docker.io/penhaijun/lx-music-server:latest linux/amd64

docker.io/penhaijun/lx-music-server:latest - Trivy安全扫描结果 扫描时间: 2026-08-13 15:11
全部漏洞信息
低危漏洞:4 中危漏洞:25 高危漏洞:46 严重漏洞:17

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-13 15:11

docker.io/penhaijun/lx-music-server:latest (alpine 3.24.1) (alpine)
低危漏洞:2 中危漏洞:12 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libssh CVE-2026-15370 高危 0.12.0-r0 0.12.1-r0 libssh: libssh: stack buffer overflow in SFTP server longname construction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15370

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-21 09:16 修改: 2026-07-30 13:13
libssh CVE-2026-59847 高危 0.12.0-r0 0.12.1-r0 libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59847

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-21 14:16 修改: 2026-07-30 13:11
libssh CVE-2026-59849 高危 0.12.0-r0 0.12.1-r0 libssh: libssh: denial of service via automatic certificate authentication loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59849

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-21 15:16 修改: 2026-07-30 16:33
libssh CVE-2026-59850 高危 0.12.0-r0 0.12.1-r0 libssh: libssh: use-after-free via data callbacks on closed channels

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59850

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-21 15:16 修改: 2026-07-30 16:23
libssh CVE-2026-59851 高危 0.12.0-r0 0.12.1-r0 libssh: libssh: authentication bypass via missing GSSAPI principal check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59851

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-21 15:16 修改: 2026-07-30 16:08
nodejs CVE-2026-56846 高危 24.17.0-r0 24.18.1-r0 nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56846

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-08-04 01:16 修改: 2026-08-04 16:16
nodejs CVE-2026-56848 高危 24.17.0-r0 24.18.1-r0 nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56848

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-08-04 17:16 修改: 2026-08-04 18:16
nodejs CVE-2026-58043 高危 24.17.0-r0 24.18.1-r0 nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58043

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-30 06:25 修改: 2026-07-31 04:17
libssh CVE-2026-59845 中危 0.12.0-r0 0.12.1-r0 libssh: libssh: denial of service via unchecked ProxyCommand fork() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59845

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-21 12:18 修改: 2026-08-11 16:17
libssh CVE-2026-59848 中危 0.12.0-r0 0.12.1-r0 libssh: libssh: denial of service via SFTP responses with unknown request IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59848

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-21 14:16 修改: 2026-07-30 13:11
libssh CVE-2026-59842 中危 0.12.0-r0 0.12.1-r0 libssh: libssh: information disclosure via short GSSAPI Curve25519 public key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59842

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-21 12:18 修改: 2026-07-30 13:13
libssh CVE-2026-59843 中危 0.12.0-r0 0.12.2-r0 libssh: libssh: denial of service via zero advertised channel packet size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59843

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-21 12:18 修改: 2026-07-30 13:13
libssh CVE-2026-59844 中危 0.12.0-r0 0.12.1-r0 libssh: libssh: denial of service via oversized SFTP read length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59844

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-21 12:18 修改: 2026-07-30 13:12
nodejs CVE-2026-56850 中危 24.17.0-r0 24.18.1-r0 nodejs: Node.js: mTLS client identities can be reused due to HTTPS Agent connection flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56850

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-30 06:25 修改: 2026-07-30 16:33
nodejs CVE-2026-58039 中危 24.17.0-r0 24.18.1-r0 nodejs: Information disclosure due to improper permission enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58039

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-31 01:16 修改: 2026-07-31 16:17
nodejs CVE-2026-58040 中危 24.17.0-r0 24.18.1-r0 nodejs: HTTPS Agent TLS session reuse skips hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58040

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-30 06:25 修改: 2026-07-30 14:17
nodejs CVE-2026-58041 中危 24.17.0-r0 24.18.1-r0 nodejs: Node.js node:sqlite: Unintended data modification due to stale statement iterator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58041

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-08-04 01:16 修改: 2026-08-04 16:16
nodejs CVE-2026-58042 中危 24.17.0-r0 24.18.1-r0 nodejs: Node.js: Denial of Service via DNS responses with excessive A records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58042

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-08-04 01:16 修改: 2026-08-04 16:16
nodejs CVE-2026-58044 中危 24.17.0-r0 24.18.1-r0 nodejs: Node.js: Request smuggling via HTTP client header truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58044

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-08-04 01:16 修改: 2026-08-04 16:16
nodejs CVE-2026-58045 中危 24.17.0-r0 24.18.1-r0 nodejs: Node.js: Denial of Service vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58045

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-08-04 01:16 修改: 2026-08-04 16:16
libssh CVE-2026-59846 低危 0.12.0-r0 0.12.1-r0 libssh: libssh: information disclosure via ProxyCommand %r username expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59846

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-21 13:17 修改: 2026-07-30 13:12
nodejs CVE-2026-56847 低危 24.17.0-r0 24.18.1-r0 nodejs: Node.js: Permission Model flaw allows trace logs to bypass filesystem write restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56847

镜像层: sha256:ff660b167cfe37b03862b7483e984c682e4972bd322a16dc64a77cf22ef0e7a6

发布日期: 2026-07-30 06:25 修改: 2026-07-30 16:33
Node.js (node-pkg)
低危漏洞:2 中危漏洞:13 高危漏洞:38 严重漏洞:17
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
vm2 CVE-2026-24118 严重 3.10.3 3.11.0 vm2: vm2: Arbitrary code execution due to sandbox breakout

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24118

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-04 17:16 修改: 2026-07-15 02:18
vm2 CVE-2026-24120 严重 3.10.3 3.10.5 vm2: vm2: Arbitrary code execution due to sandbox escape vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24120

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-04 17:16 修改: 2026-07-15 02:18
vm2 CVE-2026-24781 严重 3.10.3 3.11.0 vm2: vm2: Arbitrary code execution via sandbox breakout through inspect function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24781

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-04 17:16 修改: 2026-07-15 02:18
vm2 CVE-2026-26332 严重 3.10.3 3.11.0 vm2: vm2: Arbitrary code execution via SuppressedError sandbox escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26332

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-04 17:16 修改: 2026-07-15 02:19
vm2 CVE-2026-26956 严重 3.10.3 3.10.5 vm2: Node.js: vm2: Arbitrary code execution via sandbox escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26956

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-04 17:16 修改: 2026-07-15 02:19
vm2 CVE-2026-43997 严重 3.10.3 3.11.0 vm2: vm2: Arbitrary code execution via sandbox escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43997

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-13 18:16 修改: 2026-08-06 13:18
vm2 CVE-2026-44005 严重 3.10.3 3.11.0 vm2: vm2: Sandbox Escape leading to Arbitrary Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44005

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-13 18:16 修改: 2026-08-06 13:18
vm2 CVE-2026-44006 严重 3.10.3 3.11.0 vm2: vm2: Sandbox escape via arbitrary prototype access leading to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44006

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-13 18:16 修改: 2026-08-06 13:18
vm2 CVE-2026-44007 严重 3.10.3 3.11.1 vm2: vm2: Arbitrary code execution via nested NodeVM bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44007

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-13 18:16 修改: 2026-08-06 13:18
vm2 CVE-2026-44008 严重 3.10.3 3.11.2 vm2: vm2: Arbitrary code execution due to sandbox escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44008

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-13 18:16 修改: 2026-08-06 13:18
vm2 CVE-2026-44009 严重 3.10.3 3.11.2 vm2: vm2: Arbitrary Code Execution via Sandbox Escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44009

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-13 18:16 修改: 2026-08-06 13:18
vm2 CVE-2026-45411 严重 3.10.3 3.11.3 vm2: vm2: Arbitrary Code Execution due to sandbox escape vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45411

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-13 18:16 修改: 2026-08-06 13:18
vm2 CVE-2026-47131 严重 3.10.3 3.11.4 vm2: vm2: Arbitrary code execution via sandbox escape vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47131

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 CVE-2026-47137 严重 3.10.3 3.11.4 vm2: vm2: Sandbox escape leading to arbitrary code execution via security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47137

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 CVE-2026-47140 严重 3.10.3 3.11.4 vm2: vm2: Arbitrary code execution due to incomplete sandbox restrictions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47140

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 CVE-2026-47208 严重 3.10.3 3.11.4 vm2: vm2: Sandbox Breakout Using Promise Species

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47208

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 CVE-2026-47210 严重 3.10.3 3.11.4 vm2: vm2: Arbitrary code execution via sandbox escape when executing untrusted code with async support.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47210

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
ip-address CVE-2026-69192 高危 10.1.0 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
minimatch CVE-2026-26996 高危 3.1.2 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-26996 高危 5.1.6 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-26996 高危 5.1.6 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 5.1.6 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27903 高危 5.1.6 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 5.1.6 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 5.1.6 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-26996 高危 9.0.5 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
picomatch CVE-2026-33671 高危 2.3.1 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
@xmldom/xmldom CVE-2026-41672 高危 0.8.12 0.8.13, 0.9.10 xmldom: @xmldom/xmldom: xmldom: Arbitrary XML Node Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41672

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-07 04:16 修改: 2026-07-15 02:21
@xmldom/xmldom CVE-2026-41673 高危 0.8.12 0.8.13, 0.9.10 @xmldom/xmldom: xmldom: xmldom: Denial of Service via deeply nested XML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41673

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-07 04:16 修改: 2026-07-15 02:21
@xmldom/xmldom CVE-2026-41674 高危 0.8.12 0.8.13, 0.9.10 xmldom: xmldom: Arbitrary XML markup injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41674

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-07 04:16 修改: 2026-08-11 13:18
@xmldom/xmldom CVE-2026-41675 高危 0.8.12 0.8.13, 0.9.10 xmldom: xmldom: Arbitrary XML node injection via crafted processing instructions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41675

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-07 04:16 修改: 2026-07-15 02:21
brace-expansion CVE-2026-13149 高危 1.1.11 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 1.1.11 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-69152 高危 1.1.11 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-13149 高危 2.0.2 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-13149 高危 2.0.2 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-13149 高危 2.0.2 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 2.0.2 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-14257 高危 2.0.2 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-14257 高危 2.0.2 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-69152 高危 2.0.2 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-69152 高危 2.0.2 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-69152 高危 2.0.2 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
fast-xml-parser GHSA-8r6m-32jq-jx6q 高危 5.9.3 5.10.1 fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

漏洞详情: https://github.com/advisories/GHSA-8r6m-32jq-jx6q

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-07-21 22:06 修改: 2026-07-21 22:06
vm2 CVE-2026-44001 高危 3.10.3 3.11.0 vm2: vm2: Sandbox escape leads to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44001

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-13 18:16 修改: 2026-08-06 13:18
vm2 CVE-2026-44004 高危 3.10.3 3.11.0 vm2: vm2: Denial of Service via host memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44004

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-13 18:16 修改: 2026-08-06 13:18
vm2 CVE-2026-47135 高危 3.10.3 3.11.4 vm2: vm2: Sandbox escape allows arbitrary code execution on the host system

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47135

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 CVE-2026-47139 高危 3.10.3 3.11.4 vm2: vm2: Sandbox escape via internal HTTP built-ins leading to network restriction bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47139

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 CVE-2026-47209 高危 3.10.3 3.11.4 vm2: vm2: Integrity bypass via incorrect property assignment leading to potential arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47209

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
ws CVE-2024-37890 高危 8.14.2 5.2.4, 6.2.3, 7.5.10, 8.17.1 nodejs-ws: denial of service when handling a request with many HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37890

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2024-06-17 20:15 修改: 2026-06-17 07:38
ws CVE-2026-48779 高危 8.14.2 5.2.5, 6.2.4, 7.5.11, 8.21.0 ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48779

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-17 13:20 修改: 2026-08-11 13:18
brace-expansion CVE-2026-33750 中危 2.0.2 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
ip-address CVE-2026-42338 中危 10.1.0 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-12 20:16 修改: 2026-08-10 13:19
brace-expansion CVE-2026-33750 中危 2.0.2 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
picomatch CVE-2026-33672 中危 2.3.1 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
brace-expansion CVE-2026-33750 中危 2.0.2 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
vm2 CVE-2026-44000 中危 3.10.3 3.11.0 vm2: vm2: Sandbox escape allows direct interaction with host objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44000

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-13 18:16 修改: 2026-06-17 10:50
vm2 CVE-2026-44002 中危 3.10.3 3.11.0 vm2: vm2: Information disclosure through unsanitized host paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44002

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-13 18:16 修改: 2026-06-17 10:50
vm2 CVE-2026-44003 中危 3.10.3 3.11.0 vm2: vm2: Sandbox escape due to code transformer optimization bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44003

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-13 18:16 修改: 2026-06-17 10:50
vm2 CVE-2026-47141 中危 3.10.3 3.11.4 vm2: vm2: NodeVM observability builtins leak host process and HTTP request data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47141

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
vm2 GHSA-2cm2-m3w5-gp2f 中危 3.10.3 3.11.2 vm2 has access to `VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL`

漏洞详情: https://github.com/advisories/GHSA-2cm2-m3w5-gp2f

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-08 16:22 修改: 2026-05-08 16:22
fast-xml-parser CVE-2026-41650 中危 4.5.7 5.7.0 fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41650

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-07 15:16 修改: 2026-06-17 10:46
brace-expansion CVE-2026-33750 中危 1.1.11 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
ws CVE-2026-45736 中危 8.14.2 8.20.1 ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45736

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-15 15:16 修改: 2026-08-10 13:19
vm2 GHSA-q3fm-4wcw-g57x 低危 3.10.3 3.11.4 vm2 setup-sandbox.js violates Defense Invariant #11 in stack-trace formatter

漏洞详情: https://github.com/advisories/GHSA-q3fm-4wcw-g57x

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2026-05-29 17:38 修改: 2026-05-29 17:38
brace-expansion CVE-2025-5889 低危 1.1.11 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:97a33ad3b2cdd327d5c9e47acd9e8f1ff6a9eafd68d186e52085c8f5929abc38

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×