| @opentelemetry/propagator-jaeger |
CVE-2026-59892 |
高危 |
2.7.1 |
2.9.0 |
@opentelemetry/propagator-jaeger: OpenTelemetry JavaScript: Denial of Service via malformed HTTP header decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59892
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-08 17:17 修改: 2026-07-10 18:56
|
| brace-expansion |
CVE-2026-14257 |
高危 |
2.1.2 |
5.0.8, 3.0.3, 2.1.3, 1.1.17 |
brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
|
| brace-expansion |
CVE-2026-69152 |
高危 |
2.1.2 |
1.1.18, 2.1.4, 3.0.6, 5.0.9 |
brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
|
| brace-expansion |
CVE-2026-14257 |
高危 |
5.0.7 |
5.0.8, 3.0.3, 2.1.3, 1.1.17 |
brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
|
| brace-expansion |
CVE-2026-69152 |
高危 |
5.0.7 |
1.1.18, 2.1.4, 3.0.6, 5.0.9 |
brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
|
| fast-uri |
CVE-2026-16221 |
高危 |
3.1.3 |
2.4.3, 3.1.4, 4.1.1 |
Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16221
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-19 15:16 修改: 2026-08-05 19:46
|
| fast-uri |
CVE-2026-18446 |
高危 |
3.1.3 |
2.4.4, 3.1.5, 4.1.2 |
fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18446
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-31 15:16 修改: 2026-07-31 18:17
|
| ip-address |
CVE-2026-69192 |
高危 |
10.1.1 |
10.3.1 |
ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
|
| js-yaml |
GHSA-5p4m-2wfm-xmqj |
高危 |
4.3.0 |
4.3.1, 3.15.1 |
JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported
漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27
|
| linkify-it |
CVE-2026-59887 |
高危 |
5.0.1 |
5.0.2 |
linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59887
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-08 17:17 修改: 2026-07-10 19:13
|
| nanoid |
CVE-2026-67213 |
高危 |
3.3.11 |
3.3.17, 5.1.6 |
nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customA ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67213
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-29 14:16 修改: 2026-07-30 19:07
|
| nanoid |
CVE-2026-67214 |
高危 |
3.3.11 |
3.3.16, 5.1.16 |
nanoid (Nano ID) before 5.1.16 contains an infinite loop in the custom ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67214
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-29 14:16 修改: 2026-07-30 19:07
|
| nanoid |
CVE-2026-67213 |
高危 |
3.3.8 |
3.3.17, 5.1.6 |
nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customA ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67213
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-29 14:16 修改: 2026-07-30 19:07
|
| nanoid |
CVE-2026-67214 |
高危 |
3.3.8 |
3.3.16, 5.1.16 |
nanoid (Nano ID) before 5.1.16 contains an infinite loop in the custom ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-67214
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-29 14:16 修改: 2026-07-30 19:07
|
| nodemailer |
GHSA-p6gq-j5cr-w38f |
高危 |
8.0.10 |
9.0.1 |
Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message
漏洞详情: https://github.com/advisories/GHSA-p6gq-j5cr-w38f
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-06-18 14:28 修改: 2026-06-18 14:28
|
| postcss |
CVE-2026-45623 |
高危 |
8.5.10 |
8.5.12 |
postcss: PostCSS: Information disclosure and denial of service via crafted CSS input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-27 18:16 修改: 2026-08-07 00:13
|
| postcss |
GHSA-r28c-9q8g-f849 |
高危 |
8.5.10 |
8.5.18 |
PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure
漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24
|
| undici |
CVE-2026-13697 |
高危 |
7.28.0 |
7.29.0, 8.9.0 |
undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13697
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-29 17:16 修改: 2026-08-04 14:17
|
| ip-address |
CVE-2026-54272 |
中危 |
10.1.1 |
10.2.1 |
ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54272
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-27 18:16 修改: 2026-07-27 18:16
|
| ip-address |
CVE-2026-69198 |
中危 |
10.1.1 |
10.2.2 |
ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69198
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-08-03 20:17 修改: 2026-08-04 18:16
|
| hono |
CVE-2026-69207 |
中危 |
4.12.27 |
4.12.34 |
Hono: ReDoS in CORS middleware via Access-Control-Request-Headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69207
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-08-07 21:17 修改: 2026-08-07 21:17
|
| hono |
CVE-2026-71848 |
中危 |
4.12.27 |
4.12.34 |
Hono: Algorithmic Complexity DoS in Language Middleware
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71848
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-08-07 19:18 修改: 2026-08-08 04:17
|
| hono |
CVE-2026-71850 |
中危 |
4.12.27 |
4.12.34 |
Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71850
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-08-07 19:18 修改: 2026-08-07 19:18
|
| postcss |
CVE-2026-69153 |
中危 |
8.5.10 |
8.5.23 |
postcss: PostCSS: Information disclosure via crafted sourceMappingURL
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69153
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
|
| sanitize-html |
CVE-2026-53606 |
中危 |
2.17.4 |
2.17.5 |
apostrophecms sanitize-html: sanitize-html: Cross-Site Scripting (XSS) via insufficient URI scheme validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53606
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-06-12 21:16 修改: 2026-06-17 10:57
|
| showdown |
CVE-2024-1899 |
中危 |
2.1.0 |
|
Showdown vulnerable to Regular Expression Denial of Service (ReDoS) in link/anchor parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1899
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2024-02-26 19:15 修改: 2026-06-17 07:05
|
| showdown |
CVE-2026-59710 |
中危 |
2.1.0 |
|
showdown: Showdown: Stored Cross-Site Scripting via unescaped table header ID attributes in markdown
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59710
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-06 22:16 修改: 2026-07-07 13:57
|
| showdown |
CVE-2026-59711 |
中危 |
2.1.0 |
|
showdown: Showdown: Cross-site scripting via unescaped metadata title allows arbitrary code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59711
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-06 21:16 修改: 2026-07-07 15:16
|
| tar |
GHSA-r292-9mhp-454m |
中危 |
7.5.19 |
7.5.21 |
node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection
漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
|
| undici |
CVE-2026-15157 |
中危 |
6.27.0 |
6.28.0, 7.29.0, 8.9.0 |
undici: undici: HTTP header injection via unvalidated blob-like body type property
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
|
| undici |
CVE-2026-16728 |
中危 |
6.27.0 |
6.28.0, 7.29.0, 8.9.0 |
undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
|
| undici |
CVE-2026-16729 |
中危 |
6.27.0 |
6.28.0, 7.29.0, 8.9.0 |
undici: Undici: Cookie attribute injection allows bypassing security protections
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18
|
| @hono/node-server |
GHSA-frvp-7c67-39w9 |
中危 |
1.19.13 |
2.0.5 |
Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
漏洞详情: https://github.com/advisories/GHSA-frvp-7c67-39w9
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-21 18:17 修改: 2026-07-21 18:17
|
| undici |
CVE-2026-14643 |
中危 |
7.28.0 |
7.29.0, 8.9.0 |
undici: undici: Cross-user information disclosure due to improper Cache-Control directive parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14643
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:53
|
| undici |
CVE-2026-15157 |
中危 |
7.28.0 |
6.28.0, 7.29.0, 8.9.0 |
undici: undici: HTTP header injection via unvalidated blob-like body type property
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
|
| undici |
CVE-2026-16728 |
中危 |
7.28.0 |
6.28.0, 7.29.0, 8.9.0 |
undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
|
| undici |
CVE-2026-16729 |
中危 |
7.28.0 |
6.28.0, 7.29.0, 8.9.0 |
undici: Undici: Cookie attribute injection allows bypassing security protections
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18
|
| hono |
CVE-2026-71849 |
低危 |
4.12.27 |
4.12.34 |
Hono: Proxy Helper does not remove response headers listed in the `Connection` header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71849
镜像层: sha256:d9f2a682f5d501fa473253c1e0628660db2c01005d835301a01b2026e7a99538
发布日期: 2026-08-07 19:18 修改: 2026-08-07 19:18
|