docker.io/sonarqube:2025.3.1-developer linux/amd64

docker.io/sonarqube:2025.3.1-developer - Trivy安全扫描结果扫描时间: 2026-08-17 21:00

全部漏洞信息

低危漏洞:102

中危漏洞:294

高危漏洞:97

严重漏洞:1

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-08-17 21:00

docker.io/sonarqube:2025.3.1-developer (ubuntu 24.04) (ubuntu)

低危漏洞:85

中危漏洞:162

高危漏洞:10

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
dirmngr	CVE-2025-68973	高危	2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
gnupg-utils	CVE-2025-68973	高危	2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
gpg	CVE-2025-68973	高危	2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
gpg-agent	CVE-2025-68973	高危	2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
gpgconf	CVE-2025-68973	高危	2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
gpgsm	CVE-2025-68973	高危	2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
gpgv	CVE-2025-68973	高危	2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
keyboxd	CVE-2025-68973	高危	2.4.4-2ubuntu17.3	2.4.4-2ubuntu17.4	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
libssl3t64	CVE-2026-45447	高危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-09 17:17 修改: 2026-08-10 13:19
openssl	CVE-2026-45447	高危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-09 17:17 修改: 2026-08-10 13:19
bsdutils	CVE-2026-27456	中危	1:2.39.3-9ubuntu6.3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
dpkg	CVE-2026-2219	中危	1.22.6ubuntu6.1	1.22.6ubuntu6.6	It was discovered that dpkg-deb (a component of dpkg, the Debian packa ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2219 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-07 09:16 修改: 2026-06-17 10:30
curl	CVE-2025-14017	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7	curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
curl	CVE-2026-1965	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
curl	CVE-2026-3783	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl	CVE-2026-5545	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
curl	CVE-2026-6253	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
curl	CVE-2026-6429	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: libcurl: Credential leak via reused proxy connection during HTTP redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
gzip	CVE-2026-41991	中危	1.12-1ubuntu3.1	1.12-1ubuntu3.2	gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
gzip	CVE-2026-41992	中危	1.12-1ubuntu3.1	1.12-1ubuntu3.2	GNU gzip contains a global buffer overflow vulnerability in the LZH de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
curl	CVE-2026-7168	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
libblkid1	CVE-2026-27456	中危	2.39.3-9ubuntu6.3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libc-bin	CVE-2025-15281	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.7	glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
libc-bin	CVE-2025-8058	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.6	glibc: Double free in glibc 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
libc-bin	CVE-2026-0861	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.7	glibc: Integer overflow in memalign leads to heap corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
libc-bin	CVE-2026-0915	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.7	glibc: glibc: Information disclosure via zero-valued network query 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
libc-bin	CVE-2026-4046	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc-bin	CVE-2026-4437	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Incorrect DNS response parsing via crafted DNS server response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
libc-bin	CVE-2026-4438	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
libc-bin	CVE-2026-5435	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc-bin	CVE-2026-5450	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin	CVE-2026-5928	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin	CVE-2026-6238	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6	CVE-2025-15281	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.7	glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
libc6	CVE-2025-8058	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.6	glibc: Double free in glibc 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
libc6	CVE-2026-0861	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.7	glibc: Integer overflow in memalign leads to heap corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
libc6	CVE-2026-0915	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.7	glibc: glibc: Information disclosure via zero-valued network query 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
libc6	CVE-2026-4046	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc6	CVE-2026-4437	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Incorrect DNS response parsing via crafted DNS server response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
libc6	CVE-2026-4438	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
libc6	CVE-2026-5435	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6	CVE-2026-5450	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-5928	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-6238	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libcap2	CVE-2026-4878	中危	1:2.66-5ubuntu2.2	1:2.66-5ubuntu2.4	libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-09 16:16 修改: 2026-08-16 13:16
libcurl4t64	CVE-2025-14017	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7	curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
libcurl4t64	CVE-2026-1965	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
libcurl4t64	CVE-2026-3783	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl4t64	CVE-2026-5545	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl4t64	CVE-2026-6253	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl4t64	CVE-2026-6429	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: libcurl: Credential leak via reused proxy connection during HTTP redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl4t64	CVE-2026-7168	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
libcurl4t64	CVE-2026-8925	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10	curl: curl: Double-free vulnerability in SASL authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
libcurl4t64	CVE-2026-8927	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10	curl: Information disclosure due to uncleared proxy authentication state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
libexpat1	CVE-2025-66382	中危	2.6.1-2ubuntu0.3		libexpat: libexpat: Denial of service via crafted file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libexpat1	CVE-2026-24515	中危	2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.4	libexpat: libexpat null pointer dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-23 08:16 修改: 2026-06-17 10:23
libexpat1	CVE-2026-25210	中危	2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.4	libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25210 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-30 07:16 修改: 2026-06-17 10:24
libfreetype6	CVE-2026-23865	中危	2.13.2+dfsg-1build3	2.13.2+dfsg-1ubuntu0.1	freetype: Information disclosure or denial of service via specially crafted font files 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22
libgcrypt20	CVE-2026-41989	中危	1.10.3-2build1	1.10.3-2ubuntu0.1	Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-23 05:16 修改: 2026-07-14 13:18
libgnutls30t64	CVE-2025-14831	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.5	gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14831 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-02-09 15:16 修改: 2026-06-30 00:16
libgnutls30t64	CVE-2026-33845	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-30 18:16 修改: 2026-07-20 12:18
libgnutls30t64	CVE-2026-33846	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-05-04 10:15 修改: 2026-07-20 12:18
libgnutls30t64	CVE-2026-3832	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-30 18:16 修改: 2026-07-13 17:17
libgnutls30t64	CVE-2026-3833	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-30 18:16 修改: 2026-07-22 16:17
libgnutls30t64	CVE-2026-42009	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-05-18 13:16 修改: 2026-07-23 12:17
libgnutls30t64	CVE-2026-42010	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: gnutls: Authentication Bypass via NUL Character in Username 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-05-07 12:16 修改: 2026-07-23 12:17
libgnutls30t64	CVE-2026-42011	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: gnutls: Security bypass due to incorrect name constraint handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-05-07 15:16 修改: 2026-07-22 16:17
libgnutls30t64	CVE-2026-42012	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-05-26 22:16 修改: 2026-07-24 11:10
libgnutls30t64	CVE-2026-42013	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-05-26 22:16 修改: 2026-07-24 11:10
libgnutls30t64	CVE-2026-42014	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-16 02:16 修改: 2026-07-22 16:17
libgnutls30t64	CVE-2026-42015	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-05-26 22:16 修改: 2026-07-24 11:10
libgnutls30t64	CVE-2026-5260	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: gnutls: Information disclosure via heap overread in RSA key exchange 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-05-26 22:16 修改: 2026-07-24 12:10
libgnutls30t64	CVE-2026-5419	中危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-01 21:16 修改: 2026-07-22 08:10
libgssapi-krb5-2	CVE-2026-11850	中危	1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libgssapi-krb5-2	CVE-2026-40355	中危	1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libgssapi-krb5-2	CVE-2026-40356	中危	1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libk5crypto3	CVE-2026-11850	中危	1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libk5crypto3	CVE-2026-40355	中危	1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libk5crypto3	CVE-2026-40356	中危	1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libkrb5-3	CVE-2026-11850	中危	1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libkrb5-3	CVE-2026-40355	中危	1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5-3	CVE-2026-40356	中危	1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libkrb5support0	CVE-2026-11850	中危	1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libkrb5support0	CVE-2026-40355	中危	1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5support0	CVE-2026-40356	中危	1.20.1-6ubuntu2.6	1.20.1-6ubuntu2.7	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libmount1	CVE-2026-27456	中危	2.39.3-9ubuntu6.3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libnghttp2-14	CVE-2026-27135	中危	1.59.0-1ubuntu0.2	1.59.0-1ubuntu0.3	nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27135 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-18 18:16 修改: 2026-07-15 02:19
libnghttp2-14	CVE-2026-58055	中危	1.59.0-1ubuntu0.2	1.59.0-1ubuntu0.4	nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
libp11-kit0	CVE-2026-13757	中危	0.25.3-4ubuntu2.1		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-29 19:16 修改: 2026-08-13 21:17
libpam-modules	CVE-2024-10963	中危	1.5.3-5ubuntu5.4	1.5.3-5ubuntu5.5	pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2024-11-07 16:15 修改: 2026-08-11 16:17
libpam-modules	CVE-2026-54411	中危	1.5.3-5ubuntu5.4	1.5.3-5ubuntu5.6	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-modules-bin	CVE-2024-10963	中危	1.5.3-5ubuntu5.4	1.5.3-5ubuntu5.5	pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2024-11-07 16:15 修改: 2026-08-11 16:17
libpam-modules-bin	CVE-2026-54411	中危	1.5.3-5ubuntu5.4	1.5.3-5ubuntu5.6	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-runtime	CVE-2024-10963	中危	1.5.3-5ubuntu5.4	1.5.3-5ubuntu5.5	pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2024-11-07 16:15 修改: 2026-08-11 16:17
libpam-runtime	CVE-2026-54411	中危	1.5.3-5ubuntu5.4	1.5.3-5ubuntu5.6	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam0g	CVE-2024-10963	中危	1.5.3-5ubuntu5.4	1.5.3-5ubuntu5.5	pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2024-11-07 16:15 修改: 2026-08-11 16:17
libpam0g	CVE-2026-54411	中危	1.5.3-5ubuntu5.4	1.5.3-5ubuntu5.6	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpng16-16t64	CVE-2025-28162	中危	1.6.43-5build1	1.6.43-5ubuntu0.4	libpng: libpng: Denial of Service via buffer overflow in pngimage utility 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28162 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04
libpng16-16t64	CVE-2025-28164	中危	1.6.43-5build1	1.6.43-5ubuntu0.4	libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28164 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04
libpng16-16t64	CVE-2025-64505	中危	1.6.43-5build1	1.6.43-5ubuntu0.1	libpng: LIBPNG heap buffer overflow via malformed palette index 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64505 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54
libpng16-16t64	CVE-2025-64506	中危	1.6.43-5build1	1.6.43-5ubuntu0.1	libpng: LIBPNG heap buffer over-read 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64506 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54
libpng16-16t64	CVE-2025-64720	中危	1.6.43-5build1	1.6.43-5ubuntu0.1	libpng: LIBPNG buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64720 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55
libpng16-16t64	CVE-2025-65018	中危	1.6.43-5build1	1.6.43-5ubuntu0.1	libpng: LIBPNG heap buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65018 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55
libpng16-16t64	CVE-2025-66293	中危	1.6.43-5build1	1.6.43-5ubuntu0.3	libpng: LIBPNG out-of-bounds read in png_image_read_composite 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66293 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-12-03 21:15 修改: 2026-06-17 09:56
libpng16-16t64	CVE-2026-22695	中危	1.6.43-5build1	1.6.43-5ubuntu0.3	libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22695 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20
libpng16-16t64	CVE-2026-22801	中危	1.6.43-5build1	1.6.43-5ubuntu0.3	libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22801 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20
libpng16-16t64	CVE-2026-25646	中危	1.6.43-5build1	1.6.43-5ubuntu0.5	libpng: LIBPNG has a heap buffer overflow in png_set_quantize 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25646 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-02-10 18:16 修改: 2026-08-11 13:17
libpng16-16t64	CVE-2026-33416	中危	1.6.43-5build1	1.6.43-5ubuntu0.6	libpng: libpng: Arbitrary code execution due to use-after-free vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37
libpng16-16t64	CVE-2026-33636	中危	1.6.43-5build1	1.6.43-5ubuntu0.6	libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33636 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37
libpng16-16t64	CVE-2026-34757	中危	1.6.43-5build1	1.6.43-5ubuntu0.6	libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39
libsmartcols1	CVE-2026-27456	中危	2.39.3-9ubuntu6.3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsqlite3-0	CVE-2025-6965	中危	3.45.1-1ubuntu2.3	3.45.1-1ubuntu2.4	sqlite: Integer Truncation in SQLite 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6965 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-07-15 14:15 修改: 2026-06-26 16:36
libsqlite3-0	CVE-2025-7709	中危	3.45.1-1ubuntu2.3	3.45.1-1ubuntu2.5	An integer overflow exists in the FTS5 https://sqlite.org/fts5.html e ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7709 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-09-08 15:15 修改: 2026-06-17 10:05
libsqlite3-0	CVE-2026-11822	中危	3.45.1-1ubuntu2.3	3.45.1-1ubuntu2.6	SQLite before 3.53.2 contains memory corruption vulnerabilities in the ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libsqlite3-0	CVE-2026-11824	中危	3.45.1-1ubuntu2.3	3.45.1-1ubuntu2.6	SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libsqlite3-0	CVE-2026-50812	中危	3.45.1-1ubuntu2.3	3.45.1-1ubuntu2.7	A NULL pointer dereference in the SQLite Session Extension in SQLite 3 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50812 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libsqlite3-0	CVE-2026-50813	中危	3.45.1-1ubuntu2.3	3.45.1-1ubuntu2.7	An issue in SQLite before Fossil check-in 869a51ae84df allows a local ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50813 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libssh-4	CVE-2026-0964	中危	0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.3	libssh: Improper sanitation of paths received from SCP servers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0964 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11
libssh-4	CVE-2026-0967	中危	0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.3	libssh: libssh: Denial of Service via inefficient regular expression processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0967 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11
libssh-4	CVE-2026-0968	中危	0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.3	libssh: libssh: Denial of Service due to malformed SFTP message 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0968 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11
libssh-4	CVE-2026-3731	中危	0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.4	libssh: libssh: Denial of Service via out-of-bounds read in SFTP extension name handler 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3731 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-08 11:15 修改: 2026-06-17 10:44
curl	CVE-2026-8925	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10	curl: curl: Double-free vulnerability in SASL authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8925 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:04
libssl3t64	CVE-2025-15467	中危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-27 16:16 修改: 2026-08-11 13:17
libssl3t64	CVE-2025-9230	中危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.6	openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl3t64	CVE-2026-31790	中危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3t64	CVE-2026-34182	中危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-45445	中危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: AES-OCB IV Ignored on EVP_Cipher() Path 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libsystemd0	CVE-2026-15059	中危	255.4-1ubuntu8.8	255.4-1ubuntu8.17	Local unprivileged users can terminate arbitrary local processes ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libsystemd0	CVE-2026-16742	中危	255.4-1ubuntu8.8	255.4-1ubuntu8.17	systemd-homed contains a local privilege escalation bug via arbit ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libsystemd0	CVE-2026-29111	中危	255.4-1ubuntu8.8	255.4-1ubuntu8.14	systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29
libsystemd0	CVE-2026-40225	中危	255.4-1ubuntu8.8	255.4-1ubuntu8.14	systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libsystemd0	CVE-2026-40226	中危	255.4-1ubuntu8.8	255.4-1ubuntu8.16	systemd: systemd nspawn: Escape-to-host action via crafted config file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libtasn1-6	CVE-2025-13151	中危	4.19.0-3ubuntu0.24.04.1	4.19.0-3ubuntu0.24.04.2	libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33
libudev1	CVE-2026-15059	中危	255.4-1ubuntu8.8	255.4-1ubuntu8.17	Local unprivileged users can terminate arbitrary local processes ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libudev1	CVE-2026-16742	中危	255.4-1ubuntu8.8	255.4-1ubuntu8.17	systemd-homed contains a local privilege escalation bug via arbit ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libudev1	CVE-2026-29111	中危	255.4-1ubuntu8.8	255.4-1ubuntu8.14	systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29
libudev1	CVE-2026-40225	中危	255.4-1ubuntu8.8	255.4-1ubuntu8.14	systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1	CVE-2026-40226	中危	255.4-1ubuntu8.8	255.4-1ubuntu8.16	systemd: systemd nspawn: Escape-to-host action via crafted config file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libuuid1	CVE-2026-27456	中危	2.39.3-9ubuntu6.3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
locales	CVE-2025-15281	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.7	glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
locales	CVE-2025-8058	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.6	glibc: Double free in glibc 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
locales	CVE-2026-0861	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.7	glibc: Integer overflow in memalign leads to heap corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
locales	CVE-2026-0915	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.7	glibc: glibc: Information disclosure via zero-valued network query 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
locales	CVE-2026-4046	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
locales	CVE-2026-4437	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Incorrect DNS response parsing via crafted DNS server response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
locales	CVE-2026-4438	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
locales	CVE-2026-5435	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
locales	CVE-2026-5450	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
locales	CVE-2026-5928	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
locales	CVE-2026-6238	中危	2.39-0ubuntu8.5	2.39-0ubuntu8.8	glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
mount	CVE-2026-27456	中危	2.39.3-9ubuntu6.3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
curl	CVE-2026-8927	中危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10	curl: Information disclosure due to uncleared proxy authentication state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
openssl	CVE-2025-15467	中危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-27 16:16 修改: 2026-08-11 13:17
openssl	CVE-2025-9230	中危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.6	openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
openssl	CVE-2026-31790	中危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
openssl	CVE-2026-34182	中危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-45445	中危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: AES-OCB IV Ignored on EVP_Cipher() Path 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
p11-kit	CVE-2026-13757	中危	0.25.3-4ubuntu2.1		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-29 19:16 修改: 2026-08-13 21:17
p11-kit-modules	CVE-2026-13757	中危	0.25.3-4ubuntu2.1		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-29 19:16 修改: 2026-08-13 21:17
perl-base	CVE-2025-40909	中危	5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.2	perl: Perl threads have a working directory race condition where file operations may target unintended paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40909 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2025-05-30 13:15 修改: 2026-06-17 09:22
perl-base	CVE-2026-42496	中危	5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.3	perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10
perl-base	CVE-2026-8376	中危	5.38.2-3.2ubuntu0.1	5.38.2-3.2ubuntu0.3	perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
sed	CVE-2026-5958	中危	4.9-2build1	4.9-2ubuntu0.24.04.1	sed: GNU sed TOCTOU race condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-20 12:16 修改: 2026-06-17 10:59
tar	CVE-2025-45582	中危	1.35+dfsg-3build1	1.35+dfsg-3ubuntu0.2	tar: Tar path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25
tar	CVE-2026-5704	中危	1.35+dfsg-3build1	1.35+dfsg-3ubuntu0.4	tar: tar: Hidden file injection via crafted archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59
util-linux	CVE-2026-27456	中危	2.39.3-9ubuntu6.3		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
wget	CVE-2021-31879	中危	1.21.4-1ubuntu4.1		wget: authorization header disclosure on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
wget	CVE-2026-15146	中危	1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.4	wget: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15146 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-10 19:17 修改: 2026-07-15 19:16
wget	CVE-2026-58469	中危	1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	wget: GNU Wget: Memory corruption via crafted Metalink URL 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58469 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:59
wget	CVE-2026-58470	中危	1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	wget: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58470 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:01
wget	CVE-2026-58471	中危	1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58471 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:02
wget	CVE-2026-58472	中危	1.21.4-1ubuntu4.1	1.21.4-1ubuntu4.3	wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58472 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:58
libssl3t64	CVE-2026-22796	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl3t64	CVE-2026-28387	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3t64	CVE-2026-28388	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3t64	CVE-2026-28389	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	openssl: OpenSSL: Denial of Service vulnerability in CMS processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3t64	CVE-2026-28390	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3t64	CVE-2026-31789	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl3t64	CVE-2026-34180	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-42766	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: Possible NULL Dereference in Password-Based CMS Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-42767	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-42770	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: FFC-DH Peer Validation Uses Attacker-Supplied q 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-45446	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-7383	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3t64	CVE-2026-9076	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
curl	CVE-2025-14524	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7	curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
curl	CVE-2025-14819	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7	curl: libcurl: Improper certificate validation due to cached TLS settings reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14819 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
curl	CVE-2025-15079	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7	curl: Host verification bypass during SSH transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
curl	CVE-2025-15224	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7	curl: libssh key passphrase bypass without agent set 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
curl	CVE-2026-10536	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.11	libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
libsystemd0	CVE-2026-40228	低危	255.4-1ubuntu8.8		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
curl	CVE-2026-3784	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	curl: curl: Unauthorized access due to improper HTTP proxy connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libtinfo6	CVE-2025-69720	低危	6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.1	ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
curl	CVE-2026-4873	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: curl: Information disclosure due to incorrect TLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
curl	CVE-2026-5773	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
curl	CVE-2026-6276	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
curl	CVE-2026-8286	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10	curl: curl: Insecure connection establishment due to TLS configuration mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libcurl4t64	CVE-2025-0167	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	When asked to use a `.netrc` file for credentials and to follow HT ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0167 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-02-05 10:15 修改: 2026-06-17 08:25
libudev1	CVE-2026-40228	低危	255.4-1ubuntu8.8		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libcurl4t64	CVE-2025-10148	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7	curl: predictable WebSocket mask 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10148 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-09-12 06:15 修改: 2026-06-17 08:27
libcurl4t64	CVE-2025-14524	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7	curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
libgnutls30t64	CVE-2025-9820	低危	3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.5	gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9820 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-26 20:16 修改: 2026-06-30 09:16
libcurl4t64	CVE-2025-14819	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7	curl: libcurl: Improper certificate validation due to cached TLS settings reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14819 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:36
libcurl4t64	CVE-2025-15079	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7	curl: Host verification bypass during SSH transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl4t64	CVE-2025-15224	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7	curl: libssh key passphrase bypass without agent set 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl4t64	CVE-2026-10536	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.11	libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
libcurl4t64	CVE-2026-3784	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	curl: curl: Unauthorized access due to improper HTTP proxy connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl4t64	CVE-2026-4873	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: curl: Information disclosure due to incorrect TLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
libcurl4t64	CVE-2026-5773	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl4t64	CVE-2026-6276	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9	curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl4t64	CVE-2026-8286	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10	curl: curl: Insecure connection establishment due to TLS configuration mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
login	CVE-2024-56433	低危	1:4.13+dfsg1-4ubuntu3.2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libcurl4t64	CVE-2026-8458	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10	curl: libcurl: Unauthorized connection reuse due to a logical error 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
ncurses-base	CVE-2025-69720	低危	6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.1	ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
ncurses-bin	CVE-2025-69720	低危	6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.1	ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libcurl4t64	CVE-2026-8924	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10	curl: curl: Cookie injection via malicious HTTP server using super cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
libcurl4t64	CVE-2026-9547	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10	curl: curl: Man-in-the-middle attack via SSH host key bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
liblzma5	CVE-2026-34743	低危	5.6.1+really5.4.5-1ubuntu0.2	5.6.1+really5.4.5-1ubuntu0.3	xz: XZ Utils: Denial of Service via buffer overflow in index decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-04-02 19:21 修改: 2026-07-24 21:10
curl	CVE-2026-8458	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10	curl: libcurl: Unauthorized connection reuse due to a logical error 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
libncursesw6	CVE-2025-69720	低危	6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.1	ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libssh-4	CVE-2025-8114	低危	0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.2	libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8114 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-07-24 15:15 修改: 2026-06-30 02:16
openssl	CVE-2025-68160	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
openssl	CVE-2025-69418	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
openssl	CVE-2025-69419	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
openssl	CVE-2025-69420	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Denial of Service via malformed TimeStamp Response 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
openssl	CVE-2025-69421	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
openssl	CVE-2026-22795	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
openssl	CVE-2026-22796	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
openssl	CVE-2026-28387	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
openssl	CVE-2026-28388	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
openssl	CVE-2026-28389	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	openssl: OpenSSL: Denial of Service vulnerability in CMS processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
openssl	CVE-2026-28390	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
openssl	CVE-2026-31789	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
openssl	CVE-2026-34180	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-42766	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: Possible NULL Dereference in Password-Based CMS Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-42767	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-42770	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: FFC-DH Peer Validation Uses Attacker-Supplied q 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-45446	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-7383	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl	CVE-2026-9076	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssh-4	CVE-2025-8277	低危	0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.3	libssh: Memory Exhaustion via Repeated Key Exchange in libssh 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8277 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-09-09 12:15 修改: 2026-06-30 09:16
libssh-4	CVE-2026-0965	低危	0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.3	libssh: libssh: Denial of Service via improper configuration file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0965 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11
passwd	CVE-2024-56433	低危	1:4.13+dfsg1-4ubuntu3.2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libssh-4	CVE-2026-0966	低危	0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.3	libssh: libssh: Denial of Service via zero-length input in ssh_get_hexa() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0966 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-03-26 21:17 修改: 2026-06-17 10:11
curl	CVE-2026-8924	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10	curl: curl: Cookie injection via malicious HTTP server using super cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
curl	CVE-2026-9547	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10	curl: curl: Man-in-the-middle attack via SSH host key bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
curl	CVE-2025-0167	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	When asked to use a `.netrc` file for credentials and to follow HT ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0167 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-02-05 10:15 修改: 2026-06-17 08:25
curl	CVE-2025-10148	低危	8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.7	curl: predictable WebSocket mask 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10148 镜像层: sha256:ea28cd1397aa5e52fce5d1bad83ded627463804cd9355dae70c5101aedf06b2f 发布日期: 2025-09-12 06:15 修改: 2026-06-17 08:27
libgcrypt20	CVE-2024-2236	低危	1.10.3-2build1		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
dpkg	CVE-2025-6297	低危	1.22.6ubuntu6.1	1.22.6ubuntu6.5	It was discovered that dpkg-deb does not properly sanitize directory p ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6297 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2025-07-01 17:15 修改: 2026-07-08 09:16
libssl3t64	CVE-2025-68160	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libssl3t64	CVE-2025-69418	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3t64	CVE-2025-69419	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3t64	CVE-2025-69420	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Denial of Service via malformed TimeStamp Response 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3t64	CVE-2025-69421	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl3t64	CVE-2026-22795	低危	3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
zlib1g	CVE-2026-27171	低危	1:1.3.dfsg-3.1ubuntu2.1		zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:107cbdaeec042e6154640c94972c638f4e2fee795902b149e8ce9acbd03d59d7 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

Java (jar)

低危漏洞:17

中危漏洞:132

高危漏洞:87

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
org.bouncycastle:bcprov-jdk18on	CVE-2025-14813	严重	1.78.1	1.80.2, 1.81.1, 1.84	bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14813 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-04-15 10:16 修改: 2026-08-12 12:17
ch.qos.logback:logback-classic	CVE-2023-6378	高危	1.2.9	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
ch.qos.logback:logback-core	CVE-2023-6378	高危	1.2.9	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
ch.qos.logback:logback-core	CVE-2023-6378	高危	1.2.9	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.15.0	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.15.0	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.16.1	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.17.2	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.17.2	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.17.2	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.17.2	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.17.3	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.18.3	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.18.3	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.18.3	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core	GHSA-r7wm-3cxj-wff9	高危	2.19.0	2.18.8, 2.21.4	jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq) 漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.16.1	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.16.1	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.17.2	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.17.2	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.17.3	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.17.3	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.18.3	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.18.3	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.18.3	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.18.3	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.18.3	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.18.3	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.18.3	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.18.3	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	高危	2.19.0	2.18.8, 3.1.4, 2.21.4	jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	高危	2.19.0	2.18.8, 2.21.4, 3.1.4	jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.microsoft.sqlserver:mssql-jdbc	CVE-2025-59250	高危	12.10.0.jre11	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11	JDBC Driver for SQL Server has improper input validation issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59250 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-10-14 17:16 修改: 2026-06-17 09:45
commons-beanutils:commons-beanutils	CVE-2025-48734	高危	1.9.4	1.11.0	commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-beanutils:commons-beanutils	CVE-2025-48734	高危	1.9.4	1.11.0	commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-beanutils:commons-beanutils	CVE-2025-48734	高危	1.9.4	1.11.0	commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-beanutils:commons-beanutils	CVE-2025-48734	高危	1.9.4	1.11.0	commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
commons-beanutils:commons-beanutils	CVE-2025-48734	高危	1.9.4	1.11.0	commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48734 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-05-28 14:15 修改: 2026-06-17 09:30
io.netty:netty-codec	CVE-2026-42583	高危	4.1.115.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec	CVE-2026-42583	高危	4.1.115.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec	CVE-2026-42583	高危	4.1.115.Final	4.1.133.Final	netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec	CVE-2026-59901	高危	4.1.115.Final	4.1.136.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec	CVE-2026-59901	高危	4.1.115.Final	4.1.136.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec	CVE-2026-59901	高危	4.1.115.Final	4.1.136.Final	io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-dns	CVE-2026-42579	高危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http	CVE-2026-33870	高危	4.1.115.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-03-27 20:16 修改: 2026-08-04 13:18
io.netty:netty-codec-http	CVE-2026-33870	高危	4.1.115.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-03-27 20:16 修改: 2026-08-04 13:18
io.netty:netty-codec-http	CVE-2026-33870	高危	4.1.115.Final	4.1.132.Final, 4.2.10.Final	io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-03-27 20:16 修改: 2026-08-04 13:18
io.netty:netty-codec-http	CVE-2026-42584	高危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http	CVE-2026-42584	高危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http	CVE-2026-42584	高危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http	CVE-2026-42587	高危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http	CVE-2026-42587	高危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http	CVE-2026-42587	高危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http	CVE-2026-55831	高危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http	CVE-2026-55831	高危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http	CVE-2026-55831	高危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http	CVE-2026-55833	高危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http	CVE-2026-55833	高危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http	CVE-2026-55833	高危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http	CVE-2026-56745	高危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http	CVE-2026-56745	高危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http	CVE-2026-56745	高危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2	CVE-2025-55163	高危	4.1.115.Final	4.2.4.Final, 4.1.124.Final	netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55163 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-08-13 15:15 修改: 2026-06-17 09:41
io.netty:netty-codec-http2	CVE-2026-33871	高危	4.1.115.Final	4.1.132.Final, 4.2.11.Final	netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-03-27 20:16 修改: 2026-08-04 13:18
io.netty:netty-codec-http2	CVE-2026-42587	高危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http2	CVE-2026-56819	高危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
io.netty:netty-handler	CVE-2025-24970	高危	4.1.115.Final	4.1.118.Final	io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24970 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-02-10 22:15 修改: 2026-06-17 08:59
io.netty:netty-handler	CVE-2025-24970	高危	4.1.115.Final	4.1.118.Final	io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24970 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-02-10 22:15 修改: 2026-06-17 08:59
io.netty:netty-handler	CVE-2025-24970	高危	4.1.115.Final	4.1.118.Final	io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24970 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-02-10 22:15 修改: 2026-06-17 08:59
io.netty:netty-handler	CVE-2026-44249	高危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-11 22:16 修改: 2026-08-14 13:18
io.netty:netty-handler	CVE-2026-44249	高危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-11 22:16 修改: 2026-08-14 13:18
io.netty:netty-handler	CVE-2026-44249	高危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-11 22:16 修改: 2026-08-14 13:18
io.netty:netty-handler	CVE-2026-45416	高危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 15:16 修改: 2026-08-14 13:18
io.netty:netty-handler	CVE-2026-45416	高危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 15:16 修改: 2026-08-14 13:18
io.netty:netty-handler	CVE-2026-45416	高危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 15:16 修改: 2026-08-14 13:18
io.netty:netty-handler	CVE-2026-50010	高危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 16:16 修改: 2026-08-14 13:19
io.netty:netty-handler	CVE-2026-50010	高危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 16:16 修改: 2026-08-14 13:19
io.netty:netty-handler	CVE-2026-50010	高危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 16:16 修改: 2026-08-14 13:19
io.netty:netty-resolver-dns	CVE-2026-45674	高危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 15:16 修改: 2026-08-13 13:19
io.netty:netty-resolver-dns	CVE-2026-47691	高危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 16:16 修改: 2026-08-13 13:19
net.minidev:json-smart	CVE-2024-57699	高危	2.5.1	2.5.2	json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370) 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57699 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-02-05 22:15 修改: 2026-06-17 08:13
ch.qos.logback:logback-classic	CVE-2023-6378	高危	1.2.9	1.3.12, 1.4.12, 1.2.13	logback: serialization vulnerability in logback receiver 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50
org.lz4:lz4-java	CVE-2025-12183	高危	1.8.0	1.8.1	lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12183 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-11-28 16:15 修改: 2026-06-17 08:31
org.lz4:lz4-java	CVE-2025-66566	高危	1.8.0		lz4-java: lz4-java: Information Disclosure via Insufficient Output Buffer Clearing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66566 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-12-05 18:15 修改: 2026-06-17 09:57
org.postgresql:postgresql	CVE-2025-49146	高危	42.7.5	42.7.7	pgjdbc: pgjdbc insecure authentication in channel binding 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49146 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-06-11 15:15 修改: 2026-06-17 09:30
org.postgresql:postgresql	CVE-2026-42198	高危	42.7.5	42.7.11	jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42198 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-04-29 16:16 修改: 2026-08-14 13:18
org.postgresql:postgresql	CVE-2026-54291	高危	42.7.5	42.7.12	org.postgresql/postgresql: com.ongres.scram/scram-client: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54291 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-06 19:17 修改: 2026-07-09 13:16
ch.qos.logback:logback-core	CVE-2025-11226	中危	1.2.9	1.5.19, 1.3.16	ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
ch.qos.logback:logback-core	CVE-2025-11226	中危	1.5.18	1.5.19, 1.3.16	ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.16.1	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.16.1	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
commons-lang:commons-lang	CVE-2025-48924	中危	2.6		commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
commons-lang:commons-lang	CVE-2025-48924	中危	2.6		commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
commons-lang:commons-lang	CVE-2025-48924	中危	2.6		commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
commons-lang:commons-lang	CVE-2025-48924	中危	2.6		commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59888	中危	2.16.1	2.18.8, 2.21.4	com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
ch.qos.logback:logback-core	CVE-2025-11226	中危	1.5.18	1.5.19, 1.3.16	ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
ch.qos.logback:logback-core	CVE-2024-12798	中危	1.2.9	1.5.13, 1.3.15	logback-core: arbitrary code execution via JaninoEventEvaluator 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.17.2	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.17.2	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59888	中危	2.17.2	2.18.8, 2.21.4	com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
io.netty:netty-codec	CVE-2025-58057	中危	4.1.115.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
io.netty:netty-codec	CVE-2025-58057	中危	4.1.115.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
io.netty:netty-codec	CVE-2025-58057	中危	4.1.115.Final	4.1.125.Final	netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58057 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-09-04 10:42 修改: 2026-06-17 09:43
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.17.2	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
io.netty:netty-codec-dns	CVE-2026-73508	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	Netty is an asynchronous, event-driven network application framework. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.17.2	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.17.3	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.17.3	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59888	中危	2.17.3	2.18.8, 2.21.4	com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.17.2	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.17.2	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
ch.qos.logback:logback-core	CVE-2024-12798	中危	1.2.9	1.5.13, 1.3.15	logback-core: arbitrary code execution via JaninoEventEvaluator 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.17.3	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.15.0	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.15.0	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
ch.qos.logback:logback-core	CVE-2025-11226	中危	1.2.9	1.5.19, 1.3.16	ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.18.3	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.18.3	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.18.3	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.18.3	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.18.3	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.18.3	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.18.3	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-codec-http	CVE-2025-67735	中危	4.1.115.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http	CVE-2025-67735	中危	4.1.115.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http	CVE-2025-67735	中危	4.1.115.Final	4.2.8.Final, 4.1.129.Final	netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67735 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-12-16 01:15 修改: 2026-06-17 09:58
io.netty:netty-codec-http	CVE-2026-41417	中危	4.1.115.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-41417	中危	4.1.115.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-41417	中危	4.1.115.Final	4.1.133.Final, 4.2.13.Final	netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-06 22:16 修改: 2026-06-17 10:46
io.netty:netty-codec-http	CVE-2026-42580	中危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42580	中危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42580	中危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: Netty: Request smuggling via chunk size parser integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42581	中危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http	CVE-2026-42581	中危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http	CVE-2026-42581	中危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-08-13 13:18
io.netty:netty-codec-http	CVE-2026-42585	中危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42585	中危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-42585	中危	4.1.115.Final	4.2.13.Final, 4.1.133.Final	netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-13 19:17 修改: 2026-06-17 10:48
io.netty:netty-codec-http	CVE-2026-50020	中危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http	CVE-2026-50020	中危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http	CVE-2026-50020	中危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50020 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http	CVE-2026-56746	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http	CVE-2026-56746	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http	CVE-2026-56746	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http	CVE-2026-59898	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
io.netty:netty-codec-http	CVE-2026-59898	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
io.netty:netty-codec-http	CVE-2026-59898	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
io.netty:netty-codec-http	CVE-2026-59899	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http	CVE-2026-59899	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http	CVE-2026-59899	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http	CVE-2026-59921	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
io.netty:netty-codec-http	CVE-2026-59921	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
io.netty:netty-codec-http	CVE-2026-59921	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.18.3	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.18.3	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59888	中危	2.18.3	2.18.8, 2.21.4	com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59888	中危	2.18.3	2.18.8, 2.21.4	com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
io.netty:netty-codec-http2	CVE-2026-47244	中危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service via uncontrolled HTTP/2 concurrent streams 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:54
io.netty:netty-codec-http2	CVE-2026-48043	中危	4.1.115.Final	4.1.135.Final, 4.2.15.Final	netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48043 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 16:16 修改: 2026-08-13 13:19
io.netty:netty-codec-http2	CVE-2026-50560	中危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50560 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 16:16 修改: 2026-06-17 10:57
io.netty:netty-codec-http2	CVE-2026-59900	中危	4.1.115.Final	4.2.16.Final, 4.1.136.Final	io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-common	CVE-2025-25193	中危	4.1.115.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
io.netty:netty-common	CVE-2025-25193	中危	4.1.115.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
io.netty:netty-common	CVE-2025-25193	中危	4.1.115.Final	4.1.118.Final	netty: Denial of Service attack on windows app using Netty 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25193 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-02-10 22:15 修改: 2026-06-17 09:00
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59888	中危	2.18.3	2.18.8, 2.21.4	com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59888	中危	2.18.3	2.18.8, 2.21.4	com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59889	中危	2.18.3	2.21.5, 2.18.9, 2.22.1	jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59889	中危	2.18.3	2.21.5, 2.18.9, 2.22.1	jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59889	中危	2.18.3	2.21.5, 2.18.9, 2.22.1	jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59889	中危	2.18.3	2.21.5, 2.18.9, 2.22.1	jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.fasterxml.jackson.core:jackson-databind	GHSA-mhm7-754m-9p8w	中危	2.18.3	2.18.9, 2.21.5	jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)` 漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-databind	GHSA-mhm7-754m-9p8w	中危	2.18.3	2.18.9, 2.21.5	jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)` 漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-databind	GHSA-mhm7-754m-9p8w	中危	2.18.3	2.18.9, 2.21.5	jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)` 漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-databind	GHSA-mhm7-754m-9p8w	中危	2.18.3	2.18.9, 2.21.5	jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)` 漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.18.3	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.18.3	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	中危	2.19.0	2.18.8, 2.21.4, 3.1.4	jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	中危	2.19.0	3.1.4, 2.18.9, 2.21.5, 2.22.1	jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-resolver-dns	CVE-2026-45673	中危	4.1.115.Final	4.2.15.Final, 4.1.135.Final	netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
io.opentelemetry:opentelemetry-api	CVE-2026-45292	中危	1.31.0	1.62.0	opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45292 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-28 17:16 修改: 2026-08-14 13:18
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59888	中危	2.19.0	2.18.8, 2.21.4	com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.14.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.14.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.14.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.14.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.14.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.14.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.16.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.16.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.17.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.17.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.17.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.commons:commons-lang3	CVE-2025-48924	中危	3.17.0	3.18.0	commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.logging.log4j:log4j-1.2-api	CVE-2026-34479	中危	2.19.0	2.25.4	org.apache.logging.log4j/log4j-1.2-api: Apache Log4j 1-to-Log4j 2 bridge: Log processing denial of service due to improper XML escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34479 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-api	CVE-2026-49844	中危	2.19.0	2.25.5, 2.26.1	org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api	CVE-2026-49844	中危	2.24.3	2.25.5, 2.26.1	org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-core	CVE-2025-68161	中危	2.12.4	2.25.3	Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core	CVE-2026-34477	中危	2.12.4	2.25.4	org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core	CVE-2026-34480	中危	2.12.4	2.25.4	org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core	CVE-2025-68161	中危	2.19.0	2.25.3	Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core	CVE-2026-34477	中危	2.19.0	2.25.4	org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core	CVE-2026-34480	中危	2.19.0	2.25.4	org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.bouncycastle:bc-fips	CVE-2025-8885	中危	1.0.2.5	1.0.2.6, 2.0.1	bouncycastle: Bouncy Castle denial of service parsing ASN.1 Object Identifiers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8885 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-08-12 10:15 修改: 2026-06-17 10:07
org.bouncycastle:bcpkix-jdk18on	CVE-2025-8916	中危	1.78.1	1.79	org.bouncycastle: BouncyCastle denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8916 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-08-13 10:15 修改: 2026-06-17 10:07
org.bouncycastle:bcpkix-jdk18on	CVE-2026-5588	中危	1.78.1	1.84	bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-04-15 10:16 修改: 2026-08-12 12:19
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.16.1	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
org.bouncycastle:bcprov-jdk18on	CVE-2026-0636	中危	1.78.1	1.84	bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-04-15 10:16 修改: 2026-08-12 12:17
org.elasticsearch.plugin:x-pack-core	CVE-2025-68390	中危	8.16.3	8.19.8, 9.1.8, 9.2.2	elasticsearch: Elasticsearch Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68390 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-12-18 23:15 修改: 2026-06-17 09:59
org.elasticsearch.plugin:x-pack-security	CVE-2025-68384	中危	8.16.3	8.19.9, 9.1.9, 9.2.3	elasticsearch: Elasticsearch Allocation of Resources Without Limits or Throttling 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68384 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-12-18 22:16 修改: 2026-06-17 09:59
org.elasticsearch:elasticsearch	CVE-2025-37727	中危	8.16.3	8.18.8, 8.19.5, 9.0.8, 9.1.5	org.elasticsearch/elasticsearch-core: Elasticsearch Insertion of sensitive information in log file 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37727 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-10-10 10:15 修改: 2026-06-17 09:15
org.elasticsearch:elasticsearch	CVE-2025-37731	中危	8.16.3	8.19.8, 9.1.8, 9.2.2	elasticsearch: Elasticsearch: User impersonation due to improper authentication in Public Key Infrastructure (PKI) realm 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-37731 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-12-15 11:15 修改: 2026-06-17 09:15
org.jsoup:jsoup	CVE-2026-71497	中危	1.19.1	1.23.1	org.jsoup/jsoup: jsoup: Cross-site scripting via malformed HTML tag names 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71497 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-08-06 22:18 修改: 2026-08-07 15:17
com.nimbusds:nimbus-jose-jwt	CVE-2025-53864	中危	10.0.1	10.0.2, 9.37.4	com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
com.nimbusds:nimbus-jose-jwt	CVE-2025-53864	中危	9.37.3	10.0.2, 9.37.4	com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53864 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-11 03:16 修改: 2026-06-17 09:39
org.lz4:lz4-java	CVE-2026-59949	中危	1.8.0		LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
com.sun.mail:jakarta.mail	CVE-2025-7962	中危	1.6.3	1.6.8, 2.0.2	com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7962 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-21 18:15 修改: 2026-06-23 12:16
com.sun.mail:jakarta.mail	CVE-2025-7962	中危	2.0.1	1.6.8, 2.0.2	com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7962 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-07-21 18:15 修改: 2026-06-23 12:16
com.fasterxml.jackson.core:jackson-core	GHSA-72hv-8253-57qq	中危	2.19.0	2.21.1, 2.18.6	jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition 漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
io.netty:netty-codec-http	CVE-2025-58056	低危	4.1.115.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
io.netty:netty-codec-http	CVE-2025-58056	低危	4.1.115.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
io.netty:netty-codec-http	CVE-2025-58056	低危	4.1.115.Final	4.1.125.Final, 4.2.5.Final	netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58056 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43
ch.qos.logback:logback-core	CVE-2026-9828	低危	1.2.9	1.5.33	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
ch.qos.logback:logback-core	CVE-2024-12801	低危	1.2.9	1.5.13, 1.3.15	logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00
ch.qos.logback:logback-core	CVE-2024-12801	低危	1.2.9	1.5.13, 1.3.15	logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00
ch.qos.logback:logback-core	CVE-2026-10532	低危	1.5.18	1.5.34	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
ch.qos.logback:logback-core	CVE-2026-10532	低危	1.5.18	1.5.34	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
ch.qos.logback:logback-core	CVE-2026-1225	低危	1.5.18	1.5.25	ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15
ch.qos.logback:logback-core	CVE-2026-1225	低危	1.5.18	1.5.25	ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15
ch.qos.logback:logback-core	CVE-2026-9828	低危	1.5.18	1.5.33	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
ch.qos.logback:logback-core	CVE-2026-9828	低危	1.5.18	1.5.33	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
ch.qos.logback:logback-core	CVE-2026-10532	低危	1.2.9	1.5.34	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
ch.qos.logback:logback-core	CVE-2026-10532	低危	1.2.9	1.5.34	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-06-01 13:16 修改: 2026-07-22 07:10
ch.qos.logback:logback-core	CVE-2026-1225	低危	1.2.9	1.5.25	ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15
ch.qos.logback:logback-core	CVE-2026-1225	低危	1.2.9	1.5.25	ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15
ch.qos.logback:logback-core	CVE-2026-9828	低危	1.2.9	1.5.33	Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828 镜像层: sha256:bea23d5bdc66c0f805affca7456e6f17c5a8adbc8488334c892bd7ee1f007ff3 发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05

Node.js (node-pkg)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息