docker.io/keycloak/keycloak:23.0 linux/amd64

docker.io/keycloak/keycloak:23.0 - Trivy安全扫描结果 扫描时间: 2026-07-20 12:10
全部漏洞信息
低危漏洞:63 中危漏洞:194 高危漏洞:76 严重漏洞:3

系统OS: redhat 9.3 扫描引擎: Trivy 扫描时间: 2026-07-20 12:10

docker.io/keycloak/keycloak:23.0 (redhat 9.3) (redhat)
低危漏洞:41 中危漏洞:85 高危漏洞:21 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
glibc CVE-2024-2961 高危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
glibc CVE-2024-33599 高危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
glibc-common CVE-2024-2961 高危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
glibc-common CVE-2024-33599 高危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
glibc-langpack-en CVE-2024-2961 高危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
glibc-langpack-en CVE-2024-33599 高危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
java-17-openjdk-headless CVE-2024-21147 高危 1:17.0.10.0.7-2.el9 1:17.0.12.0.7-2.el9 OpenJDK: RangeCheckElimination array index overflow (8323231)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21147

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2025-30749 高危 1:17.0.10.0.7-2.el9 1:17.0.16.0.8-2.el9 openjdk: Better Glyph drawing (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30749

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09
java-17-openjdk-headless CVE-2025-50059 高危 1:17.0.10.0.7-2.el9 1:17.0.16.0.8-2.el9 openjdk: Improve HTTP client header handling (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50059

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:34
java-17-openjdk-headless CVE-2025-50106 高危 1:17.0.10.0.7-2.el9 1:17.0.16.0.8-2.el9 openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50106

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:34
java-17-openjdk-headless CVE-2025-64720 高危 1:17.0.10.0.7-2.el9 1:17.0.18.0.8-1.el9 libpng: LIBPNG buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64720

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55
java-17-openjdk-headless CVE-2025-65018 高危 1:17.0.10.0.7-2.el9 1:17.0.18.0.8-1.el9 libpng: LIBPNG heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65018

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55
java-17-openjdk-headless CVE-2025-66293 高危 1:17.0.10.0.7-2.el9 1:17.0.19.0.10-2.el9 libpng: LIBPNG out-of-bounds read in png_image_read_composite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66293

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-12-03 21:15 修改: 2026-06-17 09:56
java-17-openjdk-headless CVE-2026-21945 高危 1:17.0.10.0.7-2.el9 1:17.0.18.0.8-1.el9 openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21945

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18
java-17-openjdk-headless CVE-2026-22016 高危 1:17.0.10.0.7-2.el9 1:17.0.19.0.10-2.el9 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18
java-17-openjdk-headless CVE-2026-22020 高危 1:17.0.10.0.7-2.el9 Important: java-17-openjdk security update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22020

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
java-17-openjdk-headless CVE-2026-25646 高危 1:17.0.10.0.7-2.el9 1:17.0.19.0.10-2.el9 libpng: LIBPNG has a heap buffer overflow in png_set_quantize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25646

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-02-10 18:16 修改: 2026-07-15 02:18
java-17-openjdk-headless CVE-2026-34282 高危 1:17.0.10.0.7-2.el9 1:17.0.19.0.10-2.el9 openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34282

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:20
libacl CVE-2026-54369 高危 2.3.1-3.el9 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-06-29 14:16 修改: 2026-07-15 01:16
libcap CVE-2026-4878 高危 2.48-9.el9_2 2.48-10.el9_8.1 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-04-09 16:16 修改: 2026-07-16 12:18
sqlite-libs CVE-2025-6965 高危 3.34.1-7.el9_3 3.34.1-9.el9_7 sqlite: Integer Truncation in SQLite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6965

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-07-15 14:15 修改: 2026-06-26 16:36
glibc-common CVE-2025-4802 中危 2.34-83.el9_3.7 2.34-168.el9_6.19 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
glibc-common CVE-2025-5702 中危 2.34-83.el9_3.7 2.34-168.el9_6.20 glibc: Vector register overwrite bug in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5702

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2025-06-05 19:15 修改: 2026-06-17 09:48
glibc-common CVE-2025-8058 中危 2.34-83.el9_3.7 2.34-168.el9_6.23 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
glibc-common CVE-2026-4046 中危 2.34-83.el9_3.7 2.34-270.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
glibc-common CVE-2026-4437 中危 2.34-83.el9_3.7 2.34-270.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc-common CVE-2026-5435 中危 2.34-83.el9_3.7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
glibc-common CVE-2026-5450 中危 2.34-83.el9_3.7 2.34-272.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-common CVE-2026-5928 中危 2.34-83.el9_3.7 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-common CVE-2026-6238 中危 2.34-83.el9_3.7 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
glibc CVE-2024-33600 中危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
glibc CVE-2025-0395 中危 2.34-83.el9_3.7 2.34-125.el9_5.8 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
glibc-langpack-en CVE-2023-4813 中危 2.34-83.el9_3.7 2.34-100.el9 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38
glibc-langpack-en CVE-2024-33600 中危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
glibc-langpack-en CVE-2025-0395 中危 2.34-83.el9_3.7 2.34-125.el9_5.8 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
glibc-langpack-en CVE-2025-4802 中危 2.34-83.el9_3.7 2.34-168.el9_6.19 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
glibc-langpack-en CVE-2025-5702 中危 2.34-83.el9_3.7 2.34-168.el9_6.20 glibc: Vector register overwrite bug in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5702

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-06-05 19:15 修改: 2026-06-17 09:48
glibc-langpack-en CVE-2025-8058 中危 2.34-83.el9_3.7 2.34-168.el9_6.23 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
glibc-langpack-en CVE-2026-4046 中危 2.34-83.el9_3.7 2.34-270.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
glibc-langpack-en CVE-2026-4437 中危 2.34-83.el9_3.7 2.34-270.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc-langpack-en CVE-2026-5435 中危 2.34-83.el9_3.7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
glibc-langpack-en CVE-2026-5450 中危 2.34-83.el9_3.7 2.34-272.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-langpack-en CVE-2026-5928 中危 2.34-83.el9_3.7 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-langpack-en CVE-2026-6238 中危 2.34-83.el9_3.7 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
glibc CVE-2025-4802 中危 2.34-83.el9_3.7 2.34-168.el9_6.19 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
glibc CVE-2025-5702 中危 2.34-83.el9_3.7 2.34-168.el9_6.20 glibc: Vector register overwrite bug in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5702

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2025-06-05 19:15 修改: 2026-06-17 09:48
glibc CVE-2025-8058 中危 2.34-83.el9_3.7 2.34-168.el9_6.23 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
glibc CVE-2026-0915 中危 2.34-83.el9_3.7 2.34-231.el9_7.10 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
glibc CVE-2026-4046 中危 2.34-83.el9_3.7 2.34-270.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
glibc CVE-2026-4437 中危 2.34-83.el9_3.7 2.34-270.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc CVE-2026-5435 中危 2.34-83.el9_3.7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
glibc CVE-2026-5450 中危 2.34-83.el9_3.7 2.34-272.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc CVE-2026-5928 中危 2.34-83.el9_3.7 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc CVE-2026-6238 中危 2.34-83.el9_3.7 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
coreutils-single CVE-2025-5278 中危 8.32-34.el9 8.32-41.el9_8 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2025-05-27 21:15 修改: 2026-07-15 14:17
glibc CVE-2023-4813 中危 2.34-83.el9_3.7 2.34-100.el9 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38
java-17-openjdk-headless CVE-2023-48161 中危 1:17.0.10.0.7-2.el9 1:17.0.13.0.11-3.el9 giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48161

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2023-11-22 06:15 修改: 2026-06-17 06:33
java-17-openjdk-headless CVE-2024-21011 中危 1:17.0.10.0.7-2.el9 1:17.0.11.0.9-2.el9 OpenJDK: long Exception message leading to crash (8319851)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21011

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2024-21068 中危 1:17.0.10.0.7-2.el9 1:17.0.11.0.9-2.el9 OpenJDK: integer overflow in C1 compiler address generation (8322122)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21068

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2024-21094 中危 1:17.0.10.0.7-2.el9 1:17.0.11.0.9-2.el9 OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21094

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2024-21131 中危 1:17.0.10.0.7-2.el9 1:17.0.12.0.7-2.el9 OpenJDK: potential UTF8 size overflow (8314794)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21131

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2024-21138 中危 1:17.0.10.0.7-2.el9 1:17.0.12.0.7-2.el9 OpenJDK: Excessive symbol length can lead to infinite loop (8319859)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21138

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2024-21140 中危 1:17.0.10.0.7-2.el9 1:17.0.12.0.7-2.el9 OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21140

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2024-21145 中危 1:17.0.10.0.7-2.el9 1:17.0.12.0.7-2.el9 OpenJDK: Out-of-bounds access in 2D image handling (8324559)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21145

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-07-16 23:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2024-21208 中危 1:17.0.10.0.7-2.el9 1:17.0.13.0.11-3.el9 JDK: HTTP client improper handling of maxHeaderSize (8328286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21208

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2024-21210 中危 1:17.0.10.0.7-2.el9 1:17.0.13.0.11-3.el9 JDK: Array indexing integer overflow (8328544)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21210

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2024-21217 中危 1:17.0.10.0.7-2.el9 1:17.0.13.0.11-3.el9 JDK: Unbounded allocation leads to out-of-memory error (8331446)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21217

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2024-21235 中危 1:17.0.10.0.7-2.el9 1:17.0.13.0.11-3.el9 JDK: Integer conversion error leads to incorrect range check (8332644)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21235

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-10-15 20:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2025-21502 中危 1:17.0.10.0.7-2.el9 1:17.0.14.0.7-2.el9 openjdk: Enhance array handling (Oracle CPU 2025-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21502

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-01-21 21:15 修改: 2026-06-17 08:43
java-17-openjdk-headless CVE-2025-21587 中危 1:17.0.10.0.7-2.el9 1:17.0.15.0.6-2.el9 openjdk: Better TLS connection support (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21587

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-04-15 21:15 修改: 2026-06-17 08:43
java-17-openjdk-headless CVE-2025-28164 中危 1:17.0.10.0.7-2.el9 libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28164

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04
java-17-openjdk-headless CVE-2025-30691 中危 1:17.0.10.0.7-2.el9 1:17.0.15.0.6-2.el9 openjdk: Improve compiler transformations (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30691

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09
java-17-openjdk-headless CVE-2025-30698 中危 1:17.0.10.0.7-2.el9 1:17.0.15.0.6-2.el9 openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30698

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-04-15 21:15 修改: 2026-06-17 09:09
java-17-openjdk-headless CVE-2025-30754 中危 1:17.0.10.0.7-2.el9 1:17.0.16.0.8-2.el9 openjdk: Enhance TLS protocol support (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30754

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09
java-17-openjdk-headless CVE-2025-53057 中危 1:17.0.10.0.7-2.el9 1:17.0.17.0.10-1.el9 openjdk: Enhance certificate handling (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53057

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37
java-17-openjdk-headless CVE-2025-53066 中危 1:17.0.10.0.7-2.el9 1:17.0.17.0.10-1.el9 openjdk: Enhance Path Factories (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53066

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37
java-17-openjdk-headless CVE-2025-64505 中危 1:17.0.10.0.7-2.el9 libpng: LIBPNG heap buffer overflow via malformed palette index

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64505

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54
java-17-openjdk-headless CVE-2025-64506 中危 1:17.0.10.0.7-2.el9 libpng: LIBPNG heap buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64506

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54
java-17-openjdk-headless CVE-2026-21925 中危 1:17.0.10.0.7-2.el9 1:17.0.18.0.8-1.el9 openjdk: Improve JMX connections (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21925

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19
java-17-openjdk-headless CVE-2026-21933 中危 1:17.0.10.0.7-2.el9 1:17.0.18.0.8-1.el9 openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21933

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19
java-17-openjdk-headless CVE-2026-22013 中危 1:17.0.10.0.7-2.el9 1:17.0.19.0.10-2.el9 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19
java-17-openjdk-headless CVE-2026-22021 中危 1:17.0.10.0.7-2.el9 1:17.0.19.0.10-2.el9 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19
java-17-openjdk-headless CVE-2026-22693 中危 1:17.0.10.0.7-2.el9 harfbuzz: Null Pointer Dereference in harfbuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22693

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-01-10 06:15 修改: 2026-06-17 10:20
java-17-openjdk-headless CVE-2026-22695 中危 1:17.0.10.0.7-2.el9 libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22695

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20
java-17-openjdk-headless CVE-2026-22801 中危 1:17.0.10.0.7-2.el9 libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22801

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20
java-17-openjdk-headless CVE-2026-23865 中危 1:17.0.10.0.7-2.el9 1:17.0.19.0.10-2.el9 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22
java-17-openjdk-headless CVE-2026-33416 中危 1:17.0.10.0.7-2.el9 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37
java-17-openjdk-headless CVE-2026-33636 中危 1:17.0.10.0.7-2.el9 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33636

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37
java-17-openjdk-headless CVE-2026-34757 中危 1:17.0.10.0.7-2.el9 libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39
java-17-openjdk-headless CVE-2026-41254 中危 1:17.0.10.0.7-2.el9 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41254

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-18 07:16 修改: 2026-06-17 10:46
glibc-common CVE-2023-4813 中危 2.34-83.el9_3.7 2.34-100.el9 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38
libacl CVE-2026-54370 中危 2.3.1-3.el9 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22
libattr CVE-2026-54371 中危 2.5.1-3.el9 attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-06-29 14:16 修改: 2026-07-15 01:16
glibc-common CVE-2024-33600 中危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libgcc CVE-2020-11023 中危 11.4.1-2.1.el9 11.5.0-5.el9_5 jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2020-04-29 21:15 修改: 2026-06-17 02:48
libtasn1 CVE-2024-12133 中危 4.16.0-8.el9_1 4.16.0-9.el9 libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12133

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2025-02-10 16:15 修改: 2026-06-30 03:16
nspr CVE-2024-6602 中危 4.35.0-6.el9_3 4.35.0-14.el9_2 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-07-09 15:15 修改: 2026-06-17 08:18
nss CVE-2024-6602 中危 3.90.0-6.el9_3 3.101.0-7.el9_2 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-07-09 15:15 修改: 2026-06-17 08:18
nss-softokn CVE-2024-6602 中危 3.90.0-6.el9_3 3.101.0-7.el9_2 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-07-09 15:15 修改: 2026-06-17 08:18
nss-softokn-freebl CVE-2024-6602 中危 3.90.0-6.el9_3 3.101.0-7.el9_2 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-07-09 15:15 修改: 2026-06-17 08:18
nss-sysinit CVE-2024-6602 中危 3.90.0-6.el9_3 3.101.0-7.el9_2 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-07-09 15:15 修改: 2026-06-17 08:18
nss-util CVE-2024-6602 中危 3.90.0-6.el9_3 3.101.0-7.el9_2 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-07-09 15:15 修改: 2026-06-17 08:18
p11-kit-trust CVE-2026-13757 中危 0.24.1-2.el9 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
p11-kit-trust CVE-2026-2100 中危 0.24.1-2.el9 0.26.2-1.el9 p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2100

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-03-26 21:17 修改: 2026-07-13 17:17
sed CVE-2026-5958 中危 4.8-9.el9 sed: GNU sed TOCTOU race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-20 12:16 修改: 2026-06-17 10:59
glibc-common CVE-2025-0395 中危 2.34-83.el9_3.7 2.34-125.el9_5.8 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
java-17-openjdk-headless CVE-2026-34268 低危 1:17.0.10.0.7-2.el9 1:17.0.19.0.10-2.el9 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38
glibc-langpack-en CVE-2024-33602 低危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
glibc-langpack-en CVE-2026-4438 低危 2.34-83.el9_3.7 2.34-270.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc CVE-2024-33601 低危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
glibc-common CVE-2024-33601 低危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
glibc-common CVE-2024-33602 低危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libgcc CVE-2021-46195 低危 11.4.1-2.1.el9 gcc: uncontrolled recursion in libiberty/rust-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46195

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2022-01-14 20:15 修改: 2026-06-17 04:14
libgcc CVE-2022-27943 低危 11.4.1-2.1.el9 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
glibc-common CVE-2026-4438 低危 2.34-83.el9_3.7 2.34-270.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
libtasn1 CVE-2025-13151 低危 4.16.0-8.el9_1 4.16.0-10.el9_8 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33
ncurses-base CVE-2022-29458 低危 6.2-10.20210508.el9 6.2-10.20210508.el9_6.2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40
ncurses-base CVE-2023-50495 低危 6.2-10.20210508.el9 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
ncurses-libs CVE-2022-29458 低危 6.2-10.20210508.el9 6.2-10.20210508.el9_6.2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40
ncurses-libs CVE-2023-50495 低危 6.2-10.20210508.el9 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
glibc CVE-2024-33602 低危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
nspr CVE-2020-12413 低危 4.35.0-6.el9_3 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51
nspr CVE-2024-7531 低危 4.35.0-6.el9_3 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20
glibc CVE-2025-15281 低危 2.34-83.el9_3.7 2.34-231.el9_7.10 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
nss CVE-2020-12413 低危 3.90.0-6.el9_3 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51
nss CVE-2024-7531 低危 3.90.0-6.el9_3 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20
glibc CVE-2026-0861 低危 2.34-83.el9_3.7 2.34-231.el9_7.10 glibc: Integer overflow in memalign leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
nss-softokn CVE-2020-12413 低危 3.90.0-6.el9_3 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51
nss-softokn CVE-2024-7531 低危 3.90.0-6.el9_3 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20
glibc CVE-2026-4438 低危 2.34-83.el9_3.7 2.34-270.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
nss-softokn-freebl CVE-2020-12413 低危 3.90.0-6.el9_3 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51
nss-softokn-freebl CVE-2024-7531 低危 3.90.0-6.el9_3 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20
ca-certificates CVE-2023-37920 低危 2023.2.60_v7.0.306-90.1.el9_2 2024.2.69_v8.0.303-91.4.el9_4 python-certifi: Removal of e-Tugra root certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37920

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2023-07-25 21:15 修改: 2026-06-17 06:08
nss-sysinit CVE-2020-12413 低危 3.90.0-6.el9_3 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51
nss-sysinit CVE-2024-7531 低危 3.90.0-6.el9_3 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20
glibc-langpack-en CVE-2024-33601 低危 2.34-83.el9_3.7 2.34-100.el9_4.2 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
nss-util CVE-2020-12413 低危 3.90.0-6.el9_3 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51
nss-util CVE-2024-7531 低危 3.90.0-6.el9_3 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20
java-17-openjdk-headless CVE-2024-21012 低危 1:17.0.10.0.7-2.el9 1:17.0.11.0.9-2.el9 OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21012

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-04-16 22:15 修改: 2026-06-17 07:08
java-17-openjdk-headless CVE-2026-22007 低危 1:17.0.10.0.7-2.el9 1:17.0.19.0.10-2.el9 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19
pcre2 CVE-2022-41409 低危 10.40-2.el9 pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
pcre2-syntax CVE-2022-41409 低危 10.40-2.el9 pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409

镜像层: sha256:684d2fbd7d95d24f83723ca374647249d8ca114d683f01963858f6f460226990

发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
java-17-openjdk-headless CVE-2026-22018 低危 1:17.0.10.0.7-2.el9 1:17.0.19.0.10-2.el9 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19
java-17-openjdk-headless CVE-2026-27171 低危 1:17.0.10.0.7-2.el9 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
sqlite-libs CVE-2024-0232 低危 3.34.1-7.el9_3 sqlite: use-after-free bug in jsonParseAddNodeArray

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0232

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2024-01-16 14:15 修改: 2026-06-17 06:53
sqlite-libs CVE-2025-70873 低危 3.34.1-7.el9_3 sqlite: SQLite: Information Disclosure via Crafted ZIP File

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-03-12 19:16 修改: 2026-06-17 10:03
zlib CVE-2026-27171 低危 1.2.11-40.el9 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:981780e1648c8311c9b25cdce8abbaf7b9dc34d3111157120d391957ef1d4a82

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
Java (jar)
低危漏洞:22 中危漏洞:109 高危漏洞:55 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
org.bouncycastle:bcprov-jdk18on CVE-2025-14813 严重 1.74 1.80.2, 1.81.1, 1.84 bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14813

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:16
org.bouncycastle:bcprov-jdk18on CVE-2025-14813 严重 1.74 1.80.2, 1.81.1, 1.84 bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14813

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:16
org.postgresql:postgresql CVE-2024-1597 严重 42.6.0 42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2 pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1597

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-02-19 13:15 修改: 2026-06-17 07:04
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.15.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-23 21:17 修改: 2026-07-17 13:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.15.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-23 21:17 修改: 2026-07-17 13:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.15.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-23 21:17 修改: 2026-07-17 13:18
com.microsoft.sqlserver:mssql-jdbc CVE-2025-59250 高危 12.2.0.jre11 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 JDBC Driver for SQL Server has improper input validation issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
commons-io:commons-io CVE-2024-47554 高危 2.13.0 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57
io.netty:netty-codec CVE-2026-42583 高危 4.1.100.Final 4.1.133.Final netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-dns CVE-2026-42579 高危 4.1.100.Final 4.2.13.Final, 4.1.133.Final netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec-haproxy CVE-2026-44893 高危 4.1.100.Final 4.2.15.Final, 4.1.135.Final netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44893

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 15:16 修改: 2026-07-15 02:22
io.netty:netty-codec-haproxy CVE-2026-48059 高危 4.1.100.Final 4.2.15.Final, 4.1.135.Final netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48059

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 16:16 修改: 2026-07-15 02:22
io.netty:netty-codec-http CVE-2026-33870 高危 4.1.100.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http CVE-2026-42584 高危 4.1.100.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec-http CVE-2026-42587 高危 4.1.100.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-13 19:17 修改: 2026-07-16 12:17
io.netty:netty-codec-http2 CVE-2025-55163 高危 4.1.100.Final 4.2.4.Final, 4.1.124.Final netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2 CVE-2026-33871 高危 4.1.100.Final 4.1.132.Final, 4.2.11.Final netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.100.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-13 19:17 修改: 2026-07-16 12:17
io.netty:netty-handler CVE-2025-24970 高危 4.1.100.Final 4.1.118.Final io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24970

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-02-10 22:15 修改: 2026-06-17 08:59
io.netty:netty-handler CVE-2026-44249 高危 4.1.100.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-11 22:16 修改: 2026-07-15 02:21
io.netty:netty-handler CVE-2026-45416 高危 4.1.100.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 15:16 修改: 2026-07-15 02:22
io.netty:netty-handler CVE-2026-50010 高危 4.1.100.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 16:16 修改: 2026-07-15 01:16
io.netty:netty-resolver-dns CVE-2026-45674 高危 4.1.100.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 15:16 修改: 2026-07-15 02:22
io.netty:netty-resolver-dns CVE-2026-47691 高危 4.1.100.Final 4.2.15.Final, 4.1.135.Final io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 16:16 修改: 2026-07-15 02:22
io.quarkus.http:quarkus-http-core CVE-2024-12397 高危 5.0.3.Final 5.3.4 io.quarkus.http/quarkus-http-core: Quarkus HTTP Cookie Smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12397

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-12-12 09:15 修改: 2026-06-17 06:59
io.quarkus:quarkus-core CVE-2024-2700 高危 3.2.10.Final 3.9.2, 3.8.4, 3.2.12.Final quarkus-core: Leak of local configuration properties into Quarkus applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2700

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-04-04 14:15 修改: 2026-06-17 07:25
io.quarkus:quarkus-vertx-http CVE-2026-39852 高危 3.2.10.Final 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1 io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39852

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-05 21:16 修改: 2026-07-15 02:20
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.15.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.15.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
org.keycloak:keycloak-core CVE-2023-6841 高危 23.0.7 24.0.0 keycloak: Amount of attributes per object is not limited and it may lead to DOS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6841

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-09-10 17:15 修改: 2026-06-17 06:51
org.keycloak:keycloak-core CVE-2024-10039 高危 23.0.7 26.0.6 keycloak-core: mTLS passthrough

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10039

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
org.keycloak:keycloak-quarkus-server CVE-2024-10451 高危 23.0.7 24.0.9, 26.0.6 org.keycloak:keycloak-quarkus-server: Sensitive Data Exposure in Keycloak Build Process

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10451

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-11-25 08:15 修改: 2026-06-17 06:55
org.keycloak:keycloak-saml-core CVE-2024-8698 高危 23.0.7 22.0.13, 24.0.8, 25.0.6 keycloak-saml-core: Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8698

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-09-19 16:15 修改: 2026-06-17 08:23
org.keycloak:keycloak-saml-core CVE-2026-7307 高危 23.0.7 26.6.2 keycloak: Keycloak: Denial of Service via specially crafted SAML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7307

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-19 12:16 修改: 2026-07-15 01:16
org.keycloak:keycloak-server-spi-private CVE-2026-2603 高危 23.0.7 26.5.5 keycloak: Keycloak: Unauthorized authentication via disabled SAML Identity Provider

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2603

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-18 02:16 修改: 2026-07-15 02:19
org.keycloak:keycloak-services CVE-2024-10270 高危 23.0.7 24.0.9, 26.0.6 org.keycloak:keycloak-services: Keycloak Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10270

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-11-25 08:15 修改: 2026-06-17 06:55
org.keycloak:keycloak-services CVE-2024-1132 高危 23.0.7 22.0.10, 24.0.3 keycloak: path transversal in redirection validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1132

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-04-17 14:15 修改: 2026-06-17 07:03
org.keycloak:keycloak-services CVE-2024-1249 高危 23.0.7 22.0.10, 24.0.3 keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginIframe leads to DDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1249

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-04-17 14:15 修改: 2026-06-17 07:03
org.keycloak:keycloak-services CVE-2024-2419 高危 23.0.7 22.0.10, 24.0.3 keycloak: path traversal in the redirect validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2419

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-04-17 14:15 修改: 2026-06-17 07:24
org.keycloak:keycloak-services CVE-2024-3656 高危 23.0.7 24.0.5 keycloak: Unguarded admin REST API endpoints allows low privilege users to use administrative functionalities

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3656

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-10-09 19:15 修改: 2026-06-17 07:44
org.keycloak:keycloak-services CVE-2024-4540 高危 23.0.7 24.0.5 keycloak: exposure of sensitive information in Pushed Authorization Requests (PAR) KC_RESTART cookie

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4540

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-06-03 16:15 修改: 2026-06-17 08:02
org.keycloak:keycloak-services CVE-2024-7341 高危 23.0.7 22.0.12, 24.0.7, 25.0.5 wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7341

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-09-09 19:15 修改: 2026-06-17 08:19
org.keycloak:keycloak-services CVE-2025-3501 高危 23.0.7 26.2.2 org.keycloak.protocol.services: Keycloak hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3501

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-04-29 21:15 修改: 2026-06-17 09:20
org.keycloak:keycloak-services CVE-2026-1486 高危 23.0.7 26.5.3, 26.4.9 org.keycloak.protocol.oidc.grants: Disabled identity providers are still accepted for JWT Authorization Grant

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1486

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-02-09 20:15 修改: 2026-07-15 02:18
org.keycloak:keycloak-services CVE-2026-1529 高危 23.0.7 26.5.3, 26.2.13, 26.4.9 org.keycloak.services.resources.organizations: Keycloak: Unauthorized organization registration via improper invitation token validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1529

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-02-09 20:15 修改: 2026-07-15 02:18
org.keycloak:keycloak-services CVE-2026-2092 高危 23.0.7 26.5.5 keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2092

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-18 02:16 修改: 2026-07-15 02:19
org.keycloak:keycloak-services CVE-2026-2603 高危 23.0.7 26.5.5 keycloak: Keycloak: Unauthorized authentication via disabled SAML Identity Provider

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2603

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-18 02:16 修改: 2026-07-15 02:19
org.keycloak:keycloak-services CVE-2026-3009 高危 23.0.7 26.5.5 org.keycloak/keycloak-services: Improper Enforcement of Disabled Identity Provider in IdentityBrokerService (Authentication Bypass)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3009

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-05 19:16 修改: 2026-07-15 02:20
org.keycloak:keycloak-services CVE-2026-3872 高危 23.0.7 26.5.7 keycloak: Keycloak: Information disclosure due to redirect_uri validation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3872

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-02 13:16 修改: 2026-07-15 02:21
org.keycloak:keycloak-services CVE-2026-4282 高危 23.0.7 26.5.7 keycloak: Keycloak: Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4282

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-02 13:16 修改: 2026-07-15 02:22
org.keycloak:keycloak-services CVE-2026-4634 高危 23.0.7 26.5.7 keycloak: Keycloak: Denial of Service via excessive processing of OpenID Connect scope parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4634

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-02 13:16 修改: 2026-07-15 02:22
org.keycloak:keycloak-services CVE-2026-4636 高危 23.0.7 26.5.7 keycloak: Keycloak: UMA policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4636

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-02 13:16 修改: 2026-07-15 02:22
org.keycloak:keycloak-services CVE-2026-7504 高危 23.0.7 26.6.2 org.keycloak/keycloak-services: Open redirect when using wildcard valid redirect URIs in Keycloak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7504

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-19 12:16 修改: 2026-07-15 01:17
org.keycloak:keycloak-services CVE-2026-7507 高危 23.0.7 26.6.2 org.keycloak/keycloak-services: Session fixation in OIDC login flow that can lead to account takeover

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7507

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-19 12:16 修改: 2026-07-15 01:17
org.keycloak:keycloak-services CVE-2026-7571 高危 23.0.7 26.6.2 keycloak: Keycloak: Access token disclosure and implicit flow bypass via forged client data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7571

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-19 12:16 修改: 2026-06-17 11:02
org.keycloak:keycloak-services CVE-2026-9795 高危 23.0.7 26.6.4 keycloak: Keycloak: Privilege escalation via improper scope mapping enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9795

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-28 05:16 修改: 2026-07-15 01:17
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.15.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
org.postgresql:postgresql CVE-2026-42198 高危 42.6.0 42.7.11 jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-29 16:16 修改: 2026-07-15 02:21
io.vertx:vertx-web CVE-2025-11965 中危 4.4.6 4.5.22, 5.0.5 io.vertx/vertx-core: Eclipse Vert.x Access Control Flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11965

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-10-22 15:15 修改: 2026-06-17 08:31
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.12.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.james:apache-mime4j-core CVE-2024-21742 中危 0.8.9 0.8.10 Mime4J: Mime4J DOM header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21742

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-02-27 17:15 修改: 2026-06-17 07:10
org.bouncycastle:bcpkix-jdk18on CVE-2025-8916 中危 1.74 1.79 org.bouncycastle: BouncyCastle denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8916

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-08-13 10:15 修改: 2026-06-17 10:07
org.bouncycastle:bcpkix-jdk18on CVE-2026-5588 中危 1.74 1.84 bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:18
io.netty:netty-codec-http CVE-2026-41417 中危 4.1.100.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http CVE-2026-42580 中危 4.1.100.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
org.bouncycastle:bcprov-jdk18on CVE-2024-29857 中危 1.74 1.78 org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-05-14 15:17 修改: 2026-06-17 07:23
org.bouncycastle:bcprov-jdk18on CVE-2024-29857 中危 1.74 1.78 org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-05-14 15:17 修改: 2026-06-17 07:23
org.bouncycastle:bcprov-jdk18on CVE-2024-30171 中危 1.74 1.78 bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30171

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26
org.bouncycastle:bcprov-jdk18on CVE-2024-30171 中危 1.74 1.78 bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30171

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26
org.bouncycastle:bcprov-jdk18on CVE-2024-30172 中危 1.74 1.78 org.bouncycastle:bcprov-jdk18on: Infinite loop in ED25519 verification in the ScalarUtil class

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30172

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26
org.bouncycastle:bcprov-jdk18on CVE-2024-30172 中危 1.74 1.78 org.bouncycastle:bcprov-jdk18on: Infinite loop in ED25519 verification in the ScalarUtil class

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30172

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26
org.bouncycastle:bcprov-jdk18on CVE-2024-34447 中危 1.74 1.78 org.bouncycastle: Use of Incorrectly-Resolved Name or Reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34447

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-05-03 16:15 修改: 2026-06-17 07:33
org.bouncycastle:bcprov-jdk18on CVE-2024-34447 中危 1.74 1.78 org.bouncycastle: Use of Incorrectly-Resolved Name or Reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34447

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-05-03 16:15 修改: 2026-06-17 07:33
org.bouncycastle:bcprov-jdk18on CVE-2025-8885 中危 1.74 1.78 bouncycastle: Bouncy Castle denial of service parsing ASN.1 Object Identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8885

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-08-12 10:15 修改: 2026-06-17 10:07
org.bouncycastle:bcprov-jdk18on CVE-2025-8885 中危 1.74 1.78 bouncycastle: Bouncy Castle denial of service parsing ASN.1 Object Identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8885

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-08-12 10:15 修改: 2026-06-17 10:07
org.bouncycastle:bcprov-jdk18on CVE-2026-0636 中危 1.74 1.84 bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:17
org.bouncycastle:bcprov-jdk18on CVE-2026-0636 中危 1.74 1.84 bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:17
org.eclipse.angus:smtp CVE-2025-7962 中危 2.0.1 2.0.4 com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7962

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-07-21 18:15 修改: 2026-06-23 12:16
org.infinispan:infinispan-cachestore-remote CVE-2023-5384 中危 14.0.21.Final 15.0.0.Dev07, 14.0.25.Final infinispan: Credentials returned from configuration as clear text

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5384

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2023-12-18 14:15 修改: 2026-06-17 06:48
org.keycloak:keycloak-account-ui CVE-2025-10044 中危 23.0.7 26.2.9, 26.3.4 keycloak: Keycloak error_description injection on error pages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10044

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-09-05 20:15 修改: 2026-06-17 08:27
org.keycloak:keycloak-admin-ui CVE-2025-10044 中危 23.0.7 26.2.9, 26.3.4 keycloak: Keycloak error_description injection on error pages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10044

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-09-05 20:15 修改: 2026-06-17 08:27
io.netty:netty-codec-http CVE-2026-42581 中危 4.1.100.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec-http CVE-2026-42585 中危 4.1.100.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
org.keycloak:keycloak-core CVE-2024-7260 中危 23.0.7 24.0.7 keycloak-core: Open Redirect on Account page

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7260

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-09-09 19:15 修改: 2026-06-17 08:19
org.keycloak:keycloak-core CVE-2024-7318 中危 23.0.7 24.0.7, 25.0.4 keycloak-core: One Time Passcode (OTP) is valid longer than expiration timeSeverity

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7318

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-09-09 19:15 修改: 2026-06-17 08:19
org.keycloak:keycloak-ldap-federation CVE-2025-0604 中危 23.0.7 26.1.3, 26.0.10 keycloak-ldap-federation: Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0604

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-01-22 15:15 修改: 2026-06-17 08:26
org.keycloak:keycloak-ldap-federation CVE-2025-13467 中危 23.0.7 26.4.6, 26.2.11 org.keycloak.storage.ldap: Keycloak: Deserialization of Untrusted Data in LDAP User Federation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13467

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-11-25 16:16 修改: 2026-06-17 08:34
org.keycloak:keycloak-ldap-federation CVE-2026-9801 中危 23.0.7 26.6.3 keycloak: Keycloak: Denial of Service via malformed LDAP password policy response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9801

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-28 06:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-model-jpa CVE-2026-3190 中危 23.0.7 26.5.6 keycloak: Keycloak: Information Disclosure via improper role enforcement in UMA 2.0 Protection API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3190

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-26 19:17 修改: 2026-06-17 10:43
io.netty:netty-codec-http CVE-2026-50020 中危 4.1.100.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
org.keycloak:keycloak-quarkus-server CVE-2024-10492 中危 23.0.7 26.0.6 keycloak-quarkus-server: Keycloak path trasversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10492

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-11-25 08:15 修改: 2026-06-17 06:55
org.keycloak:keycloak-quarkus-server CVE-2024-11734 中危 23.0.7 26.0.8 org.keycloak:keycloak-quarkus-server: Denial of Service in Keycloak Server via Security Headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11734

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-01-14 09:15 修改: 2026-06-17 06:58
org.keycloak:keycloak-quarkus-server CVE-2024-11736 中危 23.0.7 26.0.8 org.keycloak:keycloak-quarkus-server: Unrestricted admin use of system and environment variables

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11736

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-01-14 09:15 修改: 2026-06-17 06:58
org.keycloak:keycloak-quarkus-server CVE-2024-9666 中危 23.0.7 26.0.6 org.keycloak/keycloak-quarkus-server: Keycloak proxy header handling Denial-of-Service (DoS) vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9666

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-11-25 08:15 修改: 2026-06-17 08:25
org.keycloak:keycloak-quarkus-server CVE-2025-11537 中危 23.0.7 26.5.6 keycloak-server: Sensitive headers shown in the HTTP access logs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11537

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-02-10 11:16 修改: 2026-06-17 08:30
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.15.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.15.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
org.keycloak:keycloak-saml-core CVE-2026-2575 中危 23.0.7 26.5.4 keycloak: Keycloak: Denial of Service due to excessive SAMLRequest decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2575

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-18 04:17 修改: 2026-06-17 10:31
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.15.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
org.keycloak:keycloak-server-spi-private CVE-2026-0871 中危 23.0.7 26.5.2 org.keycloak/keycloak-services: Keycloak: Unauthorized modification of unmanaged user attributes by administrators

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0871

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-02-27 08:17 修改: 2026-06-17 10:11
org.keycloak:keycloak-server-spi-private CVE-2026-3190 中危 23.0.7 26.5.6 keycloak: Keycloak: Information Disclosure via improper role enforcement in UMA 2.0 Protection API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3190

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-26 19:17 修改: 2026-06-17 10:43
org.keycloak:keycloak-server-spi-private CVE-2026-9704 中危 23.0.7 26.6.3 keycloak: Keycloak: Privilege escalation due to oversized subject_token JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9704

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-27 14:17 修改: 2026-06-26 08:16
org.keycloak:keycloak-server-spi-private CVE-2026-9791 中危 23.0.7 26.6.3 keycloak-rhel9: Organization Data Leak After Feature Disabled in Keycloak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9791

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-28 05:16 修改: 2026-06-26 08:16
io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.100.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.100.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 16:16 修改: 2026-07-15 02:22
io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.100.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-common CVE-2024-47535 中危 4.1.100.Final 4.1.115.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common CVE-2025-25193 中危 4.1.100.Final 4.1.118.Final netty: Denial of Service attack on windows app using Netty

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
io.netty:netty-codec CVE-2025-58057 中危 4.1.100.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.15.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.15.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.15.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.15.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.15.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-resolver-dns CVE-2026-45673 中危 4.1.100.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.100.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.100.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.15.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.quarkus.resteasy.reactive:resteasy-reactive CVE-2024-1726 中危 3.2.10.Final 3.8.0, 3.7.4, 3.2.11.Final quarkus: security checks for some inherited endpoints performed after serialization in RESTEasy Reactive may trigger a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1726

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-04-25 17:15 修改: 2026-06-17 07:04
io.netty:netty-codec-http CVE-2024-29025 中危 4.1.100.Final 4.1.108.Final netty-codec-http: Allocation of Resources Without Limits or Throttling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22
io.quarkus:quarkus-vertx CVE-2025-49574 中危 3.2.10.Final 3.15.6, 3.20.2, 3.24.1 io.quarkus/quarkus-vertx: Quarkus potential data leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49574

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-06-23 20:15 修改: 2026-06-17 09:31
io.netty:netty-codec-http CVE-2025-67735 中危 4.1.100.Final 4.2.8.Final, 4.1.129.Final netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.vertx:vertx-core CVE-2024-1023 中危 4.4.6 4.5.2, 4.4.7 io.vertx/vertx-core: memory leak due to the use of Netty FastThreadLocal data structures in Vertx

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1023

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:03
io.vertx:vertx-core CVE-2024-1300 中危 4.4.6 4.4.8, 4.5.3 io.vertx:vertx-core: memory leak when a TCP server is configured with TLS and SNI support

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1300

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-04-02 08:15 修改: 2026-06-17 07:03
org.keycloak:keycloak-services CVE-2023-3597 中危 23.0.7 22.0.10, 24.0.3 keycloak: secondary factor bypass in step-up authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3597

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-04-25 13:15 修改: 2026-06-17 06:14
org.keycloak:keycloak-services CVE-2023-6544 中危 23.0.7 22.0.10, 24.0.3 keycloak: Authorization Bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6544

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-04-25 16:15 修改: 2026-06-17 06:50
org.keycloak:keycloak-services CVE-2023-6717 中危 23.0.7 22.0.10, 24.0.3 keycloak: XSS via assertion consumer service URL in SAML POST-binding flow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6717

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-04-25 16:15 修改: 2026-06-17 06:51
org.keycloak:keycloak-services CVE-2023-6787 中危 23.0.7 22.0.10, 24.0.3 keycloak: session hijacking via re-authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6787

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-04-25 16:15 修改: 2026-06-17 06:51
org.keycloak:keycloak-services CVE-2024-4629 中危 23.0.7 22.0.12, 24.0.7, 25.0.4 keycloak: potential bypass of brute force protection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4629

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-09-03 20:15 修改: 2026-06-17 08:02
org.keycloak:keycloak-services CVE-2024-8883 中危 23.0.7 22.0.13, 24.0.8, 25.0.6 Keycloak: Vulnerable Redirect URI Validation Results in Open Redirec

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8883

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-09-19 16:15 修改: 2026-06-17 08:23
org.keycloak:keycloak-services CVE-2025-11429 中危 23.0.7 26.4.1, 26.2.11 keycloak-server: Too long and not settings compliant session

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11429

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-10-23 14:15 修改: 2026-06-17 08:30
org.keycloak:keycloak-services CVE-2025-12110 中危 23.0.7 26.2.3 keycloak: org.keycloak:keycloak-services: User can refresh offline session even after client's offline_access scope was removed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12110

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-10-23 15:15 修改: 2026-06-17 08:31
org.keycloak:keycloak-services CVE-2025-12390 中危 23.0.7 26.0.0 org.keycloak.protocol.oidc.endpoints.LogoutEndpoint: Offline Session takeover due to reused Authentication Session ID

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12390

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-10-28 14:15 修改: 2026-06-17 08:32
org.keycloak:keycloak-services CVE-2025-1391 中危 23.0.7 26.1.3, 26.0.10 keycloak-services: Improper Authorization in Keycloak Organization Mapper Allows Unauthorized Organization Claims

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1391

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-02-17 14:15 修改: 2026-06-17 08:39
org.keycloak:keycloak-services CVE-2025-14559 中危 23.0.7 26.5.2, 26.4.9 org.keycloak/keycloak-services: Keycloak keycloak-services: Business logic flaw allows unauthorized token issuance for disabled users

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14559

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-01-21 07:16 修改: 2026-06-17 08:36
org.keycloak:keycloak-services CVE-2025-14778 中危 23.0.7 26.2.13, 26.5.3, 26.4.9 keycloak: Incorrect ownership checks in /uma-policy/

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14778

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-02-09 20:15 修改: 2026-06-17 08:36
org.keycloak:keycloak-services CVE-2025-2559 中危 23.0.7 org.keycloak/keycloak-services: JWT Token Cache Exhaustion Leading to Denial of Service (DoS) in Keycloak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2559

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-03-25 09:15 修改: 2026-06-17 09:07
org.keycloak:keycloak-services CVE-2025-3910 中危 23.0.7 26.2.2 org.keycloak.authentication: Two factor authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3910

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-04-29 21:15 修改: 2026-06-17 09:20
org.keycloak:keycloak-services CVE-2025-7365 中危 23.0.7 26.0.13, 26.2.6 keycloak: Phishing attack via email verification step in first login flow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7365

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-07-10 15:15 修改: 2026-06-17 10:04
org.keycloak:keycloak-services CVE-2025-8419 中危 23.0.7 26.2.8, 26.3.3 org.keycloak/keycloak-services: Keycloak SMTP Inject Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8419

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-08-06 17:15 修改: 2026-06-17 10:06
org.keycloak:keycloak-services CVE-2026-2575 中危 23.0.7 26.5.4 keycloak: Keycloak: Denial of Service due to excessive SAMLRequest decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2575

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-18 04:17 修改: 2026-06-17 10:31
org.keycloak:keycloak-services CVE-2026-3121 中危 23.0.7 26.5.6 keycloak: org.keycloak/keycloak-services: Keycloak: Privilege escalation via manage-clients permission

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3121

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-26 19:17 修改: 2026-06-17 10:43
org.keycloak:keycloak-services CVE-2026-3190 中危 23.0.7 26.5.6 keycloak: Keycloak: Information Disclosure via improper role enforcement in UMA 2.0 Protection API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3190

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-26 19:17 修改: 2026-06-17 10:43
org.keycloak:keycloak-services CVE-2026-3429 中危 23.0.7 org.keycloak.services.resources.account: Improper Access Control Leading to MFA Deletion and Account Takeover in Keycloak Account REST API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3429

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-11 17:16 修改: 2026-06-17 10:43
org.keycloak:keycloak-services CVE-2026-37978 中危 23.0.7 26.6.2 keycloak: org.keycloak.services: Keycloak: Information Disclosure via evaluate-scopes Admin API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37978

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-19 12:16 修改: 2026-06-17 10:41
org.keycloak:keycloak-services CVE-2026-37979 中危 23.0.7 26.6.2 keycloak: Keycloak: Information disclosure via OIDC token introspection endpoint audience bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37979

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-19 12:16 修改: 2026-06-17 10:41
org.keycloak:keycloak-services CVE-2026-37980 中危 23.0.7 org.keycloak.forms.login: keycloak: Keycloak: Arbitrary code execution via Stored Cross-Site Scripting (XSS) in organization selection login page

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37980

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-14 15:16 修改: 2026-06-17 10:41
org.keycloak:keycloak-services CVE-2026-37981 中危 23.0.7 26.4.12, 26.6.2 keycloak: org.keycloak.authorization: Keycloak: Information disclosure via broken access control in user lookup endpoint

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37981

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-19 12:16 修改: 2026-06-17 10:41
org.keycloak:keycloak-services CVE-2026-37982 中危 23.0.7 26.6.2 keycloak: org.keycloak.authentication: Keycloak: Unauthorized account takeover via WebAuthn token replay

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37982

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-19 12:16 修改: 2026-06-17 10:41
org.keycloak:keycloak-services CVE-2026-4325 中危 23.0.7 26.5.7 keycloak: Keycloak: Replay of action tokens via improper handling of single-use entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4325

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-02 13:16 修改: 2026-06-17 10:56
org.keycloak:keycloak-services CVE-2026-4628 中危 23.0.7 keycloak: org.keycloak.authorization: Keycloak: Unauthorized resource modification due to improper access control

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4628

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-23 09:16 修改: 2026-06-17 10:56
org.keycloak:keycloak-services CVE-2026-4630 中危 23.0.7 26.6.2 keycloak: Keycloak: Unauthorized resource access and data modification via Insecure Direct Object Reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4630

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-19 12:16 修改: 2026-06-17 10:56
org.keycloak:keycloak-services CVE-2026-7500 中危 23.0.7 org.keycloak.keycloak-services: Improper Access Control on Keycloak Server when the account Account API feature is disabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7500

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-30 15:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-8830 中危 23.0.7 26.6.3 keycloak: org.keycloak/keycloak-services: Keycloak: Policy bypass during WebAuthn credential registration via client-side JavaScript manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8830

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-19 07:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-8922 中危 23.0.7 org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: Security flaw in org.keycloak/keycloak-services

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8922

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-19 08:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9087 中危 23.0.7 26.6.3 keycloak: Cross-Session Email Verification Proof Not Bound to Upstream Identity in First-Broker-Login

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9087

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-20 17:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9689 中危 23.0.7 keycloak: org.keycloak.protocol.oidc: HTTP Parameter Pollution in OIDC redirect URI allows response parameter duplication - #GHI-604

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9689

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-27 12:17 修改: 2026-06-17 11:05
org.keycloak:keycloak-services CVE-2026-9704 中危 23.0.7 26.6.3 keycloak: Keycloak: Privilege escalation due to oversized subject_token JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9704

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-27 14:17 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9791 中危 23.0.7 26.6.3 keycloak-rhel9: Organization Data Leak After Feature Disabled in Keycloak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9791

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-28 05:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9792 中危 23.0.7 26.6.3 keycloak: Keycloak: Security restriction bypass allows unauthorized ROPC token acquisition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9792

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-28 05:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9793 中危 23.0.7 keycloak: Keycloak: Security policy bypass in JWE-encrypted request object processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9793

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-28 05:16 修改: 2026-06-17 11:05
org.keycloak:keycloak-services CVE-2026-9794 中危 23.0.7 26.6.3 keycloak: Keycloak: Information disclosure via SAML ECP endpoint

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9794

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-28 05:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9798 中危 23.0.7 keycloak: Keycloak: Brute-force protection bypass in CIBA flow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9798

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-28 06:16 修改: 2026-06-17 11:05
org.keycloak:keycloak-services CVE-2026-9802 中危 23.0.7 26.6.3 keycloak: Keycloak: Unauthorized account access via replayed refresh tokens after cluster restart

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9802

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-28 06:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9803 中危 23.0.7 26.6.3 keycloak: Keycloak: Denial of Service via malformed Authorization header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9803

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-28 06:16 修改: 2026-06-26 08:16
io.vertx:vertx-core CVE-2026-1002 中危 4.4.6 4.5.24, 5.0.7 io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1002

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-01-15 21:16 修改: 2026-06-17 10:14
io.vertx:vertx-core CVE-2026-6860 中危 4.4.6 4.5.27, 5.0.12 eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6860

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-06 10:16 修改: 2026-06-17 11:01
org.keycloak:keycloak-ldap-federation CVE-2024-5967 低危 23.0.7 25.0.1, 22.0.12, 24.0.6 keycloak: Leak of configured LDAP bind credentials through the Keycloak admin console

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5967

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-06-18 12:15 修改: 2026-06-17 08:17
org.keycloak:keycloak-core CVE-2024-4028 低危 23.0.7 keycloak-core: Stored XSS in Keycloak when creating a items in Admin Console

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4028

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-02-18 18:15 修改: 2026-06-17 08:00
io.vertx:vertx-web CVE-2025-11966 低危 4.4.6 4.5.22, 5.0.5 io.vertx/vertx-web: Eclipse Vert.x cross site scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11966

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-10-22 15:15 修改: 2026-06-17 08:31
org.keycloak:keycloak-quarkus-server CVE-2025-10939 低危 23.0.7 26.4.4 org.keycloak/keycloak-quarkus-server: Unable to restrict access to the admin console

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10939

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-10-28 04:16 修改: 2026-06-17 08:29
org.keycloak:keycloak-quarkus-server CVE-2026-0976 低危 23.0.7 org.keycloak/keycloak-quarkus-server: Keycloak: Proxy bypass due to improper handling of matrix parameters in URL paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0976

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-01-15 13:16 修改: 2026-06-17 10:11
org.keycloak:keycloak-services CVE-2021-3754 低危 23.0.7 24.0.1 keycloak: allows using email as username

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3754

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2022-08-26 16:15 修改: 2026-06-17 04:05
org.keycloak:keycloak-services CVE-2023-0657 低危 23.0.7 22.0.10, 24.0.3 keycloak: impersonation via logout token exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0657

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-11-17 11:15 修改: 2026-06-17 05:26
org.keycloak:keycloak-services CVE-2024-1722 低危 23.0.7 24.0.0 keycloak-core: DoS via account lockout

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1722

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2024-02-29 01:43 修改: 2026-06-17 07:04
org.keycloak:keycloak-services CVE-2025-12150 低危 23.0.7 26.4.4 org.keycloak/keycloak-services: WebAuthn Attestation Statement Verification Bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12150

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-02-27 09:16 修改: 2026-06-17 08:31
org.keycloak:keycloak-services CVE-2025-13881 低危 23.0.7 26.5.2, 26.4.9 org.keycloak.services.resources.admin: Keycloak: Limited administrator can retrieve sensitive user attributes via Admin API

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13881

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-02-02 06:16 修改: 2026-06-17 08:34
org.keycloak:keycloak-services CVE-2025-14082 低危 23.0.7 26.5.0 keycloak-services: Keycloak Admin REST API: Improper Access Control leads to sensitive role metadata information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14082

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-12-10 09:15 修改: 2026-06-17 08:35
org.keycloak:keycloak-services CVE-2025-14083 低危 23.0.7 keycloak-server: Keycloak: Improper Access Control in Admin REST API leads to information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14083

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-01-21 13:16 修改: 2026-06-17 08:35
org.keycloak:keycloak-services CVE-2026-1035 低危 23.0.7 org.keycloak.protocol.oidc: Keycloak Refresh Token Reuse Bypass via TOCTOU Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1035

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-01-21 06:15 修改: 2026-06-17 10:14
org.keycloak:keycloak-services CVE-2026-1190 低危 23.0.7 org.keycloak/keycloak-services: Keycloak SAML brokering: Response delay due to unchecked NotOnOrAfter in SubjectConfirmationData

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1190

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:15
org.keycloak:keycloak-services CVE-2026-2733 低危 23.0.7 org.keycloak/keycloak-services: Keycloak: Missing Check on Disabled Client for Docker Registry Protocol

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2733

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-02-19 08:16 修改: 2026-06-17 10:31
org.keycloak:keycloak-services CVE-2026-37977 低危 23.0.7 26.4.13, 26.6.3 keycloak: org.keycloak.protocol.oidc.grants.ciba: Keycloak: Information disclosure via CORS header injection due to unvalidated JWT azp claim

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37977

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-04-06 09:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-3911 低危 23.0.7 org.keycloak.services.resources.admin.UserResource: Keycloak: Information disclosure of disabled user attributes via administrative endpoint

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3911

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-11 06:17 修改: 2026-06-17 10:44
org.keycloak:keycloak-services CVE-2026-4633 低危 23.0.7 26.6.1, 26.4.12 keycloak: Keycloak: User enumeration via differential error messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4633

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-23 11:16 修改: 2026-06-17 10:56
org.keycloak:keycloak-services CVE-2026-4874 低危 23.0.7 26.6.3, 26.4.13 org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: Keycloak: Server-Side Request Forgery via OIDC token endpoint manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4874

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-03-26 08:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9088 低危 23.0.7 26.7.0 keycloak: Keycloak: Information disclosure due to user profile permission bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9088

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-06-05 08:16 修改: 2026-06-26 08:16
io.netty:netty-handler-proxy CVE-2026-42578 低危 4.1.100.Final 4.1.133.Final, 4.2.13.Final netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec-http CVE-2025-58056 低危 4.1.100.Final 4.1.125.Final, 4.2.5.Final netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056

镜像层: sha256:b6507749a39c61a29e2ed690c8f0d2a61d5d291ca35bae76b459bdf7933af986

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×