| expat |
CVE-2026-56132 |
高危 |
2.6.3-1.amzn2023.0.4 |
2.6.3-1.amzn2023.0.5 |
expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
|
| expat |
CVE-2026-56403 |
高危 |
2.6.3-1.amzn2023.0.4 |
2.6.3-1.amzn2023.0.6 |
libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
|
| expat |
CVE-2026-56406 |
高危 |
2.6.3-1.amzn2023.0.4 |
2.6.3-1.amzn2023.0.6 |
libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
|
| expat |
CVE-2026-56407 |
高危 |
2.6.3-1.amzn2023.0.4 |
2.6.3-1.amzn2023.0.6 |
libexpat: libexpat: Arbitrary code execution due to integer overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
|
| gawk |
CVE-2026-40467 |
高危 |
5.1.0-3.amzn2023.0.3 |
5.1.0-3.amzn2023.0.4 |
gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40467
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-07-13 13:16 修改: 2026-07-14 01:13
|
| gawk |
CVE-2026-40468 |
高危 |
5.1.0-3.amzn2023.0.3 |
5.1.0-3.amzn2023.0.4 |
gawk: gawk: Memory corruption via integer overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40468
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-07-13 13:16 修改: 2026-07-14 01:12
|
| gawk |
CVE-2026-40553 |
高危 |
5.1.0-3.amzn2023.0.3 |
5.1.0-3.amzn2023.0.4 |
gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40553
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-07-13 13:16 修改: 2026-07-14 01:10
|
| glib2 |
CVE-2026-16118 |
高危 |
2.82.2-769.amzn2023 |
2.82.2-771.amzn2023 |
xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16118
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-07-17 20:17 修改: 2026-07-29 17:16
|
| glib2 |
CVE-2026-58010 |
高危 |
2.82.2-769.amzn2023 |
2.82.2-770.amzn2023 |
glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58010
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-30 13:19 修改: 2026-08-03 06:16
|
| glib2 |
CVE-2026-58011 |
高危 |
2.82.2-769.amzn2023 |
2.82.2-770.amzn2023 |
glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58011
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-30 13:19 修改: 2026-08-03 06:16
|
| glib2 |
CVE-2026-58012 |
高危 |
2.82.2-769.amzn2023 |
2.82.2-770.amzn2023 |
glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58012
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-30 13:19 修改: 2026-08-03 06:16
|
| glib2 |
CVE-2026-58013 |
高危 |
2.82.2-769.amzn2023 |
2.82.2-770.amzn2023 |
glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58013
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-30 13:19 修改: 2026-08-03 06:16
|
| glib2 |
CVE-2026-58014 |
高危 |
2.82.2-769.amzn2023 |
2.82.2-770.amzn2023 |
glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58014
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-30 13:19 修改: 2026-08-03 06:16
|
| glib2 |
CVE-2026-58015 |
高危 |
2.82.2-769.amzn2023 |
2.82.2-770.amzn2023 |
glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58015
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-30 13:19 修改: 2026-08-03 06:16
|
| glib2 |
CVE-2026-58016 |
高危 |
2.82.2-769.amzn2023 |
2.82.2-770.amzn2023 |
glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-30 13:19 修改: 2026-08-11 10:17
|
| graphite2 |
CVE-2026-50593 |
高危 |
1.3.14-7.amzn2023.0.2 |
1.3.14-7.amzn2023.0.3 |
Graphite before 1.3.15 has an integer underflow and resultant out-of-b ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50593
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-06-05 04:17 修改: 2026-07-23 07:10
|
| java-21-amazon-corretto |
CVE-2026-46917 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46917
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55
|
| java-21-amazon-corretto |
CVE-2026-46968 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46968
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:27
|
| java-21-amazon-corretto |
CVE-2026-47010 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance JPEG handling (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47010
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:13
|
| java-21-amazon-corretto |
CVE-2026-47021 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance XBM image support (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47021
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-12 20:17
|
| java-21-amazon-corretto |
CVE-2026-47027 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance Jar file processing (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47027
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55
|
| java-21-amazon-corretto |
CVE-2026-47059 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47059
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:51
|
| java-21-amazon-corretto |
CVE-2026-47063 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance Jar handling (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47063
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:50
|
| java-21-amazon-corretto |
CVE-2026-60147 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Improve certification checking (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60147
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:49
|
| java-21-amazon-corretto-devel |
CVE-2026-46917 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46917
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55
|
| java-21-amazon-corretto-devel |
CVE-2026-46968 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46968
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:27
|
| java-21-amazon-corretto-devel |
CVE-2026-47010 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance JPEG handling (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47010
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:13
|
| java-21-amazon-corretto-devel |
CVE-2026-47021 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance XBM image support (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47021
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-12 20:17
|
| java-21-amazon-corretto-devel |
CVE-2026-47027 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance Jar file processing (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47027
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55
|
| java-21-amazon-corretto-devel |
CVE-2026-47059 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47059
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:51
|
| java-21-amazon-corretto-devel |
CVE-2026-47063 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance Jar handling (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47063
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:50
|
| java-21-amazon-corretto-devel |
CVE-2026-60147 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Improve certification checking (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60147
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:49
|
| java-21-amazon-corretto-headless |
CVE-2026-46917 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46917
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55
|
| java-21-amazon-corretto-headless |
CVE-2026-46968 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46968
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:27
|
| java-21-amazon-corretto-headless |
CVE-2026-47010 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance JPEG handling (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47010
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:13
|
| java-21-amazon-corretto-headless |
CVE-2026-47021 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance XBM image support (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47021
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-12 20:17
|
| java-21-amazon-corretto-headless |
CVE-2026-47027 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance Jar file processing (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47027
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55
|
| java-21-amazon-corretto-headless |
CVE-2026-47059 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47059
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:51
|
| java-21-amazon-corretto-headless |
CVE-2026-47063 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance Jar handling (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47063
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:50
|
| java-21-amazon-corretto-headless |
CVE-2026-60147 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Improve certification checking (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60147
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:49
|
| java-21-amazon-corretto-jmods |
CVE-2026-46917 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46917
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55
|
| java-21-amazon-corretto-jmods |
CVE-2026-46968 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46968
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:27
|
| java-21-amazon-corretto-jmods |
CVE-2026-47010 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance JPEG handling (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47010
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-07-31 15:13
|
| java-21-amazon-corretto-jmods |
CVE-2026-47021 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance XBM image support (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47021
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-12 20:17
|
| java-21-amazon-corretto-jmods |
CVE-2026-47027 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance Jar file processing (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47027
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:55
|
| java-21-amazon-corretto-jmods |
CVE-2026-47059 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47059
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:51
|
| java-21-amazon-corretto-jmods |
CVE-2026-47063 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Enhance Jar handling (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47063
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:50
|
| java-21-amazon-corretto-jmods |
CVE-2026-60147 |
高危 |
1:21.0.11+10-1.amzn2023.1 |
1:21.0.12+8-1.amzn2023.1 |
openjdk: Improve certification checking (Oracle CPU 2026-07)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60147
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-07-21 22:17 修改: 2026-08-03 18:49
|
| libacl |
CVE-2026-54369 |
高危 |
2.3.1-2.amzn2023.0.2 |
2.4.0-1.amzn2023.0.1 |
acl: Symlink traversal privilege escalation via libacl functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-29 14:16 修改: 2026-08-11 13:18
|
| libacl |
CVE-2026-54370 |
高危 |
2.3.1-2.amzn2023.0.2 |
2.4.0-1.amzn2023.0.1 |
acl: TOCTOU Symlink Traversal via getfacl/setfacl
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22
|
| libblkid |
CVE-2026-53615 |
高危 |
2.37.4-1.amzn2023.0.4 |
2.37.4-1.amzn2023.0.5 |
[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libcap |
CVE-2026-27142 |
高危 |
2.73-1.amzn2023.0.6 |
2.73-1.amzn2023.0.7 |
html/template: URLs in meta content attribute actions are not escaped in html/template
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
|
| libcap |
CVE-2026-33811 |
高危 |
2.73-1.amzn2023.0.6 |
2.73-1.amzn2023.0.7 |
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-05-07 20:16 修改: 2026-08-14 13:18
|
| libcap |
CVE-2026-33814 |
高危 |
2.73-1.amzn2023.0.6 |
2.73-1.amzn2023.0.7 |
net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-05-07 20:16 修改: 2026-08-13 13:18
|
| libcap |
CVE-2026-39820 |
高危 |
2.73-1.amzn2023.0.6 |
2.73-1.amzn2023.0.7 |
net/mail: golang: Go net/mail: Denial of Service via crafted email inputs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-05-07 20:16 修改: 2026-08-14 13:18
|
| libcap |
CVE-2026-39823 |
高危 |
2.73-1.amzn2023.0.6 |
2.73-1.amzn2023.0.7 |
html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
|
| libcap |
CVE-2026-42499 |
高危 |
2.73-1.amzn2023.0.6 |
2.73-1.amzn2023.0.7 |
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-05-07 20:16 修改: 2026-08-14 13:18
|
| libfdisk |
CVE-2026-53615 |
高危 |
2.37.4-1.amzn2023.0.4 |
2.37.4-1.amzn2023.0.5 |
[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libmount |
CVE-2026-53615 |
高危 |
2.37.4-1.amzn2023.0.4 |
2.37.4-1.amzn2023.0.5 |
[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libsmartcols |
CVE-2026-53615 |
高危 |
2.37.4-1.amzn2023.0.4 |
2.37.4-1.amzn2023.0.5 |
[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| libsolv |
CVE-2026-48863 |
高危 |
0.7.22-1.amzn2023.0.2 |
0.7.22-1.amzn2023.0.4 |
libsolv: Stack-based buffer overflow in libsolv EdDSA PGP signature verification allows denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48863
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-07-16 01:16 修改: 2026-07-18 03:16
|
| libsolv |
CVE-2026-48864 |
高危 |
0.7.22-1.amzn2023.0.2 |
0.7.22-1.amzn2023.0.4 |
libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48864
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-05-26 17:16 修改: 2026-08-11 10:17
|
| libsolv |
CVE-2026-9149 |
高危 |
0.7.22-1.amzn2023.0.2 |
0.7.22-1.amzn2023.0.4 |
libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9149
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-05-21 00:16 修改: 2026-07-31 18:17
|
| libsolv |
CVE-2026-9150 |
高危 |
0.7.22-1.amzn2023.0.2 |
0.7.22-1.amzn2023.0.4 |
libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9150
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-05-20 23:16 修改: 2026-07-31 18:17
|
| libuuid |
CVE-2026-53615 |
高危 |
2.37.4-1.amzn2023.0.4 |
2.37.4-1.amzn2023.0.5 |
[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| nodejs22 |
CVE-2026-11525 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
|
| nodejs22 |
CVE-2026-11822 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
SQLite before 3.53.2 contains memory corruption vulnerabilities in the ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| nodejs22 |
CVE-2026-11824 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| nodejs22 |
CVE-2026-12151 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 17:16 修改: 2026-08-10 13:17
|
| nodejs22 |
CVE-2026-33630 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.2 |
c-ares: c-ares: Use-after-free / double-free in query-completion handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33630
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| nodejs22 |
CVE-2026-48615 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48615
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:18
|
| nodejs22 |
CVE-2026-48617 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Permission Model bypass via `process.report.writeReport()` path misvalidation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48617
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-18 17:16 修改: 2026-06-22 20:20
|
| nodejs22 |
CVE-2026-48618 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48618
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-08-10 13:19
|
| nodejs22 |
CVE-2026-48619 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48619
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:18
|
| nodejs22 |
CVE-2026-48928 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48928
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:19
|
| nodejs22 |
CVE-2026-48930 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48930
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:19
|
| nodejs22 |
CVE-2026-48931 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48931
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-22 20:16 修改: 2026-07-03 01:16
|
| nodejs22 |
CVE-2026-48933 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48933
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-08-10 13:19
|
| nodejs22 |
CVE-2026-48934 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Certification validation bypass in TLS host verification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48934
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-29 14:16
|
| nodejs22 |
CVE-2026-48935 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Unauthorized file metadata modification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48935
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:14
|
| nodejs22 |
CVE-2026-48937 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js HTTP/2 Server: Denial of Service due to continued data acceptance after GOAWAY frame
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48937
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-18 19:16 修改: 2026-06-22 20:20
|
| nodejs22 |
CVE-2026-6733 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
|
| nodejs22 |
CVE-2026-9679 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
|
| nodejs22-docs |
CVE-2026-11525 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
|
| nodejs22-docs |
CVE-2026-11822 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
SQLite before 3.53.2 contains memory corruption vulnerabilities in the ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| nodejs22-docs |
CVE-2026-11824 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| nodejs22-docs |
CVE-2026-12151 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 17:16 修改: 2026-08-10 13:17
|
| nodejs22-docs |
CVE-2026-33630 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.2 |
c-ares: c-ares: Use-after-free / double-free in query-completion handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33630
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| nodejs22-docs |
CVE-2026-48615 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48615
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:18
|
| nodejs22-docs |
CVE-2026-48617 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Permission Model bypass via `process.report.writeReport()` path misvalidation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48617
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-18 17:16 修改: 2026-06-22 20:20
|
| nodejs22-docs |
CVE-2026-48618 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48618
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-08-10 13:19
|
| nodejs22-docs |
CVE-2026-48619 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48619
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:18
|
| nodejs22-docs |
CVE-2026-48928 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48928
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:19
|
| nodejs22-docs |
CVE-2026-48930 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48930
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:19
|
| nodejs22-docs |
CVE-2026-48931 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48931
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-22 20:16 修改: 2026-07-03 01:16
|
| nodejs22-docs |
CVE-2026-48933 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48933
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-08-10 13:19
|
| nodejs22-docs |
CVE-2026-48934 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Certification validation bypass in TLS host verification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48934
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-29 14:16
|
| nodejs22-docs |
CVE-2026-48935 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Unauthorized file metadata modification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48935
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:14
|
| nodejs22-docs |
CVE-2026-48937 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js HTTP/2 Server: Denial of Service due to continued data acceptance after GOAWAY frame
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48937
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-18 19:16 修改: 2026-06-22 20:20
|
| nodejs22-docs |
CVE-2026-6733 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
|
| nodejs22-docs |
CVE-2026-9679 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
|
| nodejs22-full-i18n |
CVE-2026-11525 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
|
| nodejs22-full-i18n |
CVE-2026-11822 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
SQLite before 3.53.2 contains memory corruption vulnerabilities in the ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| nodejs22-full-i18n |
CVE-2026-11824 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| nodejs22-full-i18n |
CVE-2026-12151 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 17:16 修改: 2026-08-10 13:17
|
| nodejs22-full-i18n |
CVE-2026-33630 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.2 |
c-ares: c-ares: Use-after-free / double-free in query-completion handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33630
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| nodejs22-full-i18n |
CVE-2026-48615 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48615
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:18
|
| nodejs22-full-i18n |
CVE-2026-48617 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Permission Model bypass via `process.report.writeReport()` path misvalidation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48617
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-18 17:16 修改: 2026-06-22 20:20
|
| nodejs22-full-i18n |
CVE-2026-48618 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48618
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-08-10 13:19
|
| nodejs22-full-i18n |
CVE-2026-48619 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48619
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:18
|
| nodejs22-full-i18n |
CVE-2026-48928 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48928
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:19
|
| nodejs22-full-i18n |
CVE-2026-48930 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48930
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:19
|
| nodejs22-full-i18n |
CVE-2026-48931 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48931
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-22 20:16 修改: 2026-07-03 01:16
|
| nodejs22-full-i18n |
CVE-2026-48933 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48933
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-08-10 13:19
|
| nodejs22-full-i18n |
CVE-2026-48934 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Certification validation bypass in TLS host verification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48934
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-29 14:16
|
| nodejs22-full-i18n |
CVE-2026-48935 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Unauthorized file metadata modification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48935
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:14
|
| nodejs22-full-i18n |
CVE-2026-48937 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js HTTP/2 Server: Denial of Service due to continued data acceptance after GOAWAY frame
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48937
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-18 19:16 修改: 2026-06-22 20:20
|
| nodejs22-full-i18n |
CVE-2026-6733 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
|
| nodejs22-full-i18n |
CVE-2026-9679 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
|
| nodejs22-libs |
CVE-2026-11525 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
|
| nodejs22-libs |
CVE-2026-11822 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
SQLite before 3.53.2 contains memory corruption vulnerabilities in the ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| nodejs22-libs |
CVE-2026-11824 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| nodejs22-libs |
CVE-2026-12151 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 17:16 修改: 2026-08-10 13:17
|
| nodejs22-libs |
CVE-2026-33630 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.2 |
c-ares: c-ares: Use-after-free / double-free in query-completion handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33630
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| nodejs22-libs |
CVE-2026-48615 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48615
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:18
|
| nodejs22-libs |
CVE-2026-48617 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Permission Model bypass via `process.report.writeReport()` path misvalidation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48617
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-18 17:16 修改: 2026-06-22 20:20
|
| nodejs22-libs |
CVE-2026-48618 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48618
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-08-10 13:19
|
| nodejs22-libs |
CVE-2026-48619 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48619
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:18
|
| nodejs22-libs |
CVE-2026-48928 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48928
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:19
|
| nodejs22-libs |
CVE-2026-48930 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48930
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:19
|
| nodejs22-libs |
CVE-2026-48931 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48931
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-22 20:16 修改: 2026-07-03 01:16
|
| nodejs22-libs |
CVE-2026-48933 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48933
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-08-10 13:19
|
| nodejs22-libs |
CVE-2026-48934 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Certification validation bypass in TLS host verification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48934
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-29 14:16
|
| nodejs22-libs |
CVE-2026-48935 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js: Unauthorized file metadata modification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48935
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:14
|
| nodejs22-libs |
CVE-2026-48937 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
nodejs: Node.js HTTP/2 Server: Denial of Service due to continued data acceptance after GOAWAY frame
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48937
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-18 19:16 修改: 2026-06-22 20:20
|
| nodejs22-libs |
CVE-2026-6733 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
|
| nodejs22-libs |
CVE-2026-9679 |
高危 |
1:22.22.2-1.amzn2023.0.3 |
1:22.23.1-1.amzn2023.0.1 |
undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
|
| nodejs22-npm |
CVE-2026-11525 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
|
| nodejs22-npm |
CVE-2026-11822 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
SQLite before 3.53.2 contains memory corruption vulnerabilities in the ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| nodejs22-npm |
CVE-2026-11824 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| nodejs22-npm |
CVE-2026-12151 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 17:16 修改: 2026-08-10 13:17
|
| nodejs22-npm |
CVE-2026-33630 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.2 |
c-ares: c-ares: Use-after-free / double-free in query-completion handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33630
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| nodejs22-npm |
CVE-2026-48615 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
nodejs: Node.js: Information disclosure of proxy credentials via proxy tunnel error handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48615
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:18
|
| nodejs22-npm |
CVE-2026-48617 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
nodejs: Node.js: Permission Model bypass via `process.report.writeReport()` path misvalidation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48617
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-18 17:16 修改: 2026-06-22 20:20
|
| nodejs22-npm |
CVE-2026-48618 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
nodejs: Node.js: Authentication bypass due to TLS hostname handling and unicode dot separator mismatch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48618
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-08-10 13:19
|
| nodejs22-npm |
CVE-2026-48619 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48619
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:18
|
| nodejs22-npm |
CVE-2026-48928 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
Node.js: Node.js: Trust-policy bypass due to hostname matching inconsistency
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48928
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:19
|
| nodejs22-npm |
CVE-2026-48930 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
nodejs: Node.js: Silent authority rebinding due to embedded-nul hostnames in TLS handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48930
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:19
|
| nodejs22-npm |
CVE-2026-48931 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48931
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-22 20:16 修改: 2026-07-03 01:16
|
| nodejs22-npm |
CVE-2026-48933 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48933
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-08-10 13:19
|
| nodejs22-npm |
CVE-2026-48934 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
nodejs: Node.js: Certification validation bypass in TLS host verification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48934
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-29 14:16
|
| nodejs22-npm |
CVE-2026-48935 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
nodejs: Node.js: Unauthorized file metadata modification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48935
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-26 02:16 修改: 2026-06-26 20:14
|
| nodejs22-npm |
CVE-2026-48937 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
nodejs: Node.js HTTP/2 Server: Denial of Service due to continued data acceptance after GOAWAY frame
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48937
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-18 19:16 修改: 2026-06-22 20:20
|
| nodejs22-npm |
CVE-2026-6733 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
|
| nodejs22-npm |
CVE-2026-9679 |
高危 |
1:10.9.7-1.22.22.2.1.amzn2023.0.3 |
1:10.9.8-1.22.23.1.1.amzn2023.0.1 |
undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
|
| openssl |
CVE-2026-34180 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-34181 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-34182 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-34183 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-42764 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: NULL pointer dereference in QUIC server initial packet handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-42766 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Possible NULL Dereference in Password-Based CMS Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-42767 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-42768 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-42769 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-42770 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-45445 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: AES-OCB IV Ignored on EVP_Cipher() Path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-45446 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-45447 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-08-10 13:19
|
| openssl |
CVE-2026-7383 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl |
CVE-2026-9076 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-34180 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-34181 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-34182 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-34183 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-42764 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: NULL pointer dereference in QUIC server initial packet handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-42766 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Possible NULL Dereference in Password-Based CMS Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-42767 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-42768 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-42769 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-42770 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-45445 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: AES-OCB IV Ignored on EVP_Cipher() Path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-45446 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-45447 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-08-10 13:19
|
| openssl-fips-provider-latest |
CVE-2026-7383 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-fips-provider-latest |
CVE-2026-9076 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-34180 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-34181 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-34182 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-34183 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-42764 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: NULL pointer dereference in QUIC server initial packet handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-42766 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Possible NULL Dereference in Password-Based CMS Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-42767 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-42768 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-42769 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-42770 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-45445 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: AES-OCB IV Ignored on EVP_Cipher() Path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-45446 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-45447 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-08-10 13:19
|
| openssl-libs |
CVE-2026-7383 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| openssl-libs |
CVE-2026-9076 |
高危 |
1:3.5.5-1.amzn2023.0.4 |
1:3.5.5-1.amzn2023.0.5 |
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
|
| python3 |
CVE-2025-13462 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.7 |
cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-0864 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.8 |
python: cpython: Python configparser: Configuration injection via crafted multi-line input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-23 18:17 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-11940 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.8 |
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-11972 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.8 |
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-15308 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.9 |
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-07-09 17:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-3276 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.8 |
python: Python unicodedata: Denial of Service due to excessive CPU consumption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-3446 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.7 |
python: Python base64: Incomplete data decoding due to premature stop at padding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3446
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-04-10 19:16 修改: 2026-06-17 10:43
|
| python3 |
CVE-2026-3479 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.7 |
python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
|
| python3 |
CVE-2026-4360 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.9 |
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-6019 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.6 |
python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34
|
| python3 |
CVE-2026-7774 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.9 |
python: CPython: Python tarfile: Arbitrary file write via crafted link entries
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
|
| python3 |
CVE-2026-9669 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.8 |
python: Python: Denial of Service via out-of-bounds write in BZ2 decompression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16
|
| python3-libs |
CVE-2025-13462 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.7 |
cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16
|
| python3-libs |
CVE-2026-0864 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.8 |
python: cpython: Python configparser: Configuration injection via crafted multi-line input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-23 18:17 修改: 2026-08-13 01:16
|
| python3-libs |
CVE-2026-11940 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.8 |
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
|
| python3-libs |
CVE-2026-11972 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.8 |
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
|
| python3-libs |
CVE-2026-15308 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.9 |
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-07-09 17:16 修改: 2026-08-13 01:16
|
| python3-libs |
CVE-2026-3276 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.8 |
python: Python unicodedata: Denial of Service due to excessive CPU consumption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16
|
| python3-libs |
CVE-2026-3446 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.7 |
python: Python base64: Incomplete data decoding due to premature stop at padding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3446
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-04-10 19:16 修改: 2026-06-17 10:43
|
| python3-libs |
CVE-2026-3479 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.7 |
python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
|
| python3-libs |
CVE-2026-4360 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.9 |
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
|
| python3-libs |
CVE-2026-6019 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.6 |
python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34
|
| python3-libs |
CVE-2026-7774 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.9 |
python: CPython: Python tarfile: Arbitrary file write via crafted link entries
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
|
| python3-libs |
CVE-2026-9669 |
高危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.8 |
python: Python: Denial of Service via out-of-bounds write in BZ2 decompression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16
|
| python3-pip-wheel |
CVE-2026-8643 |
高危 |
21.3.1-2.amzn2023.0.19 |
21.3.1-2.amzn2023.0.20 |
python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-01 17:17 修改: 2026-08-14 13:19
|
| python3-rpm |
CVE-2026-44605 |
高危 |
4.16.1.3-29.amzn2023.0.6 |
4.16.1.3-29.amzn2023.0.7 |
rpm: heap buffer overflow in NDB slot table parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-08-05 18:17 修改: 2026-08-06 15:37
|
| python3.13 |
CVE-2025-13462 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.2 |
cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16
|
| python3.13 |
CVE-2026-0864 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.2 |
python: cpython: Python configparser: Configuration injection via crafted multi-line input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-23 18:17 修改: 2026-08-13 01:16
|
| python3.13 |
CVE-2026-11940 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
|
| python3.13 |
CVE-2026-11972 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.2 |
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
|
| python3.13 |
CVE-2026-1502 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
python: Python: HTTP header injection via CR/LF in proxy tunnel headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16
|
| python3.13 |
CVE-2026-15308 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.3 |
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-07-09 17:16 修改: 2026-08-13 01:16
|
| python3.13 |
CVE-2026-3276 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
python: Python unicodedata: Denial of Service due to excessive CPU consumption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16
|
| python3.13 |
CVE-2026-4360 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.3 |
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
|
| python3.13 |
CVE-2026-6019 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.13-1.amzn2023.0.3 |
python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34
|
| python3.13 |
CVE-2026-7774 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
python: CPython: Python tarfile: Arbitrary file write via crafted link entries
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
|
| python3.13 |
CVE-2026-9669 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
python: Python: Denial of Service via out-of-bounds write in BZ2 decompression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16
|
| python3.13-libs |
CVE-2025-13462 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.2 |
cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16
|
| python3.13-libs |
CVE-2026-0864 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.2 |
python: cpython: Python configparser: Configuration injection via crafted multi-line input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-23 18:17 修改: 2026-08-13 01:16
|
| python3.13-libs |
CVE-2026-11940 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
|
| python3.13-libs |
CVE-2026-11972 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.2 |
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
|
| python3.13-libs |
CVE-2026-1502 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
python: Python: HTTP header injection via CR/LF in proxy tunnel headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16
|
| python3.13-libs |
CVE-2026-15308 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.3 |
python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-07-09 17:16 修改: 2026-08-13 01:16
|
| python3.13-libs |
CVE-2026-3276 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
python: Python unicodedata: Denial of Service due to excessive CPU consumption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16
|
| python3.13-libs |
CVE-2026-4360 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.3 |
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
|
| python3.13-libs |
CVE-2026-6019 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.13-1.amzn2023.0.3 |
python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34
|
| python3.13-libs |
CVE-2026-7774 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
python: CPython: Python tarfile: Arbitrary file write via crafted link entries
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
|
| python3.13-libs |
CVE-2026-9669 |
高危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
python: Python: Denial of Service via out-of-bounds write in BZ2 decompression
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16
|
| python3.13-pip-wheel |
CVE-2026-8643 |
高危 |
24.2-259.amzn2023.0.5 |
24.2-259.amzn2023.0.7 |
python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-01 17:17 修改: 2026-08-14 13:19
|
| rpm |
CVE-2026-44605 |
高危 |
4.16.1.3-29.amzn2023.0.6 |
4.16.1.3-29.amzn2023.0.7 |
rpm: heap buffer overflow in NDB slot table parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-08-05 18:17 修改: 2026-08-06 15:37
|
| rpm-build-libs |
CVE-2026-44605 |
高危 |
4.16.1.3-29.amzn2023.0.6 |
4.16.1.3-29.amzn2023.0.7 |
rpm: heap buffer overflow in NDB slot table parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-08-05 18:17 修改: 2026-08-06 15:37
|
| rpm-libs |
CVE-2026-44605 |
高危 |
4.16.1.3-29.amzn2023.0.6 |
4.16.1.3-29.amzn2023.0.7 |
rpm: heap buffer overflow in NDB slot table parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-08-05 18:17 修改: 2026-08-06 15:37
|
| rpm-sign-libs |
CVE-2026-44605 |
高危 |
4.16.1.3-29.amzn2023.0.6 |
4.16.1.3-29.amzn2023.0.7 |
rpm: heap buffer overflow in NDB slot table parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44605
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-08-05 18:17 修改: 2026-08-06 15:37
|
| sqlite-libs |
CVE-2026-11822 |
高危 |
3.40.0-1.amzn2023.0.7 |
3.40.0-1.amzn2023.0.8 |
SQLite before 3.53.2 contains memory corruption vulnerabilities in the ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| sqlite-libs |
CVE-2026-11824 |
高危 |
3.40.0-1.amzn2023.0.7 |
3.40.0-1.amzn2023.0.8 |
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
|
| util-linux |
CVE-2026-53615 |
高危 |
2.37.4-1.amzn2023.0.4 |
2.37.4-1.amzn2023.0.5 |
[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| util-linux-core |
CVE-2026-53615 |
高危 |
2.37.4-1.amzn2023.0.4 |
2.37.4-1.amzn2023.0.5 |
[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| openssh |
CVE-2026-35414 |
中危 |
8.7p1-8.amzn2023.0.17 |
8.7p1-8.amzn2023.0.18 |
OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35414
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-02 18:16 修改: 2026-07-24 21:10
|
| openssh |
CVE-2026-55653 |
中危 |
8.7p1-8.amzn2023.0.17 |
9.9p1-10.amzn2023.0.1 |
openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55653
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-23 04:17 修改: 2026-08-12 16:17
|
| openssh |
CVE-2026-55655 |
中危 |
8.7p1-8.amzn2023.0.17 |
9.9p1-10.amzn2023.0.1 |
openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55655
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-23 04:17 修改: 2026-08-12 16:17
|
| openssh |
CVE-2026-59996 |
中危 |
8.7p1-8.amzn2023.0.17 |
9.9p1-10.amzn2023.0.1 |
openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59996
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-07-08 01:16 修改: 2026-07-09 17:14
|
| openssh |
CVE-2026-60002 |
中危 |
8.7p1-8.amzn2023.0.17 |
9.9p1-10.amzn2023.0.1 |
openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60002
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-07-08 01:16 修改: 2026-07-09 16:36
|
| python3 |
CVE-2026-7210 |
中危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.7 |
python: expat: Python/Expat: Denial of Service via crafted XML document
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19
|
| python3 |
CVE-2026-8328 |
中危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.7 |
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16
|
| openssh-clients |
CVE-2026-3497 |
中危 |
8.7p1-8.amzn2023.0.17 |
8.7p1-8.amzn2023.0.18 |
openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3497
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-03-12 19:16 修改: 2026-07-15 02:21
|
| openssh-clients |
CVE-2026-35386 |
中危 |
8.7p1-8.amzn2023.0.17 |
8.7p1-8.amzn2023.0.18 |
OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35386
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-02 17:16 修改: 2026-07-24 21:10
|
| openssh-clients |
CVE-2026-35387 |
中危 |
8.7p1-8.amzn2023.0.17 |
8.7p1-8.amzn2023.0.18 |
OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35387
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-02 17:16 修改: 2026-07-24 21:10
|
| openssh-clients |
CVE-2026-35388 |
中危 |
8.7p1-8.amzn2023.0.17 |
8.7p1-8.amzn2023.0.18 |
OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35388
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-02 17:16 修改: 2026-07-24 21:10
|
| openssh-clients |
CVE-2026-35414 |
中危 |
8.7p1-8.amzn2023.0.17 |
8.7p1-8.amzn2023.0.18 |
OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35414
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-02 18:16 修改: 2026-07-24 21:10
|
| openssh-clients |
CVE-2026-55653 |
中危 |
8.7p1-8.amzn2023.0.17 |
9.9p1-10.amzn2023.0.1 |
openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55653
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-23 04:17 修改: 2026-08-12 16:17
|
| openssh-clients |
CVE-2026-55655 |
中危 |
8.7p1-8.amzn2023.0.17 |
9.9p1-10.amzn2023.0.1 |
openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55655
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-23 04:17 修改: 2026-08-12 16:17
|
| openssh-clients |
CVE-2026-59996 |
中危 |
8.7p1-8.amzn2023.0.17 |
9.9p1-10.amzn2023.0.1 |
openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59996
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-07-08 01:16 修改: 2026-07-09 17:14
|
| openssh-clients |
CVE-2026-60002 |
中危 |
8.7p1-8.amzn2023.0.17 |
9.9p1-10.amzn2023.0.1 |
openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-60002
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-07-08 01:16 修改: 2026-07-09 16:36
|
| libxml2 |
CVE-2026-11979 |
中危 |
2.10.4-1.amzn2023.0.18 |
2.10.4-1.amzn2023.0.20 |
libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11979
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-29 14:16 修改: 2026-06-30 20:22
|
| perl-AutoLoader |
CVE-2026-8376 |
中危 |
5.74-477.amzn2023.0.7 |
5.74-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-B |
CVE-2026-8376 |
中危 |
1.80-477.amzn2023.0.7 |
1.80-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| python3-libs |
CVE-2026-7210 |
中危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.7 |
python: expat: Python/Expat: Denial of Service via crafted XML document
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19
|
| python3-libs |
CVE-2026-8328 |
中危 |
3.9.25-1.amzn2023.0.5 |
3.9.25-1.amzn2023.0.7 |
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16
|
| perl-Class-Struct |
CVE-2026-8376 |
中危 |
0.66-477.amzn2023.0.7 |
0.66-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-DynaLoader |
CVE-2026-8376 |
中危 |
1.47-477.amzn2023.0.7 |
1.47-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-Errno |
CVE-2026-8376 |
中危 |
1.30-477.amzn2023.0.7 |
1.30-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-Fcntl |
CVE-2026-8376 |
中危 |
1.13-477.amzn2023.0.7 |
1.13-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-File-Basename |
CVE-2026-8376 |
中危 |
2.85-477.amzn2023.0.7 |
2.85-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-File-Find |
CVE-2026-8376 |
中危 |
1.37-477.amzn2023.0.7 |
1.37-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-File-stat |
CVE-2026-8376 |
中危 |
1.09-477.amzn2023.0.7 |
1.09-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-FileHandle |
CVE-2026-8376 |
中危 |
2.03-477.amzn2023.0.7 |
2.03-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-Getopt-Std |
CVE-2026-8376 |
中危 |
1.12-477.amzn2023.0.7 |
1.12-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-HTTP-Tiny |
CVE-2026-7010 |
中危 |
0.092-2.amzn2023.0.1 |
0.092-2.amzn2023.0.2 |
HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01
|
| perl-IO |
CVE-2026-8376 |
中危 |
1.43-477.amzn2023.0.7 |
1.43-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-IPC-Open3 |
CVE-2026-8376 |
中危 |
1.21-477.amzn2023.0.7 |
1.21-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-NDBM_File |
CVE-2026-8376 |
中危 |
1.15-477.amzn2023.0.7 |
1.15-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| python3.13 |
CVE-2026-7210 |
中危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
python: expat: Python/Expat: Denial of Service via crafted XML document
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19
|
| python3.13 |
CVE-2026-8328 |
中危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16
|
| perl-POSIX |
CVE-2026-8376 |
中危 |
1.94-477.amzn2023.0.7 |
1.94-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-SelectSaver |
CVE-2026-8376 |
中危 |
1.02-477.amzn2023.0.7 |
1.02-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-Symbol |
CVE-2026-8376 |
中危 |
1.08-477.amzn2023.0.7 |
1.08-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-base |
CVE-2026-8376 |
中危 |
2.27-477.amzn2023.0.7 |
2.27-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-if |
CVE-2026-8376 |
中危 |
0.60.800-477.amzn2023.0.7 |
0.60.800-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-interpreter |
CVE-2026-8376 |
中危 |
4:5.32.1-477.amzn2023.0.7 |
4:5.32.1-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-lib |
CVE-2026-8376 |
中危 |
0.65-477.amzn2023.0.7 |
0.65-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-libs |
CVE-2026-8376 |
中危 |
4:5.32.1-477.amzn2023.0.7 |
4:5.32.1-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-mro |
CVE-2026-8376 |
中危 |
1.23-477.amzn2023.0.7 |
1.23-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-overload |
CVE-2026-8376 |
中危 |
1.31-477.amzn2023.0.7 |
1.31-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-overloading |
CVE-2026-8376 |
中危 |
0.02-477.amzn2023.0.7 |
0.02-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| python3.13-libs |
CVE-2026-7210 |
中危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
python: expat: Python/Expat: Denial of Service via crafted XML document
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19
|
| python3.13-libs |
CVE-2026-8328 |
中危 |
3.13.13-1.amzn2023.0.2 |
3.13.14-1.amzn2023.0.1 |
The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16
|
| perl-subs |
CVE-2026-8376 |
中危 |
1.03-477.amzn2023.0.7 |
1.03-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| perl-vars |
CVE-2026-8376 |
中危 |
1.05-477.amzn2023.0.7 |
1.05-477.amzn2023.0.9 |
perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
|
| libxml2 |
CVE-2026-6653 |
中危 |
2.10.4-1.amzn2023.0.18 |
2.10.4-1.amzn2023.0.19 |
libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6653
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-22 14:17 修改: 2026-07-14 16:00
|
| krb5-libs |
CVE-2026-11850 |
中危 |
1.21.3-7.amzn2023.0.1 |
1.21.3-8.amzn2023.0.1 |
krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
|
| giflib |
CVE-2026-26740 |
中危 |
5.2.1-9.amzn2023.0.3 |
5.2.1-9.amzn2023.0.4 |
giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26740
镜像层: sha256:8b96d86937cfd0f5a15d0dcb7d737fefae8bf59eab206b924232a5b7c494112f
发布日期: 2026-03-18 18:16 修改: 2026-07-23 12:17
|
| openssh |
CVE-2026-3497 |
中危 |
8.7p1-8.amzn2023.0.17 |
8.7p1-8.amzn2023.0.18 |
openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3497
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-03-12 19:16 修改: 2026-07-15 02:21
|
| openssh |
CVE-2026-35386 |
中危 |
8.7p1-8.amzn2023.0.17 |
8.7p1-8.amzn2023.0.18 |
OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35386
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-02 17:16 修改: 2026-07-24 21:10
|
| openssh |
CVE-2026-35387 |
中危 |
8.7p1-8.amzn2023.0.17 |
8.7p1-8.amzn2023.0.18 |
OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35387
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-02 17:16 修改: 2026-07-24 21:10
|
| openssh |
CVE-2026-35388 |
中危 |
8.7p1-8.amzn2023.0.17 |
8.7p1-8.amzn2023.0.18 |
OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35388
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-02 17:16 修改: 2026-07-24 21:10
|
| gnupg2-minimal |
CVE-2026-57062 |
低危 |
2.3.7-1.amzn2023.0.8 |
2.3.7-1.amzn2023.0.9 |
GnuPG: Incorrect cryptographic message parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062
镜像层: sha256:002df9df4f78ab6bf19bfddfe322f22a0dc454c4bd358b8beb7f027450083054
发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16
|
| python3.13-pip-wheel |
CVE-2026-3219 |
低危 |
24.2-259.amzn2023.0.5 |
24.2-259.amzn2023.0.6 |
pip: pip: Incorrect file installation due to improper archive handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219
镜像层: sha256:3823848930d868ef50ce902d0fcabec8c010fa21e8cfa4a48ae0f9fa212b71ea
发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
|