docker.io/k8sgerrit/gerrit-operator:v0.1-836-g41fa704f linux/amd64

docker.io/k8sgerrit/gerrit-operator:v0.1-836-g41fa704f - Trivy安全扫描结果 扫描时间: 2026-07-24 18:30
全部漏洞信息
低危漏洞:34 中危漏洞:55 高危漏洞:25 严重漏洞:2

系统OS: debian 12.13 扫描引擎: Trivy 扫描时间: 2026-07-24 18:30

docker.io/k8sgerrit/gerrit-operator:v0.1-836-g41fa704f (debian 12.13) (debian)
低危漏洞:32 中危漏洞:39 高危漏洞:19 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libglib2.0-0 CVE-2026-58016 严重 2.74.6-2+deb12u8 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016

镜像层: sha256:a06b35d9cd1dd4868ed3f1ff97b2b8bc05e8928d7c1a3ff1b570a2e83a603030

发布日期: 2026-06-30 13:19 修改: 2026-07-23 14:17
zlib1g CVE-2023-45853 严重 1:1.2.13.dfsg-1 zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853

镜像层: sha256:b47d9619ecfbb803f4b834cf89ba8d0c7014df1f2a4463f4a894dc7eb2911868

发布日期: 2023-10-14 02:15 修改: 2026-07-14 13:17
libexpat1 CVE-2026-45186 高危 2.5.0-1+deb12u2 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-05-10 07:16 修改: 2026-07-15 02:22
libexpat1 CVE-2026-56131 高危 2.5.0-1+deb12u2 libexpat before 2.8.2 lacks handler call depth tracking for calls to X ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56407 高危 2.5.0-1+deb12u2 libexpat before 2.8.2 has an integer overflow in doProlog that is rela ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat1 CVE-2026-56408 高危 2.5.0-1+deb12u2 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libexpat1 CVE-2025-59375 高危 2.5.0-1+deb12u2 firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46
libglib2.0-0 CVE-2026-58010 高危 2.74.6-2+deb12u8 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58010

镜像层: sha256:a06b35d9cd1dd4868ed3f1ff97b2b8bc05e8928d7c1a3ff1b570a2e83a603030

发布日期: 2026-06-30 13:19 修改: 2026-07-02 19:09
libglib2.0-0 CVE-2026-58011 高危 2.74.6-2+deb12u8 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58011

镜像层: sha256:a06b35d9cd1dd4868ed3f1ff97b2b8bc05e8928d7c1a3ff1b570a2e83a603030

发布日期: 2026-06-30 13:19 修改: 2026-07-02 19:20
libglib2.0-0 CVE-2026-58012 高危 2.74.6-2+deb12u8 glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58012

镜像层: sha256:a06b35d9cd1dd4868ed3f1ff97b2b8bc05e8928d7c1a3ff1b570a2e83a603030

发布日期: 2026-06-30 13:19 修改: 2026-07-02 19:28
libglib2.0-0 CVE-2026-58013 高危 2.74.6-2+deb12u8 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58013

镜像层: sha256:a06b35d9cd1dd4868ed3f1ff97b2b8bc05e8928d7c1a3ff1b570a2e83a603030

发布日期: 2026-06-30 13:19 修改: 2026-07-02 19:29
libglib2.0-0 CVE-2026-58014 高危 2.74.6-2+deb12u8 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58014

镜像层: sha256:a06b35d9cd1dd4868ed3f1ff97b2b8bc05e8928d7c1a3ff1b570a2e83a603030

发布日期: 2026-06-30 13:19 修改: 2026-07-01 17:58
libglib2.0-0 CVE-2026-58015 高危 2.74.6-2+deb12u8 glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58015

镜像层: sha256:a06b35d9cd1dd4868ed3f1ff97b2b8bc05e8928d7c1a3ff1b570a2e83a603030

发布日期: 2026-06-30 13:19 修改: 2026-07-02 02:16
libharfbuzz0b CVE-2023-25193 高危 6.0.0+dfsg-3 harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25193

镜像层: sha256:6bfdba9f89ea6abb1c96efa3dc3572966e1dae3dc328c03dc749fb8ed5e2f47e

发布日期: 2023-02-04 20:15 修改: 2026-06-17 05:40
liblcms2-2 CVE-2026-41254 高危 2.14-2 2.14-2+deb12u1 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41254

镜像层: sha256:afd09813d6dc137a9b06760116d9c48bc74ad70af38c86df103b66965c1dfc01

发布日期: 2026-04-18 07:16 修改: 2026-06-17 10:46
libuuid1 CVE-2026-53615 高危 2.38.1-5+deb12u3 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:1230ca28c337e605fa5b7910feb96c299b50ebd69f7feedb6143909b14f6ee52

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openjdk-17-jre-headless CVE-2026-22016 高危 17.0.18+8-1~deb12u1 17.0.19+10-1~deb12u2 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18
openjdk-17-jre-headless CVE-2026-34282 高危 17.0.18+8-1~deb12u1 17.0.19+10-1~deb12u2 openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34282

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:20
openjdk-17-jre-headless CVE-2026-41254 高危 17.0.18+8-1~deb12u1 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41254

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-04-18 07:16 修改: 2026-06-17 10:46
openjdk-17-jre-headless CVE-2026-47063 高危 17.0.18+8-1~deb12u1 openjdk: OpenJDK: Enhance Jar handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47063

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-07-21 22:17 修改: 2026-07-23 18:16
libexpat1 CVE-2026-25210 高危 2.5.0-1+deb12u2 libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25210

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-01-30 07:16 修改: 2026-06-17 10:24
libexpat1 CVE-2026-56405 中危 2.5.0-1+deb12u2 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat1 CVE-2026-56406 中危 2.5.0-1+deb12u2 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat1 CVE-2026-56409 中危 2.5.0-1+deb12u2 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat1 CVE-2026-56410 中危 2.5.0-1+deb12u2 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat1 CVE-2026-56411 中危 2.5.0-1+deb12u2 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat1 CVE-2026-56412 中危 2.5.0-1+deb12u2 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libc6 CVE-2026-6238 中危 2.36-9+deb12u13 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6 CVE-2026-0915 中危 2.36-9+deb12u13 2.36-9+deb12u14 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
libc6 CVE-2026-4046 中危 2.36-9+deb12u13 2.36-9+deb12u14 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc6 CVE-2026-4437 中危 2.36-9+deb12u13 2.36-9+deb12u14 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
libc6 CVE-2026-5435 中危 2.36-9+deb12u13 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6 CVE-2026-5450 中危 2.36-9+deb12u13 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6 CVE-2026-5928 中危 2.36-9+deb12u13 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libglib2.0-0 CVE-2026-1484 中危 2.74.6-2+deb12u8 2.74.6-2+deb12u9 Glib: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1484

镜像层: sha256:a06b35d9cd1dd4868ed3f1ff97b2b8bc05e8928d7c1a3ff1b570a2e83a603030

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15
libglib2.0-0 CVE-2026-1489 中危 2.74.6-2+deb12u8 2.74.6-2+deb12u9 Glib: GLib: Memory corruption via integer overflow in Unicode case conversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1489

镜像层: sha256:a06b35d9cd1dd4868ed3f1ff97b2b8bc05e8928d7c1a3ff1b570a2e83a603030

发布日期: 2026-01-27 15:15 修改: 2026-06-17 10:15
libgraphite2-3 CVE-2026-50593 中危 1.3.14-1 1.3.14-1+deb12u1 Graphite before 1.3.15 has an integer underflow and resultant out-of-b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50593

镜像层: sha256:b3ec5e8669067e4105155ffa43e1f324c654bf20df8947cd08700d53b6511757

发布日期: 2026-06-05 04:17 修改: 2026-07-23 07:10
libexpat1 CVE-2025-66382 中危 2.5.0-1+deb12u2 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libharfbuzz0b CVE-2026-22693 中危 6.0.0+dfsg-3 harfbuzz: Null Pointer Dereference in harfbuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22693

镜像层: sha256:6bfdba9f89ea6abb1c96efa3dc3572966e1dae3dc328c03dc749fb8ed5e2f47e

发布日期: 2026-01-10 06:15 修改: 2026-06-17 10:20
libexpat1 CVE-2026-32776 中危 2.5.0-1+deb12u2 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libpng16-16 CVE-2026-33416 中危 1.6.39-2+deb12u3 1.6.39-2+deb12u4 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416

镜像层: sha256:9ccf04bf57a5152c7c6277bbf63244ffe1f0600110771b1ffbf3ed603f105732

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37
libpng16-16 CVE-2026-33636 中危 1.6.39-2+deb12u3 1.6.39-2+deb12u4 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33636

镜像层: sha256:9ccf04bf57a5152c7c6277bbf63244ffe1f0600110771b1ffbf3ed603f105732

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37
libpng16-16 CVE-2026-34757 中危 1.6.39-2+deb12u3 1.6.39-2+deb12u5 libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757

镜像层: sha256:9ccf04bf57a5152c7c6277bbf63244ffe1f0600110771b1ffbf3ed603f105732

发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39
libexpat1 CVE-2026-32777 中危 2.5.0-1+deb12u2 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libuuid1 CVE-2026-13595 中危 2.38.1-5+deb12u3 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:1230ca28c337e605fa5b7910feb96c299b50ebd69f7feedb6143909b14f6ee52

发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libuuid1 CVE-2026-27456 中危 2.38.1-5+deb12u3 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:1230ca28c337e605fa5b7910feb96c299b50ebd69f7feedb6143909b14f6ee52

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libuuid1 CVE-2026-3184 中危 2.38.1-5+deb12u3 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:1230ca28c337e605fa5b7910feb96c299b50ebd69f7feedb6143909b14f6ee52

发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
libexpat1 CVE-2026-32778 中危 2.5.0-1+deb12u2 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1 CVE-2026-50219 中危 2.5.0-1+deb12u2 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
libexpat1 CVE-2026-56132 中危 2.5.0-1+deb12u2 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56403 中危 2.5.0-1+deb12u2 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
openjdk-17-jre-headless CVE-2026-22013 中危 17.0.18+8-1~deb12u1 17.0.19+10-1~deb12u2 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19
openjdk-17-jre-headless CVE-2026-22021 中危 17.0.18+8-1~deb12u1 17.0.19+10-1~deb12u2 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19
openjdk-17-jre-headless CVE-2026-46917 中危 17.0.18+8-1~deb12u1 openjdk: OpenJDK: Improve DTLS handshaking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46917

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-07-21 22:17 修改: 2026-07-23 16:17
openjdk-17-jre-headless CVE-2026-46968 中危 17.0.18+8-1~deb12u1 openjdk: Enhance TLS certificate handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46968

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-07-21 22:17 修改: 2026-07-23 16:17
openjdk-17-jre-headless CVE-2026-47021 中危 17.0.18+8-1~deb12u1 openjdk: OpenJDK: Enhance XBM image support (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47021

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-07-21 22:17 修改: 2026-07-23 16:17
openjdk-17-jre-headless CVE-2026-47027 中危 17.0.18+8-1~deb12u1 openjdk: OpenJDK: Enhance Jar file processing (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47027

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-07-21 22:17 修改: 2026-07-23 18:16
openjdk-17-jre-headless CVE-2026-60147 中危 17.0.18+8-1~deb12u1 openjdk: OpenJDK: Improve certification checking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60147

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-07-21 22:17 修改: 2026-07-23 16:17
libexpat1 CVE-2026-56404 中危 2.5.0-1+deb12u2 libexpat before 2.8.2 has an integer overflow in addBinding.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
zlib1g CVE-2026-27171 中危 1:1.2.13.dfsg-1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:b47d9619ecfbb803f4b834cf89ba8d0c7014df1f2a4463f4a894dc7eb2911868

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
libexpat1 CVE-2026-24515 低危 2.5.0-1+deb12u2 libexpat: libexpat null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-01-23 08:16 修改: 2026-06-17 10:23
libexpat1 CVE-2026-41080 低危 2.5.0-1+deb12u2 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
libgcc-s1 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:c3abae442368dc447f15c468933843c361f227f5d87b2bb86515b49f40583ed9

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
libpng16-16 CVE-2021-4214 低危 1.6.39-2+deb12u3 libpng: hardcoded value leads to heap-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4214

镜像层: sha256:9ccf04bf57a5152c7c6277bbf63244ffe1f0600110771b1ffbf3ed603f105732

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libpng16-16 CVE-2025-28162 低危 1.6.39-2+deb12u3 libpng: libpng: Denial of Service via buffer overflow in pngimage utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28162

镜像层: sha256:9ccf04bf57a5152c7c6277bbf63244ffe1f0600110771b1ffbf3ed603f105732

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04
libpng16-16 CVE-2025-28164 低危 1.6.39-2+deb12u3 libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28164

镜像层: sha256:9ccf04bf57a5152c7c6277bbf63244ffe1f0600110771b1ffbf3ed603f105732

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04
libpng16-16 CVE-2026-3713 低危 1.6.39-2+deb12u3 libpng: libpng: Heap-based buffer overflow in pnm2png allows information disclosure and denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3713

镜像层: sha256:9ccf04bf57a5152c7c6277bbf63244ffe1f0600110771b1ffbf3ed603f105732

发布日期: 2026-03-08 06:16 修改: 2026-06-17 10:44
libstdc++6 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:6819a1af097df543d58dc30b51f737e55f3f42a9a04e641f175834a55bf0629c

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
libc6 CVE-2026-0861 低危 2.36-9+deb12u13 2.36-9+deb12u14 glibc: Integer overflow in memalign leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
libc6 CVE-2026-4438 低危 2.36-9+deb12u13 2.36-9+deb12u14 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
gcc-12-base CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:7095412417d2dce289b77f7a8c632a07c82b707fe43cfef7368c3b65c8d2538a

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
libc6 CVE-2010-4756 低危 2.36-9+deb12u13 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libuuid1 CVE-2022-0563 低危 2.38.1-5+deb12u3 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:1230ca28c337e605fa5b7910feb96c299b50ebd69f7feedb6143909b14f6ee52

发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libuuid1 CVE-2025-14104 低危 2.38.1-5+deb12u3 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:1230ca28c337e605fa5b7910feb96c299b50ebd69f7feedb6143909b14f6ee52

发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libc6 CVE-2018-20796 低危 2.36-9+deb12u13 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libc6 CVE-2019-1010022 低危 2.36-9+deb12u13 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6 CVE-2019-1010023 低危 2.36-9+deb12u13 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6 CVE-2019-1010024 低危 2.36-9+deb12u13 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6 CVE-2019-1010025 低危 2.36-9+deb12u13 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libglib2.0-0 CVE-2012-0039 低危 2.74.6-2+deb12u8 glib2: hash table collisions CPU usage DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-0039

镜像层: sha256:a06b35d9cd1dd4868ed3f1ff97b2b8bc05e8928d7c1a3ff1b570a2e83a603030

发布日期: 2012-01-14 17:55 修改: 2026-04-29 01:13
libglib2.0-0 CVE-2026-0988 低危 2.74.6-2+deb12u8 2.74.6-2+deb12u9 glib: GLib: Denial of Service via Integer Overflow in g_buffered_input_stream_peek()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0988

镜像层: sha256:a06b35d9cd1dd4868ed3f1ff97b2b8bc05e8928d7c1a3ff1b570a2e83a603030

发布日期: 2026-01-21 12:15 修改: 2026-06-17 10:11
libglib2.0-0 CVE-2026-1485 低危 2.74.6-2+deb12u8 2.74.6-2+deb12u9 Glib: Glib: Local denial of service via buffer underflow in content type parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1485

镜像层: sha256:a06b35d9cd1dd4868ed3f1ff97b2b8bc05e8928d7c1a3ff1b570a2e83a603030

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15
libc6 CVE-2019-9192 低危 2.36-9+deb12u13 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
libc6 CVE-2025-15281 低危 2.36-9+deb12u13 2.36-9+deb12u14 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:bd29502adf199ad9c03afba9bc79df572a26ec60a2a6ffdda4883a5b7a1632fe

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
libexpat1 CVE-2023-52426 低危 2.5.0-1+deb12u2 expat: recursive XML entity expansion vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2024-02-04 20:15 修改: 2026-06-17 06:42
openjdk-17-jre-headless CVE-2026-22007 低危 17.0.18+8-1~deb12u1 17.0.19+10-1~deb12u2 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19
openjdk-17-jre-headless CVE-2026-22018 低危 17.0.18+8-1~deb12u1 17.0.19+10-1~deb12u2 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19
openjdk-17-jre-headless CVE-2026-34268 低危 17.0.18+8-1~deb12u1 17.0.19+10-1~deb12u2 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38
openjdk-17-jre-headless CVE-2026-47010 低危 17.0.18+8-1~deb12u1 openjdk: OpenJDK: Enhance JPEG handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47010

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-07-21 22:17 修改: 2026-07-23 16:17
openjdk-17-jre-headless CVE-2026-47059 低危 17.0.18+8-1~deb12u1 openjdk: OpenJDK: Enhance AWT ImagingLib (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47059

镜像层: sha256:c1637068b819c9e362b4cf9e13e0ee1b5ebe42acab1f0848922bc60ee6995006

发布日期: 2026-07-21 22:17 修改: 2026-07-23 18:16
libexpat1 CVE-2024-28757 低危 2.5.0-1+deb12u2 expat: XML Entity Expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757

镜像层: sha256:c3e70ac51b35c50b1a76bb423932218a9782a3e9ba390664a41c94ba3ad4d1ed

发布日期: 2024-03-10 05:15 修改: 2026-06-17 07:21
liblcms2-2 CVE-2025-29070 低危 2.14-2 A heap buffer overflow vulnerability has been identified in thesmooth2 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29070

镜像层: sha256:afd09813d6dc137a9b06760116d9c48bc74ad70af38c86df103b66965c1dfc01

发布日期: 2025-04-01 21:15 修改: 2026-06-17 09:05
libuuid1 CVE-2026-53613 未知 2.38.1-5+deb12u3 [Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:1230ca28c337e605fa5b7910feb96c299b50ebd69f7feedb6143909b14f6ee52

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
Java (jar)
低危漏洞:2 中危漏洞:16 高危漏洞:6 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.17.1 2.18.8, 2.21.4, 2.22.1 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.17.1 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.17.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-06-23 21:17 修改: 2026-07-23 12:18
com.squareup.okhttp3:okhttp CVE-2021-0341 高危 3.12.12 4.9.2 okhttp: information disclosure via improperly used cryptographic function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-0341

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2021-02-10 17:15 修改: 2026-06-17 03:29
org.eclipse.jetty:jetty-http CVE-2026-2332 高危 11.0.25 12.1.7, 12.0.33 org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-04-14 12:16 修改: 2026-07-23 12:17
org.eclipse.jetty:jetty-security CVE-2026-10050 高危 11.0.25 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.17.1 2.18.8, 2.21.4 jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.google.guava:guava CVE-2023-2976 中危 31.0.1-jre 32.0.0-android guava: insecure temporary directory creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.17.1 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.squareup.okio:okio CVE-2023-3635 中危 1.15.0 3.4.0, 1.17.6 okio: GzipSource class improper exception handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3635

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2023-07-12 19:15 修改: 2026-06-17 06:14
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.17.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.24.3 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.24.3 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34478 中危 2.24.3 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34478

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.24.3 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.bouncycastle:bcpkix-jdk18on CVE-2026-5588 中危 1.80 1.84 bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:18
org.bouncycastle:bcprov-jdk18on CVE-2026-0636 中危 1.80.2 1.84 bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:17
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.17.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.eclipse.jetty:jetty-http CVE-2024-6763 中危 11.0.25 12.0.12 org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.17.1 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
org.eclipse.jetty:jetty-server CVE-2026-6790 中危 11.0.25 12.0.35, 12.1.9 In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6790

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:35
org.eclipse.jgit:org.eclipse.jgit CVE-2025-4949 中危 7.2.0.202503040940-r 7.2.1.202505142326-r, 7.1.1.202505221757-r, 7.0.1.202505221510-r, 6.10.1.202505221210-r, 6.0.0.202111291000-r, 5.13.4.202507202350-r org.eclipse.jgit: XXE vulnerability in Eclipse JGit

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4949

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2025-05-21 07:16 修改: 2026-06-17 09:34
org.eclipse.jetty:jetty-http CVE-2025-11143 低危 11.0.25 12.0.31, 12.1.5 org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11143

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2026-03-05 10:15 修改: 2026-06-17 08:29
com.google.guava:guava CVE-2020-8908 低危 31.0.1-jre 32.0.0-android guava: local information disclosure via temporary directory created with unsafe permissions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908

镜像层: sha256:e214499fcaabf514635c6aeac8024d6222de1ba57980cbb42f8df4b0e80481c0

发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×