docker.io/keycloak/keycloak:26.2 linux/amd64

docker.io/keycloak/keycloak:26.2 - Trivy安全扫描结果 扫描时间: 2026-08-17 13:58
全部漏洞信息
低危漏洞:52 中危漏洞:146 高危漏洞:67 严重漏洞:2

系统OS: redhat 9.6 扫描引擎: Trivy 扫描时间: 2026-08-17 13:58

docker.io/keycloak/keycloak:26.2 (redhat 9.6) (redhat)
低危漏洞:35 中危漏洞:60 高危漏洞:16 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
java-21-openjdk-headless CVE-2025-30749 高危 1:21.0.7.0.6-1.el9 1:21.0.8.0.9-1.el9 openjdk: Better Glyph drawing (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30749

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09
java-21-openjdk-headless CVE-2025-50059 高危 1:21.0.7.0.6-1.el9 1:21.0.8.0.9-1.el9 openjdk: Improve HTTP client header handling (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50059

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:34
java-21-openjdk-headless CVE-2025-50106 高危 1:21.0.7.0.6-1.el9 1:21.0.8.0.9-1.el9 openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50106

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:34
java-21-openjdk-headless CVE-2025-64720 高危 1:21.0.7.0.6-1.el9 1:21.0.10.0.7-1.el9 libpng: LIBPNG buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64720

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55
java-21-openjdk-headless CVE-2025-65018 高危 1:21.0.7.0.6-1.el9 1:21.0.10.0.7-1.el9 libpng: LIBPNG heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65018

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55
java-21-openjdk-headless CVE-2025-66293 高危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 libpng: LIBPNG out-of-bounds read in png_image_read_composite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66293

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-12-03 21:15 修改: 2026-06-17 09:56
java-21-openjdk-headless CVE-2026-21945 高危 1:21.0.7.0.6-1.el9 1:21.0.10.0.7-1.el9 openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21945

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-01-20 22:15 修改: 2026-07-15 02:18
java-21-openjdk-headless CVE-2026-22016 高危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22016

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:18
java-21-openjdk-headless CVE-2026-22020 高危 1:21.0.7.0.6-1.el9 Important: java-17-openjdk security update

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22020

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
java-21-openjdk-headless CVE-2026-25646 高危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 libpng: LIBPNG has a heap buffer overflow in png_set_quantize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25646

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-02-10 18:16 修改: 2026-08-11 13:17
java-21-openjdk-headless CVE-2026-26740 高危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26740

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-03-18 18:16 修改: 2026-07-23 12:17
java-21-openjdk-headless CVE-2026-34282 高危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34282

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-21 21:16 修改: 2026-07-15 02:20
java-21-openjdk-headless CVE-2026-47063 高危 1:21.0.7.0.6-1.el9 1:21.0.12.0.8-1.2.el9 openjdk: Enhance Jar handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47063

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:50
libacl CVE-2026-54369 高危 2.3.1-4.el9 2.4.0-1.el9_8 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-06-29 14:16 修改: 2026-08-11 13:18
libcap CVE-2026-4878 高危 2.48-9.el9_2 2.48-10.el9_8.1 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-04-09 16:16 修改: 2026-08-15 21:16
sqlite-libs CVE-2025-6965 高危 3.34.1-7.el9_3 3.34.1-9.el9_7 sqlite: Integer Truncation in SQLite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6965

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-07-15 14:15 修改: 2026-06-26 16:36
glibc-common CVE-2026-4046 中危 2.34-168.el9_6.14 2.34-270.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
glibc-common CVE-2026-4437 中危 2.34-168.el9_6.14 2.34-270.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc-common CVE-2026-5435 中危 2.34-168.el9_6.14 2.34-274.el9_8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
glibc-common CVE-2026-5450 中危 2.34-168.el9_6.14 2.34-272.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-common CVE-2026-5928 中危 2.34-168.el9_6.14 2.34-274.el9_8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-common CVE-2026-6238 中危 2.34-168.el9_6.14 2.34-274.el9_8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
glibc-langpack-en CVE-2025-4802 中危 2.34-168.el9_6.14 2.34-168.el9_6.19 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
glibc-langpack-en CVE-2025-5702 中危 2.34-168.el9_6.14 2.34-168.el9_6.20 glibc: Vector register overwrite bug in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5702

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-06-05 19:15 修改: 2026-06-17 09:48
glibc-langpack-en CVE-2025-8058 中危 2.34-168.el9_6.14 2.34-168.el9_6.23 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
glibc-langpack-en CVE-2026-4046 中危 2.34-168.el9_6.14 2.34-270.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
glibc-langpack-en CVE-2026-4437 中危 2.34-168.el9_6.14 2.34-270.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc-langpack-en CVE-2026-5435 中危 2.34-168.el9_6.14 2.34-274.el9_8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
glibc-langpack-en CVE-2026-5450 中危 2.34-168.el9_6.14 2.34-272.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-langpack-en CVE-2026-5928 中危 2.34-168.el9_6.14 2.34-274.el9_8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-langpack-en CVE-2026-6238 中危 2.34-168.el9_6.14 2.34-274.el9_8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
coreutils-single CVE-2025-5278 中危 8.32-39.el9 8.32-41.el9_8 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2025-05-27 21:15 修改: 2026-08-15 23:16
coreutils-single CVE-2026-56391 中危 8.32-39.el9 coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56391

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28
coreutils-single CVE-2026-56392 中危 8.32-39.el9 coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56392

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28
glibc CVE-2025-4802 中危 2.34-168.el9_6.14 2.34-168.el9_6.19 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
glibc CVE-2025-5702 中危 2.34-168.el9_6.14 2.34-168.el9_6.20 glibc: Vector register overwrite bug in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5702

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2025-06-05 19:15 修改: 2026-06-17 09:48
glibc CVE-2025-8058 中危 2.34-168.el9_6.14 2.34-168.el9_6.23 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
glibc CVE-2026-0915 中危 2.34-168.el9_6.14 2.34-231.el9_7.10 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
glibc CVE-2026-4046 中危 2.34-168.el9_6.14 2.34-270.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
glibc CVE-2026-4437 中危 2.34-168.el9_6.14 2.34-270.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc CVE-2026-5435 中危 2.34-168.el9_6.14 2.34-274.el9_8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
glibc CVE-2026-5450 中危 2.34-168.el9_6.14 2.34-272.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc CVE-2026-5928 中危 2.34-168.el9_6.14 2.34-274.el9_8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc CVE-2026-6238 中危 2.34-168.el9_6.14 2.34-274.el9_8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
java-21-openjdk-headless CVE-2025-28164 中危 1:21.0.7.0.6-1.el9 libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28164

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04
java-21-openjdk-headless CVE-2025-30754 中危 1:21.0.7.0.6-1.el9 1:21.0.8.0.9-1.el9 openjdk: Enhance TLS protocol support (Oracle CPU 2025-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30754

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-07-15 20:15 修改: 2026-06-17 09:09
java-21-openjdk-headless CVE-2025-53057 中危 1:21.0.7.0.6-1.el9 1:21.0.9.0.10-1.el9 openjdk: Enhance certificate handling (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53057

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37
java-21-openjdk-headless CVE-2025-53066 中危 1:21.0.7.0.6-1.el9 1:21.0.9.0.10-1.el9 openjdk: Enhance Path Factories (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53066

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:37
java-21-openjdk-headless CVE-2025-61748 中危 1:21.0.7.0.6-1.el9 1:21.0.9.0.10-1.el9 openjdk: Enhance String handling (Oracle CPU 2025-10)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61748

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-10-21 20:20 修改: 2026-06-17 09:50
java-21-openjdk-headless CVE-2025-64505 中危 1:21.0.7.0.6-1.el9 libpng: LIBPNG heap buffer overflow via malformed palette index

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64505

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54
java-21-openjdk-headless CVE-2025-64506 中危 1:21.0.7.0.6-1.el9 libpng: LIBPNG heap buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64506

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54
java-21-openjdk-headless CVE-2026-21925 中危 1:21.0.7.0.6-1.el9 1:21.0.10.0.7-1.el9 openjdk: Improve JMX connections (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21925

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19
java-21-openjdk-headless CVE-2026-21933 中危 1:21.0.7.0.6-1.el9 1:21.0.10.0.7-1.el9 openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21933

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:19
java-21-openjdk-headless CVE-2026-22013 中危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22013

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19
java-21-openjdk-headless CVE-2026-22021 中危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22021

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19
java-21-openjdk-headless CVE-2026-22693 中危 1:21.0.7.0.6-1.el9 harfbuzz: Null Pointer Dereference in harfbuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22693

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-01-10 06:15 修改: 2026-06-17 10:20
java-21-openjdk-headless CVE-2026-22695 中危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22695

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20
java-21-openjdk-headless CVE-2026-22801 中危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22801

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20
java-21-openjdk-headless CVE-2026-23865 中危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22
java-21-openjdk-headless CVE-2026-33416 中危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37
java-21-openjdk-headless CVE-2026-33636 中危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33636

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37
java-21-openjdk-headless CVE-2026-34757 中危 1:21.0.7.0.6-1.el9 libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39
java-21-openjdk-headless CVE-2026-41254 中危 1:21.0.7.0.6-1.el9 1:21.0.12.0.8-1.2.el9 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41254

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-18 07:16 修改: 2026-06-17 10:46
java-21-openjdk-headless CVE-2026-46917 中危 1:21.0.7.0.6-1.el9 1:21.0.12.0.8-1.2.el9 openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46917

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55
java-21-openjdk-headless CVE-2026-46968 中危 1:21.0.7.0.6-1.el9 1:21.0.12.0.8-1.2.el9 openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46968

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:27
java-21-openjdk-headless CVE-2026-47021 中危 1:21.0.7.0.6-1.el9 1:21.0.12.0.8-1.2.el9 openjdk: Enhance XBM image support (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47021

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-07-21 22:17 修改: 2026-08-12 20:17
java-21-openjdk-headless CVE-2026-47027 中危 1:21.0.7.0.6-1.el9 1:21.0.12.0.8-1.2.el9 openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47027

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55
java-21-openjdk-headless CVE-2026-60147 中危 1:21.0.7.0.6-1.el9 1:21.0.12.0.8-1.2.el9 openjdk: Improve certification checking (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60147

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:49
glibc-common CVE-2025-4802 中危 2.34-168.el9_6.14 2.34-168.el9_6.19 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
libacl CVE-2026-54370 中危 2.3.1-4.el9 2.4.0-1.el9_8 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22
libattr CVE-2026-54371 中危 2.5.1-3.el9 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-06-29 14:16 修改: 2026-07-15 01:16
glibc-common CVE-2025-5702 中危 2.34-168.el9_6.14 2.34-168.el9_6.20 glibc: Vector register overwrite bug in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5702

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2025-06-05 19:15 修改: 2026-06-17 09:48
p11-kit-trust CVE-2026-13757 中危 0.25.3-3.el9_5 0.26.4-1.el9_8 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-06-29 19:16 修改: 2026-08-13 21:17
p11-kit-trust CVE-2026-2100 中危 0.25.3-3.el9_5 0.26.2-1.el9 p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2100

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-03-26 21:17 修改: 2026-08-15 23:16
sed CVE-2026-5958 中危 4.8-9.el9 sed: GNU sed TOCTOU race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-20 12:16 修改: 2026-06-17 10:59
glibc-common CVE-2025-8058 中危 2.34-168.el9_6.14 2.34-168.el9_6.23 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
java-21-openjdk-headless CVE-2026-34268 低危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 openjdk: Enhance key generation (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34268

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:38
java-21-openjdk-headless CVE-2026-47010 低危 1:21.0.7.0.6-1.el9 1:21.0.12.0.8-1.2.el9 openjdk: Enhance JPEG handling (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47010

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:13
java-21-openjdk-headless CVE-2026-47059 低危 1:21.0.7.0.6-1.el9 1:21.0.12.0.8-1.2.el9 openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47059

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:51
glibc-common CVE-2026-4438 低危 2.34-168.el9_6.14 2.34-270.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc CVE-2025-15281 低危 2.34-168.el9_6.14 2.34-231.el9_7.10 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
glibc-langpack-en CVE-2026-4438 低危 2.34-168.el9_6.14 2.34-270.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc CVE-2026-0861 低危 2.34-168.el9_6.14 2.34-231.el9_7.10 glibc: Integer overflow in memalign leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
libgcc CVE-2021-46195 低危 11.5.0-5.el9_5 gcc: uncontrolled recursion in libiberty/rust-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46195

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2022-01-14 20:15 修改: 2026-06-17 04:14
libgcc CVE-2022-27943 低危 11.5.0-5.el9_5 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
libtasn1 CVE-2025-13151 低危 4.16.0-9.el9 4.16.0-10.el9_8 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33
ncurses-base CVE-2022-29458 低危 6.2-10.20210508.el9 6.2-10.20210508.el9_6.2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43
ncurses-base CVE-2023-50495 低危 6.2-10.20210508.el9 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
ncurses-libs CVE-2022-29458 低危 6.2-10.20210508.el9 6.2-10.20210508.el9_6.2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2022-04-18 21:15 修改: 2026-07-27 13:43
ncurses-libs CVE-2023-50495 低危 6.2-10.20210508.el9 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
nspr CVE-2020-12413 低危 4.35.0-17.el9_2 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51
nspr CVE-2024-7531 低危 4.35.0-17.el9_2 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20
nss CVE-2020-12413 低危 3.101.0-10.el9_2 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51
nss CVE-2024-7531 低危 3.101.0-10.el9_2 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20
nss-softokn CVE-2020-12413 低危 3.101.0-10.el9_2 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51
nss-softokn CVE-2024-7531 低危 3.101.0-10.el9_2 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20
nss-softokn-freebl CVE-2020-12413 低危 3.101.0-10.el9_2 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51
nss-softokn-freebl CVE-2024-7531 低危 3.101.0-10.el9_2 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20
nss-sysinit CVE-2020-12413 低危 3.101.0-10.el9_2 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51
nss-sysinit CVE-2024-7531 低危 3.101.0-10.el9_2 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20
nss-util CVE-2020-12413 低危 3.101.0-10.el9_2 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51
nss-util CVE-2024-7531 低危 3.101.0-10.el9_2 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2024-08-06 13:15 修改: 2026-06-17 08:20
glibc CVE-2026-4438 低危 2.34-168.el9_6.14 2.34-270.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
java-21-openjdk-headless CVE-2026-22007 低危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22007

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19
pcre2 CVE-2022-41409 低危 10.40-6.el9 pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
pcre2-syntax CVE-2022-41409 低危 10.40-6.el9 pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409

镜像层: sha256:ef3cb51dff219acd69cb7cbc16ab2eb33799c558d0ef565cbe1246a5674e0100

发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
java-21-openjdk-headless CVE-2026-22018 低危 1:21.0.7.0.6-1.el9 1:21.0.11.0.10-2.el9 openjdk: Enhance Zip file reading (Oracle CPU 2026-04)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22018

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-04-21 21:16 修改: 2026-06-17 10:19
java-21-openjdk-headless CVE-2026-27171 低危 1:21.0.7.0.6-1.el9 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
sqlite-libs CVE-2024-0232 低危 3.34.1-7.el9_3 sqlite: use-after-free bug in jsonParseAddNodeArray

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0232

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2024-01-16 14:15 修改: 2026-06-17 06:53
sqlite-libs CVE-2025-70873 低危 3.34.1-7.el9_3 sqlite: SQLite: Information Disclosure via Crafted ZIP File

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-03-12 19:16 修改: 2026-06-17 10:03
zlib CVE-2026-27171 低危 1.2.11-40.el9 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:c9f15caf18ccd559bca42a6ef1a91356b93205f101916eaa1c4cbdf809f7e362

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
Java (jar)
低危漏洞:17 中危漏洞:86 高危漏洞:51 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
org.bouncycastle:bcprov-jdk18on CVE-2025-14813 严重 1.80 1.80.2, 1.81.1, 1.84 bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14813

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-15 10:16 修改: 2026-08-12 12:17
org.bouncycastle:bcprov-jdk18on CVE-2025-14813 严重 1.80 1.80.2, 1.81.1, 1.84 bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14813

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-15 10:16 修改: 2026-08-12 12:17
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.18.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.18.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.18.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.18.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer CVE-2025-66021 高危 20240325.1 20260101.1 com.googlecode.owasp-java-html-sanitizer/owasp-java-html-sanitizer: OWASP Java HTML Sanitizer vulnerable to XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66021

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-11-26 02:15 修改: 2026-06-17 09:56
com.microsoft.sqlserver:mssql-jdbc CVE-2025-59250 高危 12.8.1 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 JDBC Driver for SQL Server has improper input validation issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
com.microsoft.sqlserver:mssql-jdbc CVE-2025-59250 高危 12.8.1.jre11 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 JDBC Driver for SQL Server has improper input validation issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
io.micrometer:micrometer-core CVE-2026-40984 高危 1.14.5 1.16.6, 1.15.12 micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-09 05:16 修改: 2026-08-13 13:18
io.netty:netty-codec CVE-2026-42583 高危 4.1.119.Final 4.1.133.Final netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec CVE-2026-59901 高危 4.1.119.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-dns CVE-2026-42579 高危 4.1.119.Final 4.2.13.Final, 4.1.133.Final netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-haproxy CVE-2026-44893 高危 4.1.119.Final 4.2.15.Final, 4.1.135.Final netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44893

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 15:16 修改: 2026-08-13 13:19
io.netty:netty-codec-haproxy CVE-2026-48059 高危 4.1.119.Final 4.2.15.Final, 4.1.135.Final netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48059

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 16:16 修改: 2026-08-13 13:19
io.netty:netty-codec-haproxy CVE-2026-55851 高危 4.1.119.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55851

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:48
io.netty:netty-codec-http CVE-2026-33870 高危 4.1.119.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-27 20:16 修改: 2026-08-04 13:18
io.netty:netty-codec-http CVE-2026-42584 高危 4.1.119.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http CVE-2026-42587 高危 4.1.119.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http CVE-2026-55831 高危 4.1.119.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http CVE-2026-55833 高危 4.1.119.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http CVE-2026-56745 高危 4.1.119.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2 CVE-2025-55163 高危 4.1.119.Final 4.2.4.Final, 4.1.124.Final netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2 CVE-2026-33871 高危 4.1.119.Final 4.1.132.Final, 4.2.11.Final netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-27 20:16 修改: 2026-08-04 13:18
io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.119.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http2 CVE-2026-56819 高危 4.1.119.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
io.netty:netty-handler CVE-2026-44249 高危 4.1.119.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-11 22:16 修改: 2026-08-14 13:18
io.netty:netty-handler CVE-2026-45416 高危 4.1.119.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 15:16 修改: 2026-08-14 13:18
io.netty:netty-handler CVE-2026-50010 高危 4.1.119.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 16:16 修改: 2026-08-14 13:19
io.netty:netty-resolver-dns CVE-2026-45674 高危 4.1.119.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 15:16 修改: 2026-08-13 13:19
io.netty:netty-resolver-dns CVE-2026-47691 高危 4.1.119.Final 4.2.15.Final, 4.1.135.Final io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 16:16 修改: 2026-08-13 13:19
io.quarkus:quarkus-vertx-http CVE-2026-39852 高危 3.20.1 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1 io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39852

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-05 21:16 修改: 2026-08-13 13:18
io.quarkus:quarkus-vertx-http CVE-2026-50559 高危 3.20.1 3.20.6.2, 3.27.4.1, 3.33.2.1, 3.36.3, 3.37.0 io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50559

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-19 21:17 修改: 2026-08-13 13:19
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.18.2 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.18.2 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
org.keycloak:keycloak-saml-core CVE-2026-7307 高危 26.2.5 26.6.2 keycloak: Keycloak: Denial of Service via specially crafted SAML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7307

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-19 12:16 修改: 2026-07-15 01:16
org.keycloak:keycloak-server-spi-private CVE-2026-2603 高危 26.2.5 26.5.5 keycloak: Keycloak: Unauthorized authentication via disabled SAML Identity Provider

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2603

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-18 02:16 修改: 2026-07-15 02:19
org.keycloak:keycloak-services CVE-2026-1486 高危 26.2.5 26.5.3, 26.4.9 org.keycloak.protocol.oidc.grants: Disabled identity providers are still accepted for JWT Authorization Grant

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1486

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-02-09 20:15 修改: 2026-07-15 02:18
org.keycloak:keycloak-services CVE-2026-1529 高危 26.2.5 26.5.3, 26.2.13, 26.4.9 org.keycloak.services.resources.organizations: Keycloak: Unauthorized organization registration via improper invitation token validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1529

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-02-09 20:15 修改: 2026-07-15 02:18
org.keycloak:keycloak-services CVE-2026-2092 高危 26.2.5 26.5.5 keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2092

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-18 02:16 修改: 2026-07-15 02:19
org.keycloak:keycloak-services CVE-2026-2603 高危 26.2.5 26.5.5 keycloak: Keycloak: Unauthorized authentication via disabled SAML Identity Provider

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2603

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-18 02:16 修改: 2026-07-15 02:19
org.keycloak:keycloak-services CVE-2026-3009 高危 26.2.5 26.5.5 org.keycloak/keycloak-services: Improper Enforcement of Disabled Identity Provider in IdentityBrokerService (Authentication Bypass)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3009

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-05 19:16 修改: 2026-08-04 13:18
org.keycloak:keycloak-services CVE-2026-3872 高危 26.2.5 26.5.7 keycloak: Keycloak: Information disclosure due to redirect_uri validation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3872

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-02 13:16 修改: 2026-07-15 02:21
org.keycloak:keycloak-services CVE-2026-4282 高危 26.2.5 26.5.7 keycloak: Keycloak: Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4282

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-02 13:16 修改: 2026-07-15 02:22
org.keycloak:keycloak-services CVE-2026-4634 高危 26.2.5 26.5.7 keycloak: Keycloak: Denial of Service via excessive processing of OpenID Connect scope parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4634

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-02 13:16 修改: 2026-07-15 02:22
org.keycloak:keycloak-services CVE-2026-4636 高危 26.2.5 26.5.7 keycloak: Keycloak: UMA policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4636

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-02 13:16 修改: 2026-07-15 02:22
org.keycloak:keycloak-services CVE-2026-7504 高危 26.2.5 26.6.2 org.keycloak/keycloak-services: Open redirect when using wildcard valid redirect URIs in Keycloak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7504

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-19 12:16 修改: 2026-07-15 01:17
org.keycloak:keycloak-services CVE-2026-7507 高危 26.2.5 26.6.2 org.keycloak/keycloak-services: Session fixation in OIDC login flow that can lead to account takeover

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7507

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-19 12:16 修改: 2026-07-15 01:17
org.keycloak:keycloak-services CVE-2026-7571 高危 26.2.5 26.6.2 keycloak: Keycloak: Access token disclosure and implicit flow bypass via forged client data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7571

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-19 12:16 修改: 2026-06-17 11:02
org.keycloak:keycloak-services CVE-2026-9795 高危 26.2.5 26.6.4 keycloak: Keycloak: Privilege escalation via improper scope mapping enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9795

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-28 05:16 修改: 2026-07-15 01:17
org.postgresql:postgresql CVE-2025-49146 高危 42.7.5 42.7.7 pgjdbc: pgjdbc insecure authentication in channel binding

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49146

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-06-11 15:15 修改: 2026-06-17 09:30
org.postgresql:postgresql CVE-2026-42198 高危 42.7.5 42.7.11 jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-29 16:16 修改: 2026-08-14 13:18
org.postgresql:postgresql CVE-2026-54291 高危 42.7.5 42.7.12 org.postgresql/postgresql: com.ongres.scram/scram-client: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54291

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-06 19:17 修改: 2026-07-09 13:16
io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.119.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2 CVE-2026-59900 中危 4.1.119.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-dns CVE-2026-73508 中危 4.1.119.Final 4.2.16.Final, 4.1.136.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.18.2 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.18.2 2.21.5, 2.18.9, 2.22.1 jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.18.2 2.21.5, 2.18.9, 2.22.1 jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
io.netty:netty-codec-haproxy CVE-2026-59919 中危 4.1.119.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-haproxy: Netty: Improper CR/LF neutralization in netty-codec-haproxy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59919

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:33
io.netty:netty-resolver-dns CVE-2026-45673 中危 4.1.119.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.119.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.119.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.opentelemetry:opentelemetry-api CVE-2026-45292 中危 1.44.1 1.62.0 opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45292

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-28 17:16 修改: 2026-08-14 13:18
io.quarkus:quarkus-rest CVE-2025-66560 中危 3.20.1 3.20.5, 3.27.2, 3.31.0 io.quarkus/quarkus-rest: Quarkus REST Worker Thread Exhaustion Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66560

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-01-07 18:15 修改: 2026-06-17 09:57
io.quarkus:quarkus-vertx CVE-2025-49574 中危 3.20.1 3.15.6, 3.20.2, 3.24.1 io.quarkus/quarkus-vertx: Quarkus potential data leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49574

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-06-23 20:15 修改: 2026-06-17 09:31
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.18.2 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.18.2 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
io.vertx:vertx-core CVE-2026-1002 中危 4.5.14 4.5.24, 5.0.7 io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1002

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-01-15 21:16 修改: 2026-06-17 10:14
io.vertx:vertx-core CVE-2026-6860 中危 4.5.14 4.5.27, 5.0.12 eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6860

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-06 10:16 修改: 2026-06-17 11:01
io.vertx:vertx-web CVE-2025-11965 中危 4.5.14 4.5.22, 5.0.5 io.vertx/vertx-core: Eclipse Vert.x Access Control Flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11965

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-10-22 15:15 修改: 2026-06-17 08:31
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.17.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.bouncycastle:bcpkix-jdk18on CVE-2026-5588 中危 1.80 1.84 bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-15 10:16 修改: 2026-08-12 12:19
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.18.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.18.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
org.bouncycastle:bcprov-jdk18on CVE-2026-0636 中危 1.80 1.84 bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-15 10:16 修改: 2026-08-12 12:17
org.bouncycastle:bcprov-jdk18on CVE-2026-0636 中危 1.80 1.84 bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-15 10:16 修改: 2026-08-12 12:17
org.eclipse.angus:smtp CVE-2025-7962 中危 2.0.3 2.0.4 com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7962

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-07-21 18:15 修改: 2026-06-23 12:16
org.keycloak:keycloak-account-ui CVE-2025-10044 中危 26.2.5 26.2.9, 26.3.4 keycloak: Keycloak error_description injection on error pages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10044

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-09-05 20:15 修改: 2026-06-17 08:27
org.keycloak:keycloak-admin-ui CVE-2025-10044 中危 26.2.5 26.2.9, 26.3.4 keycloak: Keycloak error_description injection on error pages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10044

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-09-05 20:15 修改: 2026-06-17 08:27
org.keycloak:keycloak-ldap-federation CVE-2025-13467 中危 26.2.5 26.4.6, 26.2.11 org.keycloak.storage.ldap: Keycloak: Deserialization of Untrusted Data in LDAP User Federation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13467

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-11-25 16:16 修改: 2026-06-17 08:34
org.keycloak:keycloak-ldap-federation CVE-2026-9801 中危 26.2.5 26.6.3 keycloak: Keycloak: Denial of Service via malformed LDAP password policy response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9801

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-28 06:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-model-jpa CVE-2026-3190 中危 26.2.5 26.5.6 keycloak: Keycloak: Information Disclosure via improper role enforcement in UMA 2.0 Protection API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3190

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-26 19:17 修改: 2026-06-17 10:43
org.keycloak:keycloak-model-storage-services CVE-2025-9162 中危 26.2.5 26.3.4 org.keycloak/keycloak-model-storage-service: Variable injection into environment variables

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9162

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-08-21 16:15 修改: 2026-06-17 10:08
org.keycloak:keycloak-quarkus-server CVE-2025-11537 中危 26.2.5 26.5.6 keycloak-server: Sensitive headers shown in the HTTP access logs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11537

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-02-10 11:16 修改: 2026-06-17 08:30
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.18.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.keycloak:keycloak-saml-core CVE-2026-2575 中危 26.2.5 26.5.4 keycloak: Keycloak: Denial of Service due to excessive SAMLRequest decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2575

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-18 04:17 修改: 2026-06-17 10:31
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.18.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.keycloak:keycloak-server-spi-private CVE-2026-0871 中危 26.2.5 26.5.2 org.keycloak/keycloak-services: Keycloak: Unauthorized modification of unmanaged user attributes by administrators

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0871

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-02-27 08:17 修改: 2026-06-17 10:11
org.keycloak:keycloak-server-spi-private CVE-2026-3190 中危 26.2.5 26.5.6 keycloak: Keycloak: Information Disclosure via improper role enforcement in UMA 2.0 Protection API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3190

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-26 19:17 修改: 2026-06-17 10:43
org.keycloak:keycloak-server-spi-private CVE-2026-9704 中危 26.2.5 26.6.3 keycloak: Keycloak: Privilege escalation due to oversized subject_token JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9704

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-27 14:17 修改: 2026-06-26 08:16
org.keycloak:keycloak-server-spi-private CVE-2026-9791 中危 26.2.5 26.6.3 keycloak-rhel9: Organization Data Leak After Feature Disabled in Keycloak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9791

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-28 05:16 修改: 2026-06-26 08:16
io.netty:netty-codec-http CVE-2025-67735 中危 4.1.119.Final 4.2.8.Final, 4.1.129.Final netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http CVE-2026-41417 中危 4.1.119.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http CVE-2026-42580 中危 4.1.119.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http CVE-2026-42581 中危 4.1.119.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http CVE-2026-42585 中危 4.1.119.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http CVE-2026-50020 中危 4.1.119.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http CVE-2026-56746 中危 4.1.119.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http CVE-2026-59898 中危 4.1.119.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
io.netty:netty-codec-http CVE-2026-59899 中危 4.1.119.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http CVE-2026-59921 中危 4.1.119.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.18.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.18.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-codec CVE-2025-58057 中危 4.1.119.Final 4.1.125.Final netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
org.keycloak:keycloak-services CVE-2025-11429 中危 26.2.5 26.4.1, 26.2.11 keycloak-server: Too long and not settings compliant session

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11429

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-10-23 14:15 修改: 2026-06-17 08:30
org.keycloak:keycloak-services CVE-2025-14559 中危 26.2.5 26.5.2, 26.4.9 org.keycloak/keycloak-services: Keycloak keycloak-services: Business logic flaw allows unauthorized token issuance for disabled users

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14559

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-01-21 07:16 修改: 2026-06-17 08:36
org.keycloak:keycloak-services CVE-2025-14778 中危 26.2.5 26.2.13, 26.5.3, 26.4.9 keycloak: Incorrect ownership checks in /uma-policy/

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14778

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-02-09 20:15 修改: 2026-06-17 08:36
org.keycloak:keycloak-services CVE-2025-7365 中危 26.2.5 26.0.13, 26.2.6 keycloak: Phishing attack via email verification step in first login flow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7365

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-07-10 15:15 修改: 2026-08-08 18:16
org.keycloak:keycloak-services CVE-2025-7784 中危 26.2.5 26.2.6 org.keycloak/keycloak-services: Privilege Escalation in Keycloak Admin Console (FGAPv2 Enabled)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7784

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-07-18 14:15 修改: 2026-06-17 10:05
org.keycloak:keycloak-services CVE-2025-8419 中危 26.2.5 26.2.8, 26.3.3 org.keycloak/keycloak-services: Keycloak SMTP Inject Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8419

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-08-06 17:15 修改: 2026-08-08 18:16
org.keycloak:keycloak-services CVE-2026-2575 中危 26.2.5 26.5.4 keycloak: Keycloak: Denial of Service due to excessive SAMLRequest decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2575

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-18 04:17 修改: 2026-06-17 10:31
org.keycloak:keycloak-services CVE-2026-3121 中危 26.2.5 26.5.6 keycloak: org.keycloak/keycloak-services: Keycloak: Privilege escalation via manage-clients permission

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3121

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-26 19:17 修改: 2026-06-17 10:43
org.keycloak:keycloak-services CVE-2026-3190 中危 26.2.5 26.5.6 keycloak: Keycloak: Information Disclosure via improper role enforcement in UMA 2.0 Protection API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3190

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-26 19:17 修改: 2026-06-17 10:43
org.keycloak:keycloak-services CVE-2026-3429 中危 26.2.5 org.keycloak.services.resources.account: Improper Access Control Leading to MFA Deletion and Account Takeover in Keycloak Account REST API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3429

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-11 17:16 修改: 2026-06-17 10:43
org.keycloak:keycloak-services CVE-2026-37978 中危 26.2.5 26.6.2 keycloak: org.keycloak.services: Keycloak: Information Disclosure via evaluate-scopes Admin API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37978

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-19 12:16 修改: 2026-06-17 10:41
org.keycloak:keycloak-services CVE-2026-37979 中危 26.2.5 26.6.2 keycloak: Keycloak: Information disclosure via OIDC token introspection endpoint audience bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37979

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-19 12:16 修改: 2026-06-17 10:41
org.keycloak:keycloak-services CVE-2026-37980 中危 26.2.5 org.keycloak.forms.login: keycloak: Keycloak: Arbitrary code execution via Stored Cross-Site Scripting (XSS) in organization selection login page

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37980

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-14 15:16 修改: 2026-06-17 10:41
org.keycloak:keycloak-services CVE-2026-37981 中危 26.2.5 26.4.12, 26.6.2 keycloak: org.keycloak.authorization: Keycloak: Information disclosure via broken access control in user lookup endpoint

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37981

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-19 12:16 修改: 2026-06-17 10:41
org.keycloak:keycloak-services CVE-2026-37982 中危 26.2.5 26.6.2 keycloak: org.keycloak.authentication: Keycloak: Unauthorized account takeover via WebAuthn token replay

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37982

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-19 12:16 修改: 2026-06-17 10:41
org.keycloak:keycloak-services CVE-2026-4325 中危 26.2.5 26.5.7 keycloak: Keycloak: Replay of action tokens via improper handling of single-use entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4325

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-02 13:16 修改: 2026-06-17 10:56
org.keycloak:keycloak-services CVE-2026-4628 中危 26.2.5 keycloak: org.keycloak.authorization: Keycloak: Unauthorized resource modification due to improper access control

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4628

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-23 09:16 修改: 2026-06-17 10:56
org.keycloak:keycloak-services CVE-2026-4630 中危 26.2.5 26.6.2 keycloak: Keycloak: Unauthorized resource access and data modification via Insecure Direct Object Reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4630

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-19 12:16 修改: 2026-06-17 10:56
org.keycloak:keycloak-services CVE-2026-7500 中危 26.2.5 org.keycloak.keycloak-services: Improper Access Control on Keycloak Server when the account Account API feature is disabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7500

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-30 15:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-8830 中危 26.2.5 26.6.3 keycloak: org.keycloak/keycloak-services: Keycloak: Policy bypass during WebAuthn credential registration via client-side JavaScript manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8830

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-19 07:16 修改: 2026-07-23 20:10
org.keycloak:keycloak-services CVE-2026-8922 中危 26.2.5 org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: Security flaw in org.keycloak/keycloak-services

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8922

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-19 08:16 修改: 2026-07-23 11:10
org.keycloak:keycloak-services CVE-2026-9087 中危 26.2.5 26.6.3 keycloak: Cross-Session Email Verification Proof Not Bound to Upstream Identity in First-Broker-Login

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9087

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-20 17:16 修改: 2026-07-23 12:10
org.keycloak:keycloak-services CVE-2026-9689 中危 26.2.5 keycloak: org.keycloak.protocol.oidc: HTTP Parameter Pollution in OIDC redirect URI allows response parameter duplication - #GHI-604

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9689

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-27 12:17 修改: 2026-08-05 19:17
org.keycloak:keycloak-services CVE-2026-9704 中危 26.2.5 26.6.3 keycloak: Keycloak: Privilege escalation due to oversized subject_token JWT

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9704

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-27 14:17 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9791 中危 26.2.5 26.6.3 keycloak-rhel9: Organization Data Leak After Feature Disabled in Keycloak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9791

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-28 05:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9792 中危 26.2.5 26.6.3 keycloak: Keycloak: Security restriction bypass allows unauthorized ROPC token acquisition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9792

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-28 05:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9793 中危 26.2.5 keycloak: Keycloak: Security policy bypass in JWE-encrypted request object processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9793

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-28 05:16 修改: 2026-08-05 19:17
org.keycloak:keycloak-services CVE-2026-9794 中危 26.2.5 26.6.3 keycloak: Keycloak: Information disclosure via SAML ECP endpoint

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9794

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-28 05:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9798 中危 26.2.5 keycloak: Keycloak: Brute-force protection bypass in CIBA flow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9798

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-28 06:16 修改: 2026-08-05 19:17
org.keycloak:keycloak-services CVE-2026-9802 中危 26.2.5 26.6.3 keycloak: Keycloak: Unauthorized account access via replayed refresh tokens after cluster restart

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9802

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-28 06:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9803 中危 26.2.5 26.6.3 keycloak: Keycloak: Denial of Service via malformed Authorization header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9803

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-28 06:16 修改: 2026-06-26 08:16
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.18.2 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.119.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.119.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-12 16:16 修改: 2026-08-13 13:19
org.keycloak:keycloak-quarkus-server CVE-2026-0976 低危 26.2.5 org.keycloak/keycloak-quarkus-server: Keycloak: Proxy bypass due to improper handling of matrix parameters in URL paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0976

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-01-15 13:16 修改: 2026-08-09 19:17
io.vertx:vertx-web CVE-2025-11966 低危 4.5.14 4.5.22, 5.0.5 io.vertx/vertx-web: Eclipse Vert.x cross site scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11966

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-10-22 15:15 修改: 2026-06-17 08:31
org.keycloak:keycloak-services CVE-2025-12150 低危 26.2.5 26.4.4 org.keycloak/keycloak-services: WebAuthn Attestation Statement Verification Bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12150

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-02-27 09:16 修改: 2026-08-10 03:16
org.keycloak:keycloak-services CVE-2025-13881 低危 26.2.5 26.5.2, 26.4.9 org.keycloak.services.resources.admin: Keycloak: Limited administrator can retrieve sensitive user attributes via Admin API

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13881

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-02-02 06:16 修改: 2026-06-17 08:34
org.keycloak:keycloak-services CVE-2025-14082 低危 26.2.5 26.5.0 keycloak-services: Keycloak Admin REST API: Improper Access Control leads to sensitive role metadata information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14082

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-12-10 09:15 修改: 2026-06-17 08:35
org.keycloak:keycloak-services CVE-2025-14083 低危 26.2.5 keycloak-server: Keycloak: Improper Access Control in Admin REST API leads to information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14083

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-01-21 13:16 修改: 2026-06-17 08:35
org.keycloak:keycloak-services CVE-2026-1035 低危 26.2.5 org.keycloak.protocol.oidc: Keycloak Refresh Token Reuse Bypass via TOCTOU Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1035

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-01-21 06:15 修改: 2026-06-17 10:14
org.keycloak:keycloak-services CVE-2026-1190 低危 26.2.5 org.keycloak/keycloak-services: Keycloak SAML brokering: Response delay due to unchecked NotOnOrAfter in SubjectConfirmationData

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1190

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-01-26 20:16 修改: 2026-06-17 10:15
org.keycloak:keycloak-services CVE-2026-2733 低危 26.2.5 org.keycloak/keycloak-services: Keycloak: Missing Check on Disabled Client for Docker Registry Protocol

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2733

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-02-19 08:16 修改: 2026-06-17 10:31
org.keycloak:keycloak-services CVE-2026-37977 低危 26.2.5 26.4.13, 26.6.3 keycloak: org.keycloak.protocol.oidc.grants.ciba: Keycloak: Information disclosure via CORS header injection due to unvalidated JWT azp claim

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-37977

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-04-06 09:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-3911 低危 26.2.5 org.keycloak.services.resources.admin.UserResource: Keycloak: Information disclosure of disabled user attributes via administrative endpoint

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3911

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-11 06:17 修改: 2026-06-17 10:44
org.keycloak:keycloak-services CVE-2026-4633 低危 26.2.5 26.6.1, 26.4.12 keycloak: Keycloak: User enumeration via differential error messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4633

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-23 11:16 修改: 2026-06-17 10:56
org.keycloak:keycloak-services CVE-2026-4874 低危 26.2.5 26.6.3, 26.4.13 org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: Keycloak: Server-Side Request Forgery via OIDC token endpoint manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4874

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-03-26 08:16 修改: 2026-06-26 08:16
org.keycloak:keycloak-services CVE-2026-9088 低危 26.2.5 26.7.0 keycloak: Keycloak: Information disclosure due to user profile permission bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9088

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-06-05 08:16 修改: 2026-07-23 07:10
io.netty:netty-handler-proxy CVE-2026-42578 低危 4.1.119.Final 4.1.133.Final, 4.2.13.Final netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http CVE-2025-58056 低危 4.1.119.Final 4.1.125.Final, 4.2.5.Final netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
org.keycloak:keycloak-quarkus-server CVE-2025-10939 低危 26.2.5 26.4.4 org.keycloak/keycloak-quarkus-server: Unable to restrict access to the admin console

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10939

镜像层: sha256:d1727c42e286a9c1d7791bad1347ad9f9eac1f42f16ead900c65a798e6ad5c94

发布日期: 2025-10-28 04:16 修改: 2026-08-04 23:16
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×