| io.netty:netty-codec-compression |
CVE-2026-59901 |
高危 |
4.2.15.Final |
4.2.16.Final |
io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-29 18:16 修改: 2026-07-30 16:33
|
| io.netty:netty-codec-http |
CVE-2026-55831 |
高危 |
4.2.15.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
|
| io.netty:netty-codec-http |
CVE-2026-55833 |
高危 |
4.2.15.Final |
4.2.16.Final, 4.1.136.Final |
netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
|
| io.netty:netty-codec-http |
CVE-2026-56745 |
高危 |
4.2.15.Final |
4.2.16.Final, 4.1.136.Final |
netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
|
| io.netty:netty-codec-http2 |
CVE-2026-56819 |
高危 |
4.2.15.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
|
| io.netty:netty-codec-http3 |
CVE-2026-56816 |
高危 |
4.2.15.Final |
4.2.16.Final |
Netty is a network application framework for development of protocol s ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56816
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:48
|
| org.apache.shiro:shiro-core |
CVE-2026-49268 |
高危 |
1.13.0 |
2.2.1, 3.0.0-alpha-2 |
A remote attacker can inject LDAP special characters into the Distingu ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49268
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-06-17 14:17 修改: 2026-06-18 14:45
|
| tools.jackson.core:jackson-core |
GHSA-r7wm-3cxj-wff9 |
高危 |
3.2.0 |
3.1.4, 3.2.1 |
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
|
| io.netty:netty-codec-http |
CVE-2026-59921 |
中危 |
4.2.15.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-28 23:17 修改: 2026-07-30 16:33
|
| io.netty:netty-codec-dns |
GHSA-mfg7-5gfp-c4w3 |
中危 |
4.2.15.Final |
4.2.16.Final, 4.1.136.Final |
Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names
漏洞详情: https://github.com/advisories/GHSA-mfg7-5gfp-c4w3
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-24 16:52 修改: 2026-07-24 16:52
|
| io.netty:netty-codec-http2 |
CVE-2026-59900 |
中危 |
4.2.15.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-29 18:16 修改: 2026-07-30 16:33
|
| io.netty:netty-codec-http |
CVE-2026-56746 |
中危 |
4.2.15.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
|
| io.netty:netty-codec-http |
CVE-2026-59898 |
中危 |
4.2.15.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-29 19:16 修改: 2026-07-30 16:33
|
| org.apache.shiro:shiro-core |
CVE-2026-43827 |
中危 |
1.13.0 |
2.2.0, 3.0.0-alpha-2 |
apache-shiro: Apache Shiro: Session fixation vulnerability due to improper session invalidation upon login
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43827
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-05-25 21:16 修改: 2026-07-24 10:10
|
| org.apache.shiro:shiro-spring |
CVE-2026-23903 |
中危 |
1.13.0 |
2.1.0 |
org.apache.shiro/shiro-web: Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23903
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-02-09 10:15 修改: 2026-06-17 10:22
|
| org.apache.shiro:shiro-web |
CVE-2026-43828 |
中危 |
1.13.0 |
2.2.0, 3.0.0-alpha-2 |
apache-shiro: Apache Shiro: Information disclosure via insecure cookie handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43828
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-05-25 21:16 修改: 2026-07-24 10:10
|
| org.eclipse.jetty:jetty-util |
CVE-2026-8384 |
中危 |
12.0.33 |
12.0.35, 12.1.9 |
In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/sec ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8384
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:39
|
| io.netty:netty-codec-http |
CVE-2026-59899 |
中危 |
4.2.15.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-29 18:16 修改: 2026-07-30 16:33
|
| tools.jackson.core:jackson-databind |
CVE-2026-59889 |
中危 |
3.2.0 |
3.1.5, 3.2.1 |
jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
|
| org.apache.shiro:shiro-core |
CVE-2026-23901 |
低危 |
1.13.0 |
2.1.0 |
org.apache.shiro/shiro-core: Apache Shiro: Brute force attack possible to determine valid user names
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23901
镜像层: sha256:a2cb3518c02516ab78a1bed2d116258812ce09900d5f0d981495798b9072b869
发布日期: 2026-02-10 10:15 修改: 2026-06-17 10:22
|