docker.io/safesoftware/fmeflow-core:2026.2 linux/amd64

docker.io/safesoftware/fmeflow-core:2026.2 - Trivy安全扫描结果 扫描时间: 2026-08-11 15:18
全部漏洞信息
低危漏洞:21 中危漏洞:125 高危漏洞:38 严重漏洞:2

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-08-11 15:18

docker.io/safesoftware/fmeflow-core:2026.2 (ubuntu 24.04) (ubuntu)
低危漏洞:20 中危漏洞:82 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-27456 中危 1:2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
curl CVE-2026-8925 中危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.10 curl: curl: Double-free vulnerability in SASL authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
curl CVE-2026-8927 中危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.10 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
gzip CVE-2026-41991 中危 1.12-1ubuntu3.1 1.12-1ubuntu3.2 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
gzip CVE-2026-41992 中危 1.12-1ubuntu3.1 1.12-1ubuntu3.2 GNU gzip contains a global buffer overflow vulnerability in the LZH de ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
libblkid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libc-bin CVE-2026-4046 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc-bin CVE-2026-4437 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
libc-bin CVE-2026-4438 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
libc-bin CVE-2026-5435 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc-bin CVE-2026-5450 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin CVE-2026-5928 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin CVE-2026-6238 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6 CVE-2026-4046 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc6 CVE-2026-4437 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
libc6 CVE-2026-4438 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
libc6 CVE-2026-5435 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6 CVE-2026-5450 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6 CVE-2026-5928 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6 CVE-2026-6238 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libcurl4t64 CVE-2026-8925 中危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.10 curl: curl: Double-free vulnerability in SASL authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
libcurl4t64 CVE-2026-8927 中危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.10 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libgssapi-krb5-2 CVE-2026-11850 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libgssapi-krb5-2 CVE-2026-40355 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libgssapi-krb5-2 CVE-2026-40356 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libk5crypto3 CVE-2026-11850 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libk5crypto3 CVE-2026-40355 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libk5crypto3 CVE-2026-40356 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libkrb5-3 CVE-2026-11850 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libkrb5-3 CVE-2026-40355 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5-3 CVE-2026-40356 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libkrb5support0 CVE-2026-11850 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libkrb5support0 CVE-2026-40355 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5support0 CVE-2026-40356 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libmount1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libnghttp2-14 CVE-2026-58055 中危 1.59.0-1ubuntu0.3 1.59.0-1ubuntu0.4 nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
libp11-kit0 CVE-2026-13757 中危 0.25.3-4ubuntu2.1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-06-29 19:16 修改: 2026-08-03 22:16
libpam-modules CVE-2026-54411 中危 1.5.3-5ubuntu5.5 1.5.3-5ubuntu5.6 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-modules-bin CVE-2026-54411 中危 1.5.3-5ubuntu5.5 1.5.3-5ubuntu5.6 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-runtime CVE-2026-54411 中危 1.5.3-5ubuntu5.5 1.5.3-5ubuntu5.6 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam0g CVE-2026-54411 中危 1.5.3-5ubuntu5.5 1.5.3-5ubuntu5.6 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libperl5.38t64 CVE-2026-42496 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10
libperl5.38t64 CVE-2026-8376 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
libsmartcols1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsqlite3-0 CVE-2026-11822 中危 3.45.1-1ubuntu2.5 3.45.1-1ubuntu2.6 SQLite before 3.53.2 contains memory corruption vulnerabilities in the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libsqlite3-0 CVE-2026-11824 中危 3.45.1-1ubuntu2.5 3.45.1-1ubuntu2.6 SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libsqlite3-0 CVE-2026-50812 中危 3.45.1-1ubuntu2.5 3.45.1-1ubuntu2.7 A NULL pointer dereference in the SQLite Session Extension in SQLite 3 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50812

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libsqlite3-0 CVE-2026-50813 中危 3.45.1-1ubuntu2.5 3.45.1-1ubuntu2.7 An issue in SQLite before Fossil check-in 869a51ae84df allows a local ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50813

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libuuid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
locales CVE-2026-4046 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
locales CVE-2026-4437 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
locales CVE-2026-4438 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
locales CVE-2026-5435 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
locales CVE-2026-5450 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
locales CVE-2026-5928 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
locales CVE-2026-6238 中危 2.39-0ubuntu8.7 2.39-0ubuntu8.8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
mount CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
p11-kit CVE-2026-13757 中危 0.25.3-4ubuntu2.1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-06-29 19:16 修改: 2026-08-03 22:16
p11-kit-modules CVE-2026-13757 中危 0.25.3-4ubuntu2.1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-06-29 19:16 修改: 2026-08-03 22:16
perl CVE-2026-42496 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10
perl CVE-2026-8376 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
perl-base CVE-2026-42496 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10
perl-base CVE-2026-8376 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
perl-modules-5.38 CVE-2026-42496 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10
perl-modules-5.38 CVE-2026-8376 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
redis-tools CVE-2024-31227 中危 5:7.0.15-1ubuntu0.24.04.4 redis: Denial-of-service due to malformed ACL selectors in Redis

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-31227

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2024-10-07 20:15 修改: 2026-06-17 07:28
redis-tools CVE-2025-21605 中危 5:7.0.15-1ubuntu0.24.04.4 redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-21605

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2025-04-23 16:15 修改: 2026-06-17 08:43
redis-tools CVE-2025-27151 中危 5:7.0.15-1ubuntu0.24.04.4 redis: Redis Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27151

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2025-05-29 09:15 修改: 2026-06-17 09:03
redis-tools CVE-2025-46686 中危 5:7.0.15-1ubuntu0.24.04.4 Redis through 8.0.3 allows memory consumption via a multi-bulk command ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46686

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2025-07-23 19:15 修改: 2026-06-17 09:26
redis-tools CVE-2025-46818 中危 5:7.0.15-1ubuntu0.24.04.4 Redis: Redis: Authenticated users can execute LUA scripts as a different user

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46818

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2025-10-03 19:15 修改: 2026-06-17 09:26
redis-tools CVE-2025-46819 中危 5:7.0.15-1ubuntu0.24.04.4 Redis: Redis is vulnerable to DoS via specially crafted LUA scripts

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46819

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2025-10-03 19:15 修改: 2026-06-17 09:26
redis-tools CVE-2025-48367 中危 5:7.0.15-1ubuntu0.24.04.4 redis: Redis Unauthenticated Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48367

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2025-07-07 16:15 修改: 2026-06-17 09:29
tar CVE-2025-45582 中危 1.35+dfsg-3build1 1.35+dfsg-3ubuntu0.2 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25
tar CVE-2026-5704 中危 1.35+dfsg-3build1 1.35+dfsg-3ubuntu0.4 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59
util-linux CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
wget CVE-2021-31879 中危 1.21.4-1ubuntu4.1 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
wget CVE-2026-15146 中危 1.21.4-1ubuntu4.1 1.21.4-1ubuntu4.4 wget: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15146

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-07-10 19:17 修改: 2026-07-15 19:16
wget CVE-2026-58469 中危 1.21.4-1ubuntu4.1 1.21.4-1ubuntu4.3 wget: GNU Wget: Memory corruption via crafted Metalink URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58469

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:59
wget CVE-2026-58470 中危 1.21.4-1ubuntu4.1 1.21.4-1ubuntu4.3 wget: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58470

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:01
wget CVE-2026-58471 中危 1.21.4-1ubuntu4.1 1.21.4-1ubuntu4.3 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58471

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:02
wget CVE-2026-58472 中危 1.21.4-1ubuntu4.1 1.21.4-1ubuntu4.3 wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58472

镜像层: sha256:574f5f7771820e73e7782f0d5520570d9a6742ac0b7b5c979ea55814dc4e5ac0

发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:58
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.16 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
curl CVE-2026-8924 低危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.10 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
libcurl4t64 CVE-2026-10536 低危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.11 libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
libcurl4t64 CVE-2026-8286 低危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.10 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libcurl4t64 CVE-2026-8458 低危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.10 curl: libcurl: Unauthorized connection reuse due to a logical error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
libcurl4t64 CVE-2026-8924 低危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.10 curl: curl: Cookie injection via malicious HTTP server using super cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
libcurl4t64 CVE-2026-9547 低危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.10 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
curl CVE-2026-9547 低危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.10 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
libgcrypt20 CVE-2024-2236 低危 1.10.3-2ubuntu0.1 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
curl CVE-2026-10536 低危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.11 libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
ncurses-base CVE-2025-69720 低危 6.4+20240113-1ubuntu2 6.4+20240113-1ubuntu2.1 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
ncurses-bin CVE-2025-69720 低危 6.4+20240113-1ubuntu2 6.4+20240113-1ubuntu2.1 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
curl CVE-2026-8286 低危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.10 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libncursesw6 CVE-2025-69720 低危 6.4+20240113-1ubuntu2 6.4+20240113-1ubuntu2.1 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
curl CVE-2026-8458 低危 8.5.0-2ubuntu10.9 8.5.0-2ubuntu10.10 curl: libcurl: Unauthorized connection reuse due to a logical error

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.16 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:bb5bea361e0b2fc011fc1400d2e6caa92b2ab29ee3bb1f07ef5acf1d1037ec12

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libtinfo6 CVE-2025-69720 低危 6.4+20240113-1ubuntu2 6.4+20240113-1ubuntu2.1 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
zlib1g CVE-2026-27171 低危 1:1.3.dfsg-3.1ubuntu2.1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:538812a4b9bd45adaac2b5e5b967daa6999aa44eb110aa32ae7c69702b906475

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
Java (jar)
低危漏洞:1 中危漏洞:34 高危漏洞:23 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
org.bouncycastle:bcprov-jdk18on CVE-2025-14813 严重 1.83 1.80.2, 1.81.1, 1.84 bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14813

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-04-15 10:16 修改: 2026-08-04 13:17
org.bouncycastle:bcprov-jdk18on CVE-2025-14813 严重 1.83 1.80.2, 1.81.1, 1.84 bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14813

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-04-15 10:16 修改: 2026-08-04 13:17
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.21.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-23 21:17 修改: 2026-08-06 13:18
com.microsoft.sqlserver:mssql-jdbc CVE-2025-59250 高危 12.8.1 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 JDBC Driver for SQL Server has improper input validation issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
com.microsoft.sqlserver:mssql-jdbc CVE-2025-59250 高危 12.8.1.jre11 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 JDBC Driver for SQL Server has improper input validation issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
io.netty:netty-codec CVE-2026-42583 高危 4.1.132.Final 4.1.133.Final netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec CVE-2026-59901 高危 4.1.132.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-dns CVE-2026-42579 高危 4.1.132.Final 4.2.13.Final, 4.1.133.Final netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec-http CVE-2026-42584 高危 4.1.132.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
io.netty:netty-codec-http CVE-2026-42587 高危 4.1.132.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-13 19:17 修改: 2026-08-07 12:17
io.netty:netty-codec-http CVE-2026-55831 高危 4.1.132.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http CVE-2026-55833 高危 4.1.132.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http CVE-2026-56745 高危 4.1.132.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.132.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-13 19:17 修改: 2026-08-07 12:17
io.netty:netty-codec-http2 CVE-2026-56819 高危 4.1.132.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
io.netty:netty-handler CVE-2026-44249 高危 4.1.132.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-11 22:16 修改: 2026-08-10 13:19
io.netty:netty-handler CVE-2026-45416 高危 4.1.132.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-12 15:16 修改: 2026-08-10 13:19
io.netty:netty-handler CVE-2026-50010 高危 4.1.132.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-12 16:16 修改: 2026-08-10 13:19
io.netty:netty-resolver-dns CVE-2026-45674 高危 4.1.132.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-12 15:16 修改: 2026-08-04 13:18
io.netty:netty-resolver-dns CVE-2026-47691 高危 4.1.132.Final 4.2.15.Final, 4.1.135.Final io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-12 16:16 修改: 2026-08-04 13:18
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.21.2 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.21.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
org.bouncycastle:bcprov-jdk18on CVE-2026-5598 高危 1.83 1.84 bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5598

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-04-15 10:16 修改: 2026-07-15 01:16
org.bouncycastle:bcprov-jdk18on CVE-2026-5598 高危 1.83 1.84 bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5598

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-04-15 10:16 修改: 2026-07-15 01:16
org.postgresql:postgresql CVE-2026-42198 高危 42.7.2 42.7.11 jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-04-29 16:16 修改: 2026-07-15 02:21
io.netty:netty-codec-http CVE-2026-42581 中危 4.1.132.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-13 19:17 修改: 2026-08-07 12:17
io.netty:netty-codec-http CVE-2026-42585 中危 4.1.132.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http CVE-2026-50020 中危 4.1.132.Final 4.2.15.Final, 4.1.135.Final netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http CVE-2026-56746 中危 4.1.132.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http CVE-2026-59898 中危 4.1.132.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
io.netty:netty-codec-http CVE-2026-59899 中危 4.1.132.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http CVE-2026-59921 中危 4.1.132.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.21.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.21.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.132.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2 CVE-2026-48043 中危 4.1.132.Final 4.1.135.Final, 4.2.15.Final netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-12 16:16 修改: 2026-08-05 13:23
io.netty:netty-codec-http2 CVE-2026-50560 中危 4.1.132.Final 4.2.15.Final, 4.1.135.Final netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2 CVE-2026-59900 中危 4.1.132.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
com.fasterxml.jackson.core:jackson-databind CVE-2026-54516 中危 2.21.2 2.21.4, 3.1.4 jackson-databind: jackson-databind: Security bypass due to improper handling of renamed properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54516

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:52
com.fasterxml.jackson.core:jackson-databind CVE-2026-54517 中危 2.21.2 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information disclosure via improper JsonView filter application

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54517

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:51
io.netty:netty-codec-dns GHSA-mfg7-5gfp-c4w3 中危 4.1.132.Final 4.2.16.Final, 4.1.136.Final Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names

漏洞详情: https://github.com/advisories/GHSA-mfg7-5gfp-c4w3

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-24 16:52 修改: 2026-07-24 16:52
com.fasterxml.jackson.core:jackson-databind CVE-2026-54518 中危 2.21.2 2.21.4 jackson-databind: jackson-databind: Information disclosure and data manipulation via view-based access control bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54518

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-23 22:16 修改: 2026-06-27 20:49
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.21.2 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
io.netty:netty-resolver-dns CVE-2026-45673 中危 4.1.132.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll CVE-2026-45536 中危 4.1.132.Final 4.2.15.Final, 4.1.135.Final netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.projectreactor.netty:reactor-netty-http CVE-2025-22227 中危 1.0.46 1.3.0-M5, 1.2.8 io.projectreactor.netty/reactor-netty: Reactor Netty Credential Leak via Redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22227

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2025-07-16 10:15 修改: 2026-06-17 08:45
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.24.3 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.24.3 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34478 中危 2.24.3 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34478

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.24.3 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.bouncycastle:bcpkix-jdk18on CVE-2026-5588 中危 1.83 1.84 bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:18
org.bouncycastle:bcpkix-jdk18on CVE-2026-5588 中危 1.83 1.84 bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.21.2 2.21.5, 2.18.9, 2.22.1 jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.21.2 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.azure:azure-identity CVE-2024-35255 中危 1.3.4 1.12.2 azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35255

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2024-06-11 17:16 修改: 2026-07-20 16:16
io.netty:netty-codec-http CVE-2026-41417 中危 4.1.132.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
org.bouncycastle:bcprov-jdk18on CVE-2026-0636 中危 1.83 1.84 bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:17
org.bouncycastle:bcprov-jdk18on CVE-2026-0636 中危 1.83 1.84 bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:17
io.netty:netty-codec-http CVE-2026-42580 中危 4.1.132.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-handler-proxy CVE-2026-42578 低危 4.1.132.Final 4.1.133.Final, 4.2.13.Final netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-13 19:17 修改: 2026-07-21 12:18
opt/fmeflow/Config/confd/confd (gobinary)
低危漏洞:0 中危漏洞:8 高危漏洞:14 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/net CVE-2026-25681 高危 v0.51.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-27136 高危 v0.51.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-33814 高危 v0.51.0 0.53.0 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:18
golang.org/x/net CVE-2026-39821 高危 v0.51.0 0.55.0 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-22 16:16 修改: 2026-08-10 13:19
golang.org/x/text CVE-2026-56852 高危 v0.34.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.79.3 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
stdlib CVE-2026-27145 高危 v1.25.9 1.25.11, 1.26.4 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-02 23:16 修改: 2026-08-10 13:18
stdlib CVE-2026-33811 高危 v1.25.9 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:18
stdlib CVE-2026-33814 高危 v1.25.9 1.25.10, 1.26.3 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:18
stdlib CVE-2026-39820 高危 v1.25.9 1.25.10, 1.26.3 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:19
stdlib CVE-2026-39822 高危 v1.25.9 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib CVE-2026-39836 高危 v1.25.9 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-42499 高危 v1.25.9 1.25.10, 1.26.3 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:19
stdlib CVE-2026-42504 高危 v1.25.9 1.25.11, 1.26.4 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
golang.org/x/net CVE-2026-42502 中危 v0.51.0 0.55.0 golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-42506 中危 v0.51.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-25680 中危 v0.51.0 0.55.0 golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
stdlib CVE-2026-39823 中危 v1.25.9 1.25.10, 1.26.3 html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-39825 中危 v1.25.9 1.25.10, 1.26.3 net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-39826 中危 v1.25.9 1.25.10, 1.26.3 html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib CVE-2026-42505 中危 v1.25.9 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib CVE-2026-42507 中危 v1.25.9 1.25.11, 1.26.4 net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
golang.org/x/sys CVE-2026-39824 未知 v0.41.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
golang.org/x/net CVE-2026-46600 未知 v0.51.0 0.56.0 Parsing an invalid SVCB or HTTPS RR can panic when the size of a param ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:f70f079d3bb4b348acfe9f721bac28aaf14f0b23819c02201ec1ad455df94bf8

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
usr/local/bin/gosu (gobinary)
低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-39822 高危 v1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2 golang: Go os.Root: Symlink following vulnerability allows directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822

镜像层: sha256:6ce75c5f0bb6abdbe497701fd5007f11ef9c7da6078a211a7ca0f52b62abaad0

发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib CVE-2026-42505 中危 v1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2 crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505

镜像层: sha256:6ce75c5f0bb6abdbe497701fd5007f11ef9c7da6078a211a7ca0f52b62abaad0

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
golang.org/x/sys CVE-2026-39824 未知 v0.13.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:6ce75c5f0bb6abdbe497701fd5007f11ef9c7da6078a211a7ca0f52b62abaad0

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×