| next |
CVE-2026-75604 |
严重 |
16.3.1 |
15.5.24, 16.3.3 |
Next.js: Unauthenticated Remote Code Execution on windows-hosted servers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75604
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-01 22:17 修改: 2026-09-09 21:09
|
| next |
GHSA-2xp9-vwfh-vxw4 |
严重 |
16.3.1 |
15.5.24, 16.3.3 |
Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used
漏洞详情: https://github.com/advisories/GHSA-2xp9-vwfh-vxw4
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-08 21:21 修改: 2026-09-08 21:21
|
| @xmldom/xmldom |
CVE-2026-83612 |
高危 |
0.9.11 |
0.9.12 |
xmldom: xmldom: Denial of Service via crafted HTML with mixed-case tags
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83612
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
|
| @xmldom/xmldom |
CVE-2026-83613 |
高危 |
0.9.11 |
0.8.15, 0.9.12 |
xmldom: @xmldom/xmldom: xmldom: Denial of Service due to quadratic-time attribute processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83613
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
|
| @xmldom/xmldom |
CVE-2026-83614 |
高危 |
0.9.11 |
0.8.15, 0.9.12 |
xmldom: @xmldom/xmldom: xmldom: Denial of Service via quadratic-time XML parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83614
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
|
| @xmldom/xmldom |
CVE-2026-83615 |
高危 |
0.9.11 |
0.8.15, 0.9.12 |
xmldom: @xmldom/xmldom: xmldom: Denial of Service via quadratic memory consumption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83615
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
|
| @xmldom/xmldom |
CVE-2026-83616 |
高危 |
0.9.11 |
0.8.15, 0.9.12 |
xmldom: xmldom: XML Structure Injection via Unvalidated Processing Instruction Targets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83616
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
|
| @xmldom/xmldom |
CVE-2026-83617 |
高危 |
0.9.11 |
0.9.12 |
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83617
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
|
| @xmldom/xmldom |
CVE-2026-83618 |
高危 |
0.9.11 |
0.9.12 |
xmldom: @xmldom/xmldom: xmldom: DocumentType injection bypass via embedded line terminators
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83618
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
|
| fast-uri |
CVE-2026-75899 |
高危 |
3.1.5 |
2.4.5, 3.1.6, 4.1.3 |
fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75899
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:43
|
| fast-uri |
CVE-2026-75931 |
高危 |
3.1.5 |
2.4.5, 3.1.6, 4.1.3 |
fast-uri: fast-uri: Host confusion via skipped IDN canonicalization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75931
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:44
|
| fast-uri |
CVE-2026-75975 |
高危 |
3.1.5 |
2.4.5, 3.1.6, 4.1.3 |
fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75975
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-08-24 10:16 修改: 2026-09-02 14:44
|
| fast-uri |
CVE-2026-76172 |
高危 |
3.1.5 |
2.4.5, 3.1.6, 4.1.3 |
fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76172
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-08-24 11:16 修改: 2026-09-02 14:43
|
| fast-xml-parser |
CVE-2026-33036 |
高危 |
5.4.2 |
5.5.6, 4.5.5 |
fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33036
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-03-20 06:16 修改: 2026-06-17 10:36
|
| @xmldom/xmldom |
CVE-2026-83608 |
高危 |
0.9.11 |
0.8.15, 0.9.12 |
xmldom: @xmldom/xmldom: xmldom: XML Markup Injection via DocType Name Bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83608
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
|
| @xmldom/xmldom |
CVE-2026-83609 |
高危 |
0.9.11 |
0.9.12 |
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83609
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
|
| sharp |
GHSA-f88m-g3jw-g9cj |
高危 |
0.34.5 |
0.35.0 |
sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591
漏洞详情: https://github.com/advisories/GHSA-f88m-g3jw-g9cj
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-07-21 22:07 修改: 2026-07-21 22:07
|
| sharp |
GHSA-rgj7-g3m4-5g8c |
高危 |
0.34.5 |
0.35.4 |
sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545
漏洞详情: https://github.com/advisories/GHSA-rgj7-g3m4-5g8c
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-08 21:25 修改: 2026-09-08 21:25
|
| sharp |
GHSA-rgj7-g3m4-5g8c |
高危 |
0.35.3 |
0.35.4 |
sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545
漏洞详情: https://github.com/advisories/GHSA-rgj7-g3m4-5g8c
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-08 21:25 修改: 2026-09-08 21:25
|
| fast-xml-parser |
CVE-2026-41650 |
中危 |
5.4.2 |
5.7.0 |
fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41650
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-05-07 15:16 修改: 2026-06-17 10:46
|
| @xmldom/xmldom |
CVE-2026-83611 |
中危 |
0.9.11 |
0.8.15, 0.9.12 |
xmldom: xmldom: Malformed XML end tag parsing leads to content discard and security bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83611
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
|
| fast-xml-parser |
CVE-2023-26920 |
中危 |
3.21.1 |
4.1.2 |
fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26920
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2023-12-12 17:15 修改: 2026-06-17 05:43
|
| fast-xml-parser |
CVE-2026-41650 |
中危 |
3.21.1 |
5.7.0 |
fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41650
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-05-07 15:16 修改: 2026-06-17 10:46
|
| @xmldom/xmldom |
CVE-2026-83610 |
中危 |
0.9.11 |
0.8.15, 0.9.12 |
xmldom: @xmldom/xmldom: xmldom: XML fragment injection via invalid EntityReference serialization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-83610
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-09-01 15:17 修改: 2026-09-08 21:11
|
| fast-xml-parser |
CVE-2026-33349 |
中危 |
5.4.2 |
4.5.5, 5.5.7 |
fast-xml-parser: fast-xml-parser: Denial of Service via unbounded entity expansion due to incorrect configuration limit handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33349
镜像层: sha256:bd6895465a20a933d60e9d3da911dc1354d1d3eba3f91bd380b618c82b654472
发布日期: 2026-03-24 20:16 修改: 2026-06-17 10:37
|