docker.io/infiniflow/ragflow:v0.27.1 linux/amd64

docker.io/infiniflow/ragflow:v0.27.1 - Trivy安全扫描结果 扫描时间: 2026-09-08 18:48
全部漏洞信息
低危漏洞:129 中危漏洞:261 高危漏洞:36 严重漏洞:2

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-08 18:48

docker.io/infiniflow/ragflow:v0.27.1 (ubuntu 24.04) (ubuntu)
低危漏洞:122 中危漏洞:212 高危漏洞:7 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libssl1.1 CVE-2021-3449 高危 1.1.1f-1ubuntu2 1.1.1j-1ubuntu3 openssl: NULL pointer dereference in signature_algorithms processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05

libssl1.1 CVE-2021-3711 高危 1.1.1f-1ubuntu2 1.1.1l-1ubuntu1 openssl: SM2 Decryption Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

libssl1.1 CVE-2022-0778 高危 1.1.1f-1ubuntu2 3.0.2-0ubuntu1 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21

libssl1.1 CVE-2022-3602 高危 1.1.1f-1ubuntu2 3.0.5-2ubuntu2 OpenSSL: X.509 Email Address Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3602

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2022-11-01 18:15 修改: 2026-06-17 04:59

libssl1.1 CVE-2022-3786 高危 1.1.1f-1ubuntu2 3.0.5-2ubuntu2 OpenSSL: X.509 Email Address Variable Length Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3786

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2022-11-01 18:15 修改: 2026-06-17 05:00

libssl1.1 CVE-2023-0286 高危 1.1.1f-1ubuntu2 3.0.8-1ubuntu1 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2026-45447 高危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.11 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-06-09 17:17 修改: 2026-09-07 13:20

git CVE-2024-52005 中危 1:2.43.0-1ubuntu7.3 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06

git-man CVE-2024-52005 中危 1:2.43.0-1ubuntu7.3 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06

libattr1 CVE-2026-54371 中危 1:2.5.2-1build1.1 1:2.5.2-1ubuntu0.1 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 14:16 修改: 2026-09-02 13:18

libavahi-client3 CVE-2025-59529 中危 0.8-13ubuntu6.2 avahi: simple clients denial-of-service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46

libavahi-common-data CVE-2025-59529 中危 0.8-13ubuntu6.2 avahi: simple clients denial-of-service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46

libavahi-common3 CVE-2025-59529 中危 0.8-13ubuntu6.2 avahi: simple clients denial-of-service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46

libblkid1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

libblkid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libblkid1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libblkid1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libblkid1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libblkid1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libc-bin CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

libc6 CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

libdevmapper1.02.1 CVE-2026-19617 中危 2:1.02.185-3ubuntu3.2 libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19617

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-14 06:17 修改: 2026-09-01 13:18

libexpat1 CVE-2025-59375 中危 2.6.1-2ubuntu0.4 firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46

libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56

libexpat1 CVE-2026-32776 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-32777 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-32778 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-41080 中危 2.6.1-2ubuntu0.4 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18

libexpat1 CVE-2026-45186 中危 2.6.1-2ubuntu0.4 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-10 07:16 修改: 2026-08-25 13:19

libexpat1 CVE-2026-50219 中危 2.6.1-2ubuntu0.4 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10

libexpat1 CVE-2026-56131 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56132 中危 2.6.1-2ubuntu0.4 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56403 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56404 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56405 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14

libexpat1 CVE-2026-56406 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29

libexpat1 CVE-2026-56407 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28

libexpat1 CVE-2026-56408 中危 2.6.1-2ubuntu0.4 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27

libexpat1 CVE-2026-56409 中危 2.6.1-2ubuntu0.4 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21

libexpat1 CVE-2026-56410 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18

libexpat1 CVE-2026-56411 中危 2.6.1-2ubuntu0.4 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16

libexpat1 CVE-2026-56412 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31

libexpat1 CVE-2026-66046 中危 2.6.1-2ubuntu0.4 Expat through 2.8.3 contains a denial of service vulnerability caused ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-18 15:16 修改: 2026-08-20 16:17

libexpat1 CVE-2026-72522 中危 2.6.1-2ubuntu0.4 expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-10 04:16 修改: 2026-08-31 19:33

libexpat1 CVE-2026-76641 中危 2.6.1-2ubuntu0.4 CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17

libexpat1 CVE-2026-76957 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-20 05:16 修改: 2026-09-03 17:37

libfdisk1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

libfdisk1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libfdisk1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libfdisk1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libfdisk1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libfdisk1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libglib2.0-0t64 CVE-2026-15588 中危 2.80.0-6ubuntu3.8 GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15588

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-20 12:17 修改: 2026-09-01 13:18

libglib2.0-0t64 CVE-2026-16118 中危 2.80.0-6ubuntu3.8 xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16118

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-17 20:17 修改: 2026-09-03 13:04

libglib2.0-0t64 CVE-2026-58010 中危 2.80.0-6ubuntu3.8 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58010

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-30 13:19 修改: 2026-09-01 03:16

libglib2.0-0t64 CVE-2026-58011 中危 2.80.0-6ubuntu3.8 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58011

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-30 13:19 修改: 2026-09-01 03:16

libglib2.0-0t64 CVE-2026-58012 中危 2.80.0-6ubuntu3.8 glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58012

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-30 13:19 修改: 2026-09-01 03:16

libglib2.0-0t64 CVE-2026-58013 中危 2.80.0-6ubuntu3.8 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58013

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-30 13:19 修改: 2026-09-01 03:16

libglib2.0-0t64 CVE-2026-58014 中危 2.80.0-6ubuntu3.8 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58014

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-30 13:19 修改: 2026-09-01 03:16

libglib2.0-0t64 CVE-2026-58015 中危 2.80.0-6ubuntu3.8 glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58015

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-30 13:19 修改: 2026-09-01 03:16

libglib2.0-0t64 CVE-2026-58016 中危 2.80.0-6ubuntu3.8 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18

libmount1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

libmount1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libmount1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libmount1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libmount1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libmount1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libopenjp2-7 CVE-2023-39328 中危 2.5.0-2ubuntu0.5 openjpeg: denail of service via crafted image file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39328

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2024-07-09 14:15 修改: 2026-06-26 10:16

libopenjp2-7 CVE-2023-39329 中危 2.5.0-2ubuntu0.5 openjpeg: Resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39329

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2024-07-13 03:15 修改: 2026-06-17 06:12

libp11-kit0 CVE-2026-13757 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18

libp11-kit0 CVE-2026-18938 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07

libperl5.38t64 CVE-2025-15649 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

libperl5.38t64 CVE-2026-12087 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14

libperl5.38t64 CVE-2026-13221 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15

libperl5.38t64 CVE-2026-48959 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

libperl5.38t64 CVE-2026-48962 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23

libperl5.38t64 CVE-2026-57432 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04

libperl5.38t64 CVE-2026-57433 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

libperl5.38t64 CVE-2026-7017 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

libperl5.38t64 CVE-2026-9538 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10

libpixman-1-0 CVE-2023-37769 中危 0.42.2-1build1 stress-test master commit e4c878 was discovered to contain a FPE vulne ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37769

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2023-07-17 20:15 修改: 2026-06-17 06:08

libsmartcols1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

libsmartcols1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libsmartcols1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libsmartcols1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libsmartcols1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libsmartcols1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libsqlite3-0 CVE-2026-39113 中危 3.45.1-1ubuntu2.7 Buffer Overflow vulnerability in SQLite affected version source snapsh ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39113

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-25 21:17 修改: 2026-08-31 16:17

libssh-4 CVE-2026-59843 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: denial of service via zero advertised channel packet size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59843

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 12:18 修改: 2026-09-01 21:18

libssh-4 CVE-2026-59845 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: denial of service via unchecked ProxyCommand fork() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59845

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 12:18 修改: 2026-09-01 21:18

libssh-4 CVE-2026-59846 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: information disclosure via ProxyCommand %r username expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59846

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 13:17 修改: 2026-09-01 21:18

libssh-4 CVE-2026-59847 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59847

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 14:16 修改: 2026-09-04 19:23

libssh-4 CVE-2026-59848 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: denial of service via SFTP responses with unknown request IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59848

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 14:16 修改: 2026-09-01 21:18

libssh-4 CVE-2026-59850 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: use-after-free via data callbacks on closed channels

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59850

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 15:16 修改: 2026-09-01 21:18

bsdutils CVE-2026-13595 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

bsdutils CVE-2026-27456 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

bsdutils CVE-2026-53612 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

bsdutils CVE-2026-53613 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

bsdutils CVE-2026-53614 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

bsdutils CVE-2026-53615 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

diffutils CVE-2026-53910 中危 1:3.10-1build1 1:3.10-1ubuntu0.1 diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16

libssl1.1 CVE-2021-3712 中危 1.1.1f-1ubuntu2 1.1.1l-1ubuntu1 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

libssl1.1 CVE-2022-1292 中危 1.1.1f-1ubuntu2 3.0.2-0ubuntu2 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

libssl1.1 CVE-2022-1343 中危 1.1.1f-1ubuntu2 3.0.2-0ubuntu2 openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1343

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

libssl1.1 CVE-2022-2097 中危 1.1.1f-1ubuntu2 3.0.5-2ubuntu1 openssl: AES OCB fails to encrypt some bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41

libssl1.1 CVE-2022-4304 中危 1.1.1f-1ubuntu2 3.0.8-1ubuntu1 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

libssl1.1 CVE-2022-4450 中危 1.1.1f-1ubuntu2 3.0.8-1ubuntu1 openssl: double free after calling PEM_read_bio_ex

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20

libssl1.1 CVE-2023-0215 中危 1.1.1f-1ubuntu2 3.0.8-1ubuntu1 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-2650 中危 1.1.1f-1ubuntu2 3.0.8-1ubuntu3 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53

libssl1.1 CVE-2023-5363 中危 1.1.1f-1ubuntu2 3.0.10-1ubuntu2.1 openssl: Incorrect cipher key and IV length processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5363

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2023-10-25 18:17 修改: 2026-06-17 06:48

libssl1.1 CVE-2024-6119 中危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.4 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2024-09-03 16:15 修改: 2026-06-17 08:17

libssl1.1 CVE-2025-15467 中危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.7 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17

libssl1.1 CVE-2025-9230 中危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.6 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18

libssl1.1 CVE-2026-31790 中危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.9 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl1.1 CVE-2026-34182 中危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.11 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl1.1 CVE-2026-45445 中危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.11 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl1.1 CVE-2026-63072 中危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libssl1.1 CVE-2026-63076 中危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libssl3t64 CVE-2026-63072 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libssl3t64 CVE-2026-63076 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libuuid1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

libuuid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libuuid1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libuuid1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libuuid1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libuuid1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

mount CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

mount CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

mount CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

mount CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

mount CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

mount CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

nginx CVE-2026-42533 中危 1.31.3-1~noble nginx: NGINX: Arbitrary code execution via crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42533

镜像层: sha256:57f178f64ef6427c46001a708ada4d774736ba6556b468c9ad409b9c4ff9af9f

发布日期: 2026-07-15 15:16 修改: 2026-08-10 15:28

nodejs CVE-2024-22018 中危 22.23.2-1nodesource1 nodejs: fs.lstat bypasses permission model

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22018

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2024-07-10 02:15 修改: 2026-06-17 07:10

nodejs CVE-2024-22020 中危 22.23.2-1nodesource1 nodejs: Bypass network import restriction via data URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22020

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2024-07-09 02:15 修改: 2026-06-17 07:10

nodejs CVE-2024-27982 中危 22.23.2-1nodesource1 nodejs: HTTP Request Smuggling via Content Length Obfuscation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27982

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2024-05-07 17:15 修改: 2026-06-17 07:20

nodejs CVE-2024-27983 中危 22.23.2-1nodesource1 nodejs: CONTINUATION frames DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27983

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2024-04-09 01:15 修改: 2026-06-17 07:20

nodejs CVE-2025-23085 中危 22.23.2-1nodesource1 nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-23085

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2025-02-07 07:15 修改: 2026-06-17 08:51

nodejs CVE-2025-23166 中危 22.23.2-1nodesource1 nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-23166

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2025-05-19 02:15 修改: 2026-06-17 08:52

openjdk-21-jdk CVE-2026-46917 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46917

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55

openjdk-21-jdk CVE-2026-46968 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46968

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:27

openjdk-21-jdk CVE-2026-47010 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance JPEG handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47010

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:13

openjdk-21-jdk CVE-2026-47021 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance XBM image support (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47021

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-12 20:17

openjdk-21-jdk CVE-2026-47027 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47027

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55

openjdk-21-jdk CVE-2026-47059 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47059

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:51

openjdk-21-jdk CVE-2026-47063 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance Jar handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47063

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:50

openjdk-21-jdk CVE-2026-60147 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Improve certification checking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60147

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:49

openjdk-21-jdk-headless CVE-2026-46917 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46917

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55

openjdk-21-jdk-headless CVE-2026-46968 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46968

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:27

openjdk-21-jdk-headless CVE-2026-47010 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance JPEG handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47010

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:13

openjdk-21-jdk-headless CVE-2026-47021 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance XBM image support (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47021

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-12 20:17

openjdk-21-jdk-headless CVE-2026-47027 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47027

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55

openjdk-21-jdk-headless CVE-2026-47059 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47059

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:51

openjdk-21-jdk-headless CVE-2026-47063 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance Jar handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47063

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:50

openjdk-21-jdk-headless CVE-2026-60147 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Improve certification checking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60147

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:49

openjdk-21-jre CVE-2026-46917 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46917

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55

openjdk-21-jre CVE-2026-46968 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46968

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:27

openjdk-21-jre CVE-2026-47010 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance JPEG handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47010

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:13

openjdk-21-jre CVE-2026-47021 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance XBM image support (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47021

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-12 20:17

openjdk-21-jre CVE-2026-47027 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47027

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55

openjdk-21-jre CVE-2026-47059 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47059

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:51

openjdk-21-jre CVE-2026-47063 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance Jar handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47063

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:50

openjdk-21-jre CVE-2026-60147 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Improve certification checking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60147

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:49

openjdk-21-jre-headless CVE-2026-46917 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46917

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55

openjdk-21-jre-headless CVE-2026-46968 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46968

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:27

openjdk-21-jre-headless CVE-2026-47010 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance JPEG handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47010

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:13

openjdk-21-jre-headless CVE-2026-47021 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance XBM image support (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47021

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-12 20:17

openjdk-21-jre-headless CVE-2026-47027 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47027

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55

openjdk-21-jre-headless CVE-2026-47059 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47059

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:51

openjdk-21-jre-headless CVE-2026-47063 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Enhance Jar handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47063

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:50

openjdk-21-jre-headless CVE-2026-60147 中危 21.0.11+10-1~24.04.2 21.0.12+8-1~24.04 openjdk: Improve certification checking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60147

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:49

openssl CVE-2026-63072 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

openssl CVE-2026-63076 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

perl CVE-2025-15649 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl CVE-2026-12087 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14

perl CVE-2026-13221 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15

perl CVE-2026-48959 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl CVE-2026-48962 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23

perl CVE-2026-57432 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04

perl CVE-2026-57433 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

perl CVE-2026-7017 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

perl CVE-2026-9538 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10

perl-base CVE-2025-15649 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-base CVE-2026-12087 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14

perl-base CVE-2026-13221 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15

perl-base CVE-2026-48959 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-base CVE-2026-48962 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23

perl-base CVE-2026-57432 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04

perl-base CVE-2026-57433 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

perl-base CVE-2026-7017 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

perl-base CVE-2026-9538 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10

perl-modules-5.38 CVE-2025-15649 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-modules-5.38 CVE-2026-12087 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14

perl-modules-5.38 CVE-2026-13221 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15

perl-modules-5.38 CVE-2026-48959 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-modules-5.38 CVE-2026-48962 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23

perl-modules-5.38 CVE-2026-57432 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04

perl-modules-5.38 CVE-2026-57433 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

perl-modules-5.38 CVE-2026-7017 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

perl-modules-5.38 CVE-2026-9538 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10

tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-03 17:16 修改: 2026-09-01 15:17

tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-03 16:16 修改: 2026-09-01 15:17

util-linux CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

util-linux CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

util-linux CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

util-linux CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

util-linux CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

util-linux CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

vim CVE-2026-51400 中危 2:9.1.0016-1ubuntu7.19 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51400

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:38

vim CVE-2026-51401 中危 2:9.1.0016-1ubuntu7.19 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51401

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:33

vim CVE-2026-73073 中危 2:9.1.0016-1ubuntu7.19 2:9.1.0016-1ubuntu7.20 Vim is an open source, command line text editor. Prior to 9.2.0845, St ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73073

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-18 16:18 修改: 2026-08-18 16:18

vim-common CVE-2026-51400 中危 2:9.1.0016-1ubuntu7.19 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51400

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:38

vim-common CVE-2026-51401 中危 2:9.1.0016-1ubuntu7.19 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51401

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:33

vim-common CVE-2026-73073 中危 2:9.1.0016-1ubuntu7.19 2:9.1.0016-1ubuntu7.20 Vim is an open source, command line text editor. Prior to 9.2.0845, St ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73073

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-18 16:18 修改: 2026-08-18 16:18

vim-runtime CVE-2026-51400 中危 2:9.1.0016-1ubuntu7.19 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51400

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:38

vim-runtime CVE-2026-51401 中危 2:9.1.0016-1ubuntu7.19 vim: Vim: Arbitrary code execution via vms_fixfilename() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-51401

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-04 21:16 修改: 2026-09-04 13:33

vim-runtime CVE-2026-73073 中危 2:9.1.0016-1ubuntu7.19 2:9.1.0016-1ubuntu7.20 Vim is an open source, command line text editor. Prior to 9.2.0845, St ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73073

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-18 16:18 修改: 2026-08-18 16:18

wget CVE-2021-31879 中危 1.21.4-1ubuntu4.5 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52

xdg-utils CVE-2025-52968 中危 1.1.3-4.1ubuntu3 xdg-utils: xdg-open bypassing SameSite=Strict

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52968

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2025-06-23 15:15 修改: 2026-06-17 09:37

libptexenc1 CVE-2019-9587 低危 2023.20230311.66589-9build3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9587

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-03-06 08:29 修改: 2026-06-17 02:43

libptexenc1 CVE-2019-9588 低危 2023.20230311.66589-9build3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9588

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-03-06 08:29 修改: 2026-06-17 02:43

coreutils CVE-2025-5278 低危 9.4-3ubuntu6.2 9.4-3ubuntu6.3 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2025-05-27 21:15 修改: 2026-09-06 22:17

libavahi-common-data CVE-2024-52615 低危 0.8-13ubuntu6.2 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libavahi-common-data CVE-2024-52616 低危 0.8-13ubuntu6.2 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libzzip-0-13t64 CVE-2018-17828 低危 0.13.72+dfsg.1-1.2build1 zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17828

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2018-10-01 08:29 修改: 2026-06-17 01:46

login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

gnupg CVE-2026-57062 低危 2.4.4-2ubuntu17.4 2.4.4-2ubuntu17.6 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

libavahi-common3 CVE-2024-52615 低危 0.8-13ubuntu6.2 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libavahi-common3 CVE-2024-52616 低危 0.8-13ubuntu6.2 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

gnupg-utils CVE-2026-57062 低危 2.4.4-2ubuntu17.4 2.4.4-2ubuntu17.6 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

gpg CVE-2026-57062 低危 2.4.4-2ubuntu17.4 2.4.4-2ubuntu17.6 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

gpg-agent CVE-2026-57062 低危 2.4.4-2ubuntu17.4 2.4.4-2ubuntu17.6 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

ncurses-base CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

ncurses-bin CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

libharfbuzz0b CVE-2026-22693 低危 8.3.0-2build2 harfbuzz: Null Pointer Dereference in harfbuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22693

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-01-10 06:15 修改: 2026-06-17 10:20

libicu74 CVE-2025-5222 低危 74.2-1ubuntu3.1 icu: Stack buffer overflow in the SRBRoot::addTag function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2025-05-27 21:15 修改: 2026-09-03 15:17

libkpathsea6 CVE-2019-12360 低危 2023.20230311.66589-9build3 xpdf: buffer over-read via crafted PDF document leads to DoS or memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12360

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-05-27 23:29 修改: 2026-06-17 02:14

libkpathsea6 CVE-2019-12493 低危 2023.20230311.66589-9build3 A stack-based buffer over-read exists in PostScriptFunction::transform ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12493

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-05-31 02:29 修改: 2026-06-17 02:14

libkpathsea6 CVE-2019-9587 低危 2023.20230311.66589-9build3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9587

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-03-06 08:29 修改: 2026-06-17 02:43

libkpathsea6 CVE-2019-9588 低危 2023.20230311.66589-9build3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9588

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-03-06 08:29 修改: 2026-06-17 02:43

gpgconf CVE-2026-57062 低危 2.4.4-2ubuntu17.4 2.4.4-2ubuntu17.6 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

gpgsm CVE-2026-57062 低危 2.4.4-2ubuntu17.4 2.4.4-2ubuntu17.6 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

gpgv CVE-2026-57062 低危 2.4.4-2ubuntu17.4 2.4.4-2ubuntu17.6 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

libbz2-1.0 CVE-2026-42250 低危 1.0.8-5.1build0.1 1.0.8-5.1ubuntu0.1 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47

keyboxd CVE-2026-57062 低危 2.4.4-2ubuntu17.4 2.4.4-2ubuntu17.6 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

dirmngr CVE-2026-57062 低危 2.4.4-2ubuntu17.4 2.4.4-2ubuntu17.6 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

libncursesw6 CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

libcairo-gobject2 CVE-2017-7475 低危 1.18.0-3build1 cairo: NULL pointer dereference with a crafted font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24

libcairo-gobject2 CVE-2018-18064 低危 1.18.0-3build1 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46

libopenjp2-7 CVE-2019-6988 低危 2.5.0-2ubuntu0.5 openjpeg: DoS via memory exhaustion in opj_decompress

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6988

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-01-28 16:29 修改: 2026-06-17 02:39

libcairo-script-interpreter2 CVE-2017-7475 低危 1.18.0-3build1 cairo: NULL pointer dereference with a crafted font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24

libcairo-script-interpreter2 CVE-2018-18064 低危 1.18.0-3build1 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46

libpam-systemd CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libcairo2 CVE-2017-7475 低危 1.18.0-3build1 cairo: NULL pointer dereference with a crafted font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24

libcairo2 CVE-2018-18064 低危 1.18.0-3build1 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46

libcurl3t64-gnutls CVE-2026-8932 低危 8.5.0-2ubuntu10.12 8.5.0-2ubuntu10.13 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18

libcurl4t64 CVE-2026-8932 低危 8.5.0-2ubuntu10.12 8.5.0-2ubuntu10.13 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18

curl CVE-2026-8932 低危 8.5.0-2ubuntu10.12 8.5.0-2ubuntu10.13 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18

libelf1t64 CVE-2025-1352 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38

libelf1t64 CVE-2025-1376 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39

libavahi-client3 CVE-2024-52615 低危 0.8-13ubuntu6.2 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libavahi-client3 CVE-2024-52616 低危 0.8-13ubuntu6.2 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libssl1.1 CVE-2021-23840 低危 1.1.1f-1ubuntu2 1.1.1j-1ubuntu1 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

libssl1.1 CVE-2022-1434 低危 1.1.1f-1ubuntu2 3.0.2-0ubuntu2 openssl: Incorrect MAC key used in the RC4-MD5 ciphersuite

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1434

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

libssl1.1 CVE-2022-1473 低危 1.1.1f-1ubuntu2 3.0.2-0ubuntu2 openssl: OPENSSL_LH_flush() breaks reuse of memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1473

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

libssl1.1 CVE-2022-3358 低危 1.1.1f-1ubuntu2 3.0.5-2ubuntu2 openssl: Using a Custom Cipher with NID_undef may lead to NULL encryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3358

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2022-10-11 15:15 修改: 2026-06-17 04:59

libssl1.1 CVE-2022-3996 低危 1.1.1f-1ubuntu2 3.0.7-1ubuntu1 openssl: double locking leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3996

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2022-12-13 16:15 修改: 2026-06-17 05:00

libssl1.1 CVE-2023-0464 低危 1.1.1f-1ubuntu2 3.0.8-1ubuntu2 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-0465 低危 1.1.1f-1ubuntu2 3.0.8-1ubuntu2 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-0466 低危 1.1.1f-1ubuntu2 3.0.8-1ubuntu2 openssl: Certificate policy check not enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

libssl1.1 CVE-2023-1255 低危 1.1.1f-1ubuntu2 3.0.8-1ubuntu3 openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1255

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2023-04-20 17:15 修改: 2026-06-17 05:27

libssl1.1 CVE-2023-5678 低危 1.1.1f-1ubuntu2 3.0.10-1ubuntu4 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49

libssl1.1 CVE-2023-6129 低危 1.1.1f-1ubuntu2 3.0.10-1ubuntu4 openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2024-01-09 17:15 修改: 2026-06-17 06:50

libssl1.1 CVE-2023-6237 低危 1.1.1f-1ubuntu2 3.0.10-1ubuntu4 openssl: Excessive time spent checking invalid RSA public keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6237

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2024-04-25 07:15 修改: 2026-06-17 06:50

libssl1.1 CVE-2024-0727 低危 1.1.1f-1ubuntu2 3.0.10-1ubuntu4 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54

openssl CVE-2026-54874 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

openssl CVE-2026-63074 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

openssl CVE-2026-75803 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17

passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

libssl1.1 CVE-2024-13176 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.5 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01

libssl1.1 CVE-2024-2511 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.2 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24

libssl1.1 CVE-2024-4603 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.2 openssl: Excessive time spent checking DSA keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2024-05-16 16:15 修改: 2026-06-17 08:02

libssl1.1 CVE-2024-4741 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.2 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02

libssl1.1 CVE-2024-5535 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.2 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16

libssl1.1 CVE-2024-9143 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.5 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24

libssl1.1 CVE-2025-68160 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58

libssl1.1 CVE-2025-69418 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.7 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl1.1 CVE-2025-69419 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.7 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl1.1 CVE-2025-69420 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl1.1 CVE-2025-69421 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl1.1 CVE-2026-22795 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

libssl1.1 CVE-2026-22796 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

libssl1.1 CVE-2026-28387 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.9 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl1.1 CVE-2026-28388 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl1.1 CVE-2026-28389 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl1.1 CVE-2026-28390 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl1.1 CVE-2026-31789 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.9 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl1.1 CVE-2026-34180 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl1.1 CVE-2026-42766 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.11 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl1.1 CVE-2026-42767 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.11 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl1.1 CVE-2026-42770 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.11 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl1.1 CVE-2026-45446 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.11 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl1.1 CVE-2026-54874 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libssl1.1 CVE-2026-63074 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libssl1.1 CVE-2026-7383 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl1.1 CVE-2026-75803 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.15 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17

systemd CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-dev CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-sysv CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libssl1.1 CVE-2026-9076 低危 1.1.1f-1ubuntu2 3.0.13-0ubuntu3.11 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:4ecd9d2a224bc55972e9ec423bb13ea779b9fbc3383a37703ca954d32f33e373

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libgcrypt20 CVE-2024-2236 低危 1.10.3-2ubuntu0.1 1.10.3-2ubuntu0.2 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24

texlive CVE-2017-17513 低危 2023.20240207-1 texlive: Command injection in mswin/mtxrun.lua and lualibs/lualibs-os.lua

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17513

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2017-12-14 16:29 修改: 2026-06-17 01:10

texlive-base CVE-2017-17513 低危 2023.20240207-1 texlive: Command injection in mswin/mtxrun.lua and lualibs/lualibs-os.lua

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17513

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2017-12-14 16:29 修改: 2026-06-17 01:10

texlive-binaries CVE-2019-12360 低危 2023.20230311.66589-9build3 xpdf: buffer over-read via crafted PDF document leads to DoS or memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12360

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-05-27 23:29 修改: 2026-06-17 02:14

texlive-binaries CVE-2019-12493 低危 2023.20230311.66589-9build3 A stack-based buffer over-read exists in PostScriptFunction::transform ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12493

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-05-31 02:29 修改: 2026-06-17 02:14

texlive-binaries CVE-2019-9587 低危 2023.20230311.66589-9build3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9587

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-03-06 08:29 修改: 2026-06-17 02:43

texlive-binaries CVE-2019-9588 低危 2023.20230311.66589-9build3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9588

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-03-06 08:29 修改: 2026-06-17 02:43

texlive-fonts-recommended CVE-2017-17513 低危 2023.20240207-1 texlive: Command injection in mswin/mtxrun.lua and lualibs/lualibs-os.lua

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17513

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2017-12-14 16:29 修改: 2026-06-17 01:10

texlive-latex-base CVE-2017-17513 低危 2023.20240207-1 texlive: Command injection in mswin/mtxrun.lua and lualibs/lualibs-os.lua

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17513

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2017-12-14 16:29 修改: 2026-06-17 01:10

texlive-latex-recommended CVE-2017-17513 低危 2023.20240207-1 texlive: Command injection in mswin/mtxrun.lua and lualibs/lualibs-os.lua

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17513

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2017-12-14 16:29 修改: 2026-06-17 01:10

texlive-pictures CVE-2017-17513 低危 2023.20240207-1 texlive: Command injection in mswin/mtxrun.lua and lualibs/lualibs-os.lua

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17513

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2017-12-14 16:29 修改: 2026-06-17 01:10

texlive-xetex CVE-2017-17513 低危 2023.20240207-1 texlive: Command injection in mswin/mtxrun.lua and lualibs/lualibs-os.lua

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17513

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2017-12-14 16:29 修改: 2026-06-17 01:10

libptexenc1 CVE-2019-12360 低危 2023.20230311.66589-9build3 xpdf: buffer over-read via crafted PDF document leads to DoS or memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12360

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-05-27 23:29 修改: 2026-06-17 02:14

libssl3t64 CVE-2026-54874 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libssl3t64 CVE-2026-63074 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libssl3t64 CVE-2026-75803 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17

libsynctex2 CVE-2019-12360 低危 2023.20230311.66589-9build3 xpdf: buffer over-read via crafted PDF document leads to DoS or memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12360

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-05-27 23:29 修改: 2026-06-17 02:14

libsynctex2 CVE-2019-12493 低危 2023.20230311.66589-9build3 A stack-based buffer over-read exists in PostScriptFunction::transform ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12493

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-05-31 02:29 修改: 2026-06-17 02:14

libsynctex2 CVE-2019-9587 低危 2023.20230311.66589-9build3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9587

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-03-06 08:29 修改: 2026-06-17 02:43

libsynctex2 CVE-2019-9588 低危 2023.20230311.66589-9build3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9588

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-03-06 08:29 修改: 2026-06-17 02:43

libsystemd-shared CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libtexlua53-5 CVE-2019-12360 低危 2023.20230311.66589-9build3 xpdf: buffer over-read via crafted PDF document leads to DoS or memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12360

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-05-27 23:29 修改: 2026-06-17 02:14

libtexlua53-5 CVE-2019-12493 低危 2023.20230311.66589-9build3 A stack-based buffer over-read exists in PostScriptFunction::transform ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12493

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-05-31 02:29 修改: 2026-06-17 02:14

libtexlua53-5 CVE-2019-9587 低危 2023.20230311.66589-9build3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9587

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-03-06 08:29 修改: 2026-06-17 02:43

libtexlua53-5 CVE-2019-9588 低危 2023.20230311.66589-9build3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9588

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-03-06 08:29 修改: 2026-06-17 02:43

libtinfo6 CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libptexenc1 CVE-2019-12493 低危 2023.20230311.66589-9build3 A stack-based buffer over-read exists in PostScriptFunction::transform ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12493

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2019-05-31 02:29 修改: 2026-06-17 02:14

xdg-utils CVE-2022-4055 低危 1.1.3-4.1ubuntu3 xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4055

镜像层: sha256:facbf6d1991c82e58c97a0c66165bd1196fd39fb754a9293cf4cb146d8c92a6a

发布日期: 2022-11-19 00:15 修改: 2026-06-17 05:19

zlib1g CVE-2026-27171 低危 1:1.3.dfsg-3.1ubuntu2.1 1:1.3.dfsg-3.1ubuntu2.2 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

Java (jar)
低危漏洞:1 中危漏洞:15 高危漏洞:6 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.21.1 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30

com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.21.1 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01

com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.21.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-06-23 21:17 修改: 2026-09-02 13:18

org.apache.cxf:cxf-core CVE-2026-50645 高危 4.0.11 4.2.2, 4.1.7, 3.6.12 Apache cxf-core: No restriction on attachment headers per message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50645

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-06-12 10:16 修改: 2026-08-07 13:16

org.eclipse.jetty:jetty-http CVE-2026-2332 高危 11.0.26 12.1.7, 12.0.33, 11.0.29, 10.0.28, 9.4.60 org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-04-14 12:16 修改: 2026-09-07 13:18

org.eclipse.jetty:jetty-security CVE-2026-10050 高危 11.0.26 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-08-04 11:22 修改: 2026-08-08 00:38

com.fasterxml.jackson.core:jackson-databind CVE-2026-54517 中危 2.21.1 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information disclosure via improper JsonView filter application

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54517

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:51

com.fasterxml.jackson.core:jackson-databind CVE-2026-54518 中危 2.21.1 2.21.4 jackson-databind: jackson-databind: Information disclosure and data manipulation via view-based access control bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54518

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-06-23 22:16 修改: 2026-06-27 20:49

com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.21.1 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18

com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.21.1 2.21.5, 2.18.9, 2.22.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19

com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.21.1 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40

com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.21.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55

org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.25.3 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03

org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.25.3 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39

org.apache.logging.log4j:log4j-core CVE-2026-34478 中危 2.25.3 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34478

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39

org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.25.3 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39

com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.21.1 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38

org.eclipse.jetty:jetty-http CVE-2024-6763 中危 11.0.26 12.0.12 org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18

com.fasterxml.jackson.core:jackson-databind CVE-2026-54516 中危 2.21.1 2.21.4, 3.1.4 jackson-databind: jackson-databind: Security bypass due to improper handling of renamed properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54516

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:52

org.eclipse.jetty:jetty-server CVE-2026-6790 中危 11.0.26 12.0.35, 12.1.9 jetty: Jetty: Improper Host header validation can lead to request routing issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6790

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:35

org.jsoup:jsoup CVE-2026-71497 中危 1.22.1 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-08-06 22:18 修改: 2026-08-07 15:17

org.eclipse.jetty:jetty-http CVE-2025-11143 低危 11.0.26 12.0.31, 12.1.5 org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11143

镜像层: sha256:758e0ad1e5655fb0ac9255e64ecabc62dc192d1e8bcc2f30a16b9ba327969544

发布日期: 2026-03-05 10:15 修改: 2026-06-17 08:29

Node.js (node-pkg)
低危漏洞:1 中危漏洞:7 高危漏洞:10 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
tar CVE-2026-59873 严重 7.5.11 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57

brace-expansion CVE-2026-14257 高危 2.0.2 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-07-23 14:17 修改: 2026-08-27 18:52

brace-expansion CVE-2026-69152 高危 2.0.2 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

ip-address CVE-2026-69192 高危 10.1.0 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16

pacote CVE-2026-9496 高危 19.0.2 21.5.1 Versions of the package pacote from 11.2.7 and before 21.5.1 are vulne ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9496

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-05-26 07:16 修改: 2026-07-23 11:10

pacote CVE-2026-9496 高危 20.0.1 21.5.1 Versions of the package pacote from 11.2.7 and before 21.5.1 are vulne ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9496

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-05-26 07:16 修改: 2026-07-23 11:10

picomatch CVE-2026-33671 高危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37

sigstore CVE-2026-48815 高危 3.1.0 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23

brace-expansion CVE-2026-13149 高危 2.0.2 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17

tar CVE-2026-59874 高危 7.5.11 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54

tar CVE-2026-73566 高危 7.5.11 7.5.21 tar: node-tar: Denial of Service via crafted long-path tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17

brace-expansion CVE-2026-33750 中危 2.0.2 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38

@sigstore/core CVE-2026-48758 中危 2.0.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23

ip-address CVE-2026-42338 中危 10.1.0 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-05-12 20:16 修改: 2026-09-07 13:19

picomatch CVE-2026-33672 中危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37

tar CVE-2026-53655 中危 7.5.11 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03

tar CVE-2026-59871 中危 7.5.11 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02

tar CVE-2026-59875 中危 7.5.11 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10

postcss-selector-parser CVE-2026-9358 低危 7.1.1 6.1.3, 7.1.3 postcss-selector-parser: Postcss: Denial of Service via uncontrolled recursion in AST Serialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9358

镜像层: sha256:84f3ac05d55d2ba54c7fca2787a6dac0d5f9edd3e2a284165092e13d3c34d384

发布日期: 2026-05-24 06:16 修改: 2026-07-23 11:10

Python (python-pkg)
低危漏洞:5 中危漏洞:27 高危漏洞:13 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
nltk CVE-2026-79675 严重 3.10.0 3.10.3 nltk: NLTK before 3.10.3 JVM Argument Injection via Per-Call Options

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-79675

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-25 16:17 修改: 2026-09-01 20:08

cryptography CVE-2026-69249 高危 46.0.7 49.0.0 python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69249

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-03 22:16 修改: 2026-09-04 22:17

cryptography GHSA-537c-gmf6-5ccf 高危 46.0.7 48.0.1 Vulnerable OpenSSL included in cryptography wheels

漏洞详情: https://github.com/advisories/GHSA-537c-gmf6-5ccf

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-06-15 20:12 修改: 2026-06-15 20:12

jaraco.context CVE-2026-23949 高危 5.3.0 6.1.0 jaraco.context: jaraco.context: Path traversal via malicious tar archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23949

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-01-20 01:15 修改: 2026-06-17 10:22

mistune CVE-2026-76098 高危 3.3.0 3.3.3 mistune: Mistune: Denial of Service via excessive emphasis markers in Markdown

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76098

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-24 20:17 修改: 2026-08-24 21:17

cryptography CVE-2026-69247 高危 46.0.7 50.0.0 python-cryptography: python-cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69247

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-03 22:16 修改: 2026-08-04 15:16

nltk CVE-2026-71513 高危 3.10.0 3.10.3 nltk: NLTK: Remote Code Execution via AllowlistUnpickler dotted-name bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71513

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-22 14:16 修改: 2026-08-31 20:49

nltk CVE-2026-72818 高危 3.10.0 3.10.1 nltk: NLTK TweetTokenizer: Denial of Service via crafted URL input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72818

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-20 22:18 修改: 2026-08-21 11:17

nltk CVE-2026-78680 高危 3.10.0 3.10.3 NLTK versions before 3.10.3 fail to use validated absolute paths when ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78680

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-25 02:16 修改: 2026-08-25 13:19

nltk CVE-2026-81726 高危 3.10.0 nltk: NLTK: Unauthorized file access via path traversal in model-artifact APIs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81726

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-27 17:21 修改: 2026-08-31 19:06

pyarrow CVE-2026-25087 高危 22.0.0 23.0.1 apache-arrow: Apache Arrow C++: Denial of Service via Use After Free vulnerability when reading IPC files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25087

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-02-17 14:16 修改: 2026-06-17 10:24

thrift CVE-2026-41608 高危 0.22.0 0.24.0 thrift: Apache Thrift Python bindings: Denial of Service via data amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41608

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-07-27 12:16 修改: 2026-07-28 16:17

thrift CVE-2026-43871 高危 0.22.0 0.24.0 thrift: Apache Thrift: Denial of Service via infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43871

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-07-27 12:16 修改: 2026-07-27 19:51

wheel CVE-2026-24049 高危 0.45.1 0.46.2 wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24049

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-01-22 05:16 修改: 2026-09-07 13:18

biopython CVE-2025-68463 中危 1.86 python-biopython: python-biopython: Information disclosure via XML External Entity (XXE) vulnerability in Bio.Entrez

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68463

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2025-12-18 06:15 修改: 2026-06-17 09:59

langgraph-sdk CVE-2026-48776 中危 0.3.6 0.3.15 langgraph: langgraph-sdk: LangGraph Python SDK: Unsafe URL path construction leads to unauthorized resource access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48776

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-06-17 10:55 修改: 2026-06-26 15:26

nltk CVE-2026-12876 中危 3.10.0 3.10.3 NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12876

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

nltk CVE-2026-81722 中危 3.10.0 3.10.3 nltk: nltk PorterStemmer: Denial of Service due to inefficient token processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81722

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-27 17:21 修改: 2026-08-31 15:44

nltk CVE-2026-81723 中危 3.10.0 3.10.3 nltk: NLTK: Denial of Service via malformed XML corpus files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81723

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-27 17:21 修改: 2026-08-31 19:17

nltk CVE-2026-81724 中危 3.10.0 3.10.3 nltk: NLTK: Denial of Service via Uncontrolled Recursion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81724

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-27 17:21 修改: 2026-08-31 19:06

nltk CVE-2026-81727 中危 3.10.0 3.10.3 nltk: NLTK: Filesystem containment bypass allows local file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81727

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-27 17:21 修改: 2026-08-31 19:08

pip CVE-2026-13346 中危 25.3 26.2.0 pip: pip: Arbitrary file installation via malicious package indexes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13346

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-07-29 19:16 修改: 2026-08-20 13:17

pip CVE-2026-13346 中危 25.3 26.2.0 pip: pip: Arbitrary file installation via malicious package indexes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13346

镜像层: sha256:d489d5a0437da9d4499571f6e235772f759750834b2e6ab1137287a9768707bb

发布日期: 2026-07-29 19:16 修改: 2026-08-20 13:17

pip CVE-2026-3219 中危 25.3 26.1 pip: pip: Incorrect file installation due to improper archive handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43

pip CVE-2026-3219 中危 25.3 26.1 pip: pip: Incorrect file installation due to improper archive handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219

镜像层: sha256:d489d5a0437da9d4499571f6e235772f759750834b2e6ab1137287a9768707bb

发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43

pip CVE-2026-6357 中危 25.3 26.1 pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00

pip CVE-2026-6357 中危 25.3 26.1 pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357

镜像层: sha256:d489d5a0437da9d4499571f6e235772f759750834b2e6ab1137287a9768707bb

发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00

pip CVE-2026-8643 中危 25.3 26.1.2 python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-06-01 17:17 修改: 2026-09-07 13:20

pip CVE-2026-8643 中危 25.3 26.1.2 python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643

镜像层: sha256:d489d5a0437da9d4499571f6e235772f759750834b2e6ab1137287a9768707bb

发布日期: 2026-06-01 17:17 修改: 2026-09-07 13:20

cryptography CVE-2026-69248 中危 46.0.7 49.0.0 python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69248

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-03 22:16 修改: 2026-09-02 14:17

pydantic-settings GHSA-4xgf-cpjx-pc3j 中危 2.12.0 2.14.2 pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

漏洞详情: https://github.com/advisories/GHSA-4xgf-cpjx-pc3j

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-06-19 22:10 修改: 2026-06-19 22:10

pypdf CVE-2026-84309 中危 6.15.0 6.16.0 pypdf: pypdf: Denial of Service via crafted PDF with cyclic tree structure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84309

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-09-01 20:17 修改: 2026-09-02 14:17

pypdf CVE-2026-84310 中危 6.15.0 6.16.1 pypdf: pypdf: Denial of Service via crafted PDF outlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84310

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-09-01 21:18 修改: 2026-09-04 03:17

pypdf CVE-2026-84311 中危 6.15.0 6.16.1 pypdf: pypdf: Denial of Service via crafted PDF XForm objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84311

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-09-01 21:18 修改: 2026-09-02 16:17

python-dotenv CVE-2026-28684 中危 1.2.1 1.2.2 python-dotenv: python-dotenv: Arbitrary file overwrite via symbolic link following

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28684

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-04-20 17:16 修改: 2026-06-17 10:28

requests CVE-2026-25645 中危 2.32.5 2.33.0 requests: Requests: Security bypass due to predictable temporary file creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25

setuptools CVE-2026-59890 中危 80.9.0 83.0.0 setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04

diskcache CVE-2025-69872 中危 5.6.3 python-diskcache: python-diskcache: Arbitrary code execution via insecure pickle deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69872

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-02-11 19:15 修改: 2026-07-15 02:17

h2 CVE-2026-71554 中危 4.3.0 4.4.1 h2: h2: Request smuggling due to duplicate Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71554

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-06 22:18 修改: 2026-08-08 03:16

thrift CVE-2026-66053 中危 0.22.0 0.24.0 thrift: Apache Thrift Python bindings: Information disclosure due to improper certificate validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66053

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-07-27 12:16 修改: 2026-07-27 19:52

idna CVE-2026-45409 中危 3.11 3.15 python-idna: idna: Denial of Service via specially crafted long inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10

Flask CVE-2026-27205 低危 3.1.2 3.1.3 flask: Flask: Information disclosure via improper caching of session data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27205

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-02-21 06:17 修改: 2026-06-17 10:26

pip CVE-2026-1703 低危 25.3 26.0 pip: pip: Information disclosure via path traversal when installing crafted wheel archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16

pip CVE-2026-1703 低危 25.3 26.0 pip: pip: Information disclosure via path traversal when installing crafted wheel archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703

镜像层: sha256:d489d5a0437da9d4499571f6e235772f759750834b2e6ab1137287a9768707bb

发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16

nltk CVE-2026-71514 低危 3.10.0 3.10.3 nltk: NLTK: Information disclosure via path traversal in CrubadanCorpusReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71514

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-08-22 14:16 修改: 2026-09-02 17:44

Pygments CVE-2026-4539 低危 2.19.2 2.20.0 pygments: Pygments: Denial of Service via inefficient regular expression processing in AdlLexer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4539

镜像层: sha256:10d2a5a024b03f1b649a4158ead012c8321d7b1358750c77b86fcf02a2791e93

发布日期: 2026-03-22 06:16 修改: 2026-06-17 10:56

/ragflow/.venv/lib/python3.13/site-packages/seleniumwire/ca.key ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/ragflow/.venv/lib/python3.13/site-packages/tencentcloud/cloudapp/v20220530/cloudapp_client.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/ragflow/web/dist/chunk/js/index-6he2vorJ.js ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
/ragflow/web/dist/chunk/js/index-S1mKyGS6.js ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×