docker.io/jiangrui1994/cloudsaver:0.9.0 linux/amd64

docker.io/jiangrui1994/cloudsaver:0.9.0 - Trivy安全扫描结果 扫描时间: 2026-08-26 20:33
全部漏洞信息
低危漏洞:29 中危漏洞:64 高危漏洞:77 严重漏洞:5

系统OS: alpine 3.21.3 扫描引擎: Trivy 扫描时间: 2026-08-26 20:33

docker.io/jiangrui1994/cloudsaver:0.9.0 (alpine 3.21.3) (alpine)
低危漏洞:19 中危漏洞:14 高危漏洞:15 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto3 CVE-2026-31789 严重 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-31789 严重 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2025-69421 高危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2026-28387 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28388 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28389 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28390 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2025-15467 高危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-08-24 13:16
libssl3 CVE-2025-15467 高危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-08-24 13:16
libssl3 CVE-2025-69421 高危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2026-28387 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28388 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28389 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28390 高危 3.3.3-r0 3.3.7-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
musl CVE-2026-40200 高危 1.2.5-r9 1.2.5-r11 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
musl-utils CVE-2026-40200 高危 1.2.5-r9 1.2.5-r11 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
zlib CVE-2026-22184 高危 1.3.1-r2 1.3.2-r0 zlib: zlib: Arbitrary code execution via buffer overflow in untgz utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22184

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-07 21:16 修改: 2026-07-15 02:18
libcrypto3 CVE-2025-9231 中危 3.3.3-r0 3.3.5-r0 openssl: Timing side-channel in SM2 algorithm on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libcrypto3 CVE-2026-31790 中危 3.3.3-r0 3.3.7-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
busybox-binsh CVE-2024-58251 中危 1.37.0-r12 1.37.0-r14 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
libssl3 CVE-2025-69419 中危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-9230 中危 3.3.3-r0 3.3.5-r0 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2025-9231 中危 3.3.3-r0 3.3.5-r0 openssl: Timing side-channel in SM2 algorithm on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2026-31790 中危 3.3.3-r0 3.3.7-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
busybox CVE-2024-58251 中危 1.37.0-r12 1.37.0-r14 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
musl CVE-2026-6042 中危 1.2.5-r9 1.2.5-r10 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
libcrypto3 CVE-2025-69419 中危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
musl-utils CVE-2026-6042 中危 1.2.5-r9 1.2.5-r10 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
ssl_client CVE-2024-58251 中危 1.37.0-r12 1.37.0-r14 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
libcrypto3 CVE-2025-9230 中危 3.3.3-r0 3.3.5-r0 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
zlib CVE-2026-27171 中危 1.3.1-r2 1.3.2-r0 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
libcrypto3 CVE-2026-22795 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libcrypto3 CVE-2026-22796 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
busybox-binsh CVE-2025-46394 低危 1.37.0-r12 1.37.0-r14 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
libssl3 CVE-2025-15468 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
libssl3 CVE-2025-66199 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
libssl3 CVE-2025-68160 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libssl3 CVE-2025-69418 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-69420 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-9232 低危 3.3.3-r0 3.3.5-r0 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2026-22795 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl3 CVE-2026-22796 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
busybox CVE-2025-46394 低危 1.37.0-r12 1.37.0-r14 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
libcrypto3 CVE-2025-15468 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
libcrypto3 CVE-2025-66199 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
libcrypto3 CVE-2025-68160 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libcrypto3 CVE-2025-69418 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
ssl_client CVE-2025-46394 低危 1.37.0-r12 1.37.0-r14 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
libcrypto3 CVE-2025-69420 低危 3.3.3-r0 3.3.6-r0 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2025-9232 低危 3.3.3-r0 3.3.5-r0 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
Node.js (node-pkg)
低危漏洞:10 中危漏洞:50 高危漏洞:62 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
form-data CVE-2025-7783 严重 2.3.3 2.5.4, 3.0.4, 4.0.4 form-data: Unsafe random function in form-data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7783

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2025-07-18 17:15 修改: 2026-06-17 10:05
tar CVE-2026-59873 严重 6.2.1 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar CVE-2026-59873 严重 6.2.1 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
axios CVE-2026-42033 高危 1.7.9 1.15.1, 0.31.1 axios: Axios: HTTP Transport Hijacking via Prototype Pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42033

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 18:16 修改: 2026-08-24 13:18
axios CVE-2026-42035 高危 1.7.9 1.15.1, 0.31.1 axios: Axios: Arbitrary HTTP header injection via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42035

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42043 高危 1.7.9 1.15.1, 0.31.1 axios: Axios: NO_PROXY bypass via crafted URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42043

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 18:16 修改: 2026-08-24 13:18
axios CVE-2026-42264 高危 1.7.9 1.15.2 axios: Axios: Prototype pollution allows information disclosure and request manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42264

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-05-08 04:16 修改: 2026-08-24 13:18
axios CVE-2026-44486 高危 1.7.9 1.16.0, 0.32.0 axios: Axios: Information disclosure of proxy credentials via HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44486

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-11 17:16 修改: 2026-08-24 13:18
axios CVE-2026-44487 高危 1.7.9 1.16.0, 0.32.0 axios: Axios: Information disclosure of proxy credentials via redirect flows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44487

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-11 17:16 修改: 2026-08-24 13:18
axios CVE-2026-44488 高危 1.7.9 1.16.0 axios: Axios: Denial of Service due to unenforced request and response size limits

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44488

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-11 17:16 修改: 2026-08-24 13:18
axios CVE-2026-44494 高危 1.7.9 1.16.0 axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44494

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-11 17:16 修改: 2026-08-24 13:18
axios CVE-2026-44495 高危 1.7.9 1.15.2, 0.31.1 axios: Axios: Information disclosure due to prototype pollution vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44495

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-11 17:16 修改: 2026-08-24 13:18
axios CVE-2026-44496 高危 1.7.9 1.16.0, 0.32.0 axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44496

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-11 17:16 修改: 2026-08-24 13:18
brace-expansion CVE-2026-13149 高危 1.1.11 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 1.1.11 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-69152 高危 1.1.11 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-13149 高危 2.0.1 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 2.0.1 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-69152 高危 2.0.1 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
cross-spawn CVE-2024-21538 高危 7.0.3 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2024-11-08 05:15 修改: 2026-07-28 16:17
engine.io CVE-2026-59725 高危 6.6.4 6.6.7 socket.io: engine.io: Socket.IO: Denial of Service via invalid binary POST requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59725

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:07
axios CVE-2025-27152 高危 1.7.9 1.8.2, 0.30.0 axios: Possible SSRF and Credential Leakage via Absolute URL in axios Requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27152

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2025-03-07 16:15 修改: 2026-06-17 09:03
form-data CVE-2026-12143 高危 2.3.3 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-12 19:16 修改: 2026-08-24 13:17
form-data CVE-2026-12143 高危 4.0.4 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-12 19:16 修改: 2026-08-24 13:17
glob CVE-2025-64756 高危 10.4.2 11.1.0, 10.5.0 glob: glob: Command Injection Vulnerability via Malicious Filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64756

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2025-11-17 18:15 修改: 2026-06-17 09:55
ip-address CVE-2026-69192 高危 9.0.5 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
ip-address CVE-2026-69192 高危 9.0.5 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
jws CVE-2025-65945 高危 3.2.2 3.2.3, 4.0.1 node-jws: auth0/node-jws: Improper signature verification in HS256 algorithm

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65945

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2025-12-04 19:16 修改: 2026-07-24 20:20
lodash CVE-2026-4800 高危 4.17.21 4.18.0 lodash: lodash: Arbitrary code execution via untrusted input in template imports

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4800

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-31 20:16 修改: 2026-08-24 13:19
minimatch CVE-2026-26996 高危 3.1.2 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-26996 高危 9.0.5 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
path-to-regexp CVE-2026-4867 高危 0.1.12 0.1.13 path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4867

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:57
sequelize CVE-2026-30951 高危 6.37.7 6.37.8 sequelize: Sequelize: Data exfiltration via SQL injection in JSON/JSONB where clause processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-30951

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-10 21:16 修改: 2026-07-15 02:19
sigstore CVE-2026-48815 高危 2.3.1 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
socket.io-parser CVE-2026-33151 高危 4.2.4 3.3.5, 3.4.4, 4.2.6 socket.io: Socket.IO: Denial of Service due to excessive buffering of specially crafted packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33151

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-20 21:17 修改: 2026-06-17 10:37
socket.io-parser CVE-2026-69185 高危 4.2.4 4.2.7, 3.4.5, 3.3.6 socket.io-parser: Socket.IO: Denial of Service via memory exhaustion from crafted packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69185

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-08-03 20:17 修改: 2026-08-03 21:16
axios CVE-2025-58754 高危 1.7.9 1.12.0, 0.30.2 axios: Axios DoS via lack of data size check

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58754

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2025-09-12 02:15 修改: 2026-06-17 09:44
axios CVE-2026-25639 高危 1.7.9 1.13.5, 0.30.3 axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25639

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-02-09 21:15 修改: 2026-08-24 13:17
tar CVE-2026-23745 高危 6.2.1 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-01-16 22:16 修改: 2026-08-24 13:17
tar CVE-2026-23745 高危 6.2.1 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-01-16 22:16 修改: 2026-08-24 13:17
tar CVE-2026-23950 高危 6.2.1 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-01-20 01:15 修改: 2026-08-24 13:17
tar CVE-2026-23950 高危 6.2.1 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-01-20 01:15 修改: 2026-08-24 13:17
tar CVE-2026-24842 高危 6.2.1 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-01-28 01:16 修改: 2026-08-24 13:17
tar CVE-2026-24842 高危 6.2.1 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-01-28 01:16 修改: 2026-08-24 13:17
tar CVE-2026-26960 高危 6.2.1 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-26960 高危 6.2.1 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-29786 高危 6.2.1 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19
tar CVE-2026-29786 高危 6.2.1 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19
tar CVE-2026-31802 高危 6.2.1 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-31802 高危 6.2.1 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-59874 高危 6.2.1 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-59874 高危 6.2.1 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-73566 高危 6.2.1 7.5.21 tar: node-tar: Denial of Service via crafted long-path tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
tar CVE-2026-73566 高危 6.2.1 7.5.21 tar: node-tar: Denial of Service via crafted long-path tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
tar-fs CVE-2025-59343 高危 2.1.3 3.1.1, 2.1.4, 1.16.6 tar-fs: tar-fs symlink validation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59343

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2025-09-24 18:15 修改: 2026-06-17 09:45
undici CVE-2026-12151 高危 6.21.3 6.27.0, 7.28.0, 8.5.0 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-17 17:16 修改: 2026-08-24 13:17
undici CVE-2026-1526 高危 6.21.3 6.24.0, 7.24.0 undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1526

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-12 21:16 修改: 2026-08-19 12:17
undici CVE-2026-1528 高危 6.21.3 6.24.0, 7.24.0 undici: undici: Denial of Service via crafted WebSocket frame with large length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1528

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-12 21:16 修改: 2026-08-24 13:17
undici CVE-2026-2229 高危 6.21.3 6.24.0, 7.24.0 undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2229

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-12 21:16 修改: 2026-08-19 12:17
validator CVE-2025-12758 高危 13.15.15 13.15.22 Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12758

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2025-11-27 05:16 修改: 2026-07-14 16:16
ws CVE-2026-48779 高危 8.17.1 5.2.5, 6.2.4, 7.5.11, 8.21.0 ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48779

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-17 13:20 修改: 2026-08-24 13:19
qs CVE-2026-8723 中危 6.14.0 6.15.2 qs: qs: Denial of Service due to improper handling of null/undefined array elements

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2025-15284 中危 6.5.3 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
request CVE-2023-28155 中危 2.88.2 request: bypass of SSRF mitigations when following a cross-protocol redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28155

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2023-03-16 15:15 修改: 2026-06-17 05:46
axios CVE-2026-42037 中危 1.7.9 1.15.1 axios: Node.js: Axios: Information disclosure via CRLF injection in multipart Content-Type header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42037

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
brace-expansion CVE-2026-33750 中危 2.0.1 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
axios CVE-2026-42038 中危 1.7.9 1.15.1, 0.31.1 axios: Axios: Information disclosure due to `no_proxy` bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42038

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
dottie CVE-2026-27837 中危 2.0.6 2.0.7 dottie.js: dottie.js: Unauthorized object modification via prototype pollution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27837

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-02-26 01:16 修改: 2026-06-17 10:27
axios CVE-2026-42039 中危 1.7.9 1.15.1, 0.31.1 axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42039

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 18:16 修改: 2026-08-24 13:18
follow-redirects GHSA-r4q5-vmmm-2653 中危 1.15.9 1.16.0 follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets

漏洞详情: https://github.com/advisories/GHSA-r4q5-vmmm-2653

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-14 01:11 修改: 2026-04-14 01:11
axios CVE-2026-42041 中危 1.7.9 1.15.1, 0.31.1 axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42041

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 18:16 修改: 2026-08-24 13:18
axios CVE-2026-42042 中危 1.7.9 1.15.1, 0.31.1 axios: Axios: XSRF token bypass leading to information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42042

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42044 中危 1.7.9 1.15.2 axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42044

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 18:16 修改: 2026-08-24 13:18
axios CVE-2026-44490 中危 1.7.9 1.16.0, 0.32.0 axios: Axios: Information disclosure and denial of service due to prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44490

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-11 17:16 修改: 2026-06-17 10:50
got CVE-2022-33987 中危 11.8.2 12.1.0, 11.8.5 nodejs-got: missing verification of requested URLs allows redirects to UNIX sockets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-33987

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2022-06-18 21:15 修改: 2026-06-17 04:49
axios GHSA-42h9-826w-cgv3 中危 1.7.9 0.33.0, 1.18.0 Axios: Excessive recursion in formDataToJSON can cause denial of service

漏洞详情: https://github.com/advisories/GHSA-42h9-826w-cgv3

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-20 17:58 修改: 2026-07-20 17:58
axios GHSA-7q8q-rj6j-mhjq 中危 1.7.9 0.33.0, 1.18.0 Axios: Nested axios option objects can consume polluted prototype values

漏洞详情: https://github.com/advisories/GHSA-7q8q-rj6j-mhjq

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-20 22:37 修改: 2026-07-20 22:37
ip-address CVE-2026-42338 中危 9.0.5 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-05-12 20:16 修改: 2026-08-24 13:18
ip-address CVE-2026-42338 中危 9.0.5 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-05-12 20:16 修改: 2026-08-24 13:18
axios GHSA-jqh4-m9w3-8hp9 中危 1.7.9 1.18.0 Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`

漏洞详情: https://github.com/advisories/GHSA-jqh4-m9w3-8hp9

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-20 22:27 修改: 2026-07-20 22:27
axios GHSA-mmx7-hfxf-jppx 中危 1.7.9 1.18.0, 0.33.0 Axios: Prototype pollution gadgets can alter axios request construction

漏洞详情: https://github.com/advisories/GHSA-mmx7-hfxf-jppx

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-20 22:25 修改: 2026-07-20 22:25
lodash CVE-2025-13465 中危 4.17.21 4.17.23 lodash: prototype pollution in _.unset and _.omit functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13465

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-01-21 20:16 修改: 2026-08-24 13:16
lodash CVE-2026-2950 中危 4.17.21 4.18.0 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2950

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-31 20:16 修改: 2026-07-24 20:10
axios GHSA-pmv8-rq9r-6j72 中危 1.7.9 0.33.0, 1.18.0 Axios: Deep formToJSON Key Recursion Can Cause Denial of Service

漏洞详情: https://github.com/advisories/GHSA-pmv8-rq9r-6j72

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-20 17:48 修改: 2026-07-20 17:48
@sigstore/core CVE-2026-48758 中危 1.1.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
axios CVE-2025-62718 中危 1.7.9 1.15.0, 0.31.0 axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-62718

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-09 15:16 修改: 2026-08-24 13:17
tar CVE-2026-53655 中危 6.2.1 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-53655 中危 6.2.1 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 6.2.1 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59871 中危 6.2.1 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 6.2.1 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar CVE-2026-59875 中危 6.2.1 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
axios CVE-2026-40175 中危 1.7.9 1.15.0, 0.31.0 axios: Axios: Remote Code Execution via Prototype Pollution escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40175

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-10 20:16 修改: 2026-08-24 13:18
tough-cookie CVE-2023-26136 中危 2.5.0 4.1.3 tough-cookie: prototype pollution in cookie memstore

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26136

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2023-07-01 05:15 修改: 2026-06-17 05:42
brace-expansion CVE-2026-33750 中危 1.1.11 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
axios CVE-2026-42034 中危 1.7.9 1.15.1, 0.31.1 axios: Axios: Denial of Service via oversized streamed uploads bypassing body limits

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42034

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42036 中危 1.7.9 1.15.1, 0.31.1 axios: Axios: Denial of Service via unbounded stream consumption when 'responseType: 'stream'' is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42036

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
qs CVE-2025-15284 中危 6.13.0 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
undici CVE-2026-15157 中危 6.21.3 6.28.0, 7.29.0, 8.9.0 undici: undici: HTTP header injection via unvalidated blob-like body type property

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
undici CVE-2026-1525 中危 6.21.3 6.24.0, 7.24.0 undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1525

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-12 20:16 修改: 2026-06-17 10:15
undici CVE-2026-1527 中危 6.21.3 6.24.0, 7.24.0 undici: Undici: HTTP header injection and request smuggling vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1527

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-12 21:16 修改: 2026-06-17 10:16
undici CVE-2026-16728 中危 6.21.3 6.28.0, 7.29.0, 8.9.0 undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
undici CVE-2026-16729 中危 6.21.3 6.28.0, 7.29.0, 8.9.0 undici: Undici: Cookie attribute injection allows bypassing security protections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18
undici CVE-2026-22036 中危 6.21.3 7.18.2, 6.23.0 undici: Undici: Denial of Service via excessive decompression steps

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22036

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-01-14 19:16 修改: 2026-06-17 10:19
undici CVE-2026-9679 中危 6.21.3 6.27.0, 7.28.0, 8.5.0 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
uuid CVE-2026-41907 中危 3.4.0 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 8.3.2 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
qs CVE-2026-8723 中危 6.13.0 6.15.2 qs: qs: Denial of Service due to improper handling of null/undefined array elements

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
validator CVE-2025-56200 中危 13.15.15 13.15.20 validator.js has a URL validation bypass vulnerability in its isURL function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-56200

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2025-09-30 18:15 修改: 2026-07-05 02:16
qs CVE-2025-15284 中危 6.14.0 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
ws CVE-2026-45736 中危 8.17.1 8.20.1 ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45736

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-05-15 15:16 修改: 2026-08-24 13:18
axios CVE-2026-42040 低危 1.7.9 1.15.1, 0.31.1 axios: Axios: Incorrect null byte handling can lead to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42040

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
diff CVE-2026-24001 低危 5.2.0 8.0.3, 5.2.2, 4.0.4, 3.5.1 jsdiff: denial of service vulnerability in parsePatch and applyPatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24001

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2026-01-22 03:15 修改: 2026-07-15 02:18
undici CVE-2026-11525 低危 6.21.3 6.27.0, 7.28.0, 8.5.0 undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici CVE-2026-6733 低危 6.21.3 6.27.0, 7.28.0, 8.5.0 undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
body-parser CVE-2026-12590 低危 1.20.3 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
qs CVE-2026-2391 低危 6.13.0 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
@tootallnate/once CVE-2026-3449 低危 1.1.2 3.0.1, 2.0.1 @tootallnate/once: @tootallnate/once: Denial of Service due to incorrect control flow scoping with AbortSignal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3449

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-03-03 05:17 修改: 2026-06-17 10:43
brace-expansion CVE-2025-5889 低危 1.1.11 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
qs CVE-2026-2391 低危 6.14.0 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:0f1830a77a5840787264356dde0fa437b4e14fd6dffcc07ae774d9a57afb86be

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
brace-expansion CVE-2025-5889 低危 2.0.1 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:0b1f26057bd0491a50f56fd7f2983bd3ad478511f12fff2b361a97c50cb5828b

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×