docker.io/makeplane/plane-backend:v1.4.2 linux/amd64

docker.io/makeplane/plane-backend:v1.4.2 - Trivy安全扫描结果 扫描时间: 2026-09-11 15:59
全部漏洞信息
低危漏洞:23 中危漏洞:29 高危漏洞:30 严重漏洞:0

系统OS: alpine 3.22.0 扫描引擎: Trivy 扫描时间: 2026-09-11 15:59

docker.io/makeplane/plane-backend:v1.4.2 (alpine 3.22.0) (alpine)
低危漏洞:21 中危漏洞:18 高危漏洞:27 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto3 CVE-2026-14456 高危 3.5.7-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libpq CVE-2026-14662 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14662

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-14664 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14664

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-14668 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14668

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-14669 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14669

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-14670 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14670

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-14671 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14671

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-14676 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14676

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-14677 高危 17.10-r0 17.11-r0 postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14677

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-14679 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14679

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-14680 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14680

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-15741 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15741

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-15742 高危 17.10-r0 17.11-r0 postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15742

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-16238 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16238

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-16239 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16239

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-18408 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18408

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-19385 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19385

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-6464 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6464

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:19 修改: 2026-08-29 23:17
libpq CVE-2026-6471 高危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6471

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:19 修改: 2026-08-29 23:17
libssl3 CVE-2026-14456 高危 3.5.7-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libuuid CVE-2026-53612 高危 2.41-r9 2.41.6-r0 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid CVE-2026-53613 高危 2.41-r9 2.41.6-r0 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid CVE-2026-53614 高危 2.41-r9 2.41.6-r0 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid CVE-2026-76642 高危 2.41-r9 2.41.6-r0 util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
libuuid CVE-2026-78408 高危 2.41-r9 2.41.6-r1 util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
libuuid CVE-2026-78410 高危 2.41-r9 2.41.6-r0 util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
openssl CVE-2026-14456 高危 3.5.7-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libpq CVE-2026-18024 中危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18024

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-6470 中危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6470

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:19 修改: 2026-08-29 23:17
libcrypto3 CVE-2026-18798 中危 3.5.7-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3 CVE-2026-18798 中危 3.5.7-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3 CVE-2026-63072 中危 3.5.7-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-63076 中危 3.5.7-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-63072 中危 3.5.7-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-63076 中危 3.5.7-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libpq CVE-2026-14663 中危 17.10-r0 17.11-r0 postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14663

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-14666 中危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14666

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-14672 中危 17.10-r0 17.11-r0 postgresql: PostgreSQL: User existence oracle in SCRAM authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14672

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-14678 中危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14678

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libuuid CVE-2025-14104 中危 2.41-r9 2.41.6-r0 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 2025-12-05 17:16 修改: 2026-09-01 12:17
libuuid CVE-2026-27456 中危 2.41-r9 2.41.6-r0 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libpq CVE-2026-14681 中危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14681

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
openssl CVE-2026-18798 中危 3.5.7-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl CVE-2026-63072 中危 3.5.7-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63076 中危 3.5.7-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-63074 低危 3.5.7-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-63075 低危 3.5.7-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-75803 低危 3.5.7-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
libcrypto3 CVE-2026-75803 低危 3.5.7-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
libcrypto3 CVE-2026-14457 低危 3.5.7-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libpq CVE-2026-14673 低危 17.10-r0 17.11-r0 postgresql: PostgreSQL amcheck: Privilege escalation via untrusted search path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14673

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-16241 低危 17.10-r0 17.11-r0 postgresql: PostgreSQL ECPG: Denial of Service via integer underflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16241

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:17 修改: 2026-08-29 23:17
libpq CVE-2026-6469 低危 17.10-r0 17.11-r0 postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6469

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-13 13:19 修改: 2026-08-29 23:17
libcrypto3 CVE-2026-54874 低危 3.5.7-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-63073 低危 3.5.7-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
libcrypto3 CVE-2026-63074 低危 3.5.7-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libcrypto3 CVE-2026-63075 低危 3.5.7-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-14457 低危 3.5.7-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3 CVE-2026-54874 低危 3.5.7-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3 CVE-2026-63073 低危 3.5.7-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:19e4fdebc21342bf9d04507873e349081c4bef7e2ba590058f7d6b1190fb2116

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
openssl CVE-2026-14457 低危 3.5.7-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl CVE-2026-54874 低危 3.5.7-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63073 低危 3.5.7-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
openssl CVE-2026-63074 低危 3.5.7-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63075 低危 3.5.7-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-75803 低危 3.5.7-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:d4ad037097864a1c1531975b27ad8b8807ab7276c8293142164a849e4c8043fa

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
Node.js (node-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Python (python-pkg)
低危漏洞:2 中危漏洞:11 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
sqlparse CVE-2026-54284 高危 0.5.5 0.6.0 sqlparse: sqlparse: Denial of Service via quadratic CPU consumption in SQL parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54284

镜像层: sha256:e312de2efe1e4fc9b80c7cbb2b22a81de10650302fd7fbf7eeda8920123adf00

发布日期: 2026-08-17 18:17 修改: 2026-08-17 20:16
sqlparse CVE-2026-59893 高危 0.5.5 0.6.0 sqlparse: sqlparse: Denial of Service via inefficient SQL parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59893

镜像层: sha256:e312de2efe1e4fc9b80c7cbb2b22a81de10650302fd7fbf7eeda8920123adf00

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
sqlparse CVE-2026-71491 高危 0.5.5 0.6.0 sqlparse: sqlparse: Denial of Service via quadratic CPU consumption in comment grouping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71491

镜像层: sha256:e312de2efe1e4fc9b80c7cbb2b22a81de10650302fd7fbf7eeda8920123adf00

发布日期: 2026-08-17 18:18 修改: 2026-09-09 21:11
djangorestframework CVE-2026-73229 中危 3.17.1 3.17.2 djangorestframework: Django REST framework: Information disclosure via improper permission checks in AdminRenderer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73229

镜像层: sha256:e312de2efe1e4fc9b80c7cbb2b22a81de10650302fd7fbf7eeda8920123adf00

发布日期: 2026-08-11 20:18 修改: 2026-08-11 20:18
pip CVE-2025-8869 中危 25.0.1 25.3 pip: pip missing checks on symbolic link extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
pip CVE-2026-13346 中危 25.0.1 26.2.0 pip: pip: Arbitrary file installation via malicious package indexes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13346

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 2026-07-29 19:16 修改: 2026-08-20 13:17
pip CVE-2026-3219 中危 25.0.1 26.1 pip: pip: Incorrect file installation due to improper archive handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
pip CVE-2026-6357 中危 25.0.1 26.1 pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
pip CVE-2026-8643 中危 25.0.1 26.1.2 python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 2026-06-01 17:17 修改: 2026-09-09 13:20
Django CVE-2026-53877 中危 5.2.15 5.2.16, 6.0.7 django: Django: Information disclosure via heap buffer over-read in GDALRaster

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53877

镜像层: sha256:e312de2efe1e4fc9b80c7cbb2b22a81de10650302fd7fbf7eeda8920123adf00

发布日期: 2026-07-07 15:16 修改: 2026-07-09 12:59
Django CVE-2026-53878 中危 5.2.15 5.2.16, 6.0.7 django: Django: HTTP header injection via DomainNameValidator accepting newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53878

镜像层: sha256:e312de2efe1e4fc9b80c7cbb2b22a81de10650302fd7fbf7eeda8920123adf00

发布日期: 2026-07-07 15:16 修改: 2026-07-09 12:58
djangorestframework CVE-2026-73228 中危 3.17.1 3.17.2 djangorestframework: Django REST framework: Denial of Service via oversized request bodies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73228

镜像层: sha256:e312de2efe1e4fc9b80c7cbb2b22a81de10650302fd7fbf7eeda8920123adf00

发布日期: 2026-08-11 19:18 修改: 2026-08-13 15:20
sqlparse CVE-2026-59894 中危 0.5.5 0.6.0 sqlparse: sqlparse: Arbitrary code execution via unescaped backslashes in generated snippets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59894

镜像层: sha256:e312de2efe1e4fc9b80c7cbb2b22a81de10650302fd7fbf7eeda8920123adf00

发布日期: 2026-08-17 18:17 修改: 2026-08-17 22:17
sqlparse CVE-2026-84305 中危 0.5.5 0.6.0 sqlparse is a non-validating SQL parser module for Python. Prior to 0. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84305

镜像层: sha256:e312de2efe1e4fc9b80c7cbb2b22a81de10650302fd7fbf7eeda8920123adf00

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
pip CVE-2026-1703 低危 25.0.1 26.0 pip: pip: Information disclosure via path traversal when installing crafted wheel archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703

镜像层: sha256:bbf1849f3aa7647d9ba7be0a987f93a5972dbe9fb47b69a28d49794f1afc744c

发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16
Django CVE-2026-48588 低危 5.2.15 5.2.16, 6.0.7 django: Django: Information disclosure due to improper caching of Set-Cookie responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48588

镜像层: sha256:e312de2efe1e4fc9b80c7cbb2b22a81de10650302fd7fbf7eeda8920123adf00

发布日期: 2026-07-07 15:16 修改: 2026-07-09 13:01
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×