docker.io/prompve/prometheus-pve-exporter:3.10 linux/amd64

docker.io/prompve/prometheus-pve-exporter:3.10 - Trivy安全扫描结果 扫描时间: 2026-09-11 17:07
全部漏洞信息
低危漏洞:16 中危漏洞:42 高危漏洞:16 严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-09-11 17:07

docker.io/prompve/prometheus-pve-exporter:3.10 (alpine 3.24.1) (alpine)
低危漏洞:16 中危漏洞:40 高危漏洞:16 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto3 CVE-2026-14456 高危 3.5.7-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46

libexpat CVE-2026-76956 高危 2.8.2-r0 2.8.4-r0 libexpat: libexpat: Denial of Service via hash flooding attack with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76956

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-08-20 05:16 修改: 2026-09-08 21:08

libexpat CVE-2026-76957 高危 2.8.2-r0 2.8.4-r0 libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-08-20 05:16 修改: 2026-09-08 20:56

libssl3 CVE-2026-14456 高危 3.5.7-r0 3.5.8-r0 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46

pyc CVE-2026-11940 高危 3.14.5-r0 3.14.7-r0 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16

pyc CVE-2026-15308 高危 3.14.5-r0 3.14.7-r0 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02

pyc CVE-2026-7210 高危 3.14.5-r0 3.14.7-r0 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19

python3 CVE-2026-11940 高危 3.14.5-r0 3.14.7-r0 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16

python3 CVE-2026-15308 高危 3.14.5-r0 3.14.7-r0 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02

python3 CVE-2026-7210 高危 3.14.5-r0 3.14.7-r0 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19

python3-pyc CVE-2026-11940 高危 3.14.5-r0 3.14.7-r0 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16

python3-pyc CVE-2026-15308 高危 3.14.5-r0 3.14.7-r0 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02

python3-pyc CVE-2026-7210 高危 3.14.5-r0 3.14.7-r0 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19

python3-pycache-pyc0 CVE-2026-11940 高危 3.14.5-r0 3.14.7-r0 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16

python3-pycache-pyc0 CVE-2026-15308 高危 3.14.5-r0 3.14.7-r0 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02

python3-pycache-pyc0 CVE-2026-7210 高危 3.14.5-r0 3.14.7-r0 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19

pyc CVE-2026-0864 中危 3.14.5-r0 3.14.7-r0 python: cpython: Python configparser: Configuration injection via crafted multi-line input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52

pyc CVE-2026-11972 中危 3.14.5-r0 3.14.7-r0 python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16

pyc CVE-2026-3276 中危 3.14.5-r0 3.14.7-r0 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16

pyc CVE-2026-4360 中危 3.14.5-r0 3.14.7-r0 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16

pyc CVE-2026-7774 中危 3.14.5-r0 3.14.7-r0 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16

pyc CVE-2026-8328 中危 3.14.5-r0 3.14.7-r0 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16

pyc CVE-2026-9669 中危 3.14.5-r0 3.14.7-r0 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16

libexpat CVE-2026-76641 中危 2.8.2-r0 2.8.4-r0 CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17

libcrypto3 CVE-2026-63076 中危 3.5.7-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libssl3 CVE-2026-18798 中危 3.5.7-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46

python3 CVE-2025-15366 中危 3.14.5-r0 3.14.7-r0 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16

python3 CVE-2026-0864 中危 3.14.5-r0 3.14.7-r0 python: cpython: Python configparser: Configuration injection via crafted multi-line input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52

python3 CVE-2026-11972 中危 3.14.5-r0 3.14.7-r0 python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16

python3 CVE-2026-3276 中危 3.14.5-r0 3.14.7-r0 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16

python3 CVE-2026-4360 中危 3.14.5-r0 3.14.7-r0 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16

python3 CVE-2026-7774 中危 3.14.5-r0 3.14.7-r0 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16

python3 CVE-2026-8328 中危 3.14.5-r0 3.14.7-r0 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16

python3 CVE-2026-9669 中危 3.14.5-r0 3.14.7-r0 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16

libssl3 CVE-2026-63072 中危 3.5.7-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libssl3 CVE-2026-63076 中危 3.5.7-r0 3.5.8-r0 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libcrypto3 CVE-2026-18798 中危 3.5.7-r0 3.5.8-r0 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46

python3-pyc CVE-2025-15366 中危 3.14.5-r0 3.14.7-r0 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16

python3-pyc CVE-2026-0864 中危 3.14.5-r0 3.14.7-r0 python: cpython: Python configparser: Configuration injection via crafted multi-line input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52

python3-pyc CVE-2026-11972 中危 3.14.5-r0 3.14.7-r0 python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16

python3-pyc CVE-2026-3276 中危 3.14.5-r0 3.14.7-r0 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16

python3-pyc CVE-2026-4360 中危 3.14.5-r0 3.14.7-r0 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16

python3-pyc CVE-2026-7774 中危 3.14.5-r0 3.14.7-r0 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16

python3-pyc CVE-2026-8328 中危 3.14.5-r0 3.14.7-r0 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16

python3-pyc CVE-2026-9669 中危 3.14.5-r0 3.14.7-r0 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16

libcrypto3 CVE-2026-63072 中危 3.5.7-r0 3.5.8-r0 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libexpat CVE-2026-66046 中危 2.8.2-r0 2.8.4-r0 Expat through 2.8.3 contains a denial of service vulnerability caused ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-08-18 15:16 修改: 2026-08-20 16:17

pyc CVE-2025-15366 中危 3.14.5-r0 3.14.7-r0 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16

python3-pycache-pyc0 CVE-2025-15366 中危 3.14.5-r0 3.14.7-r0 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16

python3-pycache-pyc0 CVE-2026-0864 中危 3.14.5-r0 3.14.7-r0 python: cpython: Python configparser: Configuration injection via crafted multi-line input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52

python3-pycache-pyc0 CVE-2026-11972 中危 3.14.5-r0 3.14.7-r0 python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16

python3-pycache-pyc0 CVE-2026-3276 中危 3.14.5-r0 3.14.7-r0 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16

python3-pycache-pyc0 CVE-2026-4360 中危 3.14.5-r0 3.14.7-r0 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16

python3-pycache-pyc0 CVE-2026-7774 中危 3.14.5-r0 3.14.7-r0 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16

python3-pycache-pyc0 CVE-2026-8328 中危 3.14.5-r0 3.14.7-r0 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16

python3-pycache-pyc0 CVE-2026-9669 中危 3.14.5-r0 3.14.7-r0 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16

libcrypto3 CVE-2026-54874 低危 3.5.7-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libssl3 CVE-2026-14457 低危 3.5.7-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46

libssl3 CVE-2026-54874 低危 3.5.7-r0 3.5.8-r0 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

python3-pyc CVE-2026-6879 低危 3.14.5-r0 3.14.7-r0 python: Python: Performance degradation in XML processing due to quadratic time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16

libssl3 CVE-2026-63073 低危 3.5.7-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17

libssl3 CVE-2026-63074 低危 3.5.7-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

python3 CVE-2026-6879 低危 3.14.5-r0 3.14.7-r0 python: Python: Performance degradation in XML processing due to quadratic time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16

libssl3 CVE-2026-63075 低危 3.5.7-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

pyc CVE-2026-6879 低危 3.14.5-r0 3.14.7-r0 python: Python: Performance degradation in XML processing due to quadratic time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16

libssl3 CVE-2026-75803 低危 3.5.7-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17

libcrypto3 CVE-2026-63073 低危 3.5.7-r0 3.5.8-r0 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17

libcrypto3 CVE-2026-63074 低危 3.5.7-r0 3.5.8-r0 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libcrypto3 CVE-2026-63075 低危 3.5.7-r0 3.5.8-r0 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46

libcrypto3 CVE-2026-75803 低危 3.5.7-r0 3.5.8-r0 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17

libcrypto3 CVE-2026-14457 低危 3.5.7-r0 3.5.8-r0 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46

python3-pycache-pyc0 CVE-2026-6879 低危 3.14.5-r0 3.14.7-r0 python: Python: Performance degradation in XML processing due to quadratic time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879

镜像层: sha256:a6485c7fbde3b2928bbc0bc18731c4f044dfeeaf5e3c434db44e07bead0b702e

发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16

Python (python-pkg)
低危漏洞:0 中危漏洞:2 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
pip CVE-2026-13346 中危 26.1.1 26.2.0 pip: pip: Arbitrary file installation via malicious package indexes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13346

镜像层: sha256:e82bdf2db30f7b7637ad9e60e61ed73babb18ad8fa7de1e45fbb83f9133ba720

发布日期: 2026-07-29 19:16 修改: 2026-08-20 13:17

pip CVE-2026-8643 中危 26.1.1 26.1.2 python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643

镜像层: sha256:e82bdf2db30f7b7637ad9e60e61ed73babb18ad8fa7de1e45fbb83f9133ba720

发布日期: 2026-06-01 17:17 修改: 2026-09-09 13:20

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×