docker.io/rocketchat/rocket.chat:8.5.2 linux/amd64

docker.io/rocketchat/rocket.chat:8.5.2 - Trivy安全扫描结果 扫描时间: 2026-08-03 15:38
全部漏洞信息
低危漏洞:45 中危漏洞:110 高危漏洞:62 严重漏洞:6

系统OS: alpine 3.23.4 扫描引擎: Trivy 扫描时间: 2026-08-03 15:38

docker.io/rocketchat/rocket.chat:8.5.2 (alpine 3.23.4) (alpine)
低危漏洞:20 中危漏洞:8 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libcrypto3 CVE-2026-45447 高危 3.5.6-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-29 13:18
libssl3 CVE-2026-45447 高危 3.5.6-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-29 13:18
libcrypto3 CVE-2026-34183 中危 3.5.6-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42764 中危 3.5.6-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45445 中危 3.5.6-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34182 中危 3.5.6-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34182 中危 3.5.6-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34183 中危 3.5.6-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42764 中危 3.5.6-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45445 中危 3.5.6-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42769 低危 3.5.6-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42770 低危 3.5.6-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45446 低危 3.5.6-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-7383 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-9076 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34180 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34181 低危 3.5.6-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42766 低危 3.5.6-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42767 低危 3.5.6-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42768 低危 3.5.6-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34180 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34181 低危 3.5.6-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42766 低危 3.5.6-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42767 低危 3.5.6-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42768 低危 3.5.6-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42769 低危 3.5.6-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42770 低危 3.5.6-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45446 低危 3.5.6-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-7383 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-9076 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
Node.js (node-pkg)
低危漏洞:25 中危漏洞:102 高危漏洞:60 严重漏洞:6
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
tar CVE-2026-59873 严重 6.2.1 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar CVE-2026-59873 严重 6.2.1 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar CVE-2026-59873 严重 7.5.11 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar CVE-2026-59873 严重 7.5.13 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
websocket-driver CVE-2026-54466 严重 0.7.4 0.7.5 websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54466

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-17 21:17 修改: 2026-07-23 16:18
websocket-driver CVE-2026-54466 严重 0.7.4 0.7.5 websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54466

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-17 21:17 修改: 2026-07-23 16:18
brace-expansion CVE-2026-14257 高危 1.1.11 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-13149 高危 1.1.14 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 1.1.14 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-14257 高危 1.1.16 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-13149 高危 2.0.2 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 2.0.2 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-13149 高危 2.1.0 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 2.1.0 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-14257 高危 2.1.2 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion through 5.0.7 is vulnerable to denial of service via m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
fast-uri CVE-2026-13676 高危 3.1.2 4.0.1, 3.1.3, 2.4.2 fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13676

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-29 14:16 修改: 2026-07-30 12:17
fast-uri CVE-2026-16221 高危 3.1.2 2.4.3, 3.1.4, 4.1.1 Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16221

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-19 15:16 修改: 2026-07-21 18:31
form-data CVE-2026-12143 高危 2.5.5 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-12 19:16 修改: 2026-07-31 13:17
form-data CVE-2026-12143 高危 2.5.5 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-12 19:16 修改: 2026-07-31 13:17
form-data CVE-2026-12143 高危 4.0.5 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-12 19:16 修改: 2026-07-31 13:17
hono CVE-2026-54290 高危 4.12.23 4.12.25 hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54290

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-22 18:16 修改: 2026-06-22 19:49
linkify-it CVE-2026-48801 高危 5.0.0 5.0.1 linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48801

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:21
linkify-it CVE-2026-59887 高危 5.0.0 5.0.2 linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59887

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 17:17 修改: 2026-07-10 19:13
nodemailer CVE-2025-14874 高危 6.9.10 7.0.11 nodemailer: Nodemailer: Denial of service via crafted email address header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14874

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-12-18 09:15 修改: 2026-06-17 08:36
nodemailer GHSA-p6gq-j5cr-w38f 高危 6.9.10 9.0.1 Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message

漏洞详情: https://github.com/advisories/GHSA-p6gq-j5cr-w38f

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-18 14:28 修改: 2026-06-18 14:28
nodemailer GHSA-p6gq-j5cr-w38f 高危 7.0.13 9.0.1 Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message

漏洞详情: https://github.com/advisories/GHSA-p6gq-j5cr-w38f

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-18 14:28 修改: 2026-06-18 14:28
nodemailer GHSA-p6gq-j5cr-w38f 高危 8.0.7 9.0.1 Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message

漏洞详情: https://github.com/advisories/GHSA-p6gq-j5cr-w38f

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-18 14:28 修改: 2026-06-18 14:28
openpgp CVE-2025-47934 高危 5.11.1 5.11.3, 6.1.1 OpenPGP.js's message signature verification can be spoofed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47934

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-05-19 19:15 修改: 2026-06-17 09:28
picomatch CVE-2026-33671 高危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
postcss CVE-2026-45623 高危 8.5.1 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-27 18:16 修改: 2026-07-30 19:57
postcss GHSA-r28c-9q8g-f849 高危 8.5.1 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24
postcss CVE-2026-45623 高危 8.5.10 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-27 18:16 修改: 2026-07-30 19:57
postcss GHSA-r28c-9q8g-f849 高危 8.5.10 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24
postcss CVE-2026-45623 高危 8.5.3 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-27 18:16 修改: 2026-07-30 19:57
postcss GHSA-r28c-9q8g-f849 高危 8.5.3 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24
protobufjs CVE-2026-48712 高危 7.5.8 7.6.1, 8.4.1 protobufjs: protobufjs: Denial of Service via uncontrolled recursion with crafted protobuf payload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48712

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
sharp GHSA-f88m-g3jw-g9cj 高危 0.33.5 0.35.0 sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

漏洞详情: https://github.com/advisories/GHSA-f88m-g3jw-g9cj

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-21 22:07 修改: 2026-07-21 22:07
sigstore CVE-2026-48815 高危 3.1.0 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
svgo CVE-2026-29074 高危 2.8.0 2.8.1, 3.3.3, 4.0.1 svgo: SVGO: Denial of Service via XML entity expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29074

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-06 08:16 修改: 2026-07-30 12:18
svgo GHSA-2p49-hgcm-8545 高危 2.8.0 2.8.3, 3.3.4, 4.0.2 SVGO removeScripts plugin leaves some executable scripts intact

漏洞详情: https://github.com/advisories/GHSA-2p49-hgcm-8545

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-21 19:42 修改: 2026-07-21 19:42
@opentelemetry/propagator-jaeger CVE-2026-59892 高危 2.7.1 2.9.0 @opentelemetry/propagator-jaeger: OpenTelemetry JavaScript: Denial of Service via malformed HTTP header decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59892

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 17:17 修改: 2026-07-10 18:56
adm-zip CVE-2026-39244 高危 0.5.9 0.6.0 adm-zip: adm-zip: Denial of Service via crafted ZIP file leading to excessive memory allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39244

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-10 17:16 修改: 2026-07-10 19:17
tar CVE-2026-23745 高危 6.2.1 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-01-16 22:16 修改: 2026-07-27 13:17
tar CVE-2026-23745 高危 6.2.1 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-01-16 22:16 修改: 2026-07-27 13:17
tar CVE-2026-23950 高危 6.2.1 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18
tar CVE-2026-23950 高危 6.2.1 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18
tar CVE-2026-24842 高危 6.2.1 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-01-28 01:16 修改: 2026-07-27 13:17
tar CVE-2026-24842 高危 6.2.1 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-01-28 01:16 修改: 2026-07-27 13:17
tar CVE-2026-26960 高危 6.2.1 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-26960 高危 6.2.1 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar CVE-2026-29786 高危 6.2.1 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19
tar CVE-2026-29786 高危 6.2.1 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19
tar CVE-2026-31802 高危 6.2.1 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-31802 高危 6.2.1 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar CVE-2026-59874 高危 6.2.1 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-59874 高危 6.2.1 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
adm-zip CVE-2026-39244 高危 0.5.9 0.6.0 adm-zip: adm-zip: Denial of Service via crafted ZIP file leading to excessive memory allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39244

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-10 17:16 修改: 2026-07-10 19:17
tar CVE-2026-59874 高危 7.5.11 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
axios GHSA-gcfj-64vw-6mp9 高危 0.32.0 0.33.0, 1.18.0 Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning

漏洞详情: https://github.com/advisories/GHSA-gcfj-64vw-6mp9

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 22:40 修改: 2026-07-20 22:40
tar CVE-2026-59874 高危 7.5.13 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tmp CVE-2026-44705 高危 0.2.3 0.2.6 tmp is a temporary file and directory creator for node.js. Prior to 0. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44705

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-11 17:16 修改: 2026-06-17 10:51
tmp CVE-2026-49982 高危 0.2.6 0.2.7 tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49982

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-11 17:16 修改: 2026-06-17 10:55
underscore CVE-2026-27601 高危 1.13.7 1.13.8 Underscore.js: Underscore.js: Denial of Service via recursive data structures in flatten and isEqual functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27601

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-03 23:15 修改: 2026-06-17 10:27
axios GHSA-gcfj-64vw-6mp9 高危 1.16.0 0.33.0, 1.18.0 Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning

漏洞详情: https://github.com/advisories/GHSA-gcfj-64vw-6mp9

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 22:40 修改: 2026-07-20 22:40
brace-expansion CVE-2026-13149 高危 1.1.11 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
ws CVE-2026-48779 高危 7.5.10 5.2.5, 6.2.4, 7.5.11, 8.21.0 ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48779

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-17 13:20 修改: 2026-07-30 12:18
axios GHSA-mmx7-hfxf-jppx 中危 1.16.0 1.18.0, 0.33.0 Axios: Prototype pollution gadgets can alter axios request construction

漏洞详情: https://github.com/advisories/GHSA-mmx7-hfxf-jppx

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 22:25 修改: 2026-07-20 22:25
axios GHSA-mwf2-3pr3-8698 中危 1.16.0 1.18.0 Axios: HTTP/2 streamed uploads bypass `maxBodyLength`

漏洞详情: https://github.com/advisories/GHSA-mwf2-3pr3-8698

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 22:37 修改: 2026-07-20 22:37
axios GHSA-pmv8-rq9r-6j72 中危 1.16.0 0.33.0, 1.18.0 Axios: Deep formToJSON Key Recursion Can Cause Denial of Service

漏洞详情: https://github.com/advisories/GHSA-pmv8-rq9r-6j72

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 17:48 修改: 2026-07-20 17:48
nodemailer CVE-2025-13033 中危 6.9.10 7.0.7 nodemailer: Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13033

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-11-14 20:15 修改: 2026-06-17 08:33
nodemailer GHSA-268h-hp4c-crq3 中危 6.9.10 8.0.9 Nodemailer: CRLF injection in Nodemailer List-* header comments allows arbitrary message header injection

漏洞详情: https://github.com/advisories/GHSA-268h-hp4c-crq3

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-15 17:36 修改: 2026-06-15 17:36
nodemailer GHSA-r7g4-qg5f-qqm2 中危 6.9.10 8.0.8 Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception

漏洞详情: https://github.com/advisories/GHSA-r7g4-qg5f-qqm2

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-15 17:34 修改: 2026-06-15 17:34
nodemailer GHSA-vvjj-xcjg-gr5g 中危 6.9.10 8.0.5 Nodemailer Vulnerable to SMTP Command Injection via CRLF in Transport name Option (EHLO/HELO)

漏洞详情: https://github.com/advisories/GHSA-vvjj-xcjg-gr5g

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-08 15:05 修改: 2026-04-08 15:05
nodemailer GHSA-wqvq-jvpq-h66f 中危 6.9.10 8.0.9 Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess during message normalization

漏洞详情: https://github.com/advisories/GHSA-wqvq-jvpq-h66f

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-15 17:35 修改: 2026-06-15 17:35
axios GHSA-xj6q-8x83-jv6g 中危 1.16.0 1.18.0 Axios: Prototype pollution auth subfields can inject Basic auth

漏洞详情: https://github.com/advisories/GHSA-xj6q-8x83-jv6g

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 17:51 修改: 2026-07-20 17:51
nodemailer GHSA-268h-hp4c-crq3 中危 7.0.13 8.0.9 Nodemailer: CRLF injection in Nodemailer List-* header comments allows arbitrary message header injection

漏洞详情: https://github.com/advisories/GHSA-268h-hp4c-crq3

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-15 17:36 修改: 2026-06-15 17:36
nodemailer GHSA-r7g4-qg5f-qqm2 中危 7.0.13 8.0.8 Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception

漏洞详情: https://github.com/advisories/GHSA-r7g4-qg5f-qqm2

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-15 17:34 修改: 2026-06-15 17:34
nodemailer GHSA-vvjj-xcjg-gr5g 中危 7.0.13 8.0.5 Nodemailer Vulnerable to SMTP Command Injection via CRLF in Transport name Option (EHLO/HELO)

漏洞详情: https://github.com/advisories/GHSA-vvjj-xcjg-gr5g

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-08 15:05 修改: 2026-04-08 15:05
nodemailer GHSA-wqvq-jvpq-h66f 中危 7.0.13 8.0.9 Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess during message normalization

漏洞详情: https://github.com/advisories/GHSA-wqvq-jvpq-h66f

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-15 17:35 修改: 2026-06-15 17:35
bn.js CVE-2026-2739 中危 4.12.0 4.12.3, 5.2.3 bn.js: bn.js: Denial of Service via calling maskn(0)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2739

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-02-20 05:17 修改: 2026-06-17 10:31
nodemailer GHSA-268h-hp4c-crq3 中危 8.0.7 8.0.9 Nodemailer: CRLF injection in Nodemailer List-* header comments allows arbitrary message header injection

漏洞详情: https://github.com/advisories/GHSA-268h-hp4c-crq3

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-15 17:36 修改: 2026-06-15 17:36
nodemailer GHSA-r7g4-qg5f-qqm2 中危 8.0.7 8.0.8 Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception

漏洞详情: https://github.com/advisories/GHSA-r7g4-qg5f-qqm2

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-15 17:34 修改: 2026-06-15 17:34
nodemailer GHSA-wqvq-jvpq-h66f 中危 8.0.7 8.0.9 Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess during message normalization

漏洞详情: https://github.com/advisories/GHSA-wqvq-jvpq-h66f

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-15 17:35 修改: 2026-06-15 17:35
bn.js CVE-2026-2739 中危 4.12.1 4.12.3, 5.2.3 bn.js: bn.js: Denial of Service via calling maskn(0)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2739

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-02-20 05:17 修改: 2026-06-17 10:31
bn.js CVE-2026-2739 中危 5.2.1 4.12.3, 5.2.3 bn.js: bn.js: Denial of Service via calling maskn(0)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2739

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-02-20 05:17 修改: 2026-06-17 10:31
picomatch CVE-2026-33672 中危 4.0.3 4.0.4, 3.0.2, 2.3.2 picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
bn.js CVE-2026-2739 中危 5.2.1 4.12.3, 5.2.3 bn.js: bn.js: Denial of Service via calling maskn(0)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2739

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-02-20 05:17 修改: 2026-06-17 10:31
@sigstore/core CVE-2026-48758 中危 2.0.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
postcss CVE-2026-41305 中危 8.5.1 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46
@babel/runtime CVE-2025-27789 中危 7.20.7 7.26.10, 8.0.0-alpha.17 Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27789

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-03-11 20:15 修改: 2026-06-17 09:04
brace-expansion CVE-2026-33750 中危 1.1.11 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
@babel/runtime CVE-2025-27789 中危 7.20.7 7.26.10, 8.0.0-alpha.17 Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27789

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-03-11 20:15 修改: 2026-06-17 09:04
ajv CVE-2025-69873 中危 8.17.1 8.18.0, 6.14.0 ajv: ReDoS via $data reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-02-11 19:15 修改: 2026-07-27 13:16
postcss CVE-2026-41305 中危 8.5.3 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46
@opentelemetry/core CVE-2026-54285 中危 2.7.1 2.8.0 @opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
protobufjs CVE-2026-54269 中危 7.5.8 7.6.3, 8.6.0 protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54269

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-22 18:16 修改: 2026-06-24 20:40
protobufjs CVE-2026-59877 中危 7.5.8 7.6.5, 8.6.6 protobufjs: protobufjs: Denial of Service via crafted .proto schema

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59877

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:53
qs CVE-2025-15284 中危 6.13.0 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
qs CVE-2025-15284 中危 6.13.0 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
qs CVE-2025-15284 中危 6.13.0 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
qs CVE-2026-8723 中危 6.13.0 6.15.2 ### Summary `qs.stringify` throws `TypeError` when called with `arr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2026-8723 中危 6.13.0 6.15.2 ### Summary `qs.stringify` throws `TypeError` when called with `arr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2026-8723 中危 6.13.0 6.15.2 ### Summary `qs.stringify` throws `TypeError` when called with `arr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2025-15284 中危 6.14.0 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
qs CVE-2026-8723 中危 6.14.0 6.15.2 ### Summary `qs.stringify` throws `TypeError` when called with `arr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2026-8723 中危 6.14.1 6.15.2 ### Summary `qs.stringify` throws `TypeError` when called with `arr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2026-8723 中危 6.15.1 6.15.2 ### Summary `qs.stringify` throws `TypeError` when called with `arr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2026-8723 中危 6.15.1 6.15.2 ### Summary `qs.stringify` throws `TypeError` when called with `arr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
qs CVE-2026-8723 中危 6.15.1 6.15.2 ### Summary `qs.stringify` throws `TypeError` when called with `arr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
sanitize-html CVE-2026-53606 中危 2.17.4 2.17.5 apostrophecms sanitize-html: sanitize-html: Cross-Site Scripting (XSS) via insufficient URI scheme validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53606

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-12 21:16 修改: 2026-06-17 10:57
axios GHSA-42h9-826w-cgv3 中危 0.32.0 0.33.0, 1.18.0 Axios: Excessive recursion in formDataToJSON can cause denial of service

漏洞详情: https://github.com/advisories/GHSA-42h9-826w-cgv3

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 17:58 修改: 2026-07-20 17:58
axios GHSA-7q8q-rj6j-mhjq 中危 0.32.0 0.33.0, 1.18.0 Axios: Nested axios option objects can consume polluted prototype values

漏洞详情: https://github.com/advisories/GHSA-7q8q-rj6j-mhjq

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 22:37 修改: 2026-07-20 22:37
brace-expansion CVE-2026-33750 中危 2.0.2 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
axios GHSA-f4gw-2p7v-4548 中危 0.32.0 1.18.0, 0.33.0 Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios

漏洞详情: https://github.com/advisories/GHSA-f4gw-2p7v-4548

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 22:20 修改: 2026-07-20 22:20
axios GHSA-hcpx-6fm6-wx23 中危 0.32.0 0.33.0, 1.18.0 Axios form serializer maxDepth bypass via {} metatoken

漏洞详情: https://github.com/advisories/GHSA-hcpx-6fm6-wx23

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 22:38 修改: 2026-07-20 22:38
axios GHSA-mmx7-hfxf-jppx 中危 0.32.0 1.18.0, 0.33.0 Axios: Prototype pollution gadgets can alter axios request construction

漏洞详情: https://github.com/advisories/GHSA-mmx7-hfxf-jppx

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 22:25 修改: 2026-07-20 22:25
dompurify CVE-2026-49458 中危 3.4.1 3.4.6 dompurify: DOMPurify: Cross-site scripting due to improper sanitization of DOM nodes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49458

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:47
dompurify CVE-2026-49459 中危 3.4.1 3.4.6 dompurify: DOMPurify: Cross-site scripting bypass allows arbitrary script execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49459

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:51
dompurify CVE-2026-49978 中危 3.4.1 3.4.7 dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49978

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:49
dompurify CVE-2026-65898 中危 3.4.1 3.4.11 DOMPurify before 3.4.11 fails to clone the ALLOWED_ATTR allowlist when ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65898

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:54
dompurify CVE-2026-65902 中危 3.4.1 3.4.7 DOMPurify before 3.4.7 (affected versions <= 3.4.5) passes direct refe ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65902

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:51
axios GHSA-pmv8-rq9r-6j72 中危 0.32.0 0.33.0, 1.18.0 Axios: Deep formToJSON Key Recursion Can Cause Denial of Service

漏洞详情: https://github.com/advisories/GHSA-pmv8-rq9r-6j72

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 17:48 修改: 2026-07-20 17:48
@babel/runtime CVE-2025-27789 中危 7.20.7 7.26.10, 8.0.0-alpha.17 Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27789

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-03-11 20:15 修改: 2026-06-17 09:04
fast-xml-parser CVE-2026-41650 中危 5.5.11 5.7.0 fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41650

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-05-07 15:16 修改: 2026-06-17 10:46
fast-xml-parser CVE-2026-41650 中危 5.6.0 5.7.0 fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41650

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-05-07 15:16 修改: 2026-06-17 10:46
file-type CVE-2026-31808 中危 16.5.4 21.3.1 file-type: file-type: Denial of Service due to infinite loop in ASF file parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31808

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-10 21:16 修改: 2026-06-17 10:34
axios GHSA-42h9-826w-cgv3 中危 1.16.0 0.33.0, 1.18.0 Axios: Excessive recursion in formDataToJSON can cause denial of service

漏洞详情: https://github.com/advisories/GHSA-42h9-826w-cgv3

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 17:58 修改: 2026-07-20 17:58
axios GHSA-7q8q-rj6j-mhjq 中危 1.16.0 0.33.0, 1.18.0 Axios: Nested axios option objects can consume polluted prototype values

漏洞详情: https://github.com/advisories/GHSA-7q8q-rj6j-mhjq

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 22:37 修改: 2026-07-20 22:37
axios GHSA-f4gw-2p7v-4548 中危 1.16.0 1.18.0, 0.33.0 Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios

漏洞详情: https://github.com/advisories/GHSA-f4gw-2p7v-4548

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 22:20 修改: 2026-07-20 22:20
axios GHSA-hcpx-6fm6-wx23 中危 1.16.0 0.33.0, 1.18.0 Axios form serializer maxDepth bypass via {} metatoken

漏洞详情: https://github.com/advisories/GHSA-hcpx-6fm6-wx23

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 22:38 修改: 2026-07-20 22:38
tar CVE-2026-53655 中危 6.2.1 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-53655 中危 6.2.1 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 6.2.1 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59871 中危 6.2.1 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 6.2.1 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar CVE-2026-59875 中危 6.2.1 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar GHSA-r292-9mhp-454m 中危 6.2.1 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
tar GHSA-r292-9mhp-454m 中危 6.2.1 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
hono CVE-2026-54286 中危 4.12.23 4.12.25 hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54286

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-22 18:16 修改: 2026-06-23 15:16
hono CVE-2026-54287 中危 4.12.23 4.12.25 hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54287

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-22 18:16 修改: 2026-06-22 19:49
tar CVE-2026-53655 中危 7.5.11 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 7.5.11 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 7.5.11 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar GHSA-r292-9mhp-454m 中危 7.5.11 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
hono CVE-2026-54288 中危 4.12.23 4.12.25 hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54288

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-22 19:17 修改: 2026-06-23 15:16
hono CVE-2026-54289 中危 4.12.23 4.12.25 hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54289

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-22 18:16 修改: 2026-06-22 19:49
tar CVE-2026-53655 中危 7.5.13 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 7.5.13 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 7.5.13 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar GHSA-r292-9mhp-454m 中危 7.5.13 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
hono CVE-2026-59895 中危 4.12.23 4.12.27 hono: Hono: Arbitrary markup injection via improper handling of class names in server-side rendering.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59895

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 17:17 修改: 2026-07-10 19:53
hono CVE-2026-59896 中危 4.12.23 4.12.27 hono: Hono: Information disclosure due to improper context isolation in server-side rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59896

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 17:17 修改: 2026-07-10 19:50
hono CVE-2026-59897 中危 4.12.23 4.12.27 hono: Hono: Information disclosure due to incorrect header de-duplication in AWS API Gateway v1 adapter

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59897

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-08 17:17 修改: 2026-07-10 19:50
uuid CVE-2026-41907 中危 3.3.2 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 8.3.2 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 8.3.2 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 8.3.2 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 8.3.2 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 8.3.2 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 8.3.2 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 8.3.2 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
uuid CVE-2026-41907 中危 9.0.1 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
ip-address CVE-2026-42338 中危 10.1.0 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:b993ff69822c7aed848b28c18297707a2c5ebdb928476178ed97bfffbd3a0f25

发布日期: 2026-05-12 20:16 修改: 2026-07-29 13:18
json-2-csv CVE-2026-9673 中危 5.5.10 5.5.11 json-2-csv: json-2-csv: CSV Injection vulnerability allows arbitrary code execution via `preventCsvInjection` bypass.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9673

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-05-28 06:16 修改: 2026-07-03 16:16
websocket-driver CVE-2026-54490 中危 0.7.4 0.7.5 websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54490

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-17 21:17 修改: 2026-07-23 18:14
websocket-driver CVE-2026-54490 中危 0.7.4 0.7.5 websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54490

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-17 21:17 修改: 2026-07-23 18:14
axios GHSA-jqh4-m9w3-8hp9 中危 1.16.0 1.18.0 Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`

漏洞详情: https://github.com/advisories/GHSA-jqh4-m9w3-8hp9

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-20 22:27 修改: 2026-07-20 22:27
yaml CVE-2026-33532 中危 1.10.2 2.8.3, 1.10.3 yaml: yaml: Denial of Service via deeply nested YAML document parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33532

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-26 20:16 修改: 2026-06-17 10:37
on-headers CVE-2025-7339 低危 1.0.2 1.1.0 on-headers: on-headers vulnerable to http response header manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7339

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-07-17 16:15 修改: 2026-06-17 10:04
@tootallnate/once CVE-2026-3449 低危 2.0.0 3.0.1, 2.0.1 @tootallnate/once: @tootallnate/once: Denial of Service due to incorrect control flow scoping with AbortSignal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3449

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-03 05:17 修改: 2026-06-17 10:43
qs CVE-2026-2391 低危 6.13.0 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
qs CVE-2026-2391 低危 6.13.0 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
qs CVE-2026-2391 低危 6.13.0 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
body-parser CVE-2026-12590 低危 1.20.3 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
brace-expansion CVE-2025-5889 低危 1.1.11 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
tmp CVE-2025-54798 低危 0.2.3 0.2.4 tmp: tmp Symbolic Link Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54798

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2025-08-07 01:15 修改: 2026-06-17 09:40
qs CVE-2026-2391 低危 6.14.0 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
dompurify CVE-2026-65899 低危 3.4.1 3.4.9 DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65899

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:53
qs CVE-2026-2391 低危 6.14.1 6.14.2 qs: qs's arrayLimit bypass in comma parsing allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
dompurify CVE-2026-65900 低危 3.4.1 3.4.8 DOMPurify versions >=3.0.0 and before 3.4.8, when configured with SAFE ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65900

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:52
dompurify CVE-2026-65901 低危 3.4.1 DOMPurify through 3.4.6 contains a cross-site scripting vulnerability ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65901

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:52
dompurify GHSA-c2j3-45gr-mqc4 低危 3.4.1 3.4.12 DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

漏洞详情: https://github.com/advisories/GHSA-c2j3-45gr-mqc4

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-21 19:41 修改: 2026-07-21 19:41
nodemailer GHSA-c7w3-x93f-qmm8 低危 6.9.10 8.0.4 Nodemailer has SMTP command injection due to unsanitized `envelope.size` parameter

漏洞详情: https://github.com/advisories/GHSA-c7w3-x93f-qmm8

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-26 22:26 修改: 2026-03-26 22:26
elliptic CVE-2025-14505 低危 6.6.1 elliptic: Key handling flaws in Elliptic

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14505

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-01-08 21:15 修改: 2026-06-17 08:36
esbuild GHSA-g7r4-m6w7-qqqr 低危 0.27.7 0.28.1 esbuild allows arbitrary file read when running the development server on Windows

漏洞详情: https://github.com/advisories/GHSA-g7r4-m6w7-qqqr

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-12 20:08 修改: 2026-06-12 20:08
esbuild GHSA-g7r4-m6w7-qqqr 低危 0.27.7 0.28.1 esbuild allows arbitrary file read when running the development server on Windows

漏洞详情: https://github.com/advisories/GHSA-g7r4-m6w7-qqqr

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-12 20:08 修改: 2026-06-12 20:08
body-parser CVE-2026-12590 低危 1.20.3 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
body-parser CVE-2026-12590 低危 1.20.4 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
nodemailer GHSA-c7w3-x93f-qmm8 低危 7.0.13 8.0.4 Nodemailer has SMTP command injection due to unsanitized `envelope.size` parameter

漏洞详情: https://github.com/advisories/GHSA-c7w3-x93f-qmm8

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-26 22:26 修改: 2026-03-26 22:26
cookie CVE-2024-47764 低危 0.4.1 0.7.0 cookie: cookie accepts cookie name, path, and domain with out of bounds characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47764

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2024-10-04 20:15 修改: 2026-06-17 07:57
body-parser CVE-2026-12590 低危 2.2.2 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
@babel/core CVE-2026-49356 低危 7.29.0 8.0.0-rc.6, 7.29.6 @babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49356

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
mailparser CVE-2026-3455 低危 3.7.5 3.9.3 mailparser vulnerable to Cross-site Scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3455

镜像层: sha256:2edbb405efacff59e0eb00993bd15a1b0591f2e80acc6ae8935b0e22aac3afb2

发布日期: 2026-03-03 05:17 修改: 2026-06-17 10:43
/app/bundle/programs/server/app/app.js ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×