docker.io/lincenying/app-vue3-ssr:1.26.0727 linux/amd64

docker.io/lincenying/app-vue3-ssr:1.26.0727 - Trivy安全扫描结果 扫描时间: 2026-07-27 16:44
全部漏洞信息
低危漏洞:50 中危漏洞:76 高危漏洞:63 严重漏洞:5

系统OS: alpine 3.22.0 扫描引擎: Trivy 扫描时间: 2026-07-27 16:44

docker.io/lincenying/app-vue3-ssr:1.26.0727 (alpine 3.22.0) (alpine)
低危漏洞:41 中危漏洞:28 高危漏洞:17 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto3 CVE-2026-31789 严重 3.5.0-r0 3.5.6-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-31789 严重 3.5.0-r0 3.5.6-r0 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2025-69421 高危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2026-28387 高危 3.5.0-r0 3.5.6-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28388 高危 3.5.0-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28389 高危 3.5.0-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-28390 高危 3.5.0-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libcrypto3 CVE-2026-45447 高危 3.5.0-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-24 13:18
libcrypto3 CVE-2025-15467 高危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-07-20 12:16
libssl3 CVE-2025-15467 高危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-07-20 12:16
libssl3 CVE-2025-69421 高危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2026-28387 高危 3.5.0-r0 3.5.6-r0 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28388 高危 3.5.0-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28389 高危 3.5.0-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-28390 高危 3.5.0-r0 3.5.6-r0 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-45447 高危 3.5.0-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-24 13:18
musl CVE-2026-40200 高危 1.2.5-r10 1.2.5-r12 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
musl-utils CVE-2026-40200 高危 1.2.5-r10 1.2.5-r12 musl: musl libc: Arbitrary code execution and denial of service via stack-based memory corruption in qsort

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40200

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-10 17:17 修改: 2026-06-17 10:44
zlib CVE-2026-22184 高危 1.3.1-r2 1.3.2-r0 zlib: zlib: Arbitrary code execution via buffer overflow in untgz utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22184

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-07 21:16 修改: 2026-07-15 02:18
libcrypto3 CVE-2026-42764 中危 3.5.0-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45445 中危 3.5.0-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
busybox CVE-2024-58251 中危 1.37.0-r18 1.37.0-r20 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
busybox-binsh CVE-2024-58251 中危 1.37.0-r18 1.37.0-r20 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
libcrypto3 CVE-2025-11187 中危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11187

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:29
libcrypto3 CVE-2025-4575 中危 3.5.0-r0 3.5.1-r0 Issue summary: Use of -addreject option with the openssl x509 applicat ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4575

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-05-22 14:16 修改: 2026-06-17 09:33
libcrypto3 CVE-2025-69419 中危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2025-9230 中危 3.5.0-r0 3.5.4-r0 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libcrypto3 CVE-2025-9231 中危 3.5.0-r0 3.5.4-r0 openssl: Timing side-channel in SM2 algorithm on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libcrypto3 CVE-2026-2673 中危 3.5.0-r0 3.5.6-r0 openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31
libssl3 CVE-2025-11187 中危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11187

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:29
libssl3 CVE-2025-4575 中危 3.5.0-r0 3.5.1-r0 Issue summary: Use of -addreject option with the openssl x509 applicat ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4575

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-05-22 14:16 修改: 2026-06-17 09:33
libssl3 CVE-2025-69419 中危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-9230 中危 3.5.0-r0 3.5.4-r0 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2025-9231 中危 3.5.0-r0 3.5.4-r0 openssl: Timing side-channel in SM2 algorithm on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2026-2673 中危 3.5.0-r0 3.5.6-r0 openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31
libssl3 CVE-2026-31790 中危 3.5.0-r0 3.5.6-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3 CVE-2026-34182 中危 3.5.0-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34183 中危 3.5.0-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42764 中危 3.5.0-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45445 中危 3.5.0-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-31790 中危 3.5.0-r0 3.5.6-r0 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
musl CVE-2026-6042 中危 1.2.5-r10 1.2.5-r11 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
libcrypto3 CVE-2026-34182 中危 3.5.0-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
musl-utils CVE-2026-6042 中危 1.2.5-r10 1.2.5-r11 musl libc: GB18030 4-byte Decoder: musl libc: Denial of Service via inefficient algorithmic complexity in iconv

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6042

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-04-10 09:16 修改: 2026-06-17 11:00
ssl_client CVE-2024-58251 中危 1.37.0-r18 1.37.0-r20 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
libcrypto3 CVE-2026-34183 中危 3.5.0-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
zlib CVE-2026-27171 中危 1.3.1-r2 1.3.2-r0 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
libcrypto3 CVE-2025-68160 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libcrypto3 CVE-2025-69418 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2025-69420 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libcrypto3 CVE-2025-9232 低危 3.5.0-r0 3.5.4-r0 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libcrypto3 CVE-2026-22795 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libcrypto3 CVE-2026-22796 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libcrypto3 CVE-2026-34180 低危 3.5.0-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34181 低危 3.5.0-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42766 低危 3.5.0-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42767 低危 3.5.0-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42768 低危 3.5.0-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42769 低危 3.5.0-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42770 低危 3.5.0-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45446 低危 3.5.0-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2025-15468 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
libssl3 CVE-2025-15469 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
libssl3 CVE-2025-66199 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
libssl3 CVE-2025-68160 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libssl3 CVE-2025-69418 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-69420 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3 CVE-2025-9232 低危 3.5.0-r0 3.5.4-r0 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3 CVE-2026-22795 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl3 CVE-2026-22796 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl3 CVE-2026-34180 低危 3.5.0-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34181 低危 3.5.0-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42766 低危 3.5.0-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42767 低危 3.5.0-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42768 低危 3.5.0-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42769 低危 3.5.0-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42770 低危 3.5.0-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45446 低危 3.5.0-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-7383 低危 3.5.0-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-9076 低危 3.5.0-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-7383 低危 3.5.0-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-9076 低危 3.5.0-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
busybox-binsh CVE-2025-46394 低危 1.37.0-r18 1.37.0-r20 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
busybox CVE-2025-46394 低危 1.37.0-r18 1.37.0-r20 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
libcrypto3 CVE-2025-15468 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
ssl_client CVE-2025-46394 低危 1.37.0-r18 1.37.0-r20 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
libcrypto3 CVE-2025-15469 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
libcrypto3 CVE-2025-66199 低危 3.5.0-r0 3.5.5-r0 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:fd2758d7a50e2b78d275ee7d1c218489f2439084449d895fa17eede6c61ab2c4

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
Node.js (node-pkg)
低危漏洞:9 中危漏洞:47 高危漏洞:45 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
tar CVE-2026-59873 严重 6.2.1 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar CVE-2026-59873 严重 7.4.3 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar CVE-2026-59873 严重 7.4.3 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
brace-expansion CVE-2026-14257 高危 2.0.1 5.0.8 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-13149 高危 5.0.4 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 5.0.4 5.0.8 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
braces CVE-2024-4068 高危 2.3.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01
form-data CVE-2026-12143 高危 4.0.5 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-06-12 19:16 修改: 2026-07-23 12:17
glob CVE-2025-64756 高危 10.4.5 11.1.0, 10.5.0 glob: glob: Command Injection Vulnerability via Malicious Filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64756

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2025-11-17 18:15 修改: 2026-06-17 09:55
immutable CVE-2026-59879 高危 5.1.5 4.3.9, 5.1.8 Immutable.js provides many Persistent Immutable data structures. Prior ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59879

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-08 17:17 修改: 2026-07-10 18:48
immutable CVE-2026-59880 高危 5.1.5 4.3.9, 5.1.8 Immutable.js provides many Persistent Immutable data structures. Prior ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59880

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:49
js-yaml CVE-2026-59869 高危 3.14.2 3.15.0, 4.3.0 js-yaml: js-yaml: Denial of Service via crafted YAML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59869

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:05
linkify-it CVE-2026-48801 高危 2.2.0 5.0.1 linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48801

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:21
linkify-it CVE-2026-59887 高危 2.2.0 5.0.2 linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59887

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-08 17:17 修改: 2026-07-10 19:13
linkify-it CVE-2026-48801 高危 3.0.3 5.0.1 linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48801

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:21
linkify-it CVE-2026-59887 高危 3.0.3 5.0.2 linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59887

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-08 17:17 修改: 2026-07-10 19:13
minimatch CVE-2026-26996 高危 9.0.5 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
path-to-regexp CVE-2026-4926 高危 8.3.0 8.4.0 path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4926

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-03-26 19:17 修改: 2026-07-21 12:18
picomatch CVE-2026-33671 高危 2.3.1 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
postcss GHSA-r28c-9q8g-f849 高危 8.5.15 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24
rollup CVE-2026-27606 高危 4.54.0 2.80.0, 3.30.0, 4.59.0 rollup: Rollup: Remote Code Execution via Path Traversal Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27606

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-02-25 03:16 修改: 2026-07-20 12:18
sigstore CVE-2026-48815 高危 3.0.0 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
brace-expansion CVE-2026-13149 高危 1.1.12 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
tar CVE-2026-23745 高危 6.2.1 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-01-16 22:16 修改: 2026-07-21 12:17
tar CVE-2026-23950 高危 6.2.1 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18
tar CVE-2026-24842 高危 6.2.1 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-01-28 01:16 修改: 2026-07-15 02:18
tar CVE-2026-26960 高危 6.2.1 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-29786 高危 6.2.1 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19
tar CVE-2026-31802 高危 6.2.1 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-59874 高危 6.2.1 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
brace-expansion CVE-2026-14257 高危 1.1.12 5.0.8 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-13149 高危 2.0.1 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
tar CVE-2026-23745 高危 7.4.3 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-01-16 22:16 修改: 2026-07-21 12:17
tar CVE-2026-23745 高危 7.4.3 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-01-16 22:16 修改: 2026-07-21 12:17
tar CVE-2026-23950 高危 7.4.3 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18
tar CVE-2026-23950 高危 7.4.3 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18
tar CVE-2026-24842 高危 7.4.3 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-01-28 01:16 修改: 2026-07-15 02:18
tar CVE-2026-24842 高危 7.4.3 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-01-28 01:16 修改: 2026-07-15 02:18
tar CVE-2026-26960 高危 7.4.3 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-26960 高危 7.4.3 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-29786 高危 7.4.3 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19
tar CVE-2026-29786 高危 7.4.3 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19
tar CVE-2026-31802 高危 7.4.3 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-31802 高危 7.4.3 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-59874 高危 7.4.3 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-59874 高危 7.4.3 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
dompurify CVE-2026-49458 中危 3.3.1 3.4.6 dompurify: DOMPurify: Cross-site scripting due to improper sanitization of DOM nodes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49458

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:47
dompurify CVE-2026-49459 中危 3.3.1 3.4.6 dompurify: DOMPurify: Cross-site scripting bypass allows arbitrary script execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49459

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:51
dompurify CVE-2026-49978 中危 3.3.1 3.4.7 dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49978

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:49
dompurify CVE-2026-65898 中危 3.3.1 3.4.11 DOMPurify before 3.4.11 fails to clone the ALLOWED_ATTR allowlist when ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65898

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-23 14:18 修改: 2026-07-23 16:17
path-to-regexp CVE-2026-4923 中危 8.3.0 8.4.0 path-to-regexp: path-to-regexp: Denial of Service via specially crafted paths with multiple wildcards

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4923

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-03-26 19:17 修改: 2026-06-17 10:57
dompurify CVE-2026-65902 中危 3.3.1 3.4.7 DOMPurify before 3.4.7 (affected versions <= 3.4.5) passes direct refe ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65902

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-23 14:18 修改: 2026-07-23 15:11
picomatch CVE-2026-33672 中危 2.3.1 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
dompurify CVE-2026-65903 中危 3.3.1 3.4.0 DOMPurify before 3.4.0 contains a logic error in the ADD_TAGS function ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65903

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-23 14:18 修改: 2026-07-23 16:17
dompurify CVE-2026-65912 中危 3.3.1 3.3.2 DOMPurify before 3.3.2 contains a URI validation bypass vulnerability ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65912

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-23 14:18 修改: 2026-07-23 16:17
dompurify CVE-2026-65913 中危 3.3.1 3.3.2 DOMPurify before 3.3.2 contains a prototype pollution vulnerability in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65913

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-23 14:18 修改: 2026-07-23 15:11
dompurify CVE-2026-65914 中危 3.3.1 3.3.2 DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sani ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65914

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-23 14:18 修改: 2026-07-23 15:11
@sigstore/core CVE-2026-48758 中危 2.0.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
brace-expansion CVE-2026-33750 中危 1.1.12 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
brace-expansion CVE-2026-33750 中危 5.0.4 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
brace-expansion CVE-2026-45149 中危 5.0.4 5.0.6 brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
ip-address CVE-2026-42338 中危 9.0.5 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-05-12 20:16 修改: 2026-07-24 13:18
brace-expansion CVE-2026-33750 中危 2.0.1 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
js-yaml CVE-2026-53550 中危 3.14.2 4.2.0, 3.15.0 js-yaml: js-yaml: Denial of Service via crafted YAML merge keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53550

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-06-22 16:16 修改: 2026-07-09 20:33
tar CVE-2026-53655 中危 6.2.1 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 6.2.1 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 6.2.1 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar GHSA-r292-9mhp-454m 中危 6.2.1 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
katex CVE-2024-28243 中危 0.13.24 0.16.10 KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28243

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:21
katex CVE-2024-28245 中危 0.13.24 0.16.10 KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28245

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:21
katex CVE-2024-28246 中危 0.13.24 0.16.10 KaTeX is a JavaScript library for TeX math rendering on the web. Code ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28246

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:21
katex CVE-2025-23207 中危 0.13.24 0.16.21 katex: \htmlData does not validate attribute names in KaTeX

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-23207

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2025-01-17 22:15 修改: 2026-06-17 08:52
dompurify CVE-2026-0540 中危 3.3.1 3.3.2, 2.5.9 DOMPurify: DOMPurify: Cross-site scripting vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0540

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-03-03 18:16 修改: 2026-06-17 10:10
dompurify CVE-2026-41238 中危 3.3.1 3.4.0 DOMPurify: DOMPurify: Cross-Site Scripting bypass via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41238

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-04-23 16:16 修改: 2026-06-17 10:46
dompurify CVE-2026-41239 中危 3.3.1 3.4.0 DOMPurify: Vue 2: DOMPurify: Cross-site scripting due to incomplete sanitization of template expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41239

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-04-23 16:16 修改: 2026-06-17 10:46
dompurify CVE-2026-41240 中危 3.3.1 3.4.0 DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41240

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-04-23 16:16 修改: 2026-06-17 10:46
markdown-it CVE-2026-48988 中危 12.3.2 14.2.0 markdown-it is a Markdown parser. Versions 14.1.1 and below contain a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48988

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-06-17 21:16 修改: 2026-06-24 19:06
markdown-it CVE-2022-21670 中危 8.4.2 12.3.2 markdown-it is a Markdown parser. Prior to version 1.3.2, special patt ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21670

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2022-01-10 21:15 修改: 2026-06-17 04:26
markdown-it CVE-2026-48988 中危 8.4.2 14.2.0 markdown-it is a Markdown parser. Versions 14.1.1 and below contain a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48988

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-06-17 21:16 修改: 2026-06-24 19:06
mermaid CVE-2026-41148 中危 10.9.5 11.15.0, 10.9.6 mermaid: Mermaid: CSS injection vulnerability allows page defacement and information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41148

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-05-22 23:16 修改: 2026-07-23 11:10
mermaid CVE-2026-41149 中危 10.9.5 11.15.0, 10.9.6 mermaid: Mermaid: HTML injection via classDef directive in state diagrams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41149

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-05-22 23:16 修改: 2026-07-23 11:10
mermaid CVE-2026-41150 中危 10.9.5 11.15.0, 10.9.6 mermaid: Mermaid: Denial of Service via specially crafted gantt charts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41150

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-05-29 15:16 修改: 2026-07-21 12:10
mermaid CVE-2026-41159 中危 10.9.5 11.15.0, 10.9.6 mermaid: Mermaid: Information disclosure and page defacement via CSS injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41159

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-05-29 15:16 修改: 2026-07-21 12:10
micromatch CVE-2024-4067 中危 3.1.10 4.0.8 micromatch: vulnerable to Regular Expression Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4067

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01
tar CVE-2026-53655 中危 7.4.3 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-53655 中危 7.4.3 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 7.4.3 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59871 中危 7.4.3 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 7.4.3 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar CVE-2026-59875 中危 7.4.3 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar GHSA-r292-9mhp-454m 中危 7.4.3 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
tar GHSA-r292-9mhp-454m 中危 7.4.3 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
uuid CVE-2026-41907 中危 9.0.1 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
dompurify GHSA-c2j3-45gr-mqc4 低危 3.3.1 3.4.12 DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

漏洞详情: https://github.com/advisories/GHSA-c2j3-45gr-mqc4

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-21 19:41 修改: 2026-07-21 19:41
esbuild GHSA-g7r4-m6w7-qqqr 低危 0.28.0 0.28.1 esbuild allows arbitrary file read when running the development server on Windows

漏洞详情: https://github.com/advisories/GHSA-g7r4-m6w7-qqqr

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-06-12 20:08 修改: 2026-06-12 20:08
body-parser CVE-2026-12590 低危 2.2.1 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
diff CVE-2026-24001 低危 5.2.0 8.0.3, 5.2.2, 4.0.4, 3.5.1 jsdiff: denial of service vulnerability in parsePatch and applyPatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24001

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-01-22 03:15 修改: 2026-07-15 02:18
diff CVE-2026-24001 低危 5.2.0 8.0.3, 5.2.2, 4.0.4, 3.5.1 jsdiff: denial of service vulnerability in parsePatch and applyPatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24001

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2026-01-22 03:15 修改: 2026-07-15 02:18
brace-expansion CVE-2025-5889 低危 2.0.1 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:126f43b2ffa5f1aedd6a2b56c92a4b6308a687f9f491bcfd58198674e7a09d38

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
dompurify CVE-2026-65899 低危 3.3.1 3.4.9 DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65899

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-23 14:18 修改: 2026-07-23 15:11
dompurify CVE-2026-65900 低危 3.3.1 3.4.8 DOMPurify versions >=3.0.0 and before 3.4.8, when configured with SAFE ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65900

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-23 14:18 修改: 2026-07-23 19:17
dompurify CVE-2026-65901 低危 3.3.1 DOMPurify through 3.4.6 contains a cross-site scripting vulnerability ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65901

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-23 14:18 修改: 2026-07-23 15:11
app/node_modules/.pnpm/@typescript+typescript-linux-x64@7.0.2/node_modules/@typescript/typescript-linux-x64/lib/tsc (gobinary)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-39822 高危 v1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2 os: golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib CVE-2026-42505 中危 v1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
golang.org/x/text CVE-2026-56852 未知 v0.38.0 0.39.0 A norm.Iter can enter an infinite loop when handling input containing ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:705545d78981478d54b9af097961cf34cda709c0203c21fb9576f80f81f70f8d

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×