| golang.org/x/crypto |
CVE-2026-39828 |
高危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-08-07 12:17
|
| golang.org/x/crypto |
CVE-2026-39829 |
高危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-08-06 13:18
|
| golang.org/x/crypto |
CVE-2026-39830 |
高危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-08-06 13:18
|
| golang.org/x/crypto |
CVE-2026-39831 |
高危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
|
| golang.org/x/crypto |
CVE-2026-39832 |
高危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-08-07 12:17
|
| golang.org/x/crypto |
CVE-2026-39835 |
高危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-08-06 13:18
|
| golang.org/x/crypto |
CVE-2026-42508 |
高危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-08-07 12:17
|
| golang.org/x/crypto |
CVE-2026-46595 |
高危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-08-06 13:18
|
| golang.org/x/crypto |
CVE-2026-46597 |
高危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
|
| golang.org/x/text |
CVE-2026-56852 |
高危 |
v0.37.0 |
0.39.0 |
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
|
| oras.land/oras-go/v2 |
CVE-2026-50151 |
高危 |
v2.6.0 |
2.6.1 |
oras-go: oras-go: Credential forwarding via unvalidated Location header during blob upload
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50151
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-07-17 20:17 修改: 2026-07-23 16:15
|
| oras.land/oras-go/v2 |
CVE-2026-50163 |
高危 |
v2.6.0 |
2.6.2 |
oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50163
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:02
|
| golang.org/x/crypto |
CVE-2026-46598 |
中危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
|
| golang.org/x/crypto |
CVE-2026-39827 |
中危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
|
| golang.org/x/crypto |
CVE-2026-39833 |
中危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
|
| golang.org/x/crypto |
CVE-2026-39834 |
中危 |
v0.51.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
|
| oras.land/oras-go/v2 |
CVE-2026-50162 |
中危 |
v2.6.0 |
2.6.1 |
oras-go: oras-go: File store write outside working directory via symlink traversal
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50162
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:08
|
| oras.land/oras-go/v2 |
GHSA-vh4v-2xq2-g5cg |
中危 |
v2.6.0 |
2.6.1 |
ORAS Go forwards registry credentials across registry redirects
漏洞详情: https://github.com/advisories/GHSA-vh4v-2xq2-g5cg
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-07-01 21:54 修改: 2026-07-01 21:54
|
| oras.land/oras-go/v2 |
CVE-2026-48978 |
低危 |
v2.6.0 |
2.6.1 |
oras-go: oras-go: Information disclosure and TLS downgrade via malicious registry realm
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48978
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:08
|
| golang.org/x/crypto |
GO-2026-5932 |
未知 |
v0.51.0 |
|
The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
漏洞详情:
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| golang.org/x/net |
CVE-2026-46600 |
未知 |
v0.55.0 |
0.56.0 |
Parsing an invalid SVCB or HTTPS RR can panic when the size of a param ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600
镜像层: sha256:d85a01503d51e6974b99ed674a58a29dd4025fb1bc848fc7de10e87cee8e582d
发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
|