docker.io/streamnative/sn-platform:4.2.1.10 linux/amd64

docker.io/streamnative/sn-platform:4.2.1.10 - Trivy安全扫描结果 扫描时间: 2026-08-17 00:20
全部漏洞信息
低危漏洞:4 中危漏洞:51 高危漏洞:52 严重漏洞:0

系统OS: alpine 3.24.1 扫描引擎: Trivy 扫描时间: 2026-08-17 00:20

docker.io/streamnative/sn-platform:4.2.1.10 (alpine 3.24.1) (alpine)
低危漏洞:4 中危漏洞:32 高危漏洞:12 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
pyc CVE-2026-11940 高危 3.14.5-r0 3.14.7-r0 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
pyc CVE-2026-15308 高危 3.14.5-r0 3.14.7-r0 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-07-09 17:16 修改: 2026-08-13 01:16
pyc CVE-2026-7210 高危 3.14.5-r0 3.14.7-r0 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19
python3 CVE-2026-11940 高危 3.14.5-r0 3.14.7-r0 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
python3 CVE-2026-15308 高危 3.14.5-r0 3.14.7-r0 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-07-09 17:16 修改: 2026-08-13 01:16
python3 CVE-2026-7210 高危 3.14.5-r0 3.14.7-r0 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19
python3-pyc CVE-2026-11940 高危 3.14.5-r0 3.14.7-r0 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
python3-pyc CVE-2026-15308 高危 3.14.5-r0 3.14.7-r0 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-07-09 17:16 修改: 2026-08-13 01:16
python3-pyc CVE-2026-7210 高危 3.14.5-r0 3.14.7-r0 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19
python3-pycache-pyc0 CVE-2026-11940 高危 3.14.5-r0 3.14.7-r0 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
python3-pycache-pyc0 CVE-2026-15308 高危 3.14.5-r0 3.14.7-r0 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-07-09 17:16 修改: 2026-08-13 01:16
python3-pycache-pyc0 CVE-2026-7210 高危 3.14.5-r0 3.14.7-r0 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-05-11 18:16 修改: 2026-08-14 01:19
pyc CVE-2026-0864 中危 3.14.5-r0 3.14.7-r0 python: cpython: Python configparser: Configuration injection via crafted multi-line input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-23 18:17 修改: 2026-08-13 01:16
pyc CVE-2026-11972 中危 3.14.5-r0 3.14.7-r0 python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
python3 CVE-2025-15366 中危 3.14.5-r0 3.14.7-r0 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16
python3 CVE-2026-0864 中危 3.14.5-r0 3.14.7-r0 python: cpython: Python configparser: Configuration injection via crafted multi-line input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-23 18:17 修改: 2026-08-13 01:16
python3 CVE-2026-11972 中危 3.14.5-r0 3.14.7-r0 python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
python3 CVE-2026-3276 中危 3.14.5-r0 3.14.7-r0 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16
python3 CVE-2026-4360 中危 3.14.5-r0 3.14.7-r0 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
python3 CVE-2026-7774 中危 3.14.5-r0 3.14.7-r0 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
python3 CVE-2026-8328 中危 3.14.5-r0 3.14.7-r0 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16
python3 CVE-2026-9669 中危 3.14.5-r0 3.14.7-r0 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16
pyc CVE-2026-3276 中危 3.14.5-r0 3.14.7-r0 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16
pyc CVE-2026-4360 中危 3.14.5-r0 3.14.7-r0 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
pyc CVE-2026-7774 中危 3.14.5-r0 3.14.7-r0 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
python3-pyc CVE-2025-15366 中危 3.14.5-r0 3.14.7-r0 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16
python3-pyc CVE-2026-0864 中危 3.14.5-r0 3.14.7-r0 python: cpython: Python configparser: Configuration injection via crafted multi-line input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-23 18:17 修改: 2026-08-13 01:16
python3-pyc CVE-2026-11972 中危 3.14.5-r0 3.14.7-r0 python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
python3-pyc CVE-2026-3276 中危 3.14.5-r0 3.14.7-r0 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16
python3-pyc CVE-2026-4360 中危 3.14.5-r0 3.14.7-r0 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
python3-pyc CVE-2026-7774 中危 3.14.5-r0 3.14.7-r0 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
python3-pyc CVE-2026-8328 中危 3.14.5-r0 3.14.7-r0 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16
python3-pyc CVE-2026-9669 中危 3.14.5-r0 3.14.7-r0 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16
pyc CVE-2026-8328 中危 3.14.5-r0 3.14.7-r0 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16
pyc CVE-2026-9669 中危 3.14.5-r0 3.14.7-r0 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16
pyc CVE-2025-15366 中危 3.14.5-r0 3.14.7-r0 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16
python3-pycache-pyc0 CVE-2025-15366 中危 3.14.5-r0 3.14.7-r0 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16
python3-pycache-pyc0 CVE-2026-0864 中危 3.14.5-r0 3.14.7-r0 python: cpython: Python configparser: Configuration injection via crafted multi-line input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-23 18:17 修改: 2026-08-13 01:16
python3-pycache-pyc0 CVE-2026-11972 中危 3.14.5-r0 3.14.7-r0 python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
python3-pycache-pyc0 CVE-2026-3276 中危 3.14.5-r0 3.14.7-r0 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16
python3-pycache-pyc0 CVE-2026-4360 中危 3.14.5-r0 3.14.7-r0 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
python3-pycache-pyc0 CVE-2026-7774 中危 3.14.5-r0 3.14.7-r0 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16
python3-pycache-pyc0 CVE-2026-8328 中危 3.14.5-r0 3.14.7-r0 The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16
python3-pycache-pyc0 CVE-2026-9669 中危 3.14.5-r0 3.14.7-r0 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16
python3-pyc CVE-2026-6879 低危 3.14.5-r0 3.14.7-r0 python: Python: Performance degradation in XML processing due to quadratic time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16
python3 CVE-2026-6879 低危 3.14.5-r0 3.14.7-r0 python: Python: Performance degradation in XML processing due to quadratic time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16
pyc CVE-2026-6879 低危 3.14.5-r0 3.14.7-r0 python: Python: Performance degradation in XML processing due to quadratic time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16
python3-pycache-pyc0 CVE-2026-6879 低危 3.14.5-r0 3.14.7-r0 python: Python: Performance degradation in XML processing due to quadratic time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879

镜像层: sha256:3aaf515e074cbd659ade6d2a46ebdaf0aa89bdeec9b78eb7bb25f1a96db063a8

发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16
Java (jar)
低危漏洞:0 中危漏洞:19 高危漏洞:15 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.18.6 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.19.2 2.18.8, 2.21.4 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-21 21:58 修改: 2026-08-03 20:30
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.18.6 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.18.6 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.19.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.19.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-06-23 21:17 修改: 2026-08-14 13:19
com.squareup.wire:wire-runtime-jvm CVE-2026-45799 高危 5.5.0 6.3.0, 7.0.0-alpha03 Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45799

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-17 20:17 修改: 2026-08-12 19:04
io.netty:netty-codec CVE-2026-59901 高危 4.1.135.Final 4.1.136.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-haproxy CVE-2026-55851 高危 4.1.135.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55851

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:48
org.apache.httpcomponents.core5:httpcore5 CVE-2026-54399 高危 5.3.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54399

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-01 17:16 修改: 2026-07-24 20:04
org.apache.httpcomponents.core5:httpcore5-h2 CVE-2026-54428 高危 5.3.4 5.4.3, 5.5-beta2 org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54428

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-01 18:16 修改: 2026-07-24 20:03
org.eclipse.jetty:jetty-http CVE-2026-2332 高危 9.4.58.v20250814 12.1.7, 12.0.33, 11.0.29, 10.0.28, 9.4.60 org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-04-14 12:16 修改: 2026-08-14 13:17
org.eclipse.jetty:jetty-security CVE-2026-10050 高危 12.1.8 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-08-04 11:22 修改: 2026-08-08 00:38
org.jline:jline-remote-telnet CVE-2026-56740 高危 3.9.0 4.2.1 JLine is a Java library for handling console input. Prior to 3.30.14, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56740

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-17 22:17 修改: 2026-07-23 17:57
org.jline:jline-remote-telnet CVE-2026-56741 高危 3.9.0 4.2.1 JLine is a Java library for handling console input. Prior to 3.30.14, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56741

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-17 22:17 修改: 2026-07-23 17:57
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.18.6 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.18.6 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
io.netty:netty-codec-dns CVE-2026-73508 中危 4.1.135.Final 4.2.16.Final, 4.1.136.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.18.6 2.21.5, 2.18.9, 2.22.1 jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
io.netty:netty-codec-haproxy CVE-2026-59919 中危 4.1.135.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-haproxy: Netty: Improper CR/LF neutralization in netty-codec-haproxy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59919

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:33
org.apache.commons:commons-configuration2 CVE-2026-45205 中危 2.10.1 2.15.0 commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45205

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-05-14 12:16 修改: 2026-06-17 10:51
org.apache.httpcomponents.client5:httpclient5 CVE-2026-64607 中危 5.4.4 5.6.3 Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-64607

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-31 11:17 修改: 2026-08-13 17:17
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.18.6 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.19.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-02-28 02:01 修改: 2026-08-03 20:32
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.25.4 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:396e4de9a667dead20f930d5f4c09ea035049066d053fbc86978e48f9b624c9a

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.25.4 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:396e4de9a667dead20f930d5f4c09ea035049066d053fbc86978e48f9b624c9a

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.18.6 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.eclipse.jetty:jetty-http CVE-2024-6763 中危 9.4.58.v20250814 12.0.12 org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.19.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
org.eclipse.jetty:jetty-server CVE-2026-10051 中危 12.1.8 12.0.36, 12.1.10 jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10051

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:41
org.eclipse.jetty:jetty-server CVE-2026-6790 中危 12.1.8 12.0.35, 12.1.9 jetty: Jetty: Improper Host header validation can lead to request routing issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6790

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:35
org.eclipse.jetty:jetty-util CVE-2026-8384 中危 12.1.8 12.0.35, 12.1.9 jetty: Eclipse Jetty: Path confusion vulnerability may lead to information disclosure in web applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8384

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:39
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.19.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.19.2 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:07e6684b2c13fdb5483c83ee8f9cd1bf170558abf3f251940e666e23dc19507b

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
Python (python-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
pulsar/bin/pulsar-detector (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:7 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-33818 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-05-22 16:16 修改: 2026-08-14 13:18
stdlib CVE-2026-56853 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.25.12 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/mod CVE-2026-56865 未知 v0.24.0 0.40.0 A malicious GOPROXY was previously capable of forging up to two sumdb ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/sys CVE-2026-39824 未知 v0.32.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
golang.org/x/mod CVE-2026-56864 未知 v0.24.0 0.40.0 A malicious GOSUMDB was capable of serving arbitrary module content no ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
pulsar/bin/pulsarctl (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:85a8c265e33fa53b8b62a99a8f3a910e76f4945e1d24647797829476c9670211

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:85a8c265e33fa53b8b62a99a8f3a910e76f4945e1d24647797829476c9670211

发布日期: 2026-05-22 16:16 修改: 2026-08-14 13:18
stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:85a8c265e33fa53b8b62a99a8f3a910e76f4945e1d24647797829476c9670211

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:85a8c265e33fa53b8b62a99a8f3a910e76f4945e1d24647797829476c9670211

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:85a8c265e33fa53b8b62a99a8f3a910e76f4945e1d24647797829476c9670211

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:85a8c265e33fa53b8b62a99a8f3a910e76f4945e1d24647797829476c9670211

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:85a8c265e33fa53b8b62a99a8f3a910e76f4945e1d24647797829476c9670211

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:85a8c265e33fa53b8b62a99a8f3a910e76f4945e1d24647797829476c9670211

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
golang.org/x/sys CVE-2026-39824 未知 v0.39.0 0.44.0 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824

镜像层: sha256:85a8c265e33fa53b8b62a99a8f3a910e76f4945e1d24647797829476c9670211

发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
pulsar/plugins/pulsarctl-kube (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:10 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
golang.org/x/net CVE-2026-46600 高危 v0.55.0 0.56.0 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
golang.org/x/text CVE-2026-56852 高危 v0.37.0 0.39.0 golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-05-22 16:16 修改: 2026-08-14 13:18
stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:97e1cd512066d80e56e4dbf6946c36817bd053b2237201f0b0ac58bf587b685f

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×