docker.io/opensearchproject/opensearch:3.8.0 linux/amd64

docker.io/opensearchproject/opensearch:3.8.0 - Trivy安全扫描结果 扫描时间: 2026-09-08 15:39
全部漏洞信息
低危漏洞:0 中危漏洞:37 高危漏洞:52 严重漏洞:0

系统OS: amazon 2023.12.20260727 (Amazon Linux) 扫描引擎: Trivy 扫描时间: 2026-09-08 15:39

docker.io/opensearchproject/opensearch:3.8.0 (amazon 2023.12.20260727 (Amazon Linux)) (amazon)
低危漏洞:0 中危漏洞:2 高危漏洞:17 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gawk CVE-2026-40467 高危 5.1.0-3.amzn2023.0.3 5.1.0-3.amzn2023.0.4 gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40467

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-07-13 13:16 修改: 2026-07-14 01:13
gawk CVE-2026-40468 高危 5.1.0-3.amzn2023.0.3 5.1.0-3.amzn2023.0.4 gawk: gawk: Memory corruption via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40468

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-07-13 13:16 修改: 2026-07-14 01:12
gawk CVE-2026-40553 高危 5.1.0-3.amzn2023.0.3 5.1.0-3.amzn2023.0.4 gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40553

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-07-13 13:16 修改: 2026-07-14 01:10
glib2 CVE-2026-16118 高危 2.82.2-770.amzn2023 2.82.2-771.amzn2023 xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16118

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-07-17 20:17 修改: 2026-09-03 13:04
openssl-fips-provider-latest CVE-2026-14456 高危 1:3.5.5-1.amzn2023.0.5 1:3.5.7-2.amzn2023.0.2 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
openssl-libs CVE-2026-14456 高危 1:3.5.5-1.amzn2023.0.5 1:3.5.7-2.amzn2023.0.2 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
python3 CVE-2026-15308 高危 3.9.25-1.amzn2023.0.8 3.9.25-1.amzn2023.0.9 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
python3 CVE-2026-4360 高危 3.9.25-1.amzn2023.0.8 3.9.25-1.amzn2023.0.9 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
python3 CVE-2026-7774 高危 3.9.25-1.amzn2023.0.8 3.9.25-1.amzn2023.0.9 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
python3-libs CVE-2026-15308 高危 3.9.25-1.amzn2023.0.8 3.9.25-1.amzn2023.0.9 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
python3-libs CVE-2026-4360 高危 3.9.25-1.amzn2023.0.8 3.9.25-1.amzn2023.0.9 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
python3-libs CVE-2026-7774 高危 3.9.25-1.amzn2023.0.8 3.9.25-1.amzn2023.0.9 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
python3-rpm CVE-2026-44605 高危 4.16.1.3-29.amzn2023.0.6 4.16.1.3-29.amzn2023.0.7 rpm: heap buffer overflow in NDB slot table parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-08-05 18:17 修改: 2026-08-31 13:18
rpm CVE-2026-44605 高危 4.16.1.3-29.amzn2023.0.6 4.16.1.3-29.amzn2023.0.7 rpm: heap buffer overflow in NDB slot table parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-08-05 18:17 修改: 2026-08-31 13:18
rpm-build-libs CVE-2026-44605 高危 4.16.1.3-29.amzn2023.0.6 4.16.1.3-29.amzn2023.0.7 rpm: heap buffer overflow in NDB slot table parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-08-05 18:17 修改: 2026-08-31 13:18
rpm-libs CVE-2026-44605 高危 4.16.1.3-29.amzn2023.0.6 4.16.1.3-29.amzn2023.0.7 rpm: heap buffer overflow in NDB slot table parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-08-05 18:17 修改: 2026-08-31 13:18
rpm-sign-libs CVE-2026-44605 高危 4.16.1.3-29.amzn2023.0.6 4.16.1.3-29.amzn2023.0.7 rpm: heap buffer overflow in NDB slot table parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-08-05 18:17 修改: 2026-08-31 13:18
python3-pip-wheel CVE-2026-45409 中危 21.3.1-2.amzn2023.0.20 21.3.1-2.amzn2023.0.21 python-idna: idna: Denial of Service via specially crafted long inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10
libxml2 CVE-2026-11979 中危 2.10.4-1.amzn2023.0.19 2.10.4-1.amzn2023.0.20 libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11979

镜像层: sha256:317b6fe7c2e1777925335bc0705d6f73f56927bf2a46bad44efca2dbc0420892

发布日期: 2026-06-29 14:16 修改: 2026-06-30 20:22
Java (jar)
低危漏洞:0 中危漏洞:35 高危漏洞:35 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
io.netty:netty-codec CVE-2026-59901 高危 4.1.133.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-http CVE-2026-55831 高危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http CVE-2026-55833 高危 4.1.133.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http CVE-2026-56745 高危 4.1.133.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2 CVE-2026-56819 高危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
io.netty:netty-handler CVE-2026-44249 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-06-11 22:16 修改: 2026-09-07 13:19
io.netty:netty-handler CVE-2026-45416 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-06-12 15:16 修改: 2026-09-07 13:20
io.netty:netty-handler CVE-2026-50010 高危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-06-12 16:16 修改: 2026-09-07 13:20
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.eclipse.jetty:jetty-security CVE-2026-10050 高危 9.4.58.v20250814 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-08-04 11:22 修改: 2026-08-08 00:38
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
io.netty:netty-codec-http CVE-2026-56746 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http CVE-2026-59898 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
io.netty:netty-codec-http CVE-2026-59899 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http CVE-2026-59903 中危 4.1.133.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
io.netty:netty-codec-http CVE-2026-59921 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
io.netty:netty-codec-http CVE-2026-59903 中危 4.2.16.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
io.netty:netty-codec-http CVE-2026-59903 中危 4.2.16.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
io.netty:netty-codec-http CVE-2026-59903 中危 4.2.16.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
io.netty:netty-codec-http CVE-2026-59903 中危 4.2.16.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
io.netty:netty-codec-http CVE-2026-59903 中危 4.2.16.Final 4.2.17.Final, 4.1.137.Final io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.21.4 2.21.5, 2.18.9, 2.22.1 com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.133.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-06-12 16:16 修改: 2026-09-02 13:17
io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2 CVE-2026-59900 中危 4.1.133.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.21.4 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.21.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-codec-http CVE-2026-50020 中危 4.1.133.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.25.4 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.6.1 5.6.3 org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
org.jsoup:jsoup CVE-2026-71497 中危 1.15.3 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-08-06 22:18 修改: 2026-08-07 15:17
org.jsoup:jsoup CVE-2026-71497 中危 1.19.1 1.23.1 org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497

镜像层: sha256:e059508c6e17e26808173fa493a80181edeb9345e62c8e02a80daf9973c9a063

发布日期: 2026-08-06 22:18 修改: 2026-08-07 15:17
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×