docker.io/seataio/seata-server:1.8.0 linux/arm64

docker.io/seataio/seata-server:1.8.0 - Trivy安全扫描结果扫描时间: 2026-07-20 19:18 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:309

中危漏洞:518

高危漏洞:379

严重漏洞:69

系统OS: debian 11.4 扫描引擎: Trivy 扫描时间: 2026-07-20 19:18

docker.io/seataio/seata-server:1.8.0 (debian 11.4) (debian)

低危漏洞:293

中危漏洞:444

高危漏洞:297

严重漏洞:55

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
curl	CVE-2022-32221	严重	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u5	curl: POST following PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:46
curl	CVE-2023-23914	严重	7.74.0-1.3+deb11u2		curl: HSTS ignored on multiple requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23914 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38
curl	CVE-2023-38545	严重	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u10	curl: heap based buffer overflow in the SOCKS5 proxy handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38545 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10
git	CVE-2022-23521	严重	1:2.30.2-1	1:2.30.2-1+deb11u1	git: gitattributes parsing integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23521 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-01-17 23:15 修改: 2026-06-17 04:30
git	CVE-2022-41903	严重	1:2.30.2-1	1:2.30.2-1+deb11u1	git: Heap overflow in `git archive`, `git log --format` leading to RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41903 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-01-17 23:15 修改: 2026-06-17 05:04
git	CVE-2024-32002	严重	1:2.30.2-1	1:2.30.2-1+deb11u3	git: Recursive clones RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32002 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-05-14 19:15 修改: 2026-06-17 07:29
git-man	CVE-2022-23521	严重	1:2.30.2-1	1:2.30.2-1+deb11u1	git: gitattributes parsing integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23521 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-01-17 23:15 修改: 2026-06-17 04:30
git-man	CVE-2022-41903	严重	1:2.30.2-1	1:2.30.2-1+deb11u1	git: Heap overflow in `git archive`, `git log --format` leading to RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41903 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-01-17 23:15 修改: 2026-06-17 05:04
git-man	CVE-2024-32002	严重	1:2.30.2-1	1:2.30.2-1+deb11u3	git: Recursive clones RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32002 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-05-14 19:15 修改: 2026-06-17 07:29
libapr1	CVE-2022-24963	严重	1.7.0-6+deb11u1	1.7.0-6+deb11u2	apr: integer overflow/wraparound in apr_encode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24963 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-01-31 16:15 修改: 2026-06-17 04:32
libcurl3-gnutls	CVE-2022-32221	严重	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u5	curl: POST following PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:46
libcurl3-gnutls	CVE-2023-23914	严重	7.74.0-1.3+deb11u2		curl: HSTS ignored on multiple requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23914 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38
libcurl3-gnutls	CVE-2023-38545	严重	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u10	curl: heap based buffer overflow in the SOCKS5 proxy handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38545 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10
libcurl4	CVE-2022-32221	严重	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u5	curl: POST following PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32221 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2022-12-05 22:15 修改: 2026-06-17 04:46
libcurl4	CVE-2023-23914	严重	7.74.0-1.3+deb11u2		curl: HSTS ignored on multiple requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23914 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38
libcurl4	CVE-2023-38545	严重	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u10	curl: heap based buffer overflow in the SOCKS5 proxy handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38545 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10
libdb5.3	CVE-2019-8457	严重	5.3.28+dfsg1-0.8		sqlite: heap out-of-bound read in function rtreenode() 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42
libexpat1	CVE-2024-45491	严重	2.2.10-2+deb11u3	2.2.10-2+deb11u6	libexpat: Integer Overflow or Wraparound 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54
libexpat1	CVE-2024-45492	严重	2.2.10-2+deb11u3	2.2.10-2+deb11u6	libexpat: integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54
libgnutls30	CVE-2026-33845	严重	3.7.1-5+deb11u1	3.7.1-5+deb11u10	gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-30 18:16 修改: 2026-07-15 02:20
libgnutls30	CVE-2026-42010	严重	3.7.1-5+deb11u1	3.7.1-5+deb11u10	gnutls: gnutls: Authentication Bypass via NUL Character in Username 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-07 12:16 修改: 2026-07-15 02:21
libgssapi-krb5-2	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libk5crypto3	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libkrb5-3	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libkrb5support0	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libksba8	CVE-2022-3515	严重	1.5.0-3	1.5.0-3+deb11u1	libksba: integer overflow may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3515 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-01-12 15:15 修改: 2026-06-17 04:59
libksba8	CVE-2022-47629	严重	1.5.0-3	1.5.0-3+deb11u2	libksba: integer overflow to code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47629 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2022-12-20 23:15 修改: 2026-06-17 05:13
libpcre2-8-0	CVE-2022-1586	严重	10.36-2	10.36-2+deb11u1	pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1586 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-05-16 21:15 修改: 2026-06-17 04:22
libpcre2-8-0	CVE-2022-1587	严重	10.36-2	10.36-2+deb11u1	pcre2: Out-of-bounds read in get_recurse_data_length in pcre2_jit_compile.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1587 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-05-16 21:15 修改: 2026-06-17 04:22
libperl5.32	CVE-2026-13221	严重	5.32.1-4+deb11u2		Perl versions through 5.43.9 produce silently incorrect regular expres ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
libperl5.32	CVE-2026-42496	严重	5.32.1-4+deb11u2		perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-26 02:16 修改: 2026-07-15 02:21
libperl5.32	CVE-2026-8376	严重	5.32.1-4+deb11u2		perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-26 00:16 修改: 2026-06-17 11:03
libpython3.9-minimal	CVE-2021-29921	严重	3.9.2-1	3.9.2-1+deb11u2	python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-05-06 13:15 修改: 2026-06-17 03:48
libpython3.9-minimal	CVE-2022-37454	严重	3.9.2-1	3.9.2-1+deb11u4	XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-10-21 06:15 修改: 2026-06-17 04:55
libpython3.9-stdlib	CVE-2021-29921	严重	3.9.2-1	3.9.2-1+deb11u2	python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-05-06 13:15 修改: 2026-06-17 03:48
libpython3.9-stdlib	CVE-2022-37454	严重	3.9.2-1	3.9.2-1+deb11u4	XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-10-21 06:15 修改: 2026-06-17 04:55
libtasn1-6	CVE-2021-46848	严重	4.16.0-2	4.16.0-2+deb11u1	libtasn1: Out-of-bound access in ETYPE_OK 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46848 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-10-24 14:15 修改: 2026-06-17 04:15
openssh-client	CVE-2023-38408	严重	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u2	openssh: Remote code execution in ssh-agent PKCS#11 support 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-07-20 03:15 修改: 2026-06-17 06:10
openssh-client	CVE-2026-60002	严重	1:8.4p1-5+deb11u1		openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60002 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-08 01:16 修改: 2026-07-09 16:36
perl	CVE-2026-13221	严重	5.32.1-4+deb11u2		Perl versions through 5.43.9 produce silently incorrect regular expres ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
perl	CVE-2026-42496	严重	5.32.1-4+deb11u2		perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-26 02:16 修改: 2026-07-15 02:21
perl	CVE-2026-8376	严重	5.32.1-4+deb11u2		perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-26 00:16 修改: 2026-06-17 11:03
perl-base	CVE-2026-13221	严重	5.32.1-4+deb11u2		Perl versions through 5.43.9 produce silently incorrect regular expres ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
perl-base	CVE-2026-42496	严重	5.32.1-4+deb11u2		perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-26 02:16 修改: 2026-07-15 02:21
perl-base	CVE-2026-8376	严重	5.32.1-4+deb11u2		perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-26 00:16 修改: 2026-06-17 11:03
perl-modules-5.32	CVE-2026-13221	严重	5.32.1-4+deb11u2		Perl versions through 5.43.9 produce silently incorrect regular expres ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
perl-modules-5.32	CVE-2026-42496	严重	5.32.1-4+deb11u2		perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-26 02:16 修改: 2026-07-15 02:21
perl-modules-5.32	CVE-2026-8376	严重	5.32.1-4+deb11u2		perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-26 00:16 修改: 2026-06-17 11:03
python3.9	CVE-2021-29921	严重	3.9.2-1	3.9.2-1+deb11u2	python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-05-06 13:15 修改: 2026-06-17 03:48
python3.9	CVE-2022-37454	严重	3.9.2-1	3.9.2-1+deb11u4	XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-10-21 06:15 修改: 2026-06-17 04:55
python3.9-minimal	CVE-2021-29921	严重	3.9.2-1	3.9.2-1+deb11u2	python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-05-06 13:15 修改: 2026-06-17 03:48
python3.9-minimal	CVE-2022-37454	严重	3.9.2-1	3.9.2-1+deb11u4	XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-10-21 06:15 修改: 2026-06-17 04:55
wget	CVE-2024-38428	严重	1.21-1+deb11u1	1.21-1+deb11u2	wget: Misinterpretation of input may lead to improper behavior 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38428 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-06-16 03:15 修改: 2026-06-17 07:40
zlib1g	CVE-2022-37434	严重	1:1.2.11.dfsg-2+deb11u1	1:1.2.11.dfsg-2+deb11u2	zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-08-05 07:15 修改: 2026-07-14 12:16
zlib1g	CVE-2023-45853	严重	1:1.2.11.dfsg-2+deb11u1		zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-10-14 02:15 修改: 2026-07-14 13:17
gpgv	CVE-2025-68973	高危	2.2.27-2+deb11u2	2.2.27-2+deb11u3	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
gzip	CVE-2026-41992	高危	1.10-4+deb11u1		GNU gzip contains a global buffer overflow vulnerability in the LZH de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
libacl1	CVE-2026-54369	高危	2.2.53-10		acl: Symlink traversal privilege escalation via libacl functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 14:16 修改: 2026-07-15 01:16
curl	CVE-2026-5773	高危	7.74.0-1.3+deb11u2		curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libblkid1	CVE-2026-53615	高危	2.36.1-8+deb11u1		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-bin	CVE-2021-3999	高危	2.31-13+deb11u3	2.31-13+deb11u4	glibc: Off-by-one buffer overflow/underflow in getcwd() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06
libc-bin	CVE-2023-4911	高危	2.31-13+deb11u3	2.31-13+deb11u7	glibc: buffer overflow in ld.so leading to privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-10-03 18:15 修改: 2026-06-17 06:38
libc-bin	CVE-2024-2961	高危	2.31-13+deb11u3	2.31-13+deb11u9	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
libc-bin	CVE-2024-33599	高危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc6	CVE-2021-3999	高危	2.31-13+deb11u3	2.31-13+deb11u4	glibc: Off-by-one buffer overflow/underflow in getcwd() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06
libc6	CVE-2023-4911	高危	2.31-13+deb11u3	2.31-13+deb11u7	glibc: buffer overflow in ld.so leading to privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-10-03 18:15 修改: 2026-06-17 06:38
libc6	CVE-2024-2961	高危	2.31-13+deb11u3	2.31-13+deb11u9	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
libc6	CVE-2024-33599	高危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libcom-err2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22
curl	CVE-2026-6276	高危	7.74.0-1.3+deb11u2		curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
curl	CVE-2026-8286	高危	7.74.0-1.3+deb11u2		curl: curl: Insecure connection establishment due to TLS configuration mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
curl	CVE-2026-8927	高危	7.74.0-1.3+deb11u2		libcurl: libcurl: Information disclosure due to uncleared proxy authentication state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
libcurl3-gnutls	CVE-2022-42916	高危	7.74.0-1.3+deb11u2		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42916 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-10-29 02:15 修改: 2026-06-17 05:05
libcurl3-gnutls	CVE-2022-43551	高危	7.74.0-1.3+deb11u2		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43551 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-12-23 15:15 修改: 2026-06-17 05:06
libcurl3-gnutls	CVE-2023-27533	高危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: TELNET option IAC injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libcurl3-gnutls	CVE-2023-27534	高危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: SFTP path ~ resolving discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libcurl3-gnutls	CVE-2026-5773	高危	7.74.0-1.3+deb11u2		curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl3-gnutls	CVE-2026-6276	高危	7.74.0-1.3+deb11u2		curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl3-gnutls	CVE-2026-8286	高危	7.74.0-1.3+deb11u2		curl: curl: Insecure connection establishment due to TLS configuration mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libcurl3-gnutls	CVE-2026-8927	高危	7.74.0-1.3+deb11u2		libcurl: libcurl: Information disclosure due to uncleared proxy authentication state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
libcurl3-gnutls	CVE-2026-8932	高危	7.74.0-1.3+deb11u2		libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
curl	CVE-2026-8932	高危	7.74.0-1.3+deb11u2		libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
dirmngr	CVE-2025-68973	高危	2.2.27-2+deb11u2	2.2.27-2+deb11u3	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
e2fsprogs	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22
libcurl4	CVE-2022-42916	高危	7.74.0-1.3+deb11u2		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42916 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2022-10-29 02:15 修改: 2026-06-17 05:05
libcurl4	CVE-2022-43551	高危	7.74.0-1.3+deb11u2		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43551 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2022-12-23 15:15 修改: 2026-06-17 05:06
libcurl4	CVE-2023-27533	高危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: TELNET option IAC injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libcurl4	CVE-2023-27534	高危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: SFTP path ~ resolving discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libcurl4	CVE-2026-5773	高危	7.74.0-1.3+deb11u2		curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl4	CVE-2026-6276	高危	7.74.0-1.3+deb11u2		curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl4	CVE-2026-8286	高危	7.74.0-1.3+deb11u2		curl: curl: Insecure connection establishment due to TLS configuration mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libcurl4	CVE-2026-8927	高危	7.74.0-1.3+deb11u2		libcurl: libcurl: Information disclosure due to uncleared proxy authentication state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
libcurl4	CVE-2026-8932	高危	7.74.0-1.3+deb11u2		libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
bsdutils	CVE-2026-53615	高危	1:2.36.1-8+deb11u1		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bash	CVE-2022-3715	高危	5.1-2+deb11u1		bash: a heap-buffer-overflow in valid_parameter_transform 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3715 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-01-05 15:15 修改: 2026-06-17 05:00
curl	CVE-2022-42916	高危	7.74.0-1.3+deb11u2		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42916 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2022-10-29 02:15 修改: 2026-06-17 05:05
libexpat1	CVE-2022-40674	高危	2.2.10-2+deb11u3	2.2.10-2+deb11u4	expat: a use-after-free in the doContent function in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40674 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-09-14 11:15 修改: 2026-06-17 05:01
libexpat1	CVE-2022-43680	高危	2.2.10-2+deb11u3	2.2.10-2+deb11u5	expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43680 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-10-24 14:15 修改: 2026-06-17 05:07
libexpat1	CVE-2023-52425	高危	2.2.10-2+deb11u3	2.2.10-2+deb11u6	expat: parsing large tokens can trigger a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-02-04 20:15 修改: 2026-06-17 06:42
libexpat1	CVE-2024-45490	高危	2.2.10-2+deb11u3	2.2.10-2+deb11u6	libexpat: Negative Length Parsing Vulnerability in libexpat 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54
libexpat1	CVE-2025-59375	高危	2.2.10-2+deb11u3		firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46
libexpat1	CVE-2026-25210	高危	2.2.10-2+deb11u3		libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25210 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-30 07:16 修改: 2026-06-17 10:24
libexpat1	CVE-2026-45186	高危	2.2.10-2+deb11u3		libexpat: denial of service via crafted XML input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-10 07:16 修改: 2026-07-15 02:22
libexpat1	CVE-2026-56131	高危	2.2.10-2+deb11u3		libexpat before 2.8.2 lacks handler call depth tracking for calls to X ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1	CVE-2026-56407	高危	2.2.10-2+deb11u3		libexpat before 2.8.2 has an integer overflow in doProlog that is rela ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat1	CVE-2026-56408	高危	2.2.10-2+deb11u3		libexpat before 2.8.2 has an integer overflow in copyString. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libext2fs2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22
libfreetype6	CVE-2025-27363	高危	2.10.4+dfsg-1+deb11u1	2.10.4+dfsg-1+deb11u2	freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27363 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2025-03-11 14:15 修改: 2026-06-17 09:03
libgcrypt20	CVE-2021-33560	高危	1.8.7-6		libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2021-06-08 11:15 修改: 2026-06-17 03:54
git	CVE-2019-1387	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: Remote code execution in recursive clones with nested submodules 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1387 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2019-12-18 21:15 修改: 2026-06-17 02:28
git	CVE-2022-24765	高危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24765 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-04-12 18:15 修改: 2026-06-17 04:32
libgnutls30	CVE-2022-2509	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u2	gnutls: Double free during gnutls_pkcs7_verify 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2509 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-08-01 14:15 修改: 2026-06-17 04:42
libgnutls30	CVE-2023-0361	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u3	gnutls: timing side-channel in the TLS RSA key exchange code 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0361 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-02-15 18:15 修改: 2026-06-17 05:25
libgnutls30	CVE-2024-0553	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u5	gnutls: incomplete fix for CVE-2023-5981 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0553 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-01-16 12:15 修改: 2026-06-17 06:53
libgnutls30	CVE-2024-0567	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u5	gnutls: rejects certificate chain with distributed trust 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0567 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-01-16 14:15 修改: 2026-06-17 06:53
libgnutls30	CVE-2025-32988	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u8	gnutls: Vulnerability in GnuTLS otherName SAN export 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32988 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-07-10 08:15 修改: 2026-06-30 01:16
libgnutls30	CVE-2025-32990	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u8	gnutls: Vulnerability in GnuTLS certtool template parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32990 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-07-10 10:15 修改: 2026-06-30 01:16
libgnutls30	CVE-2026-33846	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u10	gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-04 10:15 修改: 2026-07-15 02:20
libgnutls30	CVE-2026-3833	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u10	gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-30 18:16 修改: 2026-07-13 22:16
libgnutls30	CVE-2026-42009	高危	3.7.1-5+deb11u1	3.7.1-5+deb11u10	gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-18 13:16 修改: 2026-07-15 02:21
git	CVE-2022-29187	高危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: Bypass of safe.directory protections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29187 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-07-12 21:15 修改: 2026-06-17 04:39
libgssapi-krb5-2	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05
libgssapi-krb5-2	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
libgssapi-krb5-2	CVE-2026-40355	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libgssapi-krb5-2	CVE-2026-40356	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
git	CVE-2022-39260	高危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: git shell function that splits command arguments can lead to arbitrary heap writes. 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-39260 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-10-19 12:15 修改: 2026-06-17 04:58
libk5crypto3	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05
libk5crypto3	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
libk5crypto3	CVE-2026-40355	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libk5crypto3	CVE-2026-40356	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
git	CVE-2023-23946	高危	1:2.30.2-1	1:2.30.2-1+deb11u2	git: git apply: a path outside the working tree can be overwritten with crafted input 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23946 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-02-14 20:15 修改: 2026-06-17 05:38
libkrb5-3	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05
libkrb5-3	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
libkrb5-3	CVE-2026-40355	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5-3	CVE-2026-40356	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
git	CVE-2023-25652	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25652 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-25 20:15 修改: 2026-06-17 05:41
libkrb5support0	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05
libkrb5support0	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
libkrb5support0	CVE-2026-40355	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5support0	CVE-2026-40356	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
git	CVE-2023-29007	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: arbitrary configuration injection when renaming or deleting a section from a configuration file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29007 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-25 21:15 修改: 2026-06-17 05:49
git	CVE-2024-32004	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: RCE while cloning local repos 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32004 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-05-14 19:15 修改: 2026-06-17 07:29
libldap-2.4-2	CVE-2023-2953	高危	2.4.57+dfsg-3+deb11u1		openldap: null pointer dereference in ber_memalloc_x function 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-05-30 22:15 修改: 2026-06-17 05:53
libmount1	CVE-2026-53615	高危	2.36.1-8+deb11u1		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libncurses6	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40
libncurses6	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-14 01:15 修改: 2026-06-17 05:50
libncurses6	CVE-2025-69720	高危	6.2+20201114-2		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libncursesw6	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40
libncursesw6	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-04-14 01:15 修改: 2026-06-17 05:50
libncursesw6	CVE-2025-69720	高危	6.2+20201114-2		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libnghttp2-14	CVE-2023-44487	高危	1.43.0-1	1.43.0-1+deb11u1	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-10-10 14:15 修改: 2026-06-17 06:27
libnghttp2-14	CVE-2026-27135	高危	1.43.0-1	1.43.0-1+deb11u3	nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27135 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-03-18 18:16 修改: 2026-07-15 02:19
libpam-modules	CVE-2025-6020	高危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	linux-pam: Linux-pam directory Traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-06-17 13:15 修改: 2026-07-19 17:16
libpam-modules-bin	CVE-2025-6020	高危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	linux-pam: Linux-pam directory Traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-06-17 13:15 修改: 2026-07-19 17:16
libpam-runtime	CVE-2025-6020	高危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	linux-pam: Linux-pam directory Traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-06-17 13:15 修改: 2026-07-19 17:16
libpam0g	CVE-2025-6020	高危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	linux-pam: Linux-pam directory Traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-06-17 13:15 修改: 2026-07-19 17:16
git	CVE-2024-32021	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: symlink bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32021 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-05-14 20:15 修改: 2026-06-17 07:29
git	CVE-2024-32465	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: additional local RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32465 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-05-14 20:15 修改: 2026-06-17 07:29
git	CVE-2024-52006	高危	1:2.30.2-1	1:2.30.2-1+deb11u4	git: Newline confusion in credential helpers can lead to credential exfiltration in git 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52006 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-01-14 19:15 修改: 2026-06-17 08:06
git	CVE-2025-48384	高危	1:2.30.2-1	1:2.30.2-1+deb11u5	git: Git arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48384 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-07-08 19:15 修改: 2026-06-17 09:29
curl	CVE-2022-43551	高危	7.74.0-1.3+deb11u2		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43551 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2022-12-23 15:15 修改: 2026-06-17 05:06
libperl5.32	CVE-2020-16156	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-12-13 18:15 修改: 2026-06-17 02:57
libperl5.32	CVE-2023-31484	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57
libperl5.32	CVE-2023-47038	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u3	perl: Write past buffer end via illegal user-defined Unicode property 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47038 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-12-18 14:15 修改: 2026-06-17 06:32
libperl5.32	CVE-2026-42497	高危	5.32.1-4+deb11u2		perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-26 02:16 修改: 2026-06-17 10:47
libperl5.32	CVE-2026-48962	高危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-27 04:16 修改: 2026-07-15 02:22
libperl5.32	CVE-2026-57432	高危	5.32.1-4+deb11u2		Perl versions through 5.43.10 have an integer overflow in S_measure_st ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
libperl5.32	CVE-2026-9538	高危	5.32.1-4+deb11u2		perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-26 02:16 修改: 2026-06-17 11:05
libpng16-16	CVE-2025-64720	高危	1.6.37-3	1.6.37-3+deb11u1	libpng: LIBPNG buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64720 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55
libpng16-16	CVE-2025-65018	高危	1.6.37-3	1.6.37-3+deb11u1	libpng: LIBPNG heap buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65018 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55
libpng16-16	CVE-2025-66293	高危	1.6.37-3	1.6.37-3+deb11u1	libpng: LIBPNG out-of-bounds read in png_image_read_composite 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66293 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2025-12-03 21:15 修改: 2026-06-17 09:56
libpng16-16	CVE-2026-22695	高危	1.6.37-3	1.6.37-3+deb11u2	libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22695 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20
libpng16-16	CVE-2026-22801	高危	1.6.37-3	1.6.37-3+deb11u2	libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22801 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20
libpng16-16	CVE-2026-25646	高危	1.6.37-3	1.6.37-3+deb11u2	libpng: LIBPNG has a heap buffer overflow in png_set_quantize 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25646 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-02-10 18:16 修改: 2026-07-15 02:18
curl	CVE-2023-27533	高危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: TELNET option IAC injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27533 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
curl	CVE-2023-27534	高危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: SFTP path ~ resolving discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libpython3.9-minimal	CVE-2015-20107	高危	3.9.2-1	3.9.2-1+deb11u2	python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15
libpython3.9-minimal	CVE-2020-10735	高危	3.9.2-1	3.9.2-1+deb11u2	python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-09-09 14:15 修改: 2026-06-17 02:48
libpython3.9-minimal	CVE-2021-28861	高危	3.9.2-1	3.9.2-1+deb11u2	python: open redirection vulnerability in lib/http/server.py may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-08-23 01:15 修改: 2026-06-17 03:46
libpython3.9-minimal	CVE-2021-3737	高危	3.9.2-1	3.9.2-1+deb11u2	python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-03-04 19:15 修改: 2026-06-17 04:05
libpython3.9-minimal	CVE-2022-0391	高危	3.9.2-1	3.9.2-1+deb11u3	python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-02-09 23:15 修改: 2026-06-17 04:20
libpython3.9-minimal	CVE-2022-42919	高危	3.9.2-1	3.9.2-1+deb11u2	python: local privilege escalation via the multiprocessing forkserver start method 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42919 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-11-07 00:15 修改: 2026-06-17 05:05
libpython3.9-minimal	CVE-2022-45061	高危	3.9.2-1	3.9.2-1+deb11u2	python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-11-09 07:15 修改: 2026-06-17 05:09
libpython3.9-minimal	CVE-2023-24329	高危	3.9.2-1	3.9.2-1+deb11u2	python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-02-17 15:15 修改: 2026-06-17 05:39
libpython3.9-minimal	CVE-2023-6597	高危	3.9.2-1	3.9.2-1+deb11u2	python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:51
libpython3.9-minimal	CVE-2024-6232	高危	3.9.2-1	3.9.2-1+deb11u2	python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-09-03 13:15 修改: 2026-06-17 08:17
libpython3.9-minimal	CVE-2024-7592	高危	3.9.2-1	3.9.2-1+deb11u2	cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-19 19:15 修改: 2026-06-17 08:20
libpython3.9-minimal	CVE-2024-9287	高危	3.9.2-1	3.9.2-1+deb11u2	python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-10-22 17:15 修改: 2026-06-17 08:24
libpython3.9-minimal	CVE-2025-13836	高危	3.9.2-1	3.9.2-1+deb11u4	cpython: Excessive read buffering DoS in http.client 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34
libpython3.9-minimal	CVE-2025-69534	高危	3.9.2-1		python-markdown: denial of service via malformed HTML-like sequences 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-05 15:16 修改: 2026-07-15 02:17
libpython3.9-minimal	CVE-2026-11940	高危	3.9.2-1		tarfile.extractall() with the 'data' or 'tar' filter could be bypasse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-23 17:16 修改: 2026-06-30 16:16
libpython3.9-minimal	CVE-2026-3644	高危	3.9.2-1	3.9.2-1+deb11u7	cpython: Incomplete control character validation in http.cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-16 18:16 修改: 2026-06-30 16:16
libpython3.9-minimal	CVE-2026-4224	高危	3.9.2-1	3.9.2-1+deb11u7	cpython: Stack overflow parsing XML with deeply nested DTD content models 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-16 18:16 修改: 2026-06-17 10:56
libpython3.9-minimal	CVE-2026-6100	高危	3.9.2-1	3.9.2-1+deb11u6	python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-13 18:16 修改: 2026-07-15 01:16
libpython3.9-minimal	CVE-2026-7210	高危	3.9.2-1		python: expat: Python/Expat: Denial of Service via crafted XML document 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-11 18:16 修改: 2026-06-17 11:02
git-man	CVE-2019-1387	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: Remote code execution in recursive clones with nested submodules 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1387 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2019-12-18 21:15 修改: 2026-06-17 02:28
git-man	CVE-2022-24765	高危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24765 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-04-12 18:15 修改: 2026-06-17 04:32
libpython3.9-stdlib	CVE-2015-20107	高危	3.9.2-1	3.9.2-1+deb11u2	python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15
libpython3.9-stdlib	CVE-2020-10735	高危	3.9.2-1	3.9.2-1+deb11u2	python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-09-09 14:15 修改: 2026-06-17 02:48
libpython3.9-stdlib	CVE-2021-28861	高危	3.9.2-1	3.9.2-1+deb11u2	python: open redirection vulnerability in lib/http/server.py may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-08-23 01:15 修改: 2026-06-17 03:46
libpython3.9-stdlib	CVE-2021-3737	高危	3.9.2-1	3.9.2-1+deb11u2	python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-03-04 19:15 修改: 2026-06-17 04:05
libpython3.9-stdlib	CVE-2022-0391	高危	3.9.2-1	3.9.2-1+deb11u3	python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-02-09 23:15 修改: 2026-06-17 04:20
libpython3.9-stdlib	CVE-2022-42919	高危	3.9.2-1	3.9.2-1+deb11u2	python: local privilege escalation via the multiprocessing forkserver start method 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42919 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-11-07 00:15 修改: 2026-06-17 05:05
libpython3.9-stdlib	CVE-2022-45061	高危	3.9.2-1	3.9.2-1+deb11u2	python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-11-09 07:15 修改: 2026-06-17 05:09
libpython3.9-stdlib	CVE-2023-24329	高危	3.9.2-1	3.9.2-1+deb11u2	python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-02-17 15:15 修改: 2026-06-17 05:39
libpython3.9-stdlib	CVE-2023-6597	高危	3.9.2-1	3.9.2-1+deb11u2	python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:51
libpython3.9-stdlib	CVE-2024-6232	高危	3.9.2-1	3.9.2-1+deb11u2	python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-09-03 13:15 修改: 2026-06-17 08:17
libpython3.9-stdlib	CVE-2024-7592	高危	3.9.2-1	3.9.2-1+deb11u2	cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-19 19:15 修改: 2026-06-17 08:20
libpython3.9-stdlib	CVE-2024-9287	高危	3.9.2-1	3.9.2-1+deb11u2	python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-10-22 17:15 修改: 2026-06-17 08:24
libpython3.9-stdlib	CVE-2025-13836	高危	3.9.2-1	3.9.2-1+deb11u4	cpython: Excessive read buffering DoS in http.client 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34
libpython3.9-stdlib	CVE-2025-69534	高危	3.9.2-1		python-markdown: denial of service via malformed HTML-like sequences 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-05 15:16 修改: 2026-07-15 02:17
libpython3.9-stdlib	CVE-2026-11940	高危	3.9.2-1		tarfile.extractall() with the 'data' or 'tar' filter could be bypasse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-23 17:16 修改: 2026-06-30 16:16
libpython3.9-stdlib	CVE-2026-3644	高危	3.9.2-1	3.9.2-1+deb11u7	cpython: Incomplete control character validation in http.cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-16 18:16 修改: 2026-06-30 16:16
libpython3.9-stdlib	CVE-2026-4224	高危	3.9.2-1	3.9.2-1+deb11u7	cpython: Stack overflow parsing XML with deeply nested DTD content models 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-16 18:16 修改: 2026-06-17 10:56
libpython3.9-stdlib	CVE-2026-6100	高危	3.9.2-1	3.9.2-1+deb11u6	python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-13 18:16 修改: 2026-07-15 01:16
libpython3.9-stdlib	CVE-2026-7210	高危	3.9.2-1		python: expat: Python/Expat: Denial of Service via crafted XML document 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-11 18:16 修改: 2026-06-17 11:02
libsmartcols1	CVE-2026-53615	高危	2.36.1-8+deb11u1		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsqlite3-0	CVE-2021-36690	高危	3.34.1-3	3.34.1-3+deb11u1	A segmentation fault can occur in the sqlite3.exe command-line compone ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36690 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2021-08-24 14:15 修改: 2026-06-17 03:59
libsqlite3-0	CVE-2023-7104	高危	3.34.1-3	3.34.1-3+deb11u1	sqlite: heap-buffer-overflow at sessionfuzz 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-12-29 10:15 修改: 2026-06-17 06:52
libsqlite3-0	CVE-2025-6965	高危	3.34.1-3		sqlite: Integer Truncation in SQLite 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6965 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-07-15 14:15 修改: 2026-06-26 16:36
libss2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22
libssh2-1	CVE-2020-22218	高危	1.9.0-2	1.9.0-2+deb11u1	libssh2: use-of-uninitialized-value in _libssh2_transport_read 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-22218 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-08-22 19:16 修改: 2026-06-17 03:04
libssh2-1	CVE-2026-55199	高危	1.9.0-2		libssh2: libssh2: Denial of Service via crafted SSH_MSG_EXT_INFO message 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55199 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-06-17 20:17 修改: 2026-07-14 22:17
libssh2-1	CVE-2026-55200	高危	1.9.0-2		libssh2: libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55200 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-06-17 20:17 修改: 2026-07-14 22:17
libssh2-1	CVE-2026-7598	高危	1.9.0-2		libssh2: integer overflow via large username or password arguments 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7598 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-01 22:16 修改: 2026-07-15 01:17
libssl1.1	CVE-2022-4450	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: double free after calling PEM_read_bio_ex 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20
libssl1.1	CVE-2023-0215	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: use-after-free following BIO_new_NDEF 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25
libssl1.1	CVE-2023-0286	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: X.400 address type confusion in X.509 GeneralName 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25
libssl1.1	CVE-2023-0464	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Denial of service by excessive resource usage in verifying X509 policy constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25
libssl1.1	CVE-2025-69421	高危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl1.1	CVE-2026-28387	高危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u7	openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
libssl1.1	CVE-2026-28388	高危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u7	openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
libssl1.1	CVE-2026-28389	高危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u7	openssl: OpenSSL: Denial of Service vulnerability in CMS processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
libssl1.1	CVE-2026-28390	高危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u7	openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
libssl1.1	CVE-2026-45447	高危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u8	openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-09 17:17 修改: 2026-07-15 14:18
libsystemd0	CVE-2023-50387	高危	247.3-7	247.3-7+deb11u6	bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:39
libsystemd0	CVE-2023-50868	高危	247.3-7	247.3-7+deb11u6	bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:40
git-man	CVE-2022-29187	高危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: Bypass of safe.directory protections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29187 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-07-12 21:15 修改: 2026-06-17 04:39
libtinfo6	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40
libtinfo6	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-04-14 01:15 修改: 2026-06-17 05:50
libtinfo6	CVE-2025-69720	高危	6.2+20201114-2		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libtirpc-common	CVE-2021-46828	高危	1.3.1-1	1.3.1-1+deb11u1	libtirpc: DoS vulnerability with lots of connections 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46828 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-07-20 06:15 修改: 2026-06-17 04:15
libtirpc3	CVE-2021-46828	高危	1.3.1-1	1.3.1-1+deb11u1	libtirpc: DoS vulnerability with lots of connections 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46828 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-07-20 06:15 修改: 2026-06-17 04:15
libudev1	CVE-2023-50387	高危	247.3-7	247.3-7+deb11u6	bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:39
libudev1	CVE-2023-50868	高危	247.3-7	247.3-7+deb11u6	bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:40
libuuid1	CVE-2026-53615	高危	2.36.1-8+deb11u1		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libzstd1	CVE-2022-4899	高危	1.4.8+dfsg-2.1		zstd: mysql: buffer overrun in util.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-03-31 20:15 修改: 2026-06-17 05:22
logsave	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22
mount	CVE-2026-53615	高危	2.36.1-8+deb11u1		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
ncurses-base	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40
ncurses-base	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-04-14 01:15 修改: 2026-06-17 05:50
ncurses-base	CVE-2025-69720	高危	6.2+20201114-2		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
ncurses-bin	CVE-2022-29458	高危	6.2+20201114-2	6.2+20201114-2+deb11u1	ncurses: segfaulting OOB read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40
ncurses-bin	CVE-2023-29491	高危	6.2+20201114-2	6.2+20201114-2+deb11u2	ncurses: Local users can trigger security-relevant memory corruption via malformed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-04-14 01:15 修改: 2026-06-17 05:50
ncurses-bin	CVE-2025-69720	高危	6.2+20201114-2		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
git-man	CVE-2022-39260	高危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: git shell function that splits command arguments can lead to arbitrary heap writes. 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-39260 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-10-19 12:15 修改: 2026-06-17 04:58
git-man	CVE-2023-23946	高危	1:2.30.2-1	1:2.30.2-1+deb11u2	git: git apply: a path outside the working tree can be overwritten with crafted input 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23946 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-02-14 20:15 修改: 2026-06-17 05:38
openssh-client	CVE-2021-41617	高危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u3	openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41617 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-09-26 19:15 修改: 2026-07-14 12:16
openssh-client	CVE-2026-3497	高危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u6	openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3497 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-12 19:16 修改: 2026-07-15 02:21
openssh-client	CVE-2026-35385	高危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u7	OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35385 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-02 17:16 修改: 2026-07-15 02:20
openssh-client	CVE-2026-35386	高危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u7	OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35386 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-02 17:16 修改: 2026-07-07 15:55
openssh-client	CVE-2026-35414	高危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u7	OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35414 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-02 18:16 修改: 2026-06-17 10:40
openssh-client	CVE-2026-59999	高危	1:8.4p1-5+deb11u1		openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59999 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-08 01:16 修改: 2026-07-09 16:52
openssh-client	CVE-2026-60000	高危	1:8.4p1-5+deb11u1		openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60000 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-08 01:16 修改: 2026-07-09 16:51
openssl	CVE-2022-4450	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: double free after calling PEM_read_bio_ex 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20
openssl	CVE-2023-0215	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: use-after-free following BIO_new_NDEF 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25
openssl	CVE-2023-0286	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: X.400 address type confusion in X.509 GeneralName 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25
openssl	CVE-2023-0464	高危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Denial of service by excessive resource usage in verifying X509 policy constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25
openssl	CVE-2025-69421	高危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
openssl	CVE-2026-28387	高危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u7	openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
openssl	CVE-2026-28388	高危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u7	openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
openssl	CVE-2026-28389	高危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u7	openssl: OpenSSL: Denial of Service vulnerability in CMS processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
openssl	CVE-2026-28390	高危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u7	openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
openssl	CVE-2026-45447	高危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u8	openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-06-09 17:17 修改: 2026-07-15 14:18
git-man	CVE-2023-25652	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25652 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-25 20:15 修改: 2026-06-17 05:41
git-man	CVE-2023-29007	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: arbitrary configuration injection when renaming or deleting a section from a configuration file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29007 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-25 21:15 修改: 2026-06-17 05:49
git-man	CVE-2024-32004	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: RCE while cloning local repos 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32004 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-05-14 19:15 修改: 2026-06-17 07:29
perl	CVE-2020-16156	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-12-13 18:15 修改: 2026-06-17 02:57
perl	CVE-2023-31484	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57
perl	CVE-2023-47038	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u3	perl: Write past buffer end via illegal user-defined Unicode property 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47038 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-12-18 14:15 修改: 2026-06-17 06:32
perl	CVE-2026-42497	高危	5.32.1-4+deb11u2		perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-26 02:16 修改: 2026-06-17 10:47
perl	CVE-2026-48962	高危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-27 04:16 修改: 2026-07-15 02:22
perl	CVE-2026-57432	高危	5.32.1-4+deb11u2		Perl versions through 5.43.10 have an integer overflow in S_measure_st ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
perl	CVE-2026-9538	高危	5.32.1-4+deb11u2		perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-26 02:16 修改: 2026-06-17 11:05
git-man	CVE-2024-32021	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: symlink bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32021 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-05-14 20:15 修改: 2026-06-17 07:29
git-man	CVE-2024-32465	高危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: additional local RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32465 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-05-14 20:15 修改: 2026-06-17 07:29
git-man	CVE-2024-52006	高危	1:2.30.2-1	1:2.30.2-1+deb11u4	git: Newline confusion in credential helpers can lead to credential exfiltration in git 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52006 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-01-14 19:15 修改: 2026-06-17 08:06
perl-base	CVE-2020-16156	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2021-12-13 18:15 修改: 2026-06-17 02:57
perl-base	CVE-2023-31484	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57
perl-base	CVE-2023-47038	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u3	perl: Write past buffer end via illegal user-defined Unicode property 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47038 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-12-18 14:15 修改: 2026-06-17 06:32
perl-base	CVE-2026-42497	高危	5.32.1-4+deb11u2		perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-26 02:16 修改: 2026-06-17 10:47
perl-base	CVE-2026-48962	高危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-27 04:16 修改: 2026-07-15 02:22
perl-base	CVE-2026-57432	高危	5.32.1-4+deb11u2		Perl versions through 5.43.10 have an integer overflow in S_measure_st ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
perl-base	CVE-2026-9538	高危	5.32.1-4+deb11u2		perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-26 02:16 修改: 2026-06-17 11:05
git-man	CVE-2025-48384	高危	1:2.30.2-1	1:2.30.2-1+deb11u5	git: Git arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48384 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-07-08 19:15 修改: 2026-06-17 09:29
gnupg	CVE-2025-68973	高危	2.2.27-2+deb11u2	2.2.27-2+deb11u3	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
gnupg-l10n	CVE-2025-68973	高危	2.2.27-2+deb11u2	2.2.27-2+deb11u3	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
perl-modules-5.32	CVE-2020-16156	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-12-13 18:15 修改: 2026-06-17 02:57
perl-modules-5.32	CVE-2023-31484	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57
perl-modules-5.32	CVE-2023-47038	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u3	perl: Write past buffer end via illegal user-defined Unicode property 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47038 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-12-18 14:15 修改: 2026-06-17 06:32
perl-modules-5.32	CVE-2026-42497	高危	5.32.1-4+deb11u2		perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-26 02:16 修改: 2026-06-17 10:47
perl-modules-5.32	CVE-2026-48962	高危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-27 04:16 修改: 2026-07-15 02:22
perl-modules-5.32	CVE-2026-57432	高危	5.32.1-4+deb11u2		Perl versions through 5.43.10 have an integer overflow in S_measure_st ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
perl-modules-5.32	CVE-2026-9538	高危	5.32.1-4+deb11u2		perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-26 02:16 修改: 2026-06-17 11:05
gnupg-utils	CVE-2025-68973	高危	2.2.27-2+deb11u2	2.2.27-2+deb11u3	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
gpg	CVE-2025-68973	高危	2.2.27-2+deb11u2	2.2.27-2+deb11u3	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
python3.9	CVE-2015-20107	高危	3.9.2-1	3.9.2-1+deb11u2	python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15
python3.9	CVE-2020-10735	高危	3.9.2-1	3.9.2-1+deb11u2	python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-09-09 14:15 修改: 2026-06-17 02:48
python3.9	CVE-2021-28861	高危	3.9.2-1	3.9.2-1+deb11u2	python: open redirection vulnerability in lib/http/server.py may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-08-23 01:15 修改: 2026-06-17 03:46
python3.9	CVE-2021-3737	高危	3.9.2-1	3.9.2-1+deb11u2	python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-03-04 19:15 修改: 2026-06-17 04:05
python3.9	CVE-2022-0391	高危	3.9.2-1	3.9.2-1+deb11u3	python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-02-09 23:15 修改: 2026-06-17 04:20
python3.9	CVE-2022-42919	高危	3.9.2-1	3.9.2-1+deb11u2	python: local privilege escalation via the multiprocessing forkserver start method 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42919 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-11-07 00:15 修改: 2026-06-17 05:05
python3.9	CVE-2022-45061	高危	3.9.2-1	3.9.2-1+deb11u2	python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-11-09 07:15 修改: 2026-06-17 05:09
python3.9	CVE-2023-24329	高危	3.9.2-1	3.9.2-1+deb11u2	python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-02-17 15:15 修改: 2026-06-17 05:39
python3.9	CVE-2023-6597	高危	3.9.2-1	3.9.2-1+deb11u2	python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:51
python3.9	CVE-2024-6232	高危	3.9.2-1	3.9.2-1+deb11u2	python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-09-03 13:15 修改: 2026-06-17 08:17
python3.9	CVE-2024-7592	高危	3.9.2-1	3.9.2-1+deb11u2	cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-19 19:15 修改: 2026-06-17 08:20
python3.9	CVE-2024-9287	高危	3.9.2-1	3.9.2-1+deb11u2	python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-10-22 17:15 修改: 2026-06-17 08:24
python3.9	CVE-2025-13836	高危	3.9.2-1	3.9.2-1+deb11u4	cpython: Excessive read buffering DoS in http.client 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34
python3.9	CVE-2025-69534	高危	3.9.2-1		python-markdown: denial of service via malformed HTML-like sequences 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-05 15:16 修改: 2026-07-15 02:17
python3.9	CVE-2026-11940	高危	3.9.2-1		tarfile.extractall() with the 'data' or 'tar' filter could be bypasse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-23 17:16 修改: 2026-06-30 16:16
python3.9	CVE-2026-3644	高危	3.9.2-1	3.9.2-1+deb11u7	cpython: Incomplete control character validation in http.cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-16 18:16 修改: 2026-06-30 16:16
python3.9	CVE-2026-4224	高危	3.9.2-1	3.9.2-1+deb11u7	cpython: Stack overflow parsing XML with deeply nested DTD content models 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-16 18:16 修改: 2026-06-17 10:56
python3.9	CVE-2026-6100	高危	3.9.2-1	3.9.2-1+deb11u6	python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-13 18:16 修改: 2026-07-15 01:16
python3.9	CVE-2026-7210	高危	3.9.2-1		python: expat: Python/Expat: Denial of Service via crafted XML document 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-11 18:16 修改: 2026-06-17 11:02
gpg-agent	CVE-2025-68973	高危	2.2.27-2+deb11u2	2.2.27-2+deb11u3	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
gpg-wks-client	CVE-2025-68973	高危	2.2.27-2+deb11u2	2.2.27-2+deb11u3	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
python3.9-minimal	CVE-2015-20107	高危	3.9.2-1	3.9.2-1+deb11u2	python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-04-13 16:15 修改: 2025-11-03 22:15
python3.9-minimal	CVE-2020-10735	高危	3.9.2-1	3.9.2-1+deb11u2	python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-09-09 14:15 修改: 2026-06-17 02:48
python3.9-minimal	CVE-2021-28861	高危	3.9.2-1	3.9.2-1+deb11u2	python: open redirection vulnerability in lib/http/server.py may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-08-23 01:15 修改: 2026-06-17 03:46
python3.9-minimal	CVE-2021-3737	高危	3.9.2-1	3.9.2-1+deb11u2	python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-03-04 19:15 修改: 2026-06-17 04:05
python3.9-minimal	CVE-2022-0391	高危	3.9.2-1	3.9.2-1+deb11u3	python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-02-09 23:15 修改: 2026-06-17 04:20
python3.9-minimal	CVE-2022-42919	高危	3.9.2-1	3.9.2-1+deb11u2	python: local privilege escalation via the multiprocessing forkserver start method 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42919 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-11-07 00:15 修改: 2026-06-17 05:05
python3.9-minimal	CVE-2022-45061	高危	3.9.2-1	3.9.2-1+deb11u2	python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-11-09 07:15 修改: 2026-06-17 05:09
python3.9-minimal	CVE-2023-24329	高危	3.9.2-1	3.9.2-1+deb11u2	python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-02-17 15:15 修改: 2026-06-17 05:39
python3.9-minimal	CVE-2023-6597	高危	3.9.2-1	3.9.2-1+deb11u2	python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:51
python3.9-minimal	CVE-2024-6232	高危	3.9.2-1	3.9.2-1+deb11u2	python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-09-03 13:15 修改: 2026-06-17 08:17
python3.9-minimal	CVE-2024-7592	高危	3.9.2-1	3.9.2-1+deb11u2	cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-19 19:15 修改: 2026-06-17 08:20
python3.9-minimal	CVE-2024-9287	高危	3.9.2-1	3.9.2-1+deb11u2	python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-10-22 17:15 修改: 2026-06-17 08:24
python3.9-minimal	CVE-2025-13836	高危	3.9.2-1	3.9.2-1+deb11u4	cpython: Excessive read buffering DoS in http.client 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34
python3.9-minimal	CVE-2025-69534	高危	3.9.2-1		python-markdown: denial of service via malformed HTML-like sequences 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-05 15:16 修改: 2026-07-15 02:17
python3.9-minimal	CVE-2026-11940	高危	3.9.2-1		tarfile.extractall() with the 'data' or 'tar' filter could be bypasse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-23 17:16 修改: 2026-06-30 16:16
python3.9-minimal	CVE-2026-3644	高危	3.9.2-1	3.9.2-1+deb11u7	cpython: Incomplete control character validation in http.cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-16 18:16 修改: 2026-06-30 16:16
python3.9-minimal	CVE-2026-4224	高危	3.9.2-1	3.9.2-1+deb11u7	cpython: Stack overflow parsing XML with deeply nested DTD content models 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-16 18:16 修改: 2026-06-17 10:56
python3.9-minimal	CVE-2026-6100	高危	3.9.2-1	3.9.2-1+deb11u6	python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-13 18:16 修改: 2026-07-15 01:16
python3.9-minimal	CVE-2026-7210	高危	3.9.2-1		python: expat: Python/Expat: Denial of Service via crafted XML document 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-11 18:16 修改: 2026-06-17 11:02
util-linux	CVE-2026-53615	高危	2.36.1-8+deb11u1		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
gpg-wks-server	CVE-2025-68973	高危	2.2.27-2+deb11u2	2.2.27-2+deb11u3	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
wget	CVE-2026-58471	高危	1.21-1+deb11u1		wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58471 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:02
wget	CVE-2026-58472	高危	1.21-1+deb11u1		wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58472 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:58
gpgconf	CVE-2025-68973	高危	2.2.27-2+deb11u2	2.2.27-2+deb11u3	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
gpgsm	CVE-2025-68973	高危	2.2.27-2+deb11u2	2.2.27-2+deb11u3	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
libpam0g	CVE-2026-54411	中危	1.4.0-9+deb11u1		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-14 18:17 修改: 2026-06-17 10:58
libc6	CVE-2026-5928	中危	2.31-13+deb11u3		glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-6238	中危	2.31-13+deb11u3		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
curl	CVE-2026-4873	中危	7.74.0-1.3+deb11u2		curl: curl: Information disclosure due to incorrect TLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
curl	CVE-2026-5545	中危	7.74.0-1.3+deb11u2		curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
curl	CVE-2026-6253	中危	7.74.0-1.3+deb11u2		curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
curl	CVE-2026-6429	中危	7.74.0-1.3+deb11u2		curl: libcurl: Credential leak via reused proxy connection during HTTP redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
curl	CVE-2026-7168	中危	7.74.0-1.3+deb11u2		curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
curl	CVE-2026-8924	中危	7.74.0-1.3+deb11u2		curl: curl: Cookie injection via malicious HTTP server using super cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
bsdutils	CVE-2026-13595	中危	1:2.36.1-8+deb11u1		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
dirmngr	CVE-2025-30258	中危	2.2.27-2+deb11u2		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
dirmngr	CVE-2025-68972	中危	2.2.27-2+deb11u2		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
bsdutils	CVE-2026-27456	中危	1:2.36.1-8+deb11u1		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libperl5.32	CVE-2025-15649	中危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-27 04:16 修改: 2026-06-17 08:38
libperl5.32	CVE-2025-40909	中危	5.32.1-4+deb11u2	5.32.1-4+deb11u5	perl: Perl threads have a working directory race condition where file operations may target unintended paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40909 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-05-30 13:15 修改: 2026-06-17 09:22
libperl5.32	CVE-2026-12087	中危	5.32.1-4+deb11u2		perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
libperl5.32	CVE-2026-48959	中危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-27 04:16 修改: 2026-06-17 10:55
libperl5.32	CVE-2026-48961	中危	5.32.1-4+deb11u2		perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-27 04:16 修改: 2026-06-17 10:55
libperl5.32	CVE-2026-7010	中危	5.32.1-4+deb11u2		HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01
bsdutils	CVE-2026-3184	中危	1:2.36.1-8+deb11u1		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
git-man	CVE-2022-39253	中危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: exposure of sensitive information to a malicious actor 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-39253 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-10-19 11:15 修改: 2026-06-17 04:58
git-man	CVE-2023-22490	中危	1:2.30.2-1	1:2.30.2-1+deb11u2	git: data exfiltration with maliciously crafted repository 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22490 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-02-14 20:15 修改: 2026-06-17 05:35
libcurl3-gnutls	CVE-2022-43552	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u5	curl: Use-after-free triggered by an HTTP proxy deny response 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:06
libcurl3-gnutls	CVE-2023-23915	中危	7.74.0-1.3+deb11u2		curl: HSTS amnesia with --parallel 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23915 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38
libcurl3-gnutls	CVE-2023-23916	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u7	curl: HTTP multi-header compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38
libpng16-16	CVE-2025-64505	中危	1.6.37-3	1.6.37-3+deb11u1	libpng: LIBPNG heap buffer overflow via malformed palette index 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64505 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54
libpng16-16	CVE-2025-64506	中危	1.6.37-3	1.6.37-3+deb11u1	libpng: LIBPNG heap buffer over-read 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64506 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54
libpng16-16	CVE-2026-33416	中危	1.6.37-3	1.6.37-3+deb11u3	libpng: libpng: Arbitrary code execution due to use-after-free vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37
libpng16-16	CVE-2026-33636	中危	1.6.37-3	1.6.37-3+deb11u3	libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33636 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37
libpng16-16	CVE-2026-34757	中危	1.6.37-3	1.6.37-3+deb11u4	libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39
libpng16-16	CVE-2026-40930	中危	1.6.37-3		LIBPNG is a reference library for use in applications that process PNG ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40930 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-06-04 16:16 修改: 2026-06-17 10:45
libcurl3-gnutls	CVE-2023-27535	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: FTP too eager connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libcurl3-gnutls	CVE-2023-27536	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: GSS delegation too eager connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libcurl3-gnutls	CVE-2023-27538	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: SSH connection too eager reuse still 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libcurl3-gnutls	CVE-2023-28321	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u9	curl: IDN wildcard match may lead to Improper Cerificate Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47
libcurl3-gnutls	CVE-2023-46218	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u11	curl: information disclosure by exploiting a mixed case flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-12-07 01:15 修改: 2026-06-17 06:30
libcurl3-gnutls	CVE-2023-46219	中危	7.74.0-1.3+deb11u2		curl: excessively long file name may lead to unknown HSTS status 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46219 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-12-12 02:15 修改: 2026-06-17 06:30
libcurl3-gnutls	CVE-2024-2398	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u12	curl: HTTP/2 push headers memory-leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24
libcurl3-gnutls	CVE-2024-7264	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u13	curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-07-31 08:15 修改: 2026-06-17 08:19
libcurl3-gnutls	CVE-2024-8096	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u14	curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-09-11 10:15 修改: 2026-06-17 08:21
libcurl3-gnutls	CVE-2024-9681	中危	7.74.0-1.3+deb11u2		curl: HSTS subdomain overwrites parent cache entry 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9681 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-11-06 08:15 修改: 2026-06-17 08:25
libcurl3-gnutls	CVE-2026-11856	中危	7.74.0-1.3+deb11u2		curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl3-gnutls	CVE-2026-1965	中危	7.74.0-1.3+deb11u2		curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
libcurl3-gnutls	CVE-2026-3783	中危	7.74.0-1.3+deb11u2		curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl3-gnutls	CVE-2026-3784	中危	7.74.0-1.3+deb11u2		curl: curl: Unauthorized access due to improper HTTP proxy connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl3-gnutls	CVE-2026-4873	中危	7.74.0-1.3+deb11u2		curl: curl: Information disclosure due to incorrect TLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
libcurl3-gnutls	CVE-2026-5545	中危	7.74.0-1.3+deb11u2		curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl3-gnutls	CVE-2026-6253	中危	7.74.0-1.3+deb11u2		curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl3-gnutls	CVE-2026-6429	中危	7.74.0-1.3+deb11u2		curl: libcurl: Credential leak via reused proxy connection during HTTP redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl3-gnutls	CVE-2026-7168	中危	7.74.0-1.3+deb11u2		curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
libcurl3-gnutls	CVE-2026-8924	中危	7.74.0-1.3+deb11u2		curl: curl: Cookie injection via malicious HTTP server using super cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
git-man	CVE-2024-50349	中危	1:2.30.2-1	1:2.30.2-1+deb11u4	git: Git does not sanitize URLs when asking for credentials interactively 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50349 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-01-14 19:15 修改: 2026-06-17 08:04
libpython3.9-minimal	CVE-2021-3426	中危	3.9.2-1	3.9.2-1+deb11u2	python: Information disclosure via pydoc 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-05-20 13:15 修改: 2026-06-17 04:05
libpython3.9-minimal	CVE-2021-3733	中危	3.9.2-1	3.9.2-1+deb11u2	python: urllib: Regular expression DoS in AbstractBasicAuthHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-03-10 17:42 修改: 2026-06-17 04:05
libpython3.9-minimal	CVE-2021-4189	中危	3.9.2-1	3.9.2-1+deb11u2	python: ftplib should not use the host from the PASV response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libpython3.9-minimal	CVE-2023-27043	中危	3.9.2-1	3.9.2-1+deb11u2	python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-19 00:15 修改: 2026-06-17 05:44
libpython3.9-minimal	CVE-2023-40217	中危	3.9.2-1	3.9.2-1+deb11u2	python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-08-25 01:15 修改: 2026-06-17 06:16
libpython3.9-minimal	CVE-2024-0450	中危	3.9.2-1	3.9.2-1+deb11u2	python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:53
libpython3.9-minimal	CVE-2024-11168	中危	3.9.2-1	3.9.2-1+deb11u2	python: Improper validation of IPv6 and IPvFuture addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-11-12 22:15 修改: 2026-06-17 06:57
libpython3.9-minimal	CVE-2024-6923	中危	3.9.2-1	3.9.2-1+deb11u2	cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-01 14:15 修改: 2026-06-17 08:18
libpython3.9-minimal	CVE-2024-8088	中危	3.9.2-1	3.9.2-1+deb11u2	python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-22 19:15 修改: 2026-06-17 08:21
libpython3.9-minimal	CVE-2025-0938	中危	3.9.2-1	3.9.2-1+deb11u3	python: cpython: URL parser allowed square brackets in domain names 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-01-31 18:15 修改: 2026-06-17 08:27
libpython3.9-minimal	CVE-2025-11468	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: Missing character filtering in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30
libpython3.9-minimal	CVE-2025-12084	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31
libpython3.9-minimal	CVE-2025-12781	中危	3.9.2-1		cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32
libpython3.9-minimal	CVE-2025-13837	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: Out-of-memory when loading Plist 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34
libpython3.9-minimal	CVE-2025-15282	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: Header injection via newlines in data URL mediatype in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
libpython3.9-minimal	CVE-2025-15366	中危	3.9.2-1		cpython: IMAP command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-07-09 18:16
libpython3.9-minimal	CVE-2025-15367	中危	3.9.2-1		cpython: POP3 command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
libpython3.9-minimal	CVE-2025-4516	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: python: CPython DecodeError Handling Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-05-15 14:15 修改: 2026-06-17 09:33
libpython3.9-minimal	CVE-2025-6069	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: Python HTMLParser quadratic complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-06-17 14:15 修改: 2026-06-17 10:01
libpython3.9-minimal	CVE-2025-6075	中危	3.9.2-1	3.9.2-1+deb11u4	python: Quadratic complexity in os.path.expandvars() with user-controlled template 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-10-31 17:15 修改: 2026-06-17 10:01
libpython3.9-minimal	CVE-2025-8194	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: Cpython infinite loop when parsing a tarfile 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-07-28 19:15 修改: 2026-06-17 10:06
libpython3.9-minimal	CVE-2025-8291	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-10-07 18:16 修改: 2026-06-17 10:06
libpython3.9-minimal	CVE-2026-0672	中危	3.9.2-1	3.9.2-1+deb11u7	cpython: Header injection in http.cookies.Morsel in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
libpython3.9-minimal	CVE-2026-0864	中危	3.9.2-1		python: cpython: Python configparser: Configuration injection via crafted multi-line input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-23 18:17 修改: 2026-06-25 19:51
libpython3.9-minimal	CVE-2026-0865	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: wsgiref.headers.Headers allows header newline injection in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
libpython3.9-minimal	CVE-2026-11972	中危	3.9.2-1		python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-23 23:16 修改: 2026-06-30 16:16
libpython3.9-minimal	CVE-2026-1299	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: email header injection due to unquoted newlines 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15
libpython3.9-minimal	CVE-2026-1502	中危	3.9.2-1		python: Python: HTTP header injection via CR/LF in proxy tunnel headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16
libpython3.9-minimal	CVE-2026-3276	中危	3.9.2-1		python: Python unicodedata: Denial of Service due to excessive CPU consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-03 16:16 修改: 2026-06-17 10:43
libpython3.9-minimal	CVE-2026-3446	中危	3.9.2-1		python: Python base64: Incomplete data decoding due to premature stop at padding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3446 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-10 19:16 修改: 2026-06-17 10:43
libpython3.9-minimal	CVE-2026-6019	中危	3.9.2-1		python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-22 20:16 修改: 2026-06-17 11:00
libpython3.9-minimal	CVE-2026-8328	中危	3.9.2-1		The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-13 21:16 修改: 2026-06-30 16:16
libpython3.9-minimal	CVE-2026-9669	中危	3.9.2-1		python: Python: Denial of Service via out-of-bounds write in BZ2 decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-08 23:17 修改: 2026-07-07 18:16
git-man	CVE-2025-27613	中危	1:2.30.2-1	1:2.30.2-1+deb11u5	gitk: Git file creation flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27613 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-07-10 15:15 修改: 2026-06-17 09:03
bzip2	CVE-2026-42250	中危	1.0.8-4		bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
gnupg	CVE-2025-30258	中危	2.2.27-2+deb11u2		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
gnupg	CVE-2025-68972	中危	2.2.27-2+deb11u2		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
curl	CVE-2022-43552	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u5	curl: Use-after-free triggered by an HTTP proxy deny response 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:06
gnupg-l10n	CVE-2025-30258	中危	2.2.27-2+deb11u2		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
gnupg-l10n	CVE-2025-68972	中危	2.2.27-2+deb11u2		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
curl	CVE-2023-23915	中危	7.74.0-1.3+deb11u2		curl: HSTS amnesia with --parallel 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23915 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38
gnupg-utils	CVE-2025-30258	中危	2.2.27-2+deb11u2		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
gnupg-utils	CVE-2025-68972	中危	2.2.27-2+deb11u2		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
curl	CVE-2023-23916	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u7	curl: HTTP multi-header compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38
libcurl4	CVE-2022-43552	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u5	curl: Use-after-free triggered by an HTTP proxy deny response 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-02-09 20:15 修改: 2026-06-17 05:06
libcurl4	CVE-2023-23915	中危	7.74.0-1.3+deb11u2		curl: HSTS amnesia with --parallel 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23915 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38
libcurl4	CVE-2023-23916	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u7	curl: HTTP multi-header compression denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23916 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-02-23 20:15 修改: 2026-06-17 05:38
libcurl4	CVE-2023-27535	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: FTP too eager connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libcurl4	CVE-2023-27536	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: GSS delegation too eager connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libcurl4	CVE-2023-27538	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: SSH connection too eager reuse still 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libcurl4	CVE-2023-28321	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u9	curl: IDN wildcard match may lead to Improper Cerificate Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47
libcurl4	CVE-2023-46218	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u11	curl: information disclosure by exploiting a mixed case flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-12-07 01:15 修改: 2026-06-17 06:30
libcurl4	CVE-2023-46219	中危	7.74.0-1.3+deb11u2		curl: excessively long file name may lead to unknown HSTS status 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46219 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-12-12 02:15 修改: 2026-06-17 06:30
libcurl4	CVE-2024-2398	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u12	curl: HTTP/2 push headers memory-leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24
libpython3.9-stdlib	CVE-2021-3426	中危	3.9.2-1	3.9.2-1+deb11u2	python: Information disclosure via pydoc 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-05-20 13:15 修改: 2026-06-17 04:05
libpython3.9-stdlib	CVE-2021-3733	中危	3.9.2-1	3.9.2-1+deb11u2	python: urllib: Regular expression DoS in AbstractBasicAuthHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-03-10 17:42 修改: 2026-06-17 04:05
libpython3.9-stdlib	CVE-2021-4189	中危	3.9.2-1	3.9.2-1+deb11u2	python: ftplib should not use the host from the PASV response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libpython3.9-stdlib	CVE-2023-27043	中危	3.9.2-1	3.9.2-1+deb11u2	python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-19 00:15 修改: 2026-06-17 05:44
libpython3.9-stdlib	CVE-2023-40217	中危	3.9.2-1	3.9.2-1+deb11u2	python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-08-25 01:15 修改: 2026-06-17 06:16
libpython3.9-stdlib	CVE-2024-0450	中危	3.9.2-1	3.9.2-1+deb11u2	python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:53
libpython3.9-stdlib	CVE-2024-11168	中危	3.9.2-1	3.9.2-1+deb11u2	python: Improper validation of IPv6 and IPvFuture addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-11-12 22:15 修改: 2026-06-17 06:57
libpython3.9-stdlib	CVE-2024-6923	中危	3.9.2-1	3.9.2-1+deb11u2	cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-01 14:15 修改: 2026-06-17 08:18
libpython3.9-stdlib	CVE-2024-8088	中危	3.9.2-1	3.9.2-1+deb11u2	python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-22 19:15 修改: 2026-06-17 08:21
libpython3.9-stdlib	CVE-2025-0938	中危	3.9.2-1	3.9.2-1+deb11u3	python: cpython: URL parser allowed square brackets in domain names 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-01-31 18:15 修改: 2026-06-17 08:27
libpython3.9-stdlib	CVE-2025-11468	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: Missing character filtering in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30
libpython3.9-stdlib	CVE-2025-12084	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31
libpython3.9-stdlib	CVE-2025-12781	中危	3.9.2-1		cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32
libpython3.9-stdlib	CVE-2025-13837	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: Out-of-memory when loading Plist 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34
libpython3.9-stdlib	CVE-2025-15282	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: Header injection via newlines in data URL mediatype in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
libpython3.9-stdlib	CVE-2025-15366	中危	3.9.2-1		cpython: IMAP command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-07-09 18:16
libpython3.9-stdlib	CVE-2025-15367	中危	3.9.2-1		cpython: POP3 command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
libpython3.9-stdlib	CVE-2025-4516	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: python: CPython DecodeError Handling Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-05-15 14:15 修改: 2026-06-17 09:33
libpython3.9-stdlib	CVE-2025-6069	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: Python HTMLParser quadratic complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-06-17 14:15 修改: 2026-06-17 10:01
libpython3.9-stdlib	CVE-2025-6075	中危	3.9.2-1	3.9.2-1+deb11u4	python: Quadratic complexity in os.path.expandvars() with user-controlled template 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-10-31 17:15 修改: 2026-06-17 10:01
libpython3.9-stdlib	CVE-2025-8194	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: Cpython infinite loop when parsing a tarfile 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-07-28 19:15 修改: 2026-06-17 10:06
libpython3.9-stdlib	CVE-2025-8291	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-10-07 18:16 修改: 2026-06-17 10:06
libpython3.9-stdlib	CVE-2026-0672	中危	3.9.2-1	3.9.2-1+deb11u7	cpython: Header injection in http.cookies.Morsel in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
libpython3.9-stdlib	CVE-2026-0864	中危	3.9.2-1		python: cpython: Python configparser: Configuration injection via crafted multi-line input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-23 18:17 修改: 2026-06-25 19:51
libpython3.9-stdlib	CVE-2026-0865	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: wsgiref.headers.Headers allows header newline injection in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
libpython3.9-stdlib	CVE-2026-11972	中危	3.9.2-1		python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-23 23:16 修改: 2026-06-30 16:16
libpython3.9-stdlib	CVE-2026-1299	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: email header injection due to unquoted newlines 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15
libpython3.9-stdlib	CVE-2026-1502	中危	3.9.2-1		python: Python: HTTP header injection via CR/LF in proxy tunnel headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16
libpython3.9-stdlib	CVE-2026-3276	中危	3.9.2-1		python: Python unicodedata: Denial of Service due to excessive CPU consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-03 16:16 修改: 2026-06-17 10:43
libpython3.9-stdlib	CVE-2026-3446	中危	3.9.2-1		python: Python base64: Incomplete data decoding due to premature stop at padding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3446 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-10 19:16 修改: 2026-06-17 10:43
libpython3.9-stdlib	CVE-2026-6019	中危	3.9.2-1		python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-22 20:16 修改: 2026-06-17 11:00
libpython3.9-stdlib	CVE-2026-8328	中危	3.9.2-1		The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-13 21:16 修改: 2026-06-30 16:16
libpython3.9-stdlib	CVE-2026-9669	中危	3.9.2-1		python: Python: Denial of Service via out-of-bounds write in BZ2 decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-08 23:17 修改: 2026-07-07 18:16
libcurl4	CVE-2024-7264	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u13	curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-07-31 08:15 修改: 2026-06-17 08:19
libsmartcols1	CVE-2026-13595	中危	2.36.1-8+deb11u1		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libsmartcols1	CVE-2026-27456	中危	2.36.1-8+deb11u1		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libsmartcols1	CVE-2026-3184	中危	2.36.1-8+deb11u1		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
libcurl4	CVE-2024-8096	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u14	curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-09-11 10:15 修改: 2026-06-17 08:21
libcurl4	CVE-2024-9681	中危	7.74.0-1.3+deb11u2		curl: HSTS subdomain overwrites parent cache entry 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9681 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-11-06 08:15 修改: 2026-06-17 08:25
libcurl4	CVE-2026-11856	中危	7.74.0-1.3+deb11u2		curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libsqlite3-0	CVE-2026-11822	中危	3.34.1-3		SQLite before 3.53.2 contains memory corruption vulnerabilities in the ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2026-06-09 20:16 修改: 2026-06-17 10:14
libsqlite3-0	CVE-2026-11824	中危	3.34.1-3		SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2026-06-09 20:16 修改: 2026-06-17 10:14
libcurl4	CVE-2026-1965	中危	7.74.0-1.3+deb11u2		curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
libcurl4	CVE-2026-3783	中危	7.74.0-1.3+deb11u2		curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl4	CVE-2026-3784	中危	7.74.0-1.3+deb11u2		curl: curl: Unauthorized access due to improper HTTP proxy connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl4	CVE-2026-4873	中危	7.74.0-1.3+deb11u2		curl: curl: Information disclosure due to incorrect TLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
libcurl4	CVE-2026-5545	中危	7.74.0-1.3+deb11u2		curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libssh2-1	CVE-2025-15661	中危	1.9.0-2		libssh2: libssh2: Information disclosure and denial of service via crafted SFTP response 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15661 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-06-18 21:16 修改: 2026-07-14 23:17
libcurl4	CVE-2026-6253	中危	7.74.0-1.3+deb11u2		curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl4	CVE-2026-6429	中危	7.74.0-1.3+deb11u2		curl: libcurl: Credential leak via reused proxy connection during HTTP redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl4	CVE-2026-7168	中危	7.74.0-1.3+deb11u2		curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
libcurl4	CVE-2026-8924	中危	7.74.0-1.3+deb11u2		curl: curl: Cookie injection via malicious HTTP server using super cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
gpg	CVE-2025-30258	中危	2.2.27-2+deb11u2		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
gpg	CVE-2025-68972	中危	2.2.27-2+deb11u2		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
curl	CVE-2023-27535	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: FTP too eager connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
gpg-agent	CVE-2025-30258	中危	2.2.27-2+deb11u2		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
gpg-agent	CVE-2025-68972	中危	2.2.27-2+deb11u2		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
curl	CVE-2023-27536	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: GSS delegation too eager connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libssl1.1	CVE-2022-2097	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: AES OCB fails to encrypt some bytes 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41
libssl1.1	CVE-2022-4304	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: timing attack in RSA Decryption implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20
libssl1.1	CVE-2023-0465	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Invalid certificate policies in leaf certificates are silently ignored 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25
libssl1.1	CVE-2023-0466	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Certificate policy check not enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25
libssl1.1	CVE-2023-2650	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Possible DoS translating ASN.1 object identifiers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53
libssl1.1	CVE-2023-3446	中危	1.1.1n-0+deb11u3	1.1.1v-0~deb11u1	openssl: Excessive time spent checking DH keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14
libssl1.1	CVE-2023-3817	中危	1.1.1n-0+deb11u3	1.1.1v-0~deb11u1	OpenSSL: Excessive time spent checking DH q parameter value 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14
libssl1.1	CVE-2023-5678	中危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49
libssl1.1	CVE-2024-0727	中危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54
libssl1.1	CVE-2025-69419	中危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl1.1	CVE-2025-9230	中危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libsvn1	CVE-2024-46901	中危	1.14.1-3+deb11u1	1.14.1-3+deb11u2	Subversion: Apache Subversion: mod_dav_svn denial-of-service via control characters in paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46901 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-12-09 10:15 修改: 2026-06-17 07:56
gpg-wks-client	CVE-2025-30258	中危	2.2.27-2+deb11u2		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
gpg-wks-client	CVE-2025-68972	中危	2.2.27-2+deb11u2		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
libsystemd0	CVE-2022-3821	中危	247.3-7	247.3-7+deb11u2	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00
libsystemd0	CVE-2022-4415	中危	247.3-7	247.3-7+deb11u2	systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:20
libsystemd0	CVE-2023-7008	中危	247.3-7	247.3-7+deb11u6	systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51
libsystemd0	CVE-2025-4598	中危	247.3-7	247.3-7+deb11u7	systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-05-30 14:15 修改: 2026-06-30 11:16
libsystemd0	CVE-2026-29111	中危	247.3-7	247.3-7+deb11u8	systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29
libsystemd0	CVE-2026-40225	中危	247.3-7	247.3-7+deb11u8	systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libsystemd0	CVE-2026-40226	中危	247.3-7	247.3-7+deb11u8	systemd: systemd nspawn: Escape-to-host action via crafted config file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libsystemd0	CVE-2026-4105	中危	247.3-7	247.3-7+deb11u8	systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4105 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-03-13 19:55 修改: 2026-06-17 10:55
curl	CVE-2023-27538	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u8	curl: SSH connection too eager reuse still 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-30 20:15 修改: 2026-06-17 05:45
libtasn1-6	CVE-2024-12133	中危	4.16.0-2	4.16.0-2+deb11u2	libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12133 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-02-10 16:15 修改: 2026-06-30 03:16
gpg-wks-server	CVE-2025-30258	中危	2.2.27-2+deb11u2		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
gpg-wks-server	CVE-2025-68972	中危	2.2.27-2+deb11u2		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
curl	CVE-2023-28321	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u9	curl: IDN wildcard match may lead to Improper Cerificate Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47
libtinfo6	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
gpgconf	CVE-2025-30258	中危	2.2.27-2+deb11u2		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
libexpat1	CVE-2024-50602	中危	2.2.10-2+deb11u3	2.2.10-2+deb11u7	libexpat: expat: DoS via XML_ResumeParser 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-10-27 05:15 修改: 2026-06-17 08:04
libexpat1	CVE-2024-8176	中危	2.2.10-2+deb11u3		libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8176 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-03-14 09:15 修改: 2026-06-30 00:16
libexpat1	CVE-2025-66382	中危	2.2.10-2+deb11u3		libexpat: libexpat: Denial of service via crafted file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libudev1	CVE-2022-3821	中危	247.3-7	247.3-7+deb11u2	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00
libudev1	CVE-2022-4415	中危	247.3-7	247.3-7+deb11u2	systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:20
libudev1	CVE-2023-7008	中危	247.3-7	247.3-7+deb11u6	systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51
libudev1	CVE-2025-4598	中危	247.3-7	247.3-7+deb11u7	systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-05-30 14:15 修改: 2026-06-30 11:16
libudev1	CVE-2026-29111	中危	247.3-7	247.3-7+deb11u8	systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29
libudev1	CVE-2026-40225	中危	247.3-7	247.3-7+deb11u8	systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1	CVE-2026-40226	中危	247.3-7	247.3-7+deb11u8	systemd: systemd nspawn: Escape-to-host action via crafted config file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1	CVE-2026-4105	中危	247.3-7	247.3-7+deb11u8	systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4105 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-03-13 19:55 修改: 2026-06-17 10:55
libexpat1	CVE-2026-32776	中危	2.2.10-2+deb11u3		libexpat: libexpat: Denial of Service due to NULL pointer dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libuuid1	CVE-2026-13595	中危	2.36.1-8+deb11u1		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libuuid1	CVE-2026-27456	中危	2.36.1-8+deb11u1		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libuuid1	CVE-2026-3184	中危	2.36.1-8+deb11u1		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
libexpat1	CVE-2026-32777	中危	2.2.10-2+deb11u3		libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
login	CVE-2023-4641	中危	1:4.8.1-1	1:4.8.1-1+deb11u1	shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-12-27 16:15 修改: 2026-06-17 06:38
libexpat1	CVE-2026-32778	中危	2.2.10-2+deb11u3		libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18
libexpat1	CVE-2026-50219	中危	2.2.10-2+deb11u3		expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-04 06:16 修改: 2026-06-17 10:57
mount	CVE-2026-13595	中危	2.36.1-8+deb11u1		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
mount	CVE-2026-27456	中危	2.36.1-8+deb11u1		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
mount	CVE-2026-3184	中危	2.36.1-8+deb11u1		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
libexpat1	CVE-2026-56132	中危	2.2.10-2+deb11u3		expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1	CVE-2026-56403	中危	2.2.10-2+deb11u3		libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1	CVE-2026-56404	中危	2.2.10-2+deb11u3		libexpat before 2.8.2 has an integer overflow in addBinding. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
ncurses-base	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
libexpat1	CVE-2026-56405	中危	2.2.10-2+deb11u3		libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat1	CVE-2026-56406	中危	2.2.10-2+deb11u3		libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat1	CVE-2026-56409	中危	2.2.10-2+deb11u3		xmlwf in libexpat before 2.8.2 has an integer overflow for the output ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
ncurses-bin	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
libexpat1	CVE-2026-56410	中危	2.2.10-2+deb11u3		libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat1	CVE-2026-56411	中危	2.2.10-2+deb11u3		expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat1	CVE-2026-56412	中危	2.2.10-2+deb11u3		libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
gpgconf	CVE-2025-68972	中危	2.2.27-2+deb11u2		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
curl	CVE-2023-46218	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u11	curl: information disclosure by exploiting a mixed case flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46218 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-12-07 01:15 修改: 2026-06-17 06:30
gpgsm	CVE-2025-30258	中危	2.2.27-2+deb11u2		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
gpgsm	CVE-2025-68972	中危	2.2.27-2+deb11u2		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
curl	CVE-2023-46219	中危	7.74.0-1.3+deb11u2		curl: excessively long file name may lead to unknown HSTS status 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46219 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-12-12 02:15 修改: 2026-06-17 06:30
gpgv	CVE-2025-30258	中危	2.2.27-2+deb11u2		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
openssh-client	CVE-2023-48795	中危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u3	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-12-18 16:15 修改: 2026-06-17 06:34
openssh-client	CVE-2023-51385	中危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u3	openssh: potential command injection via shell metacharacters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-12-18 19:15 修改: 2026-06-17 06:40
openssh-client	CVE-2025-26465	中危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u4	openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26465 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-02-18 19:15 修改: 2026-07-14 13:17
openssh-client	CVE-2025-61984	中危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u7	openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61984 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-10-06 19:15 修改: 2026-07-14 13:17
openssh-client	CVE-2025-61985	中危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u7	openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61985 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-10-06 19:15 修改: 2026-07-14 13:17
openssh-client	CVE-2026-35387	中危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u7	OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35387 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:40
openssh-client	CVE-2026-59995	中危	1:8.4p1-5+deb11u1		openssh: OpenSSH: sftp client allows attacker to control downloaded file location 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59995 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-08 01:16 修改: 2026-07-09 17:14
openssh-client	CVE-2026-59996	中危	1:8.4p1-5+deb11u1		openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59996 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-08 01:16 修改: 2026-07-09 17:14
openssh-client	CVE-2026-59997	中危	1:8.4p1-5+deb11u1		openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59997 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-08 01:16 修改: 2026-07-09 17:11
openssh-client	CVE-2026-59998	中危	1:8.4p1-5+deb11u1		openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59998 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-08 01:16 修改: 2026-07-09 16:55
openssh-client	CVE-2026-60001	中危	1:8.4p1-5+deb11u1		openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60001 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-08 01:16 修改: 2026-07-09 16:37
gpgv	CVE-2025-68972	中危	2.2.27-2+deb11u2		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
curl	CVE-2024-2398	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u12	curl: HTTP/2 push headers memory-leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24
gzip	CVE-2026-41991	中危	1.10-4+deb11u1		gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
curl	CVE-2024-7264	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u13	curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-07-31 08:15 修改: 2026-06-17 08:19
libacl1	CVE-2026-54370	中危	2.2.53-10		acl: TOCTOU Symlink Traversal via getfacl/setfacl 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22
curl	CVE-2024-8096	中危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u14	curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-09-11 10:15 修改: 2026-06-17 08:21
libapr1	CVE-2023-49582	中危	1.7.0-6+deb11u1		APR: Lax permissions in Apache Portable Runtime shared memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-49582 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-26 14:15 修改: 2026-06-17 06:36
libaprutil1	CVE-2022-25147	中危	1.6.1-5	1.6.1-5+deb11u1	apr-util: out-of-bounds writes in the apr_base64 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25147 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-01-31 16:15 修改: 2026-06-17 04:33
libgnutls30	CVE-2023-5981	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u4	gnutls: timing side-channel in the RSA-PSK authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5981 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-11-28 12:15 修改: 2026-06-17 06:49
libgnutls30	CVE-2024-12243	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u7	gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12243 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-02-10 16:15 修改: 2026-06-17 06:59
openssl	CVE-2022-2097	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: AES OCB fails to encrypt some bytes 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41
openssl	CVE-2022-4304	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u4	openssl: timing attack in RSA Decryption implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20
openssl	CVE-2023-0465	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Invalid certificate policies in leaf certificates are silently ignored 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25
openssl	CVE-2023-0466	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Certificate policy check not enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25
openssl	CVE-2023-2650	中危	1.1.1n-0+deb11u3	1.1.1n-0+deb11u5	openssl: Possible DoS translating ASN.1 object identifiers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53
openssl	CVE-2023-3446	中危	1.1.1n-0+deb11u3	1.1.1v-0~deb11u1	openssl: Excessive time spent checking DH keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14
openssl	CVE-2023-3817	中危	1.1.1n-0+deb11u3	1.1.1v-0~deb11u1	OpenSSL: Excessive time spent checking DH q parameter value 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14
openssl	CVE-2023-5678	中危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49
openssl	CVE-2024-0727	中危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54
openssl	CVE-2025-69419	中危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
openssl	CVE-2025-9230	中危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
p11-kit	CVE-2026-13757	中危	0.23.22-1		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
p11-kit-modules	CVE-2026-13757	中危	0.23.22-1		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
passwd	CVE-2023-4641	中危	1:4.8.1-1	1:4.8.1-1+deb11u1	shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-12-27 16:15 修改: 2026-06-17 06:38
libgnutls30	CVE-2024-28834	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u6	gnutls: vulnerable to Minerva side-channel information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28834 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-03-21 14:15 修改: 2026-06-17 07:21
libgnutls30	CVE-2024-28835	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u6	gnutls: potential crash during chain building/verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28835 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-03-21 06:15 修改: 2026-07-03 03:16
libgnutls30	CVE-2025-14831	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u9	gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14831 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-02-09 15:16 修改: 2026-06-30 00:16
libgnutls30	CVE-2025-6395	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u8	gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6395 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-07-10 16:15 修改: 2026-06-30 02:16
libgnutls30	CVE-2026-42011	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u10	gnutls: gnutls: Security bypass due to incorrect name constraint handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-07 15:16 修改: 2026-07-13 17:17
libgnutls30	CVE-2026-42012	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u10	gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-26 22:16 修改: 2026-07-15 15:16
libgnutls30	CVE-2026-42013	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u10	gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-26 22:16 修改: 2026-07-15 15:16
libgnutls30	CVE-2026-42014	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u10	gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-16 02:16 修改: 2026-07-15 15:16
libgnutls30	CVE-2026-42015	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u10	gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-26 22:16 修改: 2026-07-15 15:16
libgnutls30	CVE-2026-5260	中危	3.7.1-5+deb11u1	3.7.1-5+deb11u10	gnutls: gnutls: Information disclosure via heap overread in RSA key exchange 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-26 22:16 修改: 2026-07-15 15:16
perl	CVE-2025-15649	中危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-27 04:16 修改: 2026-06-17 08:38
perl	CVE-2025-40909	中危	5.32.1-4+deb11u2	5.32.1-4+deb11u5	perl: Perl threads have a working directory race condition where file operations may target unintended paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40909 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-05-30 13:15 修改: 2026-06-17 09:22
perl	CVE-2026-12087	中危	5.32.1-4+deb11u2		perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl	CVE-2026-48959	中危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-27 04:16 修改: 2026-06-17 10:55
perl	CVE-2026-48961	中危	5.32.1-4+deb11u2		perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-27 04:16 修改: 2026-06-17 10:55
perl	CVE-2026-7010	中危	5.32.1-4+deb11u2		HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01
libattr1	CVE-2026-54371	中危	1:2.4.48-6		attr: Symlink Traversal Privilege Escalation via getfattr and setfattr 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 14:16 修改: 2026-07-15 01:16
curl	CVE-2024-9681	中危	7.74.0-1.3+deb11u2		curl: HSTS subdomain overwrites parent cache entry 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9681 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-11-06 08:15 修改: 2026-06-17 08:25
libblkid1	CVE-2026-13595	中危	2.36.1-8+deb11u1		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libblkid1	CVE-2026-27456	中危	2.36.1-8+deb11u1		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libblkid1	CVE-2026-3184	中危	2.36.1-8+deb11u1		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
libgssapi-krb5-2	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
libgssapi-krb5-2	CVE-2025-24528	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u6	krb5: overflow when calculating ulog block size 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
libgssapi-krb5-2	CVE-2025-3576	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u7	krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-04-15 06:15 修改: 2026-06-30 01:16
libbz2-1.0	CVE-2026-42250	中危	1.0.8-4		bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
git	CVE-2022-39253	中危	1:2.30.2-1	1:2.30.2-1+deb11u1	git: exposure of sensitive information to a malicious actor 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-39253 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-10-19 11:15 修改: 2026-06-17 04:58
perl-base	CVE-2025-15649	中危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-27 04:16 修改: 2026-06-17 08:38
perl-base	CVE-2025-40909	中危	5.32.1-4+deb11u2	5.32.1-4+deb11u5	perl: Perl threads have a working directory race condition where file operations may target unintended paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40909 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-05-30 13:15 修改: 2026-06-17 09:22
perl-base	CVE-2026-12087	中危	5.32.1-4+deb11u2		perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl-base	CVE-2026-48959	中危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-27 04:16 修改: 2026-06-17 10:55
perl-base	CVE-2026-48961	中危	5.32.1-4+deb11u2		perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-27 04:16 修改: 2026-06-17 10:55
perl-base	CVE-2026-7010	中危	5.32.1-4+deb11u2		HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01
git	CVE-2023-22490	中危	1:2.30.2-1	1:2.30.2-1+deb11u2	git: data exfiltration with maliciously crafted repository 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22490 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-02-14 20:15 修改: 2026-06-17 05:35
git	CVE-2024-50349	中危	1:2.30.2-1	1:2.30.2-1+deb11u4	git: Git does not sanitize URLs when asking for credentials interactively 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50349 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-01-14 19:15 修改: 2026-06-17 08:04
git	CVE-2025-27613	中危	1:2.30.2-1	1:2.30.2-1+deb11u5	gitk: Git file creation flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27613 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-07-10 15:15 修改: 2026-06-17 09:03
libk5crypto3	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
libk5crypto3	CVE-2025-24528	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u6	krb5: overflow when calculating ulog block size 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
libk5crypto3	CVE-2025-3576	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u7	krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-04-15 06:15 修改: 2026-06-30 01:16
libc-bin	CVE-2023-4806	中危	2.31-13+deb11u3		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16
libc-bin	CVE-2023-4813	中危	2.31-13+deb11u3		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38
libc-bin	CVE-2024-33600	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc-bin	CVE-2025-0395	中危	2.31-13+deb11u3	2.31-13+deb11u12	glibc: buffer overflow in the GNU C Library's assert() 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
perl-modules-5.32	CVE-2025-15649	中危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-27 04:16 修改: 2026-06-17 08:38
perl-modules-5.32	CVE-2025-40909	中危	5.32.1-4+deb11u2	5.32.1-4+deb11u5	perl: Perl threads have a working directory race condition where file operations may target unintended paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40909 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-05-30 13:15 修改: 2026-06-17 09:22
perl-modules-5.32	CVE-2026-12087	中危	5.32.1-4+deb11u2		perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl-modules-5.32	CVE-2026-48959	中危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-27 04:16 修改: 2026-06-17 10:55
perl-modules-5.32	CVE-2026-48961	中危	5.32.1-4+deb11u2		perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-27 04:16 修改: 2026-06-17 10:55
perl-modules-5.32	CVE-2026-7010	中危	5.32.1-4+deb11u2		HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01
libc-bin	CVE-2025-4802	中危	2.31-13+deb11u3	2.31-13+deb11u13	glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
libkrb5-3	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
libkrb5-3	CVE-2025-24528	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u6	krb5: overflow when calculating ulog block size 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
libkrb5-3	CVE-2025-3576	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u7	krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-04-15 06:15 修改: 2026-06-30 01:16
libc-bin	CVE-2025-8058	中危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: Double free in glibc 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
libc-bin	CVE-2026-0915	中危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: glibc: Information disclosure via zero-valued network query 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
libc-bin	CVE-2026-4046	中危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc-bin	CVE-2026-5435	中危	2.31-13+deb11u3		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc-bin	CVE-2026-5450	中危	2.31-13+deb11u3		glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libkrb5support0	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
libkrb5support0	CVE-2025-24528	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u6	krb5: overflow when calculating ulog block size 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
libkrb5support0	CVE-2025-3576	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u7	krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-04-15 06:15 修改: 2026-06-30 01:16
libc-bin	CVE-2026-5928	中危	2.31-13+deb11u3		glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin	CVE-2026-6238	中危	2.31-13+deb11u3		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
curl	CVE-2026-11856	中危	7.74.0-1.3+deb11u2		curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
liblzma5	CVE-2026-34743	中危	5.2.5-2.1~deb11u1		xz: XZ Utils: Denial of Service via buffer overflow in index decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-02 19:21 修改: 2026-06-17 10:39
curl	CVE-2026-1965	中危	7.74.0-1.3+deb11u2		curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
libmount1	CVE-2026-13595	中危	2.36.1-8+deb11u1		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libmount1	CVE-2026-27456	中危	2.36.1-8+deb11u1		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libmount1	CVE-2026-3184	中危	2.36.1-8+deb11u1		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
curl	CVE-2026-3783	中危	7.74.0-1.3+deb11u2		curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
python3.9	CVE-2021-3426	中危	3.9.2-1	3.9.2-1+deb11u2	python: Information disclosure via pydoc 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-05-20 13:15 修改: 2026-06-17 04:05
python3.9	CVE-2021-3733	中危	3.9.2-1	3.9.2-1+deb11u2	python: urllib: Regular expression DoS in AbstractBasicAuthHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-03-10 17:42 修改: 2026-06-17 04:05
python3.9	CVE-2021-4189	中危	3.9.2-1	3.9.2-1+deb11u2	python: ftplib should not use the host from the PASV response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
python3.9	CVE-2023-27043	中危	3.9.2-1	3.9.2-1+deb11u2	python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-19 00:15 修改: 2026-06-17 05:44
python3.9	CVE-2023-40217	中危	3.9.2-1	3.9.2-1+deb11u2	python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-08-25 01:15 修改: 2026-06-17 06:16
python3.9	CVE-2024-0450	中危	3.9.2-1	3.9.2-1+deb11u2	python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:53
python3.9	CVE-2024-11168	中危	3.9.2-1	3.9.2-1+deb11u2	python: Improper validation of IPv6 and IPvFuture addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-11-12 22:15 修改: 2026-06-17 06:57
python3.9	CVE-2024-6923	中危	3.9.2-1	3.9.2-1+deb11u2	cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-01 14:15 修改: 2026-06-17 08:18
python3.9	CVE-2024-8088	中危	3.9.2-1	3.9.2-1+deb11u2	python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-22 19:15 修改: 2026-06-17 08:21
python3.9	CVE-2025-0938	中危	3.9.2-1	3.9.2-1+deb11u3	python: cpython: URL parser allowed square brackets in domain names 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-01-31 18:15 修改: 2026-06-17 08:27
python3.9	CVE-2025-11468	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: Missing character filtering in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30
python3.9	CVE-2025-12084	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31
python3.9	CVE-2025-12781	中危	3.9.2-1		cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32
python3.9	CVE-2025-13837	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: Out-of-memory when loading Plist 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34
python3.9	CVE-2025-15282	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: Header injection via newlines in data URL mediatype in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
python3.9	CVE-2025-15366	中危	3.9.2-1		cpython: IMAP command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-07-09 18:16
python3.9	CVE-2025-15367	中危	3.9.2-1		cpython: POP3 command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
python3.9	CVE-2025-4516	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: python: CPython DecodeError Handling Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-05-15 14:15 修改: 2026-06-17 09:33
python3.9	CVE-2025-6069	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: Python HTMLParser quadratic complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-06-17 14:15 修改: 2026-06-17 10:01
python3.9	CVE-2025-6075	中危	3.9.2-1	3.9.2-1+deb11u4	python: Quadratic complexity in os.path.expandvars() with user-controlled template 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-10-31 17:15 修改: 2026-06-17 10:01
python3.9	CVE-2025-8194	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: Cpython infinite loop when parsing a tarfile 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-07-28 19:15 修改: 2026-06-17 10:06
python3.9	CVE-2025-8291	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-10-07 18:16 修改: 2026-06-17 10:06
python3.9	CVE-2026-0672	中危	3.9.2-1	3.9.2-1+deb11u7	cpython: Header injection in http.cookies.Morsel in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
python3.9	CVE-2026-0864	中危	3.9.2-1		python: cpython: Python configparser: Configuration injection via crafted multi-line input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-23 18:17 修改: 2026-06-25 19:51
python3.9	CVE-2026-0865	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: wsgiref.headers.Headers allows header newline injection in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
python3.9	CVE-2026-11972	中危	3.9.2-1		python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-23 23:16 修改: 2026-06-30 16:16
python3.9	CVE-2026-1299	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: email header injection due to unquoted newlines 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15
python3.9	CVE-2026-1502	中危	3.9.2-1		python: Python: HTTP header injection via CR/LF in proxy tunnel headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16
python3.9	CVE-2026-3276	中危	3.9.2-1		python: Python unicodedata: Denial of Service due to excessive CPU consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-03 16:16 修改: 2026-06-17 10:43
python3.9	CVE-2026-3446	中危	3.9.2-1		python: Python base64: Incomplete data decoding due to premature stop at padding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3446 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-10 19:16 修改: 2026-06-17 10:43
python3.9	CVE-2026-6019	中危	3.9.2-1		python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-22 20:16 修改: 2026-06-17 11:00
python3.9	CVE-2026-8328	中危	3.9.2-1		The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-13 21:16 修改: 2026-06-30 16:16
python3.9	CVE-2026-9669	中危	3.9.2-1		python: Python: Denial of Service via out-of-bounds write in BZ2 decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-08 23:17 修改: 2026-07-07 18:16
curl	CVE-2026-3784	中危	7.74.0-1.3+deb11u2		curl: curl: Unauthorized access due to improper HTTP proxy connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libc6	CVE-2023-4806	中危	2.31-13+deb11u3		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16
libncurses6	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
libc6	CVE-2023-4813	中危	2.31-13+deb11u3		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38
libc6	CVE-2024-33600	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc6	CVE-2025-0395	中危	2.31-13+deb11u3	2.31-13+deb11u12	glibc: buffer overflow in the GNU C Library's assert() 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
libncursesw6	CVE-2023-50495	中危	6.2+20201114-2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
libc6	CVE-2025-4802	中危	2.31-13+deb11u3	2.31-13+deb11u13	glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
libc6	CVE-2025-8058	中危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: Double free in glibc 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
libnghttp2-14	CVE-2024-28182	中危	1.43.0-1	1.43.0-1+deb11u2	nghttp2: CONTINUATION frames DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28182 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-04-04 15:15 修改: 2026-06-17 07:21
libnghttp2-14	CVE-2026-58055	中危	1.43.0-1		nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade re ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
libp11-kit0	CVE-2026-13757	中危	0.23.22-1		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
libc6	CVE-2026-0915	中危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: glibc: Information disclosure via zero-valued network query 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
libpam-modules	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16
libpam-modules	CVE-2024-22365	中危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11
libpam-modules	CVE-2026-54411	中危	1.4.0-9+deb11u1		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-14 18:17 修改: 2026-06-17 10:58
libc6	CVE-2026-4046	中危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libpam-modules-bin	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16
libpam-modules-bin	CVE-2024-22365	中危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11
libpam-modules-bin	CVE-2026-54411	中危	1.4.0-9+deb11u1		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-14 18:17 修改: 2026-06-17 10:58
libc6	CVE-2026-5435	中危	2.31-13+deb11u3		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
python3.9-minimal	CVE-2021-3426	中危	3.9.2-1	3.9.2-1+deb11u2	python: Information disclosure via pydoc 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-05-20 13:15 修改: 2026-06-17 04:05
python3.9-minimal	CVE-2021-3733	中危	3.9.2-1	3.9.2-1+deb11u2	python: urllib: Regular expression DoS in AbstractBasicAuthHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-03-10 17:42 修改: 2026-06-17 04:05
python3.9-minimal	CVE-2021-4189	中危	3.9.2-1	3.9.2-1+deb11u2	python: ftplib should not use the host from the PASV response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
python3.9-minimal	CVE-2023-27043	中危	3.9.2-1	3.9.2-1+deb11u2	python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-19 00:15 修改: 2026-06-17 05:44
python3.9-minimal	CVE-2023-40217	中危	3.9.2-1	3.9.2-1+deb11u2	python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-08-25 01:15 修改: 2026-06-17 06:16
python3.9-minimal	CVE-2024-0450	中危	3.9.2-1	3.9.2-1+deb11u2	python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:53
python3.9-minimal	CVE-2024-11168	中危	3.9.2-1	3.9.2-1+deb11u2	python: Improper validation of IPv6 and IPvFuture addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-11-12 22:15 修改: 2026-06-17 06:57
python3.9-minimal	CVE-2024-6923	中危	3.9.2-1	3.9.2-1+deb11u2	cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-01 14:15 修改: 2026-06-17 08:18
python3.9-minimal	CVE-2024-8088	中危	3.9.2-1	3.9.2-1+deb11u2	python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-08-22 19:15 修改: 2026-06-17 08:21
python3.9-minimal	CVE-2025-0938	中危	3.9.2-1	3.9.2-1+deb11u3	python: cpython: URL parser allowed square brackets in domain names 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-01-31 18:15 修改: 2026-06-17 08:27
python3.9-minimal	CVE-2025-11468	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: Missing character filtering in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30
python3.9-minimal	CVE-2025-12084	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31
python3.9-minimal	CVE-2025-12781	中危	3.9.2-1		cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32
python3.9-minimal	CVE-2025-13837	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: Out-of-memory when loading Plist 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-12-01 18:16 修改: 2026-06-17 08:34
python3.9-minimal	CVE-2025-15282	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: Header injection via newlines in data URL mediatype in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
python3.9-minimal	CVE-2025-15366	中危	3.9.2-1		cpython: IMAP command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-07-09 18:16
python3.9-minimal	CVE-2025-15367	中危	3.9.2-1		cpython: POP3 command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
python3.9-minimal	CVE-2025-4516	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: python: CPython DecodeError Handling Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-05-15 14:15 修改: 2026-06-17 09:33
python3.9-minimal	CVE-2025-6069	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: Python HTMLParser quadratic complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-06-17 14:15 修改: 2026-06-17 10:01
python3.9-minimal	CVE-2025-6075	中危	3.9.2-1	3.9.2-1+deb11u4	python: Quadratic complexity in os.path.expandvars() with user-controlled template 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-10-31 17:15 修改: 2026-06-17 10:01
python3.9-minimal	CVE-2025-8194	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: Cpython infinite loop when parsing a tarfile 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-07-28 19:15 修改: 2026-06-17 10:06
python3.9-minimal	CVE-2025-8291	中危	3.9.2-1	3.9.2-1+deb11u4	cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-10-07 18:16 修改: 2026-06-17 10:06
python3.9-minimal	CVE-2026-0672	中危	3.9.2-1	3.9.2-1+deb11u7	cpython: Header injection in http.cookies.Morsel in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
python3.9-minimal	CVE-2026-0864	中危	3.9.2-1		python: cpython: Python configparser: Configuration injection via crafted multi-line input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-23 18:17 修改: 2026-06-25 19:51
python3.9-minimal	CVE-2026-0865	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: wsgiref.headers.Headers allows header newline injection in Python 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
python3.9-minimal	CVE-2026-11972	中危	3.9.2-1		python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-23 23:16 修改: 2026-06-30 16:16
python3.9-minimal	CVE-2026-1299	中危	3.9.2-1	3.9.2-1+deb11u5	cpython: email header injection due to unquoted newlines 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15
python3.9-minimal	CVE-2026-1502	中危	3.9.2-1		python: Python: HTTP header injection via CR/LF in proxy tunnel headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-10 18:16 修改: 2026-06-30 16:16
python3.9-minimal	CVE-2026-3276	中危	3.9.2-1		python: Python unicodedata: Denial of Service due to excessive CPU consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-03 16:16 修改: 2026-06-17 10:43
python3.9-minimal	CVE-2026-3446	中危	3.9.2-1		python: Python base64: Incomplete data decoding due to premature stop at padding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3446 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-10 19:16 修改: 2026-06-17 10:43
python3.9-minimal	CVE-2026-6019	中危	3.9.2-1		python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-22 20:16 修改: 2026-06-17 11:00
python3.9-minimal	CVE-2026-8328	中危	3.9.2-1		The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-05-13 21:16 修改: 2026-06-30 16:16
python3.9-minimal	CVE-2026-9669	中危	3.9.2-1		python: Python: Denial of Service via out-of-bounds write in BZ2 decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-08 23:17 修改: 2026-07-07 18:16
sed	CVE-2026-5958	中危	4.7-1		sed: GNU sed TOCTOU race condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-20 12:16 修改: 2026-06-17 10:59
subversion	CVE-2024-46901	中危	1.14.1-3+deb11u1	1.14.1-3+deb11u2	Subversion: Apache Subversion: mod_dav_svn denial-of-service via control characters in paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46901 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-12-09 10:15 修改: 2026-06-17 07:56
tar	CVE-2026-5704	中危	1.34+dfsg-1		tar: tar: Hidden file injection via crafted archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59
unzip	CVE-2022-0529	中危	6.0-26	6.0-26+deb11u1	unzip: Heap out-of-bound writes and reads during conversion of wide string to local string 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0529 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2022-02-09 23:15 修改: 2026-06-17 04:20
unzip	CVE-2022-0530	中危	6.0-26	6.0-26+deb11u1	unzip: SIGSEGV during the conversion of an utf-8 string to a local string 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0530 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2022-02-09 23:15 修改: 2026-06-17 04:20
libpam-runtime	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16
util-linux	CVE-2026-13595	中危	2.36.1-8+deb11u1		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
util-linux	CVE-2026-27456	中危	2.36.1-8+deb11u1		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
util-linux	CVE-2026-3184	中危	2.36.1-8+deb11u1		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-03 19:17 修改: 2026-06-17 10:43
libpam-runtime	CVE-2024-22365	中危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11
libpam-runtime	CVE-2026-54411	中危	1.4.0-9+deb11u1		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-14 18:17 修改: 2026-06-17 10:58
libc6	CVE-2026-5450	中危	2.31-13+deb11u3		glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
wget	CVE-2021-31879	中危	1.21-1+deb11u1		wget: authorization header disclosure on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
wget	CVE-2024-10524	中危	1.21-1+deb11u1		wget: GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10524 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-11-19 15:15 修改: 2026-06-17 06:55
wget	CVE-2026-15146	中危	1.21-1+deb11u1		wget: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15146 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-10 19:17 修改: 2026-07-15 19:16
wget	CVE-2026-58469	中危	1.21-1+deb11u1		GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buff ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58469 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:59
wget	CVE-2026-58470	中危	1.21-1+deb11u1		wget: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58470 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:01
xz-utils	CVE-2026-34743	中危	5.2.5-2.1~deb11u1		xz: XZ Utils: Denial of Service via buffer overflow in index decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-04-02 19:21 修改: 2026-06-17 10:39
libpam0g	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16
libpam0g	CVE-2024-22365	中危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11
zlib1g	CVE-2026-27171	中危	1:1.2.11.dfsg-2+deb11u1		zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
libc-bin	CVE-2025-15281	低危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
ncurses-base	CVE-2025-6141	低危	6.2+20201114-2		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libc-bin	CVE-2026-0861	低危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: Integer overflow in memalign leads to heap corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
apt	CVE-2011-3374	低危	2.2.4		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30
coreutils	CVE-2016-2781	低危	8.32-4		coreutils: Non-privileged session can escape to the parent session in chroot 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
dirmngr	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
ncurses-bin	CVE-2025-6141	低危	6.2+20201114-2		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
gpg-wks-client	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
libk5crypto3	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libk5crypto3	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libk5crypto3	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libk5crypto3	CVE-2026-11850	低危	1.18.3-6+deb11u1		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
dpkg	CVE-2025-6297	低危	1.20.11	1.20.14	It was discovered that dpkg-deb does not properly sanitize directory p ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6297 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-07-01 17:15 修改: 2026-07-08 09:16
coreutils	CVE-2017-18018	低危	8.32-4		coreutils: race condition vulnerability in chown and chgrp 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2018-01-04 04:29 修改: 2026-06-17 01:12
gcc-10-base	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-09-13 09:15 修改: 2026-06-23 18:17
gpg-wks-server	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
gcc-9-base	CVE-2023-4039	低危	9.3.0-22		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-09-13 09:15 修改: 2026-06-23 18:17
coreutils	CVE-2025-5278	低危	8.32-4		coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-05-27 21:15 修改: 2026-07-20 05:16
bash	TEMP-0841856-B18BAF	低危	5.1-2+deb11u1		[Privilege escalation possible to other user than root] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
gpgconf	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
libkrb5-3	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libkrb5-3	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5-3	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5-3	CVE-2026-11850	低危	1.18.3-6+deb11u1		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
bsdutils	CVE-2022-0563	低危	1:2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libpython3.9-minimal	CVE-2024-0397	低危	3.9.2-1	3.9.2-1+deb11u2	cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-06-17 16:15 修改: 2026-06-17 06:53
libpython3.9-minimal	CVE-2024-4032	低危	3.9.2-1	3.9.2-1+deb11u2	python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-06-17 15:15 修改: 2026-06-17 08:00
openssh-client	CVE-2007-2243	低危	1:8.4p1-5+deb11u1		OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabl ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2243 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2007-04-25 16:19 修改: 2026-04-23 00:35
openssh-client	CVE-2007-2768	低危	1:8.4p1-5+deb11u1		OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2768 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2007-05-21 20:30 修改: 2026-04-23 00:35
openssh-client	CVE-2008-3234	低危	1:8.4p1-5+deb11u1		sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapsh ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2008-3234 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2008-07-18 16:41 修改: 2026-04-23 00:35
openssh-client	CVE-2016-20012	低危	1:8.4p1-5+deb11u1		openssh: Public key information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-20012 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-09-15 20:15 修改: 2026-06-17 00:43
openssh-client	CVE-2018-15919	低危	1:8.4p1-5+deb11u1		openssh: User enumeration via malformed packets in authentication requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15919 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2018-08-28 08:29 修改: 2026-06-17 01:43
openssh-client	CVE-2019-6110	低危	1:8.4p1-5+deb11u1		openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6110 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2019-01-31 18:29 修改: 2026-06-17 02:38
openssh-client	CVE-2020-14145	低危	1:8.4p1-5+deb11u1		openssh: Observable discrepancy leading to an information leak in the algorithm negotiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14145 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2020-06-29 18:15 修改: 2026-06-17 02:54
openssh-client	CVE-2020-15778	低危	1:8.4p1-5+deb11u1		openssh: scp allows command injection when using backtick characters in the destination argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15778 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2020-07-24 14:15 修改: 2026-06-17 02:57
openssh-client	CVE-2021-36368	低危	1:8.4p1-5+deb11u1		openssh: possible bypass of fido 2 devices and ssh-askpass 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36368 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-03-13 00:15 修改: 2026-06-17 03:58
openssh-client	CVE-2025-32728	低危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u5	openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32728 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-04-10 02:15 修改: 2026-06-17 09:12
openssh-client	CVE-2026-35388	低危	1:8.4p1-5+deb11u1	1:8.4p1-5+deb11u7	OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35388 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-02 17:16 修改: 2026-06-17 10:40
libpython3.9-minimal	CVE-2024-5642	低危	3.9.2-1		python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-06-27 21:15 修改: 2026-06-17 08:16
libpython3.9-minimal	CVE-2025-13462	低危	3.9.2-1	3.9.2-1+deb11u7	cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34
libpython3.9-minimal	CVE-2025-1795	低危	3.9.2-1	3.9.2-1+deb11u3	python: Mishandling of comma during folding and unicode-encoding of email headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-02-28 19:15 修改: 2026-06-17 08:39
libpython3.9-minimal	CVE-2026-12003	低危	3.9.2-1		To allow builds of Python to be run from an in-tree layout (rather tha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12003 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-16 17:16 修改: 2026-06-23 18:17
libpython3.9-minimal	CVE-2026-2297	低危	3.9.2-1	3.9.2-1+deb11u7	cpython: CPython: Logging Bypass in Legacy .pyc File Handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30
libpython3.9-minimal	CVE-2026-3479	低危	3.9.2-1		python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
libpython3.9-minimal	CVE-2026-4519	低危	3.9.2-1	3.9.2-1+deb11u7	python: Python: Command-line option injection in webbrowser.open() via crafted URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-20 15:16 修改: 2026-07-15 02:22
bsdutils	CVE-2024-28085	低危	1:2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
curl	CVE-2021-22922	低危	7.74.0-1.3+deb11u2		curl: Content not matching hash in Metalink is not being discarded 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38
gpgsm	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
libc6	CVE-2010-4756	低危	2.31-13+deb11u3		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc6	CVE-2018-20796	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libc6	CVE-2019-1010022	低危	2.31-13+deb11u3		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010023	低危	2.31-13+deb11u3		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libkrb5support0	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libkrb5support0	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5support0	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5support0	CVE-2026-11850	低危	1.18.3-6+deb11u1		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libc6	CVE-2019-1010024	低危	2.31-13+deb11u3		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010025	低危	2.31-13+deb11u3		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-9192	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
openssl	CVE-2024-13176	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	openssl: Timing side-channel in ECDSA signature computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01
openssl	CVE-2024-2511	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24
openssl	CVE-2024-4741	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02
openssl	CVE-2024-5535	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16
openssl	CVE-2024-9143	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24
openssl	CVE-2025-27587	低危	1.1.1n-0+deb11u3		OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27587 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2025-06-16 22:15 修改: 2026-06-17 09:03
openssl	CVE-2025-68160	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
openssl	CVE-2025-69418	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
openssl	CVE-2025-69420	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service via malformed TimeStamp Response 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
openssl	CVE-2026-22795	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
openssl	CVE-2026-22796	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
openssl	CVE-2026-34180	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u8	openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
openssl	CVE-2026-42766	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u8	openssl: Possible NULL Dereference in Password-Based CMS Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
openssl	CVE-2026-7383	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u8	openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:02
openssl	CVE-2026-9076	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u8	openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:04
libldap-2.4-2	CVE-2015-3276	低危	2.4.57+dfsg-3+deb11u1		openldap: incorrect multi-keyword mode cipherstring parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3276 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2015-12-07 20:59 修改: 2026-05-06 22:30
libldap-2.4-2	CVE-2017-14159	低危	2.4.57+dfsg-3+deb11u1		openldap: Privilege escalation via PID file manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14159 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2017-09-05 18:29 修改: 2026-06-17 01:05
libldap-2.4-2	CVE-2017-17740	低危	2.4.57+dfsg-3+deb11u1		openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17740 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2017-12-18 06:29 修改: 2026-06-17 01:11
passwd	CVE-2007-5686	低危	1:4.8.1-1		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35
passwd	CVE-2013-4235	低危	1:4.8.1-1		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-12-03 15:15 修改: 2024-11-21 01:55
passwd	CVE-2023-29383	低危	1:4.8.1-1	1:4.8.1-1+deb11u1	shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49
passwd	CVE-2024-56433	低危	1:4.8.1-1		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
passwd	TEMP-0628843-DBAD28	低危	1:4.8.1-1		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libldap-2.4-2	CVE-2020-15719	低危	2.4.57+dfsg-3+deb11u1		openldap: Certificate validation incorrectly matches name against CN-ID 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15719 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2020-07-14 14:15 修改: 2026-06-17 02:57
libldap-2.4-2	CVE-2026-22185	低危	2.4.57+dfsg-3+deb11u1		OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22185 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-07 21:16 修改: 2026-06-17 10:19
libcurl4	CVE-2021-22922	低危	7.74.0-1.3+deb11u2		curl: Content not matching hash in Metalink is not being discarded 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38
libcurl4	CVE-2021-22923	低危	7.74.0-1.3+deb11u2		curl: Metalink download sends credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38
libcurl4	CVE-2022-35252	低危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u3	curl: Incorrect handling of control code characters in cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51
libcurl4	CVE-2023-28320	低危	7.74.0-1.3+deb11u2		curl: siglongjmp race condition may lead to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28320 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47
libcurl4	CVE-2023-28322	低危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u9	curl: more POST-after-PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47
libmount1	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libmount1	CVE-2024-28085	低危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
libmount1	CVE-2025-14104	低危	2.36.1-8+deb11u1		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libcurl4	CVE-2023-38546	低危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u10	curl: cookie injection with none file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10
libcurl4	CVE-2024-2379	低危	7.74.0-1.3+deb11u2		curl: QUIC certificate check bypass with wolfSSL 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24
libcurl4	CVE-2025-0725	低危	7.74.0-1.3+deb11u2		libcurl: Buffer Overflow in libcurl via zlib Integer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0725 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2025-02-05 10:15 修改: 2026-06-17 08:27
libcurl4	CVE-2025-10966	低危	7.74.0-1.3+deb11u2		curl: Curl missing SFTP host verification with wolfSSH backend 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10966 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2025-11-07 08:15 修改: 2026-06-17 08:29
libncurses6	CVE-2025-6141	低危	6.2+20201114-2		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libcurl4	CVE-2025-14017	低危	7.74.0-1.3+deb11u2		curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
perl	CVE-2011-4116	低危	5.32.1-4+deb11u2		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04
perl	CVE-2023-31486	低危	5.32.1-4+deb11u2		http-tiny: perl: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57
libcurl4	CVE-2025-14524	低危	7.74.0-1.3+deb11u2		curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
libcurl4	CVE-2025-15079	低危	7.74.0-1.3+deb11u2		curl: Host verification bypass during SSH transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl4	CVE-2025-15224	低危	7.74.0-1.3+deb11u2		curl: libssh key passphrase bypass without agent set 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libncursesw6	CVE-2025-6141	低危	6.2+20201114-2		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libcurl4	CVE-2026-8458	低危	7.74.0-1.3+deb11u2		libcurl might in some circumstances reuse the wrong connection when as ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
libcurl4	CVE-2026-9547	低危	7.74.0-1.3+deb11u2		curl: curl: Man-in-the-middle attack via SSH host key bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
libc6	CVE-2024-33601	低危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc6	CVE-2024-33602	低危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc6	CVE-2025-15281	低危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
libc6	CVE-2026-0861	低危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: Integer overflow in memalign leads to heap corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
curl	CVE-2021-22923	低危	7.74.0-1.3+deb11u2		curl: Metalink download sends credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38
curl	CVE-2022-35252	低危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u3	curl: Incorrect handling of control code characters in cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51
curl	CVE-2023-28320	低危	7.74.0-1.3+deb11u2		curl: siglongjmp race condition may lead to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28320 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47
gpgv	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
curl	CVE-2023-28322	低危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u9	curl: more POST-after-PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47
curl	CVE-2023-38546	低危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u10	curl: cookie injection with none file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10
perl-base	CVE-2011-4116	低危	5.32.1-4+deb11u2		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04
perl-base	CVE-2023-31486	低危	5.32.1-4+deb11u2		http-tiny: perl: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57
curl	CVE-2024-2379	低危	7.74.0-1.3+deb11u2		curl: QUIC certificate check bypass with wolfSSL 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24
git-man	CVE-2018-1000021	低危	1:2.30.2-1		git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000021 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2018-02-09 23:29 修改: 2026-06-17 01:32
git-man	CVE-2022-24975	低危	1:2.30.2-1		git: The --mirror option for git leaks secret for deleted content, aka the "GitBleed" 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24975 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-02-11 20:15 修改: 2026-06-17 04:32
git-man	CVE-2023-25815	低危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: malicious placement of crafted messages when git was compiled with runtime prefix 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25815 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-25 20:15 修改: 2026-06-17 05:42
git-man	CVE-2024-32020	低危	1:2.30.2-1		git: insecure hardlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32020 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-05-14 19:15 修改: 2026-06-17 07:29
libpython3.9-stdlib	CVE-2024-0397	低危	3.9.2-1	3.9.2-1+deb11u2	cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-06-17 16:15 修改: 2026-06-17 06:53
libpython3.9-stdlib	CVE-2024-4032	低危	3.9.2-1	3.9.2-1+deb11u2	python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-06-17 15:15 修改: 2026-06-17 08:00
libpython3.9-stdlib	CVE-2024-5642	低危	3.9.2-1		python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-06-27 21:15 修改: 2026-06-17 08:16
libpython3.9-stdlib	CVE-2025-13462	低危	3.9.2-1	3.9.2-1+deb11u7	cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34
libpython3.9-stdlib	CVE-2025-1795	低危	3.9.2-1	3.9.2-1+deb11u3	python: Mishandling of comma during folding and unicode-encoding of email headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-02-28 19:15 修改: 2026-06-17 08:39
libpython3.9-stdlib	CVE-2026-12003	低危	3.9.2-1		To allow builds of Python to be run from an in-tree layout (rather tha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12003 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-16 17:16 修改: 2026-06-23 18:17
libpython3.9-stdlib	CVE-2026-2297	低危	3.9.2-1	3.9.2-1+deb11u7	cpython: CPython: Logging Bypass in Legacy .pyc File Handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30
libpython3.9-stdlib	CVE-2026-3479	低危	3.9.2-1		python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
libpython3.9-stdlib	CVE-2026-4519	低危	3.9.2-1	3.9.2-1+deb11u7	python: Python: Command-line option injection in webbrowser.open() via crafted URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-20 15:16 修改: 2026-07-15 02:22
libsepol1	CVE-2021-36084	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58
libsepol1	CVE-2021-36085	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58
perl-modules-5.32	CVE-2011-4116	低危	5.32.1-4+deb11u2		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04
perl-modules-5.32	CVE-2023-31486	低危	5.32.1-4+deb11u2		http-tiny: perl: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57
procps	CVE-2023-4016	低危	2:3.3.17-5		procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-08-02 05:15 修改: 2026-06-17 06:36
libsepol1	CVE-2021-36086	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in cil_reset_classpermission() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58
libsepol1	CVE-2021-36087	低危	3.1-1	3.1-1+deb11u1	libsepol: heap-based buffer overflow in ebitmap_match_any() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58
libapt-pkg6.0	CVE-2011-3374	低危	2.2.4		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30
git-man	CVE-2024-52005	低危	1:2.30.2-1		git: The sideband payload is passed unfiltered to the terminal in git 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
git-man	CVE-2025-46835	低危	1:2.30.2-1	1:2.30.2-1+deb11u5	git: Git GUI can create and overwrite files for which the user has write permission 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46835 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-07-10 15:15 修改: 2026-06-17 09:27
curl	CVE-2025-0725	低危	7.74.0-1.3+deb11u2		libcurl: Buffer Overflow in libcurl via zlib Integer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0725 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2025-02-05 10:15 修改: 2026-06-17 08:27
libsmartcols1	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libsmartcols1	CVE-2024-28085	低危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
libsmartcols1	CVE-2025-14104	低危	2.36.1-8+deb11u1		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
curl	CVE-2025-10966	低危	7.74.0-1.3+deb11u2		curl: Curl missing SFTP host verification with wolfSSH backend 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10966 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2025-11-07 08:15 修改: 2026-06-17 08:29
curl	CVE-2025-14017	低危	7.74.0-1.3+deb11u2		curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
libpcre2-8-0	CVE-2022-41409	低危	10.36-2		pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
libpcre3	CVE-2017-11164	低危	2:8.39-13		pcre: OP_KETRMAX feature in the match function in pcre_exec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2017-07-11 03:29 修改: 2026-06-17 01:01
libpcre3	CVE-2017-16231	低危	2:8.39-13		pcre: self-recursive call in match() in pcre_exec.c leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16231 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-03-21 15:59 修改: 2026-06-17 01:09
libsqlite3-0	CVE-2021-45346	低危	3.34.1-3		sqlite: crafted SQL query allows a malicious user to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2022-02-14 19:15 修改: 2026-06-17 04:13
libsqlite3-0	CVE-2022-35737	低危	3.34.1-3		sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35737 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2022-08-03 06:15 修改: 2026-06-17 04:52
libsqlite3-0	CVE-2025-29088	低危	3.34.1-3		sqlite: Denial of Service in SQLite 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29088 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2025-04-10 14:15 修改: 2026-06-17 09:05
libsqlite3-0	CVE-2025-70873	低危	3.34.1-3		sqlite: SQLite: Information Disclosure via Crafted ZIP File 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2026-03-12 19:16 修改: 2026-06-17 10:03
libpcre3	CVE-2017-7245	低危	2:8.39-13		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7245 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2017-03-23 21:59 修改: 2026-06-17 01:23
libpcre3	CVE-2017-7246	低危	2:8.39-13		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7246 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2017-03-23 21:59 修改: 2026-06-17 01:23
libpcre3	CVE-2019-20838	低危	2:8.39-13		pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20838 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:31
libblkid1	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libblkid1	CVE-2024-28085	低危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
libblkid1	CVE-2025-14104	低危	2.36.1-8+deb11u1		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
gnupg	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
curl	CVE-2025-14524	低危	7.74.0-1.3+deb11u2		curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
curl	CVE-2025-15079	低危	7.74.0-1.3+deb11u2		curl: Host verification bypass during SSH transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
curl	CVE-2025-15224	低危	7.74.0-1.3+deb11u2		curl: libssh key passphrase bypass without agent set 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
gnupg-l10n	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
libexpat1	CVE-2013-0340	低危	2.2.10-2+deb11u3		expat: internal entity expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0340 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2014-01-21 18:55 修改: 2026-04-29 01:13
libexpat1	CVE-2023-52426	低危	2.2.10-2+deb11u3		expat: recursive XML entity expansion vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-02-04 20:15 修改: 2026-06-17 06:42
libexpat1	CVE-2024-28757	低危	2.2.10-2+deb11u3		expat: XML Entity Expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-03-10 05:15 修改: 2026-06-17 07:21
libexpat1	CVE-2026-24515	低危	2.2.10-2+deb11u3		libexpat: libexpat null pointer dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-23 08:16 修改: 2026-06-17 10:23
libexpat1	CVE-2026-41080	低危	2.2.10-2+deb11u3		libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
curl	CVE-2026-8458	低危	7.74.0-1.3+deb11u2		libcurl might in some circumstances reuse the wrong connection when as ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
curl	CVE-2026-9547	低危	7.74.0-1.3+deb11u2		curl: curl: Man-in-the-middle attack via SSH host key bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
libfreetype6	CVE-2022-31782	低危	2.10.4+dfsg-1+deb11u1		ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based bu ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31782 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2022-06-02 14:15 修改: 2026-06-17 04:46
libperl5.32	CVE-2011-4116	低危	5.32.1-4+deb11u2		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04
libperl5.32	CVE-2023-31486	低危	5.32.1-4+deb11u2		http-tiny: perl: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57
libgcc-s1	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-09-13 09:15 修改: 2026-06-23 18:17
git	CVE-2018-1000021	低危	1:2.30.2-1		git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000021 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2018-02-09 23:29 修改: 2026-06-17 01:32
libgcrypt20	CVE-2018-6829	低危	1.8.7-6		libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6829 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2018-02-07 23:29 修改: 2026-06-17 02:02
libgcrypt20	CVE-2024-2236	低危	1.8.7-6		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
gnupg-utils	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
git	CVE-2022-24975	低危	1:2.30.2-1		git: The --mirror option for git leaks secret for deleted content, aka the "GitBleed" 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24975 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-02-11 20:15 修改: 2026-06-17 04:32
libssl1.1	CVE-2024-13176	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	openssl: Timing side-channel in ECDSA signature computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01
libssl1.1	CVE-2024-2511	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24
libssl1.1	CVE-2024-4741	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02
libssl1.1	CVE-2024-5535	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16
libssl1.1	CVE-2024-9143	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u2	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24
libssl1.1	CVE-2025-27587	低危	1.1.1n-0+deb11u3		OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27587 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-06-16 22:15 修改: 2026-06-17 09:03
libssl1.1	CVE-2025-68160	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libssl1.1	CVE-2025-69418	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl1.1	CVE-2025-69420	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service via malformed TimeStamp Response 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
python3.9	CVE-2024-0397	低危	3.9.2-1	3.9.2-1+deb11u2	cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-06-17 16:15 修改: 2026-06-17 06:53
python3.9	CVE-2024-4032	低危	3.9.2-1	3.9.2-1+deb11u2	python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-06-17 15:15 修改: 2026-06-17 08:00
python3.9	CVE-2024-5642	低危	3.9.2-1		python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-06-27 21:15 修改: 2026-06-17 08:16
python3.9	CVE-2025-13462	低危	3.9.2-1	3.9.2-1+deb11u7	cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34
python3.9	CVE-2025-1795	低危	3.9.2-1	3.9.2-1+deb11u3	python: Mishandling of comma during folding and unicode-encoding of email headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-02-28 19:15 修改: 2026-06-17 08:39
python3.9	CVE-2026-12003	低危	3.9.2-1		To allow builds of Python to be run from an in-tree layout (rather tha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12003 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-16 17:16 修改: 2026-06-23 18:17
python3.9	CVE-2026-2297	低危	3.9.2-1	3.9.2-1+deb11u7	cpython: CPython: Logging Bypass in Legacy .pyc File Handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30
python3.9	CVE-2026-3479	低危	3.9.2-1		python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
python3.9	CVE-2026-4519	低危	3.9.2-1	3.9.2-1+deb11u7	python: Python: Command-line option injection in webbrowser.open() via crafted URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-20 15:16 修改: 2026-07-15 02:22
libssl1.1	CVE-2026-22795	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl1.1	CVE-2026-22796	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl1.1	CVE-2026-34180	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u8	openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
libssl1.1	CVE-2026-42766	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u8	openssl: Possible NULL Dereference in Password-Based CMS Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
libssl1.1	CVE-2026-7383	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u8	openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:02
libssl1.1	CVE-2026-9076	低危	1.1.1n-0+deb11u3	1.1.1w-0+deb11u8	openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:04
libstdc++6	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-09-13 09:15 修改: 2026-06-23 18:17
git	CVE-2023-25815	低危	1:2.30.2-1	1:2.30.2-1+deb11u3	git: malicious placement of crafted messages when git was compiled with runtime prefix 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25815 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-04-25 20:15 修改: 2026-06-17 05:42
git	CVE-2024-32020	低危	1:2.30.2-1		git: insecure hardlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32020 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-05-14 19:15 修改: 2026-06-17 07:29
gpg	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
git	CVE-2024-52005	低危	1:2.30.2-1		git: The sideband payload is passed unfiltered to the terminal in git 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
git	CVE-2025-46835	低危	1:2.30.2-1	1:2.30.2-1+deb11u5	git: Git GUI can create and overwrite files for which the user has write permission 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46835 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-07-10 15:15 修改: 2026-06-17 09:27
bsdutils	CVE-2025-14104	低危	1:2.36.1-8+deb11u1		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libpng16-16	CVE-2019-6129	低危	1.6.37-3		libpng: memory leak of png_info struct in pngcp.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6129 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2019-01-11 05:29 修改: 2026-06-17 02:38
libpng16-16	CVE-2021-4214	低危	1.6.37-3		libpng: hardcoded value leads to heap-overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4214 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libpng16-16	CVE-2025-28162	低危	1.6.37-3		libpng: libpng: Denial of Service via buffer overflow in pngimage utility 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28162 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04
libpng16-16	CVE-2025-28164	低危	1.6.37-3		libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28164 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04
libpng16-16	CVE-2026-3713	低危	1.6.37-3		libpng: libpng: Heap-based buffer overflow in pnm2png allows information disclosure and denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3713 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2026-03-08 06:16 修改: 2026-06-17 10:44
libsystemd0	CVE-2013-4392	低危	247.3-7		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libsystemd0	CVE-2020-13529	低危	247.3-7		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2021-05-10 16:15 修改: 2026-06-17 02:53
libsystemd0	CVE-2023-31437	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2023-31438	低危	247.3-7		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2023-31439	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2026-40228	低危	247.3-7		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libprocps8	CVE-2023-4016	低危	2:3.3.17-5		procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-08-02 05:15 修改: 2026-06-17 06:36
libcurl3-gnutls	CVE-2021-22922	低危	7.74.0-1.3+deb11u2		curl: Content not matching hash in Metalink is not being discarded 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38
libtasn1-6	CVE-2025-13151	低危	4.16.0-2		libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33
libcurl3-gnutls	CVE-2021-22923	低危	7.74.0-1.3+deb11u2		curl: Metalink download sends credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2021-08-05 21:15 修改: 2026-06-17 03:38
libcurl3-gnutls	CVE-2022-35252	低危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u3	curl: Incorrect handling of control code characters in cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2022-09-23 14:15 修改: 2026-06-17 04:51
libcurl3-gnutls	CVE-2023-28320	低危	7.74.0-1.3+deb11u2		curl: siglongjmp race condition may lead to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28320 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47
libcurl3-gnutls	CVE-2023-28322	低危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u9	curl: more POST-after-PUT confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-05-26 21:15 修改: 2026-06-17 05:47
libtinfo6	CVE-2025-6141	低危	6.2+20201114-2		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libcurl3-gnutls	CVE-2023-38546	低危	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u10	curl: cookie injection with none file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10
libcurl3-gnutls	CVE-2024-2379	低危	7.74.0-1.3+deb11u2		curl: QUIC certificate check bypass with wolfSSL 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-03-27 08:15 修改: 2026-06-17 07:24
libcurl3-gnutls	CVE-2025-0725	低危	7.74.0-1.3+deb11u2		libcurl: Buffer Overflow in libcurl via zlib Integer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0725 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-02-05 10:15 修改: 2026-06-17 08:27
libcurl3-gnutls	CVE-2025-10966	低危	7.74.0-1.3+deb11u2		curl: Curl missing SFTP host verification with wolfSSH backend 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10966 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-11-07 08:15 修改: 2026-06-17 08:29
libcurl3-gnutls	CVE-2025-14017	低危	7.74.0-1.3+deb11u2		curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
libcurl3-gnutls	CVE-2025-14524	低危	7.74.0-1.3+deb11u2		curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
libcurl3-gnutls	CVE-2025-15079	低危	7.74.0-1.3+deb11u2		curl: Host verification bypass during SSH transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl3-gnutls	CVE-2025-15224	低危	7.74.0-1.3+deb11u2		curl: libssh key passphrase bypass without agent set 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl3-gnutls	CVE-2026-8458	低危	7.74.0-1.3+deb11u2		libcurl might in some circumstances reuse the wrong connection when as ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
libcurl3-gnutls	CVE-2026-9547	低危	7.74.0-1.3+deb11u2		curl: curl: Man-in-the-middle attack via SSH host key bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
libgnutls30	CVE-2011-3389	低危	3.7.1-5+deb11u1		HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3389 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2011-09-06 19:55 修改: 2026-04-29 01:13
libgnutls30	CVE-2025-9820	低危	3.7.1-5+deb11u1	3.7.1-5+deb11u9	gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9820 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-01-26 20:16 修改: 2026-06-30 09:16
libudev1	CVE-2013-4392	低危	247.3-7		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libudev1	CVE-2020-13529	低危	247.3-7		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2021-05-10 16:15 修改: 2026-06-17 02:53
libudev1	CVE-2023-31437	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2023-31438	低危	247.3-7		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2023-31439	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2026-40228	低危	247.3-7		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
gpg-agent	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
libc-bin	CVE-2010-4756	低危	2.31-13+deb11u3		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc-bin	CVE-2018-20796	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libc-bin	CVE-2019-1010022	低危	2.31-13+deb11u3		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
python3.9-minimal	CVE-2024-0397	低危	3.9.2-1	3.9.2-1+deb11u2	cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-06-17 16:15 修改: 2026-06-17 06:53
python3.9-minimal	CVE-2024-4032	低危	3.9.2-1	3.9.2-1+deb11u2	python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-06-17 15:15 修改: 2026-06-17 08:00
python3.9-minimal	CVE-2024-5642	低危	3.9.2-1		python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2024-06-27 21:15 修改: 2026-06-17 08:16
python3.9-minimal	CVE-2025-13462	低危	3.9.2-1	3.9.2-1+deb11u7	cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-12 18:16 修改: 2026-06-17 08:34
python3.9-minimal	CVE-2025-1795	低危	3.9.2-1	3.9.2-1+deb11u3	python: Mishandling of comma during folding and unicode-encoding of email headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-02-28 19:15 修改: 2026-06-17 08:39
python3.9-minimal	CVE-2026-12003	低危	3.9.2-1		To allow builds of Python to be run from an in-tree layout (rather tha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12003 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-06-16 17:16 修改: 2026-06-23 18:17
python3.9-minimal	CVE-2026-2297	低危	3.9.2-1	3.9.2-1+deb11u7	cpython: CPython: Logging Bypass in Legacy .pyc File Handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-04 23:16 修改: 2026-06-17 10:30
python3.9-minimal	CVE-2026-3479	低危	3.9.2-1		python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
python3.9-minimal	CVE-2026-4519	低危	3.9.2-1	3.9.2-1+deb11u7	python: Python: Command-line option injection in webbrowser.open() via crafted URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-03-20 15:16 修改: 2026-07-15 02:22
libuuid1	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libuuid1	CVE-2024-28085	低危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
sysvinit-utils	TEMP-0517018-A83CE6	低危	2.96-7+deb11u1		[sysvinit: no-root option in expert installer exposes locally exploitable security flaw] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1	CVE-2025-14104	低危	2.36.1-8+deb11u1		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
tar	CVE-2005-2541	低危	1.34+dfsg-1		tar: does not properly warn the user when extracting setuid or setgid files 漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2005-08-10 04:00 修改: 2026-04-16 00:27
tar	CVE-2022-48303	低危	1.34+dfsg-1	1.34+dfsg-1+deb11u1	tar: heap buffer overflow at from_header() in list.c via specially crafted checksum 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48303 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-01-30 04:15 修改: 2026-06-17 05:14
tar	CVE-2023-39804	低危	1.34+dfsg-1	1.34+dfsg-1+deb11u1	tar: Incorrectly handled extension attributes in PAX archives can lead to a crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-03-27 04:15 修改: 2026-06-17 06:12
tar	TEMP-0290435-0B57B5	低危	1.34+dfsg-1		[tar's rmt command may have undesired side effects] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-bin	CVE-2019-1010023	低危	2.31-13+deb11u3		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc-bin	CVE-2019-1010024	低危	2.31-13+deb11u3		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
unzip	CVE-2021-4217	低危	6.0-26		unzip: Null pointer dereference in Unicode strings code 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4217 镜像层: sha256:ee9872ea80364930d71a014299a88c92390a886751b28e128114db3c6a0ab707 发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
login	CVE-2007-5686	低危	1:4.8.1-1		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35
login	CVE-2013-4235	低危	1:4.8.1-1		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-12-03 15:15 修改: 2024-11-21 01:55
login	CVE-2023-29383	低危	1:4.8.1-1	1:4.8.1-1+deb11u1	shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49
login	CVE-2024-56433	低危	1:4.8.1-1		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
util-linux	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
util-linux	CVE-2024-28085	低危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
util-linux	CVE-2025-14104	低危	2.36.1-8+deb11u1		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
login	TEMP-0628843-DBAD28	低危	1:4.8.1-1		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-bin	CVE-2019-1010025	低危	2.31-13+deb11u3		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc-bin	CVE-2019-9192	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
libgssapi-krb5-2	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libgssapi-krb5-2	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libgssapi-krb5-2	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
mount	CVE-2022-0563	低危	2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
mount	CVE-2024-28085	低危	2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
mount	CVE-2025-14104	低危	2.36.1-8+deb11u1		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libgssapi-krb5-2	CVE-2026-11850	低危	1.18.3-6+deb11u1		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libc-bin	CVE-2024-33601	低危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc-bin	CVE-2024-33602	低危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
perl	CVE-2026-7017	未知	5.32.1-4+deb11u2		HTTP::Tiny versions before 0.095 for Perl forward credential headers t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
curl	DLA-4432-1	未知	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u16	curl - security update 漏洞详情: 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mercurial	CVE-2025-2361	未知	5.6.1-4	5.6.1-4+deb11u1	A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2361 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-03-17 05:15 修改: 2026-06-17 09:06
tzdata	DLA-3972-1	未知	2021a-1+deb11u4	2024b-0+deb11u1	tzdata - new timezone database 漏洞详情: 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-4085-1	未知	2021a-1+deb11u4	2025a-0+deb11u1	tzdata - new timezone database 漏洞详情: 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-4105-1	未知	2021a-1+deb11u4	2025b-0+deb11u1	tzdata - new timezone database 漏洞详情: 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-4403-1	未知	2021a-1+deb11u4	2025b-0+deb11u2	tzdata - new timezone database 漏洞详情: 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tzdata	DLA-4569-1	未知	2021a-1+deb11u4	2026b-0+deb11u1	tzdata - new timezone database 漏洞详情: 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
ucf	DLA-4016-1	未知	3.0043	3.0043+deb11u2	ucf - security update 漏洞详情: 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mercurial-common	CVE-2025-2361	未知	5.6.1-4	5.6.1-4+deb11u1	A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2361 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2025-03-17 05:15 修改: 2026-06-17 09:06
libcurl4	DLA-4213-1	未知	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u15	curl - regression update 漏洞详情: 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl4	DLA-4432-1	未知	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u16	curl - security update 漏洞详情: 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsqlite3-0	CVE-2026-50812	未知	3.34.1-3		A NULL pointer dereference in the SQLite Session Extension in SQLite 3 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50812 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libsqlite3-0	CVE-2026-50813	未知	3.34.1-3		An issue in SQLite before Fossil check-in 869a51ae84df allows a local ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50813 镜像层: sha256:8874c5d5df1aa338e2de1eb06de21d28b9051ae107c034b09cc83705cbe6a010 发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
ca-certificates	DLA-4485-1	未知	20210119	20230311+deb12u1~deb11u1	ca-certificates - CA certificates update 漏洞详情: 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils	CVE-2026-53613	未知	1:2.36.1-8+deb11u1		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libperl5.32	CVE-2026-57433	未知	5.32.1-4+deb11u2		Storable versions before 3.41 for Perl have a signed integer overflow ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
mount	CVE-2026-53613	未知	2.36.1-8+deb11u1		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1	CVE-2026-53613	未知	2.36.1-8+deb11u1		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux	CVE-2026-53613	未知	2.36.1-8+deb11u1		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1	CVE-2026-53613	未知	2.36.1-8+deb11u1		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libperl5.32	CVE-2026-7017	未知	5.32.1-4+deb11u2		HTTP::Tiny versions before 0.095 for Perl forward credential headers t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
libblkid1	CVE-2026-53613	未知	2.36.1-8+deb11u1		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
perl-modules-5.32	CVE-2026-57433	未知	5.32.1-4+deb11u2		Storable versions before 3.41 for Perl have a signed integer overflow ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
perl-modules-5.32	CVE-2026-7017	未知	5.32.1-4+deb11u2		HTTP::Tiny versions before 0.095 for Perl forward credential headers t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
curl	DLA-4213-1	未知	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u15	curl - regression update 漏洞详情: 镜像层: sha256:595a656dd8efc44ad2600f67c92a3a2f5612e673513583c11cb04d54f10c55d6 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1	CVE-2026-53613	未知	2.36.1-8+deb11u1		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl3-gnutls	DLA-4213-1	未知	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u15	curl - regression update 漏洞详情: 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
perl-base	CVE-2026-57433	未知	5.32.1-4+deb11u2		Storable versions before 3.41 for Perl have a signed integer overflow ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
perl-base	CVE-2026-7017	未知	5.32.1-4+deb11u2		HTTP::Tiny versions before 0.095 for Perl forward credential headers t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017 镜像层: sha256:bd245ec49ee5cd979b20c0a4efd32385afca92f5afa84faa6769c6a56543350a 发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
libcurl3-gnutls	DLA-4432-1	未知	7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u16	curl - security update 漏洞详情: 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
perl	CVE-2026-57433	未知	5.32.1-4+deb11u2		Storable versions before 3.41 for Perl have a signed integer overflow ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433 镜像层: sha256:b7b6064a28a9833a1ac123bb3e408f6cdb2689cf233ee40c978e6193a142278c 发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

Java (jar)

低危漏洞:16

中危漏洞:74

高危漏洞:82

严重漏洞:14

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
com.h2database:h2	CVE-2021-42392	严重	1.4.200	2.0.206	h2: Remote Code Execution in Console 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42392 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-01-10 14:10 修改: 2026-06-17 04:09
com.h2database:h2	CVE-2022-23221	严重	1.4.200	2.1.210	h2: Loading of custom classes from remote servers through JNDI 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23221 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-01-19 17:15 修改: 2026-06-17 04:29
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-24813	严重	9.0.62	11.0.3, 10.1.35, 9.0.99	tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24813 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-03-10 17:15 修改: 2026-06-17 08:59
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-41293	严重	9.0.62	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43512	严重	9.0.62	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43515	严重	9.0.62	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: tomcat: Improper Authorization allows security bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.zookeeper:zookeeper	CVE-2023-44981	严重	3.5.9	3.7.2, 3.8.3, 3.9.1	zookeeper: Authorization Bypass in Apache ZooKeeper 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44981 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-10-11 12:15 修改: 2026-06-17 06:28
org.postgresql:postgresql	CVE-2024-1597	严重	42.2.25	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2	pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1597 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-02-19 13:15 修改: 2026-06-17 07:04
org.springframework.security:spring-security-core	CVE-2022-22978	严重	5.5.6	5.5.7, 5.6.4, 5.4.11	springframework: Authorization Bypass in RegexRequestMatcher 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22978 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-05-19 15:15 修改: 2026-06-17 04:29
org.springframework.security:spring-security-web	CVE-2022-22978	严重	5.5.6	5.5.7, 5.6.4, 5.4.11	springframework: Authorization Bypass in RegexRequestMatcher 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22978 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-05-19 15:15 修改: 2026-06-17 04:29
org.springframework.security:spring-security-web	CVE-2024-38821	严重	5.5.6	5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4	Spring-WebFlux: Authorization Bypass of Static Resources in WebFlux Applications 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38821 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-10-28 07:15 修改: 2026-06-17 07:41
org.springframework.security:spring-security-web	CVE-2026-22732	严重	5.5.6	6.5.9, 7.0.4	Spring Security: Spring Security: Security policy bypass and information disclosure due to unwritten HTTP headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22732 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-03-19 23:16 修改: 2026-06-17 10:20
org.springframework:spring-web	CVE-2016-1000027	严重	5.3.20	6.0.0	spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42
org.springframework:spring-webmvc	CVE-2023-20860	严重	5.3.20	6.0.7, 5.3.26	springframework: Security Bypass With Un-Prefixed Double Wildcard Pattern 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20860 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-03-27 22:15 修改: 2026-06-17 05:31
commons-io:commons-io	CVE-2024-47554	高危	2.7	2.14.0	apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57
io.netty:netty-codec	CVE-2026-42583	高危	4.1.76.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-dns	CVE-2026-42579	高危	4.1.76.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec-haproxy	CVE-2026-44893	高危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44893 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 15:16 修改: 2026-07-15 02:22
io.netty:netty-codec-haproxy	CVE-2026-48059	高危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48059 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 16:16 修改: 2026-07-15 02:22
io.netty:netty-codec-http	CVE-2026-33870	高危	4.1.76.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http	CVE-2026-42584	高危	4.1.76.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec-http	CVE-2026-42587	高危	4.1.76.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-13 19:17 修改: 2026-07-16 12:17
io.netty:netty-codec-http2	CVE-2025-55163	高危	4.1.76.Final	4.2.4.Final, 4.1.124.Final	netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2	CVE-2026-33871	高危	4.1.76.Final	4.1.132.Final, 4.2.11.Final	netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-03-27 20:16 修改: 2026-07-15 02:20
io.netty:netty-codec-http2	CVE-2026-42587	高危	4.1.76.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-13 19:17 修改: 2026-07-16 12:17
io.netty:netty-codec-http2	GHSA-xpw8-rcwv-8f8p	高危	4.1.76.Final	4.1.100.Final	io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack 漏洞详情: https://github.com/advisories/GHSA-xpw8-rcwv-8f8p 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-10-10 22:22 修改: 2023-11-06 22:08
io.netty:netty-codec-redis	CVE-2026-44250	高危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44250 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-11 22:16 修改: 2026-07-15 02:21
io.netty:netty-codec-redis	CVE-2026-44890	高危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44890 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-11 22:16 修改: 2026-07-15 02:22
io.netty:netty-codec-redis	CVE-2026-48006	高危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48006 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 16:16 修改: 2026-07-15 02:22
io.netty:netty-codec-redis	CVE-2026-50011	高危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-codec-redis: Netty: Denial of Service via malicious Redis array header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50011 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 16:16 修改: 2026-07-15 01:16
io.netty:netty-codec-smtp	CVE-2025-59419	高危	4.1.76.Final	4.2.7.Final, 4.1.128.Final	io.netty/netty-codec-smtp: Netty netty-codec-smtp SMTP Command Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59419 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-10-15 16:15 修改: 2026-06-17 09:46
io.netty:netty-codec-stomp	CVE-2026-44891	高危	4.1.76.Final	4.2.16.Final, 4.1.136.Final	Netty is a network application framework for development of protocol s ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44891 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-07-17 21:17 修改: 2026-07-17 21:17
io.netty:netty-handler	CVE-2026-44249	高危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-11 22:16 修改: 2026-07-15 02:21
io.netty:netty-handler	CVE-2026-45416	高危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 15:16 修改: 2026-07-15 02:22
io.netty:netty-handler	CVE-2026-50010	高危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 16:16 修改: 2026-07-15 01:16
io.netty:netty-resolver-dns	CVE-2026-45674	高危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 15:16 修改: 2026-07-15 02:22
io.netty:netty-resolver-dns	CVE-2026-47691	高危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 16:16 修改: 2026-07-15 02:22
io.netty:netty-transport-sctp	CVE-2026-46340	高危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46340 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 15:16 修改: 2026-07-15 02:22
mysql:mysql-connector-java	CVE-2018-3258	高危	5.1.42	8.0.13	mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018) 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3258 镜像层: sha256:b32798d98c149f34564da3cb6e5c55898d8f558fe4c4368c1d6808e317327223 发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57
mysql:mysql-connector-java	CVE-2023-22102	高危	5.1.42		mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22102 镜像层: sha256:b32798d98c149f34564da3cb6e5c55898d8f558fe4c4368c1d6808e317327223 发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34
mysql:mysql-connector-java	CVE-2023-22102	高危	8.0.27		mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22102 镜像层: sha256:b32798d98c149f34564da3cb6e5c55898d8f558fe4c4368c1d6808e317327223 发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34
mysql:mysql-connector-java	CVE-2023-22102	高危	8.0.28		mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2023) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22102 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-10-17 22:15 修改: 2026-06-17 05:34
com.alibaba.nacos:nacos-client	CVE-2021-43116	高危	1.4.2		Use of Hard-coded Credentials in Nacos 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43116 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-07-05 14:15 修改: 2026-06-17 04:10
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	高危	2.12.6	2.15.0	com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	高危	2.12.6.1	2.12.7.1, 2.13.4.2	jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	高危	2.12.6.1	2.12.7.1, 2.13.4	jackson-databind: use of deeply nested arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04
org.apache.tomcat.embed:tomcat-embed-core	CVE-2022-42252	高危	9.0.62	8.5.83, 9.0.68, 10.0.27, 10.1.1	tomcat: request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42252 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-11-01 09:15 修改: 2026-06-17 05:04
org.apache.tomcat.embed:tomcat-embed-core	CVE-2022-45143	高危	9.0.62	8.5.84, 9.0.69, 10.1.2	tomcat: JsonErrorReportValve injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45143 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-01-03 19:15 修改: 2026-06-17 05:09
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-24998	高危	9.0.62	10.1.5, 11.0.0-M5, 8.5.88, 9.0.71	FileUpload: FileUpload DoS with excessive parts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-02-20 16:15 修改: 2026-06-17 05:40
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-46589	高危	9.0.62	11.0.0-M11, 10.1.16, 9.0.83, 8.5.96	tomcat: HTTP request smuggling via malformed trailer headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-11-28 16:15 修改: 2026-06-17 06:31
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-34750	高危	9.0.62	11.0.0-M21, 10.1.25, 9.0.90	tomcat: Improper Handling of Exceptional Conditions 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34750 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-07-03 20:15 修改: 2026-06-17 07:34
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-38286	高危	9.0.62	11.0.0-M21, 10.1.25, 9.0.90	tomcat: Denial of Service in Tomcat 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38286 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-11-07 08:15 修改: 2026-06-17 07:39
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-50379	高危	9.0.62	11.0.2, 10.1.34, 9.0.98	tomcat: RCE due to TOCTOU issue in JSP compilation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50379 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-12-17 13:15 修改: 2026-06-17 08:04
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-56337	高危	9.0.62	11.0.2, 10.1.34, 9.0.98	tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56337 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-12-20 16:15 修改: 2026-06-17 08:12
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-48988	高危	9.0.62	11.0.8, 10.1.42, 9.0.106	tomcat: Apache Tomcat DoS in multipart upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-48989	高危	9.0.62	11.0.10, 10.1.44, 9.0.108	tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48989 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-08-13 13:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-52520	高危	9.0.62	11.0.9, 10.1.43, 9.0.107	tomcat: Apache Tomcat denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-53506	高危	9.0.62	9.0.107, 10.1.43, 11.0.9	tomcat: Apache Tomcat denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-55752	高危	9.0.62	11.0.11, 10.1.45, 9.0.109	tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-24880	高危	9.0.62	9.0.116, 10.1.52, 11.0.20	Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-34483	高危	9.0.62	9.0.116, 10.1.54, 11.0.21	Apache Tomcat: Apache Tomcat: Information disclosure due to improper encoding in JsonAccessLogValve 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34483 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-41284	高危	9.0.62	9.0.118, 10.1.55, 11.0.22	tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-42498	高危	9.0.62	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43513	高危	9.0.62	9.0.118, 10.1.55, 11.0.22	tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.12.6.1	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
org.codehaus.jettison:jettison	CVE-2022-40150	高危	1.4.0	1.5.2	jettison: memory exhaustion via user-supplied XML or JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40150 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
org.codehaus.jettison:jettison	CVE-2022-45685	高危	1.4.0	1.5.2	jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45685 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10
org.codehaus.jettison:jettison	CVE-2022-45693	高危	1.4.0	1.5.2	jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45693 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-12-13 15:15 修改: 2026-06-17 05:10
org.codehaus.jettison:jettison	CVE-2023-1436	高危	1.4.0	1.5.4	jettison: Uncontrolled Recursion in JSONArray 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1436 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-03-22 06:15 修改: 2026-06-17 05:27
org.lz4:lz4-java	CVE-2025-12183	高危	1.7.1	1.8.1	lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12183 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-11-28 16:15 修改: 2026-06-17 08:31
org.lz4:lz4-java	CVE-2025-66566	高危	1.7.1		lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66566 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-12-05 18:15 修改: 2026-06-17 09:57
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.12.6.1	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-23 21:17 修改: 2026-07-17 13:18
org.postgresql:postgresql	CVE-2022-31197	高危	42.2.25	42.2.26, 42.4.1, 42.3.7	postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31197 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-08-03 19:15 修改: 2026-06-17 04:45
org.postgresql:postgresql	CVE-2026-42198	高危	42.2.25	42.7.11	jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-04-29 16:16 修改: 2026-07-15 02:21
org.springframework.boot:spring-boot	CVE-2025-22235	高危	2.5.13	3.3.11, 3.4.5	org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45
org.springframework.boot:spring-boot	CVE-2026-40973	高危	2.5.13	4.0.6, 3.5.14	Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-04-28 00:16 修改: 2026-06-17 10:45
org.springframework.boot:spring-boot-autoconfigure	CVE-2023-20883	高危	2.5.13	3.0.7, 2.7.12, 2.6.15, 2.5.15	spring-boot: Spring Boot Welcome Page DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-05-26 17:15 修改: 2026-06-17 05:31
com.google.protobuf:protobuf-java	CVE-2024-7254	高危	3.16.3	3.25.5, 4.27.5, 4.28.2	protobuf: StackOverflow vulnerability in Protocol Buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7254 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-09-19 01:15 修改: 2026-06-17 08:19
org.springframework.security:spring-security-core	CVE-2024-22257	高危	5.5.6	5.7.12, 5.8.11, 6.1.8, 6.2.3	spring-security: Broken Access Control With Direct Use of AuthenticatedVoter 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22257 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-03-18 15:15 修改: 2026-06-30 13:16
org.springframework.security:spring-security-crypto	CVE-2025-22228	高危	5.5.6	6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16	spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22228 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-03-20 06:15 修改: 2026-06-17 08:45
ch.qos.logback:logback-classic	CVE-2023-6378	高危	1.2.11	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
ch.qos.logback:logback-core	CVE-2023-6378	高危	1.2.11	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
com.h2database:h2	CVE-2021-23463	高危	1.4.200	2.0.202	h2database: XXE injection vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23463 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2021-12-10 20:15 修改: 2026-06-17 03:38
org.springframework:spring-core	CVE-2025-41249	高危	5.3.20	6.2.11	org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41249 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-09-16 11:15 修改: 2026-06-17 09:22
org.springframework:spring-expression	CVE-2023-20863	高危	5.3.20	6.0.8, 5.3.27, 5.2.24.RELEASE	springframework: Spring Expression DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-04-13 20:15 修改: 2026-06-17 05:31
com.h2database:h2	CVE-2022-45868	高危	1.4.200	2.2.220	The web-based admin console in H2 Database Engine before 2.2.220 can b ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45868 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-11-23 21:15 修改: 2026-06-17 05:10
org.springframework:spring-web	CVE-2024-22243	高危	5.3.20	6.1.4, 6.0.17, 5.3.32	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web	CVE-2024-22259	高危	5.3.20	6.1.5, 6.0.18, 5.3.33	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11
org.springframework:spring-web	CVE-2024-22262	高危	5.3.20	5.3.34, 6.0.19, 6.1.6	springframework: URL Parsing with Host Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11
com.thoughtworks.xstream:xstream	CVE-2024-47072	高危	1.4.20	1.4.21	com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47072 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-11-08 00:15 修改: 2026-06-17 07:56
org.springframework:spring-webmvc	CVE-2024-38816	高危	5.3.20	6.1.13	spring-webmvc: Path Traversal Vulnerability in Spring Applications Using RouterFunctions and FileSystemResource 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38816 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-09-13 06:15 修改: 2026-06-17 07:41
org.springframework:spring-webmvc	CVE-2024-38819	高危	5.3.20	6.1.14	org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41
org.xerial.snappy:snappy-java	CVE-2023-34455	高危	1.1.7.7	1.1.10.1	snappy-java: Unchecked chunk length leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34455 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-06-15 18:15 修改: 2026-06-17 06:03
org.xerial.snappy:snappy-java	CVE-2023-43642	高危	1.1.7.7	1.1.10.4	snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43642 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-09-25 20:15 修改: 2026-06-17 06:26
org.yaml:snakeyaml	CVE-2022-1471	高危	1.28	2.0	SnakeYaml: Constructor Deserialization Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22
org.yaml:snakeyaml	CVE-2022-25857	高危	1.28	1.31	snakeyaml: Denial of Service due to missing nested depth limitation for collections 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34
com.alibaba.nacos:nacos-common	CVE-2021-44667	中危	1.4.2	2.1.0-BETA, 1.4.5	Cross-site Scripting in Nacos 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44667 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-03-11 19:15 修改: 2026-06-17 04:12
io.netty:netty-common	CVE-2024-47535	中危	4.1.76.Final	4.1.115.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47535 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-11-12 16:15 修改: 2026-06-17 07:57
io.netty:netty-common	CVE-2025-25193	中危	4.1.76.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
ch.qos.logback:logback-core	CVE-2025-11226	中危	1.2.11	1.5.19, 1.3.16	ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
com.fasterxml.jackson.core:jackson-core	CVE-2025-49128	中危	2.12.6	2.13.0	com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30
io.netty:netty-codec-http	CVE-2022-24823	中危	4.1.76.Final	4.1.77.Final	netty: world readable temporary file containing sensitive data 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24823 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-05-06 12:15 修改: 2026-06-17 04:32
io.netty:netty-handler	CVE-2023-34462	中危	4.1.76.Final	4.1.94.Final	netty: SniHandler 16MB allocation leads to OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34462 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-06-22 23:15 修改: 2026-06-17 06:03
io.netty:netty-codec-http	CVE-2024-29025	中危	4.1.76.Final	4.1.108.Final	netty-codec-http: Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29025 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-03-25 20:15 修改: 2026-06-17 07:22
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-41080	中危	9.0.62	8.5.93, 9.0.80, 10.1.13, 11.0.0-M11	tomcat: Open Redirect vulnerability in FORM authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41080 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-08-25 21:15 修改: 2026-06-17 06:20
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-42795	中危	9.0.62	10.1.14, 9.0.81, 8.5.94, 11.0.0-M12	tomcat: improper cleaning of recycled objects could lead to information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42795 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-10-10 18:15 修改: 2026-06-17 06:24
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-44487	中危	9.0.62	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-10-10 14:15 修改: 2026-06-17 06:27
org.apache.tomcat.embed:tomcat-embed-core	CVE-2023-45648	中危	9.0.62	11.0.0-M12, 10.1.14, 9.0.81, 8.5.94	tomcat: incorrectly parsed http trailer headers can cause request smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45648 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-10-10 19:15 修改: 2026-06-17 06:28
org.apache.tomcat.embed:tomcat-embed-core	CVE-2024-24549	中危	9.0.62	8.5.99, 9.0.86, 10.1.19, 11.0.0-M17	Tomcat: HTTP/2 header handling DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:14
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-49124	中危	9.0.62	11.0.8, 10.1.42, 9.0.106	Apache Tomcat installer for Windows has an untrusted search path vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49124 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-49125	中危	9.0.62	11.0.8, 10.1.42, 9.0.106	tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-52434	中危	9.0.62	9.0.107	tomcat: Apache Tomcat denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52434 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-55668	中危	9.0.62	11.0.8, 10.1.42, 9.0.106	org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55668 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-08-13 14:15 修改: 2026-06-17 09:41
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-66614	中危	9.0.62	11.0.15, 10.1.50, 9.0.113	tomcat: Client certificate verification bypass due to virtual host mapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-25854	中危	9.0.62	9.0.116, 10.1.53, 11.0.20	Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25854 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:25
org.apache.tomcat.embed:tomcat-embed-websocket	CVE-2024-23672	中危	9.0.62	11.0.0-M17, 10.1.19, 9.0.86, 8.5.99	Tomcat: WebSocket DoS with incomplete closing handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:13
io.netty:netty-codec-http	CVE-2025-67735	中危	4.1.76.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-resolver-dns	CVE-2026-45673	中危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll	CVE-2026-45536	中危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll	CVE-2026-45536	中危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-epoll	CVE-2026-45536	中危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
org.codehaus.jettison:jettison	CVE-2022-40149	中危	1.4.0	1.5.1	jettison: parser crash by stackoverflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40149 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
io.netty:netty-transport-native-kqueue	CVE-2026-45536	中危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-transport-native-kqueue	CVE-2026-45536	中危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45536 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.netty:netty-codec-http	CVE-2026-41417	中危	4.1.76.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-42580	中危	4.1.76.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42581	中危	4.1.76.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
org.postgresql:postgresql	CVE-2022-41946	中危	42.2.25	42.2.27, 42.3.8, 42.4.3, 42.5.1	postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41946 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-11-23 20:15 修改: 2026-06-17 05:04
org.postgresql:postgresql	GHSA-673j-qm5f-xpv8	中危	42.2.25	42.3.3	pgjdbc Arbitrary File Write Vulnerability 漏洞详情: https://github.com/advisories/GHSA-673j-qm5f-xpv8 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-02-16 00:08 修改: 2024-01-22 19:35
mysql:mysql-connector-java	CVE-2019-2692	中危	5.1.42	8.0.16	mysql-connector-java: privilege escalation in MySQL connector 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2692 镜像层: sha256:b32798d98c149f34564da3cb6e5c55898d8f558fe4c4368c1d6808e317327223 发布日期: 2019-04-23 19:32 修改: 2026-06-17 02:34
mysql:mysql-connector-java	CVE-2022-21363	中危	5.1.42	8.0.28	mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21363 镜像层: sha256:b32798d98c149f34564da3cb6e5c55898d8f558fe4c4368c1d6808e317327223 发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26
io.netty:netty-codec-http	CVE-2026-42585	中危	4.1.76.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
mysql:mysql-connector-java	CVE-2022-21363	中危	8.0.27	8.0.28	mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21363 镜像层: sha256:b32798d98c149f34564da3cb6e5c55898d8f558fe4c4368c1d6808e317327223 发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26
io.netty:netty-codec-http	CVE-2026-50020	中危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
org.springframework.security:spring-security-core	CVE-2022-22976	中危	5.5.6	5.5.7, 5.6.4	springframework: BCrypt skips salt rounds for work factor of 31 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22976 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-05-19 15:15 修改: 2026-06-17 04:29
org.springframework.security:spring-security-core	CVE-2024-38827	中危	5.5.6	5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5	spring-security: authorization bypass for case sensitive comparisons 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38827 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-12-02 15:15 修改: 2026-06-17 07:41
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.11	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.kafka:kafka-clients	CVE-2024-31141	中危	2.7.2	3.7.1	kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-31141 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-11-19 09:15 修改: 2026-06-17 07:27
org.apache.kafka:kafka-clients	CVE-2026-33558	中危	2.7.2	3.9.2, 4.0.1	Apache Kafka exposes sensitive information in its DEBUG logs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33558 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-04-20 14:16 修改: 2026-06-17 10:37
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	中危	2.12.6.1	2.14.0	jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05
org.springframework.security:spring-security-web	CVE-2026-47838	中危	5.5.6	6.5.11	Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47838 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-10 00:16 修改: 2026-06-30 22:16
org.springframework:spring-context	CVE-2024-38820	中危	5.3.20	6.1.14	The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.12.6.1	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
commons-lang:commons-lang	CVE-2025-48924	中危	2.6		commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.springframework:spring-expression	CVE-2023-20861	中危	5.3.20	6.0.7, 5.3.26, 5.2.23.RELEASE	springframework: Spring Expression DoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-03-23 21:15 修改: 2026-06-17 05:31
org.springframework:spring-expression	CVE-2024-38808	中危	5.3.20	5.3.39	spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.12.6.1	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-codec-http2	CVE-2026-47244	中危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2	CVE-2026-48043	中危	4.1.76.Final	4.1.135.Final, 4.2.15.Final	netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 16:16 修改: 2026-07-15 02:22
io.netty:netty-codec-http2	CVE-2026-50560	中危	4.1.76.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
org.springframework:spring-web	CVE-2024-38809	中危	5.3.20	5.3.38, 6.0.23, 6.1.12	org.springframework:spring-web: Spring Framework DoS via conditional HTTP request 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41
org.springframework:spring-web	CVE-2024-38820	中危	5.3.20	6.1.14	The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41
io.netty:netty-codec-mqtt	CVE-2026-44248	中危	4.1.76.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44248 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
io.netty:netty-codec	CVE-2025-58057	中危	4.1.76.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
com.google.guava:guava	CVE-2023-2976	中危	30.1-jre	32.0.0-android	guava: insecure temporary directory creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2976 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-06-14 18:15 修改: 2026-06-17 05:53
org.springframework:spring-webmvc	CVE-2024-38828	中危	5.3.20	5.3.42	org.springframework:spring-webmvc: DoS via Spring MVC controller method with byte[] parameter 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38828 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-11-18 04:15 修改: 2026-06-17 07:41
org.springframework:spring-webmvc	CVE-2025-41242	中危	5.3.20	6.2.10	org.springframework/spring-webmvc: Spring Framework MVC path traversal vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-41242 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-08-18 09:15 修改: 2026-06-17 09:22
org.springframework:spring-webmvc	CVE-2026-22737	中危	5.3.20	7.0.6, 6.2.17	Spring Framework: Spring Framework: Information disclosure via Java scripting engine enabled template views 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22737 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc	CVE-2026-22745	中危	5.3.20	7.0.7, 6.2.18	spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.12.6	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
ch.qos.logback:logback-core	CVE-2024-12798	中危	1.2.11	1.5.13, 1.3.15	logback-core: arbitrary code execution via JaninoEventEvaluator 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00
org.xerial.snappy:snappy-java	CVE-2023-34453	中危	1.1.7.7	1.1.10.1	snappy-java: Integer overflow in shuffle leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34453 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03
org.xerial.snappy:snappy-java	CVE-2023-34454	中危	1.1.7.7	1.1.10.1	snappy-java: Integer overflow in compress leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34454 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2023-06-15 17:15 修改: 2026-06-17 06:03
io.netty:netty-codec-redis	CVE-2026-42586	中危	4.1.76.Final	4.2.13.Final, 4.1.133.Final	netty-codec-redis: Netty: Command injection via CRLF characters in Redis codec encoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42586 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-haproxy	CVE-2022-41881	中危	4.1.76.Final	4.1.86.Final	codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41881 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-12-12 18:15 修改: 2026-06-17 05:03
org.yaml:snakeyaml	CVE-2022-38749	中危	1.28	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-38750	中危	1.28	1.31	snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-38751	中危	1.28	1.31	snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-38752	中危	1.28	1.32	snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57
org.yaml:snakeyaml	CVE-2022-41854	中危	1.28	1.32	dev-java/snakeyaml: DoS via stack overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03
io.netty:netty-codec-http	CVE-2025-58056	低危	4.1.76.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
io.netty:netty-handler-proxy	CVE-2026-42578	低危	4.1.76.Final	4.1.133.Final, 4.2.13.Final	netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42578 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
ch.qos.logback:logback-core	CVE-2026-9828	低危	1.2.11	1.5.33	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
org.springframework:spring-webmvc	CVE-2026-22735	低危	5.3.20	7.0.6, 6.2.17	org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring MVC and WebFlux: Stream corruption vulnerability when using Server-Sent Events 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22735 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc	CVE-2026-22741	低危	5.3.20	7.0.7, 6.2.18	Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
ch.qos.logback:logback-core	CVE-2024-12801	低危	1.2.11	1.5.13, 1.3.15	logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00
com.google.guava:guava	CVE-2020-8908	低危	30.1-jre	32.0.0-android	guava: local information disclosure via temporary directory created with unsafe permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8908 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2020-12-10 23:15 修改: 2026-06-17 03:27
ch.qos.logback:logback-core	CVE-2026-10532	低危	1.2.11	1.5.34	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-06-01 13:16 修改: 2026-06-17 10:12
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-46701	低危	9.0.62	9.0.105, 10.1.41, 11.0.7	tomcat: Apache Tomcat: Security constraint bypass for CGI scripts 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-55754	低危	9.0.62	11.0.11, 10.1.45, 9.0.109	org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55754 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-61795	低危	9.0.62	11.0.12, 10.1.47, 9.0.110	tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43514	低危	9.0.62	9.0.118, 10.1.55, 11.0.22	tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
commons-configuration:commons-configuration	CVE-2025-46392	低危	1.10		apache-commons-configuration: Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46392 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-05-09 10:15 修改: 2026-06-17 09:26
ch.qos.logback:logback-core	CVE-2026-1225	低危	1.2.11	1.5.25	ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15
org.postgresql:postgresql	CVE-2022-26520	低危	42.2.25	42.3.3	postgresql-jdbc: Arbitrary File Write Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26520 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2022-03-10 17:47 修改: 2026-06-17 04:35
org.springframework:spring-context	CVE-2025-22233	低危	5.3.20	6.2.7, 6.1.20	CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233 镜像层: sha256:e329f2c78f0bc5cbbb301c56dbd29f66bddaf29f9783a3947d7693341e5c21b7 发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45