docker.io/idaholab/moose:2024.12.23-8f91e2a linux/amd64

docker.io/idaholab/moose:2024.12.23-8f91e2a - Trivy安全扫描结果 扫描时间: 2025-01-02 14:57
全部漏洞信息
低危漏洞:12 中危漏洞:125 高危漏洞:70 严重漏洞:9

系统OS: rocky 8.9 扫描引擎: Trivy 扫描时间: 2025-01-02 14:57

docker.io/idaholab/moose:2024.12.23-8f91e2a (rocky 8.9) (rocky)
低危漏洞:6 中危漏洞:76 高危漏洞:12 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2023-38546 高危 7.61.1-33.el8 7.61.1-33.el8_9.5 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-10-18 04:15 修改: 2024-07-09 14:15
kernel-headers CVE-2024-38586 高危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets.

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38586

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-06-19 14:15 修改: 2024-07-05 08:15
kernel-headers CVE-2024-40961 高危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: ipv6: prevent possible NULL deref in fib6_nh_init()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40961

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-12 13:15 修改: 2024-08-21 16:54
krb5-libs CVE-2024-3596 高危 1.18.2-26.el8 1.18.2-30.el8_10 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-09 12:15 修改: 2024-12-30 19:23
libcurl-minimal CVE-2023-38546 高危 7.61.1-33.el8 7.61.1-33.el8_9.5 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-10-18 04:15 修改: 2024-07-09 14:15
libsoup CVE-2024-52530 高危 2.62.3-5.el8 2.62.3-6.el8_10 libsoup: HTTP request smuggling via stripping null bytes from the ends of header names

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52530

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-11-11 20:15 修改: 2024-11-12 19:35
libsoup CVE-2024-52532 高危 2.62.3-5.el8 2.62.3-6.el8_10 libsoup: infinite loop while reading websocket data

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52532

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-11-11 20:15 修改: 2024-11-12 19:35
pam CVE-2024-10041 高危 1.3.1-27.el8 1.3.1-36.el8_10 pam: libpam: Libpam vulnerable to read hashed password

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-23 14:15 修改: 2024-12-18 10:15
pam CVE-2024-10963 高危 1.3.1-27.el8 1.3.1-36.el8_10 pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-11-07 16:15 修改: 2024-11-11 18:15
platform-python-setuptools CVE-2024-6345 高危 39.2.0-7.el8 39.2.0-8.el8_10 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-15 01:15 修改: 2024-07-15 13:00
python3-setuptools CVE-2024-6345 高危 39.2.0-7.el8 39.2.0-8.el8_10 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-15 01:15 修改: 2024-07-15 13:00
python3-setuptools-wheel CVE-2024-6345 高危 39.2.0-7.el8 39.2.0-8.el8_10 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-15 01:15 修改: 2024-07-15 13:00
kernel-headers CVE-2022-48773 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48773

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-16 12:15 修改: 2024-08-21 17:45
kernel-headers CVE-2022-48936 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: gso: do not skip outer ip header in case of ipip and net_failover

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48936

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-22 04:15 修改: 2024-08-31 06:15
kernel-headers CVE-2023-52492 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: dmaengine: fix NULL pointer in channel unregistration function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52492

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-03-11 18:15 修改: 2024-11-06 19:35
kernel-headers CVE-2024-24857 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: net/bluetooth: race condition in conn_info_{min,max}_age_set()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24857

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-02-05 08:15 修改: 2024-06-27 12:15
kernel-headers CVE-2024-26851 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: netfilter: nf_conntrack_h323: Add protection for bmp length out of range

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26851

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-04-17 11:15 修改: 2024-11-05 10:15
kernel-headers CVE-2024-26924 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: netfilter: nft_set_pipapo: do not free live element

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26924

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-04-25 06:15 修改: 2024-11-05 10:16
kernel-headers CVE-2024-26976 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: KVM: Always flush async #PF workqueue when vCPU is being destroyed

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26976

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-05-01 06:15 修改: 2024-11-05 10:16
kernel-headers CVE-2024-27017 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: netfilter: nft_set_pipapo: walk over current view on netlink dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27017

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-05-01 06:15 修改: 2024-10-17 14:15
kernel-headers CVE-2024-27043 中危 4.18.0-553.16.1.el8_10 4.18.0-553.30.1.el8_10 kernel: media: edia: dvbdev: fix a use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27043

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-05-01 13:15 修改: 2024-12-23 19:13
kernel-headers CVE-2024-27062 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: nouveau: lock the client object tree.

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27062

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-05-01 13:15 修改: 2024-11-05 17:35
kernel-headers CVE-2024-27399 中危 4.18.0-553.16.1.el8_10 4.18.0-553.30.1.el8_10 kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27399

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-05-14 15:12 修改: 2024-11-05 10:16
kernel-headers CVE-2024-35839 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35839

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-05-17 15:15 修改: 2024-05-17 18:35
kernel-headers CVE-2024-35898 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35898

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-05-19 09:15 修改: 2024-11-05 10:16
kernel-headers CVE-2024-35939 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: dma-direct: Leak pages on dma_set_decrypted() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35939

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-05-19 11:15 修改: 2024-05-20 13:00
kernel-headers CVE-2024-38540 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38540

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-06-19 14:15 修改: 2024-11-14 16:15
kernel-headers CVE-2024-38541 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: of: module: add buffer overflow check in of_modalias()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38541

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-06-19 14:15 修改: 2024-07-03 02:05
kernel-headers CVE-2024-38564 中危 4.18.0-553.16.1.el8_10 4.18.0-553.30.1.el8_10 kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38564

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-06-19 14:15 修改: 2024-06-20 12:44
kernel-headers CVE-2024-38608 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: net/mlx5e: Fix netif state handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38608

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-06-19 14:15 修改: 2024-08-27 15:58
kernel-headers CVE-2024-39503 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-39503

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-12 13:15 修改: 2024-07-12 16:34
kernel-headers CVE-2024-40924 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: drm/i915/dpt: Make DPT object unshrinkable

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40924

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-12 13:15 修改: 2024-07-12 16:34
kernel-headers CVE-2024-40983 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: tipc: force a dst refcount before doing decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40983

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-12 13:15 修改: 2024-07-12 16:34
kernel-headers CVE-2024-40984 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40984

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-12 13:15 修改: 2024-07-12 16:34
kernel-headers CVE-2024-41009 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: bpf: Fix overrunning reservations in ringbuf

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41009

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-17 07:15 修改: 2024-07-29 07:15
kernel-headers CVE-2024-41042 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: netfilter: nf_tables: prefer nft_chain_validate

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41042

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-29 15:15 修改: 2024-08-19 05:15
kernel-headers CVE-2024-41066 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: ibmvnic: Add tx check to prevent skb leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41066

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-29 15:15 修改: 2024-09-10 17:06
kernel-headers CVE-2024-41092 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: drm/i915/gt: Fix potential UAF by revoke of fence registers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41092

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-29 16:15 修改: 2024-08-08 17:51
kernel-headers CVE-2024-41093 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: drm/amdgpu: avoid using null object of framebuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41093

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-29 16:15 修改: 2024-08-08 17:40
kernel-headers CVE-2024-42070 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42070

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-29 16:15 修改: 2024-07-30 19:01
kernel-headers CVE-2024-42079 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42079

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-29 16:15 修改: 2024-07-30 18:58
kernel-headers CVE-2024-42244 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: USB: serial: mos7840: fix crash on resume

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42244

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-07 16:15 修改: 2024-08-08 14:53
kernel-headers CVE-2024-42284 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42284

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-17 09:15 修改: 2024-08-19 19:47
kernel-headers CVE-2024-42292 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: kobject_uevent: Fix OOB access within zap_modalias_env()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42292

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-17 09:15 修改: 2024-08-19 12:59
kernel-headers CVE-2024-42301 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: dev/parport: fix the array out-of-bounds risk

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-42301

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-17 09:15 修改: 2024-08-22 16:31
kernel-headers CVE-2024-43854 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: block: initialize integrity buffer to zero before writing it to media

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43854

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-17 10:15 修改: 2024-09-12 12:15
kernel-headers CVE-2024-43880 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: mlxsw: spectrum_acl_erp: Fix object nesting warning

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43880

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-21 01:15 修改: 2024-08-21 12:30
kernel-headers CVE-2024-43889 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: padata: Fix possible divide-by-0 panic in padata_mt_helper()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43889

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-26 11:15 修改: 2024-08-27 14:38
kernel-headers CVE-2024-43892 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: memcg: protect concurrent access to mem_cgroup_idr

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43892

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-26 11:15 修改: 2024-09-12 12:15
kernel-headers CVE-2024-44935 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: sctp: Fix null-ptr-deref in reuseport_add_sock().

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-44935

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-26 11:15 修改: 2024-08-27 16:09
kernel-headers CVE-2024-44989 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: bonding: fix xfrm real_dev null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-44989

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-04 20:15 修改: 2024-09-06 16:31
kernel-headers CVE-2024-44990 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: bonding: fix null pointer deref in bond_ipsec_offload_ok

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-44990

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-04 20:15 修改: 2024-09-06 16:31
kernel-headers CVE-2024-45018 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: netfilter: flowtable: initialise extack before use

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45018

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-11 16:15 修改: 2024-09-13 16:36
kernel-headers CVE-2024-46695 中危 4.18.0-553.16.1.el8_10 4.18.0-553.32.1.el8_10 kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46695

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-13 06:15 修改: 2024-10-17 14:15
kernel-headers CVE-2024-46826 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: ELF: fix kernel.randomize_va_space double read

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46826

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-27 13:15 修改: 2024-11-20 17:19
kernel-headers CVE-2024-46858 中危 4.18.0-553.16.1.el8_10 4.18.0-553.30.1.el8_10 kernel: mptcp: pm: Fix uaf in __timer_delete_sync

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46858

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-27 13:15 修改: 2024-12-27 13:15
kernel-headers CVE-2024-47668 中危 4.18.0-553.16.1.el8_10 4.18.0-553.27.1.el8_10 kernel: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47668

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-09 15:15 修改: 2024-10-23 15:30
kernel-headers CVE-2024-49949 中危 4.18.0-553.16.1.el8_10 4.18.0-553.32.1.el8_10 kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49949

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-21 18:15 修改: 2024-11-12 21:03
kernel-headers CVE-2024-50082 中危 4.18.0-553.16.1.el8_10 4.18.0-553.32.1.el8_10 kernel: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50082

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-29 01:15 修改: 2024-11-08 16:15
kernel-headers CVE-2024-50099 中危 4.18.0-553.16.1.el8_10 4.18.0-553.32.1.el8_10 kernel: arm64: probes: Remove broken LDR (literal) uprobe support

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50099

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-11-05 18:15 修改: 2024-11-12 16:28
kernel-headers CVE-2024-50110 中危 4.18.0-553.16.1.el8_10 4.18.0-553.32.1.el8_10 kernel: xfrm: fix one more kernel-infoleak in algo dumping

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50110

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-11-05 18:15 修改: 2024-11-08 21:05
kernel-headers CVE-2024-50142 中危 4.18.0-553.16.1.el8_10 4.18.0-553.32.1.el8_10 kernel: xfrm: validate new SA's prefixlen using SA family when sel.family is unset

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50142

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-11-07 10:15 修改: 2024-11-22 16:47
kernel-headers CVE-2024-50192 中危 4.18.0-553.16.1.el8_10 4.18.0-553.32.1.el8_10 kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50192

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-11-08 06:15 修改: 2024-11-29 19:00
kernel-headers CVE-2024-50256 中危 4.18.0-553.16.1.el8_10 4.18.0-553.32.1.el8_10 kernel: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50256

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-11-09 11:15 修改: 2024-11-14 18:11
kernel-headers CVE-2024-50264 中危 4.18.0-553.16.1.el8_10 4.18.0-553.32.1.el8_10 kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50264

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-11-19 02:16 修改: 2024-12-11 15:15
expat CVE-2023-52425 中危 2.2.5-11.el8 2.2.5-11.el8_9.1 expat: parsing large tokens can trigger a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-02-04 20:15 修改: 2024-08-26 20:35
less CVE-2022-48624 中危 530-1.el8 530-2.el8_9 less: missing quoting of shell metacharacters in LESSCLOSE handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48624

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-02-19 01:15 修改: 2024-06-10 18:15
expat CVE-2024-45490 中危 2.2.5-11.el8 2.2.5-15.el8_10 libexpat: Negative Length Parsing Vulnerability in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-30 03:15 修改: 2024-10-18 12:24
libcurl-minimal CVE-2023-28322 中危 7.61.1-33.el8 7.61.1-33.el8_9.5 curl: more POST-after-PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-05-26 21:15 修改: 2023-12-22 16:15
libcurl-minimal CVE-2023-46218 中危 7.61.1-33.el8 7.61.1-33.el8_9.5 curl: information disclosure by exploiting a mixed case flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-12-07 01:15 修改: 2024-01-25 14:15
expat CVE-2024-45491 中危 2.2.5-11.el8 2.2.5-15.el8_10 libexpat: Integer Overflow or Wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
expat CVE-2024-45492 中危 2.2.5-11.el8 2.2.5-15.el8_10 libexpat: integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
libxml2 CVE-2024-25062 中危 2.9.7-16.el8_8.1 2.9.7-18.el8_10.1 libxml2: use-after-free in XMLReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25062

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-02-04 16:15 修改: 2024-02-13 00:40
expat CVE-2024-50602 中危 2.2.5-11.el8 2.2.5-16.el8_10 libexpat: expat: DoS via XML_ResumeParser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-27 05:15 修改: 2024-10-30 18:35
gnutls CVE-2023-5981 中危 3.6.16-7.el8 3.6.16-8.el8_9 gnutls: timing side-channel in the RSA-PSK authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5981

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-11-28 12:15 修改: 2024-09-16 13:15
pam CVE-2024-22365 中危 1.3.1-27.el8 1.3.1-33.el8 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
platform-python CVE-2024-11168 中危 3.6.8-67.el8_10.rocky.0 3.6.8-69.el8_10.rocky.0 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-11-12 22:15 修改: 2024-12-03 21:15
platform-python CVE-2024-9287 中危 3.6.8-67.el8_10.rocky.0 3.6.8-69.el8_10.rocky.0 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
platform-python-devel CVE-2024-11168 中危 3.6.8-67.el8_10.rocky.0 3.6.8-69.el8_10.rocky.0 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-11-12 22:15 修改: 2024-12-03 21:15
platform-python-devel CVE-2024-9287 中危 3.6.8-67.el8_10.rocky.0 3.6.8-69.el8_10.rocky.0 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
gnutls CVE-2024-28834 中危 3.6.16-7.el8 3.6.16-8.el8_9.3 gnutls: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28834

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-03-21 14:15 修改: 2024-11-21 21:15
python3-libs CVE-2024-11168 中危 3.6.8-67.el8_10.rocky.0 3.6.8-69.el8_10.rocky.0 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-11-12 22:15 修改: 2024-12-03 21:15
python3-libs CVE-2024-9287 中危 3.6.8-67.el8_10.rocky.0 3.6.8-69.el8_10.rocky.0 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
curl CVE-2023-28322 中危 7.61.1-33.el8 7.61.1-33.el8_9.5 curl: more POST-after-PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-05-26 21:15 修改: 2023-12-22 16:15
curl CVE-2023-46218 中危 7.61.1-33.el8 7.61.1-33.el8_9.5 curl: information disclosure by exploiting a mixed case flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-12-07 01:15 修改: 2024-01-25 14:15
python3.11 CVE-2024-9287 中危 3.11.10-1.el8_10 3.11.11-1.el8_10 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
python3.11-libs CVE-2024-9287 中危 3.11.10-1.el8_10 3.11.11-1.el8_10 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15
sqlite-libs CVE-2023-7104 中危 3.26.0-18.el8_8 3.26.0-19.el8_9 sqlite: heap-buffer-overflow at sessionfuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-12-29 10:15 修改: 2024-05-17 02:34
krb5-libs CVE-2024-26458 低危 1.18.2-26.el8 1.18.2-27.el8_10 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-02-29 01:44 修改: 2024-12-06 21:15
openssl CVE-2024-5535 低危 1:1.1.1k-12.el8_9 1:1.1.1k-14.el8_10 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
openssl-libs CVE-2024-5535 低危 1:1.1.1k-12.el8_9 1:1.1.1k-14.el8_10 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
krb5-libs CVE-2024-26461 低危 1.18.2-26.el8 1.18.2-27.el8_10 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
binutils CVE-2018-12699 低危 2.30-123.el8 2.30-125.el8_10 binutils: heap-based buffer overflow in finish_stab in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12699

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2018-06-23 23:29 修改: 2019-08-03 13:15
bzip2-libs CVE-2019-12900 低危 1.0.6-26.el8 1.0.6-27.el8_10 bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2019-06-19 23:15 修改: 2023-11-07 03:03
Conda (conda-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Node.js (node-pkg)
低危漏洞:5 中危漏洞:7 高危漏洞:18 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
handlebars CVE-2019-19919 严重 1.0.0 4.3.0, 3.0.8 nodejs-handlebars: prototype pollution leading to remote code execution via crafted payloads

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19919

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2019-12-20 23:15 修改: 2022-06-03 18:48
handlebars CVE-2021-23369 严重 1.0.0 4.7.7 nodejs-handlebars: Remote code execution when compiling untrusted compile templates with strict:true option

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23369

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2021-04-12 14:15 修改: 2021-06-08 13:54
handlebars CVE-2021-23383 严重 1.0.0 4.7.7 nodejs-handlebars: Remote code execution when compiling untrusted compile templates with compat:true option

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23383

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2021-05-04 09:15 修改: 2021-12-03 19:59
diff GHSA-h6ch-v84p-w6p9 高危 1.0.0 3.5.0 Regular Expression Denial of Service (ReDoS)

漏洞详情: https://github.com/advisories/GHSA-h6ch-v84p-w6p9

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
grunt CVE-2020-7729 高危 1.0.0 1.3.0 The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execut ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7729

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2020-09-03 09:15 修改: 2022-11-16 14:05
grunt CVE-2022-1537 高危 1.0.0 1.5.3 gruntjs: race condition leading to arbitrary file write

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1537

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-05-10 14:15 修改: 2023-04-05 22:15
handlebars CVE-2019-20920 高危 1.0.0 3.0.8, 4.5.3 nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20920

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2020-09-30 18:15 修改: 2020-10-15 17:35
handlebars GHSA-2cf5-4w76-r9qv 高危 1.0.0 3.0.8, 4.5.2 Arbitrary Code Execution in handlebars

漏洞详情: https://github.com/advisories/GHSA-2cf5-4w76-r9qv

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
handlebars GHSA-g9r4-xpmj-mj65 高危 1.0.0 3.0.8, 4.5.3 Prototype Pollution in handlebars

漏洞详情: https://github.com/advisories/GHSA-g9r4-xpmj-mj65

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
handlebars GHSA-q2c6-c6pm-g3gh 高危 1.0.0 3.0.8, 4.5.3 Arbitrary Code Execution in handlebars

漏洞详情: https://github.com/advisories/GHSA-q2c6-c6pm-g3gh

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
handlebars GHSA-q42p-pg8m-cqh6 高危 1.0.0 4.1.2, 4.0.14, 3.0.7 Prototype Pollution in handlebars

漏洞详情: https://github.com/advisories/GHSA-q42p-pg8m-cqh6

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
ini CVE-2020-7788 高危 1.0.0 1.3.6 nodejs-ini: Prototype pollution via malicious INI file

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7788

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2020-12-11 11:15 修改: 2022-12-02 19:40
ip CVE-2024-29415 高危 1.1.9 node-ip: Incomplete fix for CVE-2023-42282

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29415

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-05-27 20:15 修改: 2024-08-16 14:35
ip CVE-2024-29415 高危 2.0.1 node-ip: Incomplete fix for CVE-2023-42282

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29415

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-05-27 20:15 修改: 2024-08-16 14:35
json CVE-2020-7712 高危 1.0.0 10.0.0 trentm/json vulnerable to command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7712

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2020-08-30 08:15 修改: 2023-11-07 03:26
npm CVE-2018-7408 高危 1.0.1 5.7.1 Incorrect Permission Assignment for Critical Resource in NPM

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7408

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2018-02-22 18:29 修改: 2019-10-03 00:03
npm CVE-2019-16775 高危 1.0.1 6.13.3 npm: Symlink reference outside of node_modules folder through the bin field upon installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16775

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2019-12-13 01:15 修改: 2023-11-07 03:05
npm CVE-2019-16776 高危 1.0.1 6.13.3 npm: Arbitrary file write via constructed entry in the package.json bin field

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16776

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2019-12-13 01:15 修改: 2023-11-07 03:05
npm CVE-2019-16777 高危 1.0.1 6.13.4 npm: Global node_modules Binary Overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16777

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2019-12-13 01:15 修改: 2023-11-07 03:05
path-to-regexp CVE-2024-45296 高危 3.2.0 1.9.0, 0.1.10, 8.0.0, 3.3.0, 6.3.0 path-to-regexp: Backtracking regular expressions cause ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45296

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-09 19:15 修改: 2024-09-10 12:09
pug CVE-2021-21353 高危 1.0.0 3.0.1 pug: user provided objects as input to pug templates can achieve remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21353

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2021-03-03 02:15 修改: 2021-03-09 15:35
grunt CVE-2022-0436 中危 1.0.0 1.5.2 Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2.

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0436

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-04-12 21:15 修改: 2023-04-06 15:15
micromatch CVE-2024-4067 中危 4.0.5 4.0.8 micromatch: vulnerable to Regular Expression Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4067

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-05-14 15:42 修改: 2024-08-28 00:15
npm CVE-2016-3956 中危 1.0.1 >= 2.15.1 <= 3.0.0, >= 3.8.3 npm: bearer token leak to non-registry hosts

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3956

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2016-07-02 14:59 修改: 2021-06-15 16:30
npm CVE-2020-15095 中危 1.0.1 6.14.6 npm: sensitive information exposure through logs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15095

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2020-07-07 19:15 修改: 2023-11-07 03:17
handlebars CVE-2015-8861 中危 1.0.0 >=4.0.0 The handlebars package before 4.0.0 for Node.js allows remote attacker ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8861

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2017-01-23 21:59 修改: 2020-04-22 12:54
handlebars NSWG-ECO-519 中危 1.0.0 >=4.6.0 Denial of Service

漏洞详情: https://hackerone.com/reports/726364

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
pug CVE-2024-36361 中危 1.0.0 3.0.3 Pug allows JavaScript code execution if an application accepts untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36361

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-05-24 06:15 修改: 2024-08-02 04:17
cookie CVE-2024-47764 低危 0.6.0 0.7.0 cookie: cookie accepts cookie name, path, and domain with out of bounds characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47764

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-04 20:15 修改: 2024-10-07 17:48
npm CVE-2013-4116 低危 1.0.1 >=1.3.3 npm: Insecure temporary directory generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4116

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2014-04-22 14:23 修改: 2020-10-14 13:21
markdown GHSA-wx77-rp39-c6vg 低危 1.0.0 Regular Expression Denial of Service in markdown

漏洞详情: https://github.com/advisories/GHSA-wx77-rp39-c6vg

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
cookie CVE-2024-47764 低危 0.4.0 0.7.0 cookie: cookie accepts cookie name, path, and domain with out of bounds characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47764

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-04 20:15 修改: 2024-10-07 17:48
cookie CVE-2024-47764 低危 0.4.1 0.7.0 cookie: cookie accepts cookie name, path, and domain with out of bounds characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47764

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-10-04 20:15 修改: 2024-10-07 17:48
Python (python-pkg)
低危漏洞:0 中危漏洞:2 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Jinja2 CVE-2024-56201 中危 3.1.4 3.1.5 jinja2: Jinja has a sandbox breakout through malicious filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56201

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-12-23 16:15 修改: 2024-12-24 02:15
Jinja2 CVE-2024-56326 中危 3.1.4 3.1.5 jinja2: Jinja has a sandbox breakout through indirect reference to format method

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56326

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-12-23 16:15 修改: 2024-12-27 18:15
opt/miniforge3/envs/moose/bin/git-lfs (gobinary)
低危漏洞:0 中危漏洞:14 高危漏洞:4 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2024-45337 严重 v0.0.0-20220411220226-7b82a4e95df4 0.31.0 golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45337

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-12-12 02:02 修改: 2024-12-12 21:15
stdlib CVE-2024-24790 严重 1.20.11 1.21.11, 1.22.4 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
golang.org/x/net CVE-2024-45338 高危 v0.7.0 0.33.0 golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45338

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-12-18 21:15 修改: 2024-12-31 20:16
golang.org/x/net CVE-2023-39325 高危 v0.7.0 0.17.0 golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib CVE-2023-45288 高危 1.20.11 1.21.9, 1.22.2 golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib CVE-2024-34156 高危 1.20.11 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net CVE-2023-45288 中危 v0.7.0 0.23.0 golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
golang.org/x/crypto CVE-2023-48795 中危 v0.0.0-20220411220226-7b82a4e95df4 0.17.0 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-12-18 16:15 修改: 2024-12-02 14:54
golang.org/x/net CVE-2023-3978 中危 v0.7.0 0.13.0 golang.org/x/net/html: Cross site scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3978

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-08-02 20:15 修改: 2023-11-07 04:20
golang.org/x/net CVE-2023-44487 中危 v0.7.0 0.17.0 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-10-10 14:15 修改: 2024-12-20 17:40
stdlib CVE-2023-39326 中危 1.20.11 1.20.12, 1.21.5 golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib CVE-2023-45289 中危 1.20.11 1.21.8, 1.22.1 golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib CVE-2023-45290 中危 1.20.11 1.21.8, 1.22.1 golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib CVE-2024-24783 中危 1.20.11 1.21.8, 1.22.1 golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib CVE-2024-24784 中危 1.20.11 1.21.8, 1.22.1 golang: net/mail: comments in display names are incorrectly handled

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib CVE-2024-24785 中危 1.20.11 1.21.8, 1.22.1 golang: html/template: errors returned from MarshalJSON methods may break template escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib CVE-2024-24789 中危 1.20.11 1.21.11, 1.22.4 golang: archive/zip: Incorrect handling of certain ZIP files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib CVE-2024-24791 中危 1.20.11 1.21.12, 1.22.5 net/http: Denial of service due to improper 100-continue handling in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib CVE-2024-34155 中危 1.20.11 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib CVE-2024-34158 中危 1.20.11 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
usr/local/bin/git-lfs (gobinary)
低危漏洞:1 中危漏洞:26 高危漏洞:36 严重漏洞:4
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/crypto CVE-2024-45337 严重 v0.0.0-20220411220226-7b82a4e95df4 0.31.0 golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45337

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-12-12 02:02 修改: 2024-12-12 21:15
stdlib CVE-2023-24538 严重 1.18.2 1.19.8, 1.20.3 golang: html/template: backticks not treated as string delimiters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-04-06 16:15 修改: 2023-11-25 11:15
stdlib CVE-2023-24540 严重 1.18.2 1.19.9, 1.20.4 golang: html/template: improper handling of JavaScript whitespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-05-11 16:15 修改: 2023-11-07 04:08
stdlib CVE-2024-24790 严重 1.18.2 1.21.11, 1.22.4 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
golang.org/x/net CVE-2024-45338 高危 v0.0.0-20211112202133-69e39bad7dc2 0.33.0 golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45338

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-12-18 21:15 修改: 2024-12-31 20:16
golang.org/x/text CVE-2022-32149 高危 v0.3.7 0.3.8 golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32149

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-10-14 15:15 修改: 2022-10-18 17:41
golang.org/x/net CVE-2022-27664 高危 v0.0.0-20211112202133-69e39bad7dc2 0.0.0-20220906165146-f3363e06e74c golang: net/http: handle server errors after sending GOAWAY

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-09-06 18:15 修改: 2023-11-07 03:45
golang.org/x/net CVE-2022-41723 高危 v0.0.0-20211112202133-69e39bad7dc2 0.7.0 golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-02-28 18:15 修改: 2023-11-25 11:15
golang.org/x/net CVE-2023-39325 高危 v0.0.0-20211112202133-69e39bad7dc2 0.17.0 golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib CVE-2022-27664 高危 1.18.2 1.18.6, 1.19.1 golang: net/http: handle server errors after sending GOAWAY

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-09-06 18:15 修改: 2023-11-07 03:45
stdlib CVE-2022-28131 高危 1.18.2 1.17.12, 1.18.4 golang: encoding/xml: stack exhaustion in Decoder.Skip

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:45
stdlib CVE-2022-2879 高危 1.18.2 1.18.7, 1.19.2 golang: archive/tar: unbounded memory consumption when reading headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-10-14 15:15 修改: 2023-11-25 11:15
stdlib CVE-2022-2880 高危 1.18.2 1.18.7, 1.19.2 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-10-14 15:15 修改: 2023-11-25 11:15
stdlib CVE-2022-29804 高危 1.18.2 1.17.11, 1.18.3 ELSA-2022-17957: ol8addon security update (IMPORTANT)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:46
stdlib CVE-2022-30580 高危 1.18.2 1.17.11, 1.18.3 golang: os/exec: Code injection in Cmd.Start

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib CVE-2022-30630 高危 1.18.2 1.17.12, 1.18.4 golang: io/fs: stack exhaustion in Glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib CVE-2022-30631 高危 1.18.2 1.17.12, 1.18.4 golang: compress/gzip: stack exhaustion in Reader.Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib CVE-2022-30632 高危 1.18.2 1.17.12, 1.18.4 golang: path/filepath: stack exhaustion in Glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib CVE-2022-30633 高危 1.18.2 1.17.12, 1.18.4 golang: encoding/xml: stack exhaustion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib CVE-2022-30634 高危 1.18.2 1.17.11, 1.18.3 ELSA-2022-17957: ol8addon security update (IMPORTANT)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-07-15 20:15 修改: 2023-11-07 03:47
stdlib CVE-2022-30635 高危 1.18.2 1.17.12, 1.18.4 golang: encoding/gob: stack exhaustion in Decoder.Decode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib CVE-2022-32189 高危 1.18.2 1.17.13, 1.18.5 golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-03-03 15:39
stdlib CVE-2022-41715 高危 1.18.2 1.18.7, 1.19.2 golang: regexp/syntax: limit memory used by parsing regexps

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-10-14 15:16 修改: 2023-11-25 11:15
stdlib CVE-2022-41716 高危 1.18.2 1.18.8, 1.19.3 Due to unsanitized NUL values, attackers may be able to maliciously se ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-11-02 16:15 修改: 2024-10-30 14:35
stdlib CVE-2022-41720 高危 1.18.2 1.18.9, 1.19.4 golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-12-07 17:15 修改: 2022-12-12 14:58
stdlib CVE-2022-41722 高危 1.18.2 1.19.6, 1.20.1 golang: path/filepath: path-filepath filepath.Clean path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-02-28 18:15 修改: 2023-11-07 03:52
stdlib CVE-2022-41723 高危 1.18.2 1.19.6, 1.20.1 golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-02-28 18:15 修改: 2023-11-25 11:15
stdlib CVE-2022-41724 高危 1.18.2 1.19.6, 1.20.1 golang: crypto/tls: large handshake records may cause panics

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-02-28 18:15 修改: 2023-11-25 11:15
stdlib CVE-2022-41725 高危 1.18.2 1.19.6, 1.20.1 golang: net/http, mime/multipart: denial of service from excessive resource consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-02-28 18:15 修改: 2023-11-25 11:15
stdlib CVE-2023-24534 高危 1.18.2 1.19.8, 1.20.3 golang: net/http, net/textproto: denial of service from excessive memory allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-04-06 16:15 修改: 2023-11-25 11:15
stdlib CVE-2023-24536 高危 1.18.2 1.19.8, 1.20.3 golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-04-06 16:15 修改: 2023-11-25 11:15
stdlib CVE-2023-24537 高危 1.18.2 1.19.8, 1.20.3 golang: go/parser: Infinite loop in parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-04-06 16:15 修改: 2024-11-29 12:15
stdlib CVE-2023-24539 高危 1.18.2 1.19.9, 1.20.4 golang: html/template: improper sanitization of CSS values

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-05-11 16:15 修改: 2024-11-29 12:15
stdlib CVE-2023-29400 高危 1.18.2 1.19.9, 1.20.4 golang: html/template: improper handling of empty HTML attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-05-11 16:15 修改: 2024-12-13 14:15
stdlib CVE-2023-29403 高危 1.18.2 1.19.10, 1.20.5 golang: runtime: unexpected behavior of setuid/setgid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-06-08 21:15 修改: 2024-12-20 13:15
stdlib CVE-2023-39325 高危 1.18.2 1.20.10, 1.21.3 golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib CVE-2023-45283 高危 1.18.2 1.20.11, 1.21.4, 1.20.12, 1.21.5 The filepath package does not recognize paths with a \??\ prefix as sp ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib CVE-2023-45287 高危 1.18.2 1.20.0 golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges.

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-12-05 17:15 修改: 2024-01-12 14:15
stdlib CVE-2023-45288 高危 1.18.2 1.21.9, 1.22.2 golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib CVE-2024-34156 高危 1.18.2 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/sys CVE-2022-29526 中危 v0.0.0-20210615035016-665e8c7367d1 0.0.0-20220412211240-33da011f77ad golang: syscall: faccessat checks wrong group

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-06-23 17:15 修改: 2023-11-07 03:46
golang.org/x/crypto CVE-2023-48795 中危 v0.0.0-20220411220226-7b82a4e95df4 0.17.0 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-12-18 16:15 修改: 2024-12-02 14:54
golang.org/x/net CVE-2022-41717 中危 v0.0.0-20211112202133-69e39bad7dc2 0.4.0 golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-12-08 20:15 修改: 2024-01-18 03:15
golang.org/x/net CVE-2023-3978 中危 v0.0.0-20211112202133-69e39bad7dc2 0.13.0 golang.org/x/net/html: Cross site scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3978

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-08-02 20:15 修改: 2023-11-07 04:20
golang.org/x/net CVE-2023-44487 中危 v0.0.0-20211112202133-69e39bad7dc2 0.17.0 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-10-10 14:15 修改: 2024-12-20 17:40
golang.org/x/net CVE-2023-45288 中危 v0.0.0-20211112202133-69e39bad7dc2 0.23.0 golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib CVE-2022-1705 中危 1.18.2 1.17.12, 1.18.4 golang: net/http: improper sanitization of Transfer-Encoding header

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:42
stdlib CVE-2022-1962 中危 1.18.2 1.17.12, 1.18.4 golang: go/parser: stack exhaustion in all Parse* functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:42
stdlib CVE-2022-32148 中危 1.18.2 1.17.12, 1.18.4 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib CVE-2022-41717 中危 1.18.2 1.18.9, 1.19.4 golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-12-08 20:15 修改: 2024-01-18 03:15
stdlib CVE-2023-24532 中危 1.18.2 1.19.7, 1.20.2 golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-03-08 20:15 修改: 2023-11-07 04:08
stdlib CVE-2023-29406 中危 1.18.2 1.19.11, 1.20.6 golang: net/http: insufficient sanitization of Host header

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-07-11 20:15 修改: 2023-11-25 11:15
stdlib CVE-2023-29409 中危 1.18.2 1.19.12, 1.20.7, 1.21.0-rc.4 golang: crypto/tls: slow verification of certificate chains containing large RSA keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-08-02 20:15 修改: 2023-11-25 11:15
stdlib CVE-2023-39318 中危 1.18.2 1.20.8, 1.21.1 golang: html/template: improper handling of HTML-like comments within script contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib CVE-2023-39319 中危 1.18.2 1.20.8, 1.21.1 golang: html/template: improper handling of special tags within script contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib CVE-2023-39326 中危 1.18.2 1.20.12, 1.21.5 golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib CVE-2023-45284 中危 1.18.2 1.20.11, 1.21.4 On Windows, The IsLocal function does not correctly detect reserved de ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib CVE-2023-45289 中危 1.18.2 1.21.8, 1.22.1 golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib CVE-2023-45290 中危 1.18.2 1.21.8, 1.22.1 golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib CVE-2024-24783 中危 1.18.2 1.21.8, 1.22.1 golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib CVE-2024-24784 中危 1.18.2 1.21.8, 1.22.1 golang: net/mail: comments in display names are incorrectly handled

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib CVE-2024-24785 中危 1.18.2 1.21.8, 1.22.1 golang: html/template: errors returned from MarshalJSON methods may break template escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib CVE-2024-24789 中危 1.18.2 1.21.11, 1.22.4 golang: archive/zip: Incorrect handling of certain ZIP files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib CVE-2024-24791 中危 1.18.2 1.21.12, 1.22.5 net/http: Denial of service due to improper 100-continue handling in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib CVE-2024-34155 中危 1.18.2 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib CVE-2024-34158 中危 1.18.2 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
stdlib CVE-2022-30629 低危 1.18.2 1.17.11, 1.18.3 golang: crypto/tls: session tickets lack random ticket_age_add

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629

镜像层: sha256:4fc62b090abd2f7a5f84480ef04f4d1a6c0cf09986fcb13acb1b7124ae8d6490

发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
/opt/miniforge3/envs/moose/lib/python3.11/site-packages/skimage/data/_fetchers.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/etc/pki/tls/private/postfix.key ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息