07-24 21:10
pillow CVE-2026-55798 中危 12.1.1 12.3.0 python-pillow: Pillow: Arbitrary command injection via shell metacharacters in file paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55798

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
pillow CVE-2026-59198 中危 12.1.1 12.3.0 Pillow: Pillow: Information disclosure via TGA RLE encoder out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59198

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-14 16:17 修改: 2026-07-14 20:18
pillow CVE-2026-59203 中危 12.1.1 12.3.0 Pillow: Pillow: Denial of Service via crafted EPS file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59203

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-14 16:17 修改: 2026-07-15 14:18
pip CVE-2026-3219 中危 25.3 26.1 pip: pip: Incorrect file installation due to improper archive handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219

镜像层: sha256:aef8364e701532926e6ccf66803204095236e0457bb04be6959548ba9f43470d

发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
pip CVE-2026-6357 中危 25.3 26.1 pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357

镜像层: sha256:aef8364e701532926e6ccf66803204095236e0457bb04be6959548ba9f43470d

发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
pip CVE-2026-8643 中危 25.3 26.1.2 python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643

镜像层: sha256:aef8364e701532926e6ccf66803204095236e0457bb04be6959548ba9f43470d

发布日期: 2026-06-01 17:17 修改: 2026-08-05 13:24
pip CVE-2026-3219 中危 26.0.1 26.1 pip: pip: Incorrect file installation due to improper archive handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
pip CVE-2026-6357 中危 26.0.1 26.1 pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
pip CVE-2026-8643 中危 26.0.1 26.1.2 python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-06-01 17:17 修改: 2026-08-05 13:24
nltk GHSA-rf74-v2fm-23pw 中危 3.9.3 Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS

漏洞详情: https://github.com/advisories/GHSA-rf74-v2fm-23pw

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-18 20:17 修改: 2026-03-18 20:17
idna CVE-2026-45409 中危 3.7 3.15 python-idna: idna: Denial of Service via specially crafted long inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10
PyJWT CVE-2026-48525 中危 2.10.1 2.13.0 python-pyjwt: PyJWT: Denial of Service via processing of crafted detached JWS tokens

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48525

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
Django CVE-2026-53877 中危 5.1.15 5.2.16, 6.0.7 django: Django: Information disclosure via heap buffer over-read in GDALRaster

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53877

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-07 15:16 修改: 2026-07-09 12:59
lxml_html_clean CVE-2026-28348 中危 0.4.0 0.4.4 lxml_html_clean is a project for HTML cleaning functionalities copied ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28348

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-05 20:16 修改: 2026-06-17 10:28
requests CVE-2026-25645 中危 2.32.4 2.33.0 requests: Requests: Security bypass due to predictable temporary file creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25
setuptools CVE-2026-59890 中危 80.10.1 83.0.0 setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
lxml_html_clean CVE-2026-28350 中危 0.4.0 0.4.4 lxml_html_clean is a project for HTML cleaning functionalities copied ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28350

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-05 20:16 修改: 2026-06-17 10:28
bleach GHSA-gj48-438w-jh9v 中危 5.0.1 6.4.0 Bleach clean() / Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes

漏洞详情: https://github.com/advisories/GHSA-gj48-438w-jh9v

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-06-16 14:07 修改: 2026-06-16 14:07
Django CVE-2026-53878 中危 5.1.15 5.2.16, 6.0.7 django: Django: HTTP header injection via DomainNameValidator accepting newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53878

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-07 15:16 修改: 2026-07-09 12:58
ujson CVE-2026-54911 中危 5.8.0 5.13.0 UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54911

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-06-22 22:16 修改: 2026-06-26 20:10
PyJWT CVE-2026-48522 中危 2.10.1 2.13.0 python-pyjwt: PyJWT: Server-Side Request Forgery (SSRF) via uncontrolled URL fetching in PyJWKClient

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48522

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
PyJWT CVE-2026-48523 中危 2.10.1 2.13.0 python-pyjwt: PyJWT: Verifier-side algorithm bypass leads to unauthorized information access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48523

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
cryptography CVE-2026-39892 中危 46.0.5 46.0.7 cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39892

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-04-08 21:17 修改: 2026-07-30 12:18
Pygments CVE-2026-4539 低危 2.16.1 2.20.0 pygments: Pygments: Denial of Service via inefficient regular expression processing in AdlLexer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4539

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-22 06:16 修改: 2026-06-17 10:56
Django CVE-2026-48588 低危 5.1.15 5.2.16, 6.0.7 django: Django: Information disclosure due to improper caching of Set-Cookie responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48588

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-07 15:16 修改: 2026-07-09 13:01
pip CVE-2026-1703 低危 25.3 26.0 pip: pip: Information disclosure via path traversal when installing crafted wheel archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703

镜像层: sha256:aef8364e701532926e6ccf66803204095236e0457bb04be6959548ba9f43470d

发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16
cryptography CVE-2026-34073 低危 46.0.5 46.0.6 python-cryptography: Cryptography: Security bypass due to improper DNS name constraint validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34073

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
datamodel-code-generator CVE-2026-55403 低危 0.26.1 0.63.0 datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55403

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-07-28 22:17 修改: 2026-07-30 20:02
Django CVE-2026-6873 低危 5.1.15 5.2.15, 6.0.6 python-django: Django: Information disclosure via non-injective cookie salt derivation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6873

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-06-03 14:16 修改: 2026-07-21 19:10
bleach GHSA-8rfp-98v4-mmr6 低危 5.0.1 6.4.0 Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output

漏洞详情: https://github.com/advisories/GHSA-8rfp-98v4-mmr6

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-06-16 14:06 修改: 2026-06-16 14:06
Django CVE-2026-8404 低危 5.1.15 5.2.15, 6.0.6 Django: Django: Information disclosure due to improper handling of Cache-Control directives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8404

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-06-03 14:16 修改: 2026-07-21 19:10
Django CVE-2026-48587 低危 5.1.15 5.2.15, 6.0.6 django: Django: Information disclosure via improper handling of Vary header whitespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48587

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-06-03 14:16 修改: 2026-07-21 19:10
PyJWT CVE-2026-48524 低危 2.10.1 2.13.0 python-pyjwt: PyJWT: Denial of Service via unverified JSON Web Token key IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48524

镜像层: sha256:eb6c0feeb43335ef92aa21cf770190f534279dd110912669cfb6c675fd998927

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×