| curl |
CVE-2026-11352 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:01
|
| curl |
CVE-2026-11586 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Denial of Service via WebSocket PING flood
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 17:59
|
| curl |
CVE-2026-12064 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
|
| curl |
CVE-2026-8286 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Insecure connection establishment due to TLS configuration mismatch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
|
| curl |
CVE-2026-8458 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: libcurl: Unauthorized connection reuse due to a logical error
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
|
| curl |
CVE-2026-8925 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Double-free vulnerability in SASL authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
|
| curl |
CVE-2026-8927 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: Information disclosure due to uncleared proxy authentication state
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
|
| curl |
CVE-2026-9547 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Man-in-the-middle attack via SSH host key bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
|
| libblkid |
CVE-2026-53612 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libblkid |
CVE-2026-53613 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libblkid |
CVE-2026-53614 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libblkid |
CVE-2026-76642 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
|
| libblkid |
CVE-2026-78408 |
高危 |
2.41.4-r0 |
2.41.6-r1 |
util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
|
| libblkid |
CVE-2026-78410 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
|
| libcrypto3 |
CVE-2026-14456 |
高危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
|
| libcurl |
CVE-2026-11352 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11352
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:01
|
| libcurl |
CVE-2026-11586 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Denial of Service via WebSocket PING flood
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11586
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 17:59
|
| libcurl |
CVE-2026-12064 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
|
| libcurl |
CVE-2026-8286 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Insecure connection establishment due to TLS configuration mismatch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
|
| libcurl |
CVE-2026-8458 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: libcurl: Unauthorized connection reuse due to a logical error
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
|
| libcurl |
CVE-2026-8925 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Double-free vulnerability in SASL authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
|
| libcurl |
CVE-2026-8927 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: Information disclosure due to uncleared proxy authentication state
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
|
| libcurl |
CVE-2026-9547 |
高危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Man-in-the-middle attack via SSH host key bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
|
| libexpat |
CVE-2026-76956 |
高危 |
2.8.2-r0 |
2.8.4-r0 |
libexpat: libexpat: Denial of Service via hash flooding attack with crafted XML
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76956
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-08-20 05:16 修改: 2026-09-08 21:08
|
| libexpat |
CVE-2026-76957 |
高危 |
2.8.2-r0 |
2.8.4-r0 |
libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-08-20 05:16 修改: 2026-09-08 20:56
|
| libmount |
CVE-2026-53612 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libmount |
CVE-2026-53613 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libmount |
CVE-2026-53614 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libmount |
CVE-2026-76642 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
|
| libmount |
CVE-2026-78408 |
高危 |
2.41.4-r0 |
2.41.6-r1 |
util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
|
| libmount |
CVE-2026-78410 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
|
| libssl3 |
CVE-2026-14456 |
高危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
|
| libuuid |
CVE-2026-53612 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libuuid |
CVE-2026-53613 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libuuid |
CVE-2026-53614 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libuuid |
CVE-2026-76642 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
|
| libuuid |
CVE-2026-78408 |
高危 |
2.41.4-r0 |
2.41.6-r1 |
util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
|
| libuuid |
CVE-2026-78410 |
高危 |
2.41.4-r0 |
2.41.6-r0 |
util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
|
| pyc |
CVE-2026-11940 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
|
| pyc |
CVE-2026-15308 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
|
| pyc |
CVE-2026-3644 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
cpython: Incomplete control character validation in http.cookies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16
|
| pyc |
CVE-2026-4786 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16
|
| pyc |
CVE-2026-6100 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16
|
| pyc |
CVE-2026-7210 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: expat: Python/Expat: Denial of Service via crafted XML document
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19
|
| python3 |
CVE-2026-11940 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-15308 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
|
| python3 |
CVE-2026-3644 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
cpython: Incomplete control character validation in http.cookies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-4786 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-6100 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-7210 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: expat: Python/Expat: Denial of Service via crafted XML document
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19
|
| python3-pyc |
CVE-2026-11940 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
|
| python3-pyc |
CVE-2026-15308 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
|
| python3-pyc |
CVE-2026-3644 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
cpython: Incomplete control character validation in http.cookies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16
|
| python3-pyc |
CVE-2026-4786 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16
|
| python3-pyc |
CVE-2026-6100 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16
|
| python3-pyc |
CVE-2026-7210 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: expat: Python/Expat: Denial of Service via crafted XML document
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19
|
| python3-pycache-pyc0 |
CVE-2026-11940 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
|
| python3-pycache-pyc0 |
CVE-2026-15308 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
|
| python3-pycache-pyc0 |
CVE-2026-3644 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
cpython: Incomplete control character validation in http.cookies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16
|
| python3-pycache-pyc0 |
CVE-2026-4786 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16
|
| python3-pycache-pyc0 |
CVE-2026-6100 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16
|
| python3-pycache-pyc0 |
CVE-2026-7210 |
高危 |
3.12.13-r0 |
3.12.14-r0 |
python: expat: Python/Expat: Denial of Service via crafted XML document
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19
|
| sqlite-libs |
CVE-2026-11822 |
高危 |
3.51.2-r0 |
3.53.4-r0 |
sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| sqlite-libs |
CVE-2026-11824 |
高危 |
3.51.2-r0 |
3.53.4-r0 |
sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| curl |
CVE-2026-10536 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
|
| curl |
CVE-2026-11564 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Certificate validation bypass due to incorrect connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11564
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:00
|
| curl |
CVE-2026-11856 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Information disclosure via incorrect Digest authentication header reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
|
| curl |
CVE-2026-13608 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
A flaw in the libcurl SASL negotiation for LDAP authentication allows ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 19:59
|
| curl |
CVE-2026-18924 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
|
| curl |
CVE-2026-19931 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
|
| curl |
CVE-2026-80229 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
When performing transfers via libcurl\u2019s multi interface, pooled T ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:06
|
| libssl3 |
CVE-2026-18798 |
中危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: QUIC server may trigger double free when processing INITIAL packet
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-63072 |
中危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: heap buffer overflow in CMS key unwrapping
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
|
| libssl3 |
CVE-2026-63076 |
中危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: invalid pointer dereference in CMP server via crafted protectionAlg
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
|
| libcrypto3 |
CVE-2026-18798 |
中危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: QUIC server may trigger double free when processing INITIAL packet
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
|
| libcrypto3 |
CVE-2026-63072 |
中危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: heap buffer overflow in CMS key unwrapping
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
|
| libcrypto3 |
CVE-2026-63076 |
中危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: invalid pointer dereference in CMP server via crafted protectionAlg
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
|
| curl |
CVE-2026-80230 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
|
| curl |
CVE-2026-80255 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
|
| curl |
CVE-2026-82209 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
When libpsl support is enabled, libcurl fails to enforce the Public Su ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
|
| curl |
CVE-2026-8924 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Cookie injection via malicious HTTP server using super cookies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
|
| curl |
CVE-2026-8926 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Information disclosure via incorrect .netrc password lookup
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
|
| curl |
CVE-2026-8932 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
|
| curl |
CVE-2026-9079 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
|
| curl |
CVE-2026-9080 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
|
| libcurl |
CVE-2026-10536 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
|
| pyc |
CVE-2026-0864 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: cpython: Python configparser: Configuration injection via crafted multi-line input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52
|
| pyc |
CVE-2026-11972 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
|
| pyc |
CVE-2026-1502 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: HTTP header injection via CR/LF in proxy tunnel headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16
|
| pyc |
CVE-2026-4360 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
|
| libcurl |
CVE-2026-11564 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Certificate validation bypass due to incorrect connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11564
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:00
|
| libcurl |
CVE-2026-11856 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Information disclosure via incorrect Digest authentication header reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
|
| libcurl |
CVE-2026-13608 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
A flaw in the libcurl SASL negotiation for LDAP authentication allows ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 19:59
|
| libcurl |
CVE-2026-18924 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
|
| libcurl |
CVE-2026-19931 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
|
| libcurl |
CVE-2026-80229 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
When performing transfers via libcurl\u2019s multi interface, pooled T ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:06
|
| python3 |
CVE-2026-0864 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: cpython: Python configparser: Configuration injection via crafted multi-line input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52
|
| python3 |
CVE-2026-11972 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-1502 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: HTTP header injection via CR/LF in proxy tunnel headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-4360 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
|
| libcurl |
CVE-2026-80230 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
|
| libcurl |
CVE-2026-80255 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
|
| libcurl |
CVE-2026-82209 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
When libpsl support is enabled, libcurl fails to enforce the Public Su ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:01
|
| libcurl |
CVE-2026-8924 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Cookie injection via malicious HTTP server using super cookies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
|
| libcurl |
CVE-2026-8926 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
curl: curl: Information disclosure via incorrect .netrc password lookup
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
|
| libcurl |
CVE-2026-8932 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
|
| python3-pyc |
CVE-2026-0864 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: cpython: Python configparser: Configuration injection via crafted multi-line input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52
|
| python3-pyc |
CVE-2026-11972 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
|
| python3-pyc |
CVE-2026-1502 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: HTTP header injection via CR/LF in proxy tunnel headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16
|
| python3-pyc |
CVE-2026-4360 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
|
| libcurl |
CVE-2026-9079 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
|
| libcurl |
CVE-2026-9080 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
|
| libcurl |
CVE-2026-9545 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Information disclosure via cached SSL session and early data
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
|
| libcurl |
CVE-2026-9546 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Information disclosure due to persistent Referer header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9546
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:53
|
| curl |
CVE-2026-9545 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Information disclosure via cached SSL session and early data
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
|
| curl |
CVE-2026-9546 |
中危 |
8.20.0-r0 |
8.22.0-r0 |
libcurl: libcurl: Information disclosure due to persistent Referer header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9546
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:53
|
| python3-pycache-pyc0 |
CVE-2026-0864 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: cpython: Python configparser: Configuration injection via crafted multi-line input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52
|
| python3-pycache-pyc0 |
CVE-2026-11972 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
|
| python3-pycache-pyc0 |
CVE-2026-1502 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: HTTP header injection via CR/LF in proxy tunnel headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16
|
| python3-pycache-pyc0 |
CVE-2026-4360 |
中危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
|
| libexpat |
CVE-2026-66046 |
中危 |
2.8.2-r0 |
2.8.4-r0 |
Expat through 2.8.3 contains a denial of service vulnerability caused ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-08-18 15:16 修改: 2026-08-20 16:17
|
| libexpat |
CVE-2026-76641 |
中危 |
2.8.2-r0 |
2.8.4-r0 |
CVE-2026-76641 affecting package expat for versions less than 2.8.3-2
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17
|
| libssl3 |
CVE-2026-14457 |
低危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: RPK server signature algorithm selection can dereference a missing certificate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
|
| libssl3 |
CVE-2026-54874 |
低危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: excessive memory use buffering DTLS records for a future epoch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
|
| libssl3 |
CVE-2026-63073 |
低危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: untrusted sender DN used as format string in CMP response validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
|
| libssl3 |
CVE-2026-63074 |
低危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: CMP indefinite cache growth of ExtraCerts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
|
| python3-pyc |
CVE-2026-2297 |
低危 |
3.12.13-r0 |
3.12.14-r0 |
cpython: CPython: Logging Bypass in Legacy .pyc File Handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16
|
| python3-pyc |
CVE-2026-4519 |
低危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16
|
| libssl3 |
CVE-2026-63075 |
低危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: QUIC ACK-only packet retention can cause memory exhaustion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
|
| libssl3 |
CVE-2026-75803 |
低危 |
3.5.7-r0 |
3.5.8-r0 |
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
|
| libcrypto3 |
CVE-2026-63074 |
低危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: CMP indefinite cache growth of ExtraCerts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
|
| libcrypto3 |
CVE-2026-63075 |
低危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: QUIC ACK-only packet retention can cause memory exhaustion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
|
| python3 |
CVE-2026-2297 |
低危 |
3.12.13-r0 |
3.12.14-r0 |
cpython: CPython: Logging Bypass in Legacy .pyc File Handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-4519 |
低危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16
|
| libcrypto3 |
CVE-2026-75803 |
低危 |
3.5.7-r0 |
3.5.8-r0 |
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17
|
| libcrypto3 |
CVE-2026-14457 |
低危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: RPK server signature algorithm selection can dereference a missing certificate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:17 修改: 2026-09-11 21:14
|
| pyc |
CVE-2026-2297 |
低危 |
3.12.13-r0 |
3.12.14-r0 |
cpython: CPython: Logging Bypass in Legacy .pyc File Handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16
|
| pyc |
CVE-2026-4519 |
低危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16
|
| python3-pycache-pyc0 |
CVE-2026-2297 |
低危 |
3.12.13-r0 |
3.12.14-r0 |
cpython: CPython: Logging Bypass in Legacy .pyc File Handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16
|
| python3-pycache-pyc0 |
CVE-2026-4519 |
低危 |
3.12.13-r0 |
3.12.14-r0 |
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16
|
| libcrypto3 |
CVE-2026-54874 |
低危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: excessive memory use buffering DTLS records for a future epoch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
|
| libcrypto3 |
CVE-2026-63073 |
低危 |
3.5.7-r0 |
3.5.8-r0 |
openssl: untrusted sender DN used as format string in CMP response validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073
镜像层: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0
发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16
|
| libcurl |
CVE-2026-80256 |
未知 |
8.20.0-r0 |
8.22.0-r0 |
漏洞详情:
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libcurl |
CVE-2026-82208 |
未知 |
8.20.0-r0 |
8.22.0-r0 |
With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_S ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82208
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
|
| curl |
CVE-2026-82208 |
未知 |
8.20.0-r0 |
8.22.0-r0 |
With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_S ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82208
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:02
|
| curl |
CVE-2026-80231 |
未知 |
8.20.0-r0 |
8.22.0-r0 |
native CA store conn reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80231
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
|
| curl |
CVE-2026-80256 |
未知 |
8.20.0-r0 |
8.22.0-r0 |
漏洞详情:
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libcurl |
CVE-2026-80231 |
未知 |
8.20.0-r0 |
8.22.0-r0 |
native CA store conn reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80231
镜像层: sha256:6a57491ac8a9e8f33efd1b21fb675315cbce7f60b9dc0aa6160b26681537f5bc
发布日期: 2026-09-06 18:17 修改: 2026-09-11 20:05
|