| com.fasterxml.jackson.core:jackson-core |
GHSA-r7wm-3cxj-wff9 |
高危 |
2.18.6 |
2.18.8, 2.21.4, 2.22.1 |
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
|
| com.fasterxml.jackson.core:jackson-core |
GHSA-r7wm-3cxj-wff9 |
高危 |
2.19.2 |
2.18.8, 2.21.4, 2.22.1 |
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)
漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54512 |
高危 |
2.18.6 |
2.18.8, 3.1.4, 2.21.4 |
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54513 |
高危 |
2.18.6 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-06-23 21:17 修改: 2026-07-30 12:19
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54512 |
高危 |
2.19.2 |
2.18.8, 3.1.4, 2.21.4 |
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54513 |
高危 |
2.19.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-06-23 21:17 修改: 2026-07-30 12:19
|
| io.netty:netty-codec |
CVE-2026-59901 |
高危 |
4.1.135.Final |
4.1.136.Final |
io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901
镜像层: sha256:f9c620e16430b7258201b3662b9c4a451ddf93f9eb5d61398147f30d6ee8d1f8
发布日期: 2026-07-29 18:16 修改: 2026-07-30 16:33
|
| io.netty:netty-codec-haproxy |
CVE-2026-55851 |
高危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55851
镜像层: sha256:f9c620e16430b7258201b3662b9c4a451ddf93f9eb5d61398147f30d6ee8d1f8
发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:48
|
| org.eclipse.jetty:jetty-http |
CVE-2026-2332 |
高危 |
9.4.58.v20250814 |
12.1.7, 12.0.33 |
org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2332
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-04-14 12:16 修改: 2026-07-23 12:17
|
| org.eclipse.jetty:jetty-security |
CVE-2026-10050 |
高危 |
12.1.8 |
9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 |
Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| org.jline:jline-remote-telnet |
CVE-2026-56740 |
高危 |
3.9.0 |
4.2.1 |
JLine is a Java library for handling console input. Prior to 3.30.14, ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56740
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-07-17 22:17 修改: 2026-07-23 17:57
|
| org.jline:jline-remote-telnet |
CVE-2026-56741 |
高危 |
3.9.0 |
4.2.1 |
JLine is a Java library for handling console input. Prior to 3.30.14, ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56741
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-07-17 22:17 修改: 2026-07-23 17:57
|
| com.fasterxml.jackson.core:jackson-core |
GHSA-72hv-8253-57qq |
中危 |
2.19.2 |
2.21.1, 2.18.6 |
jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition
漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54514 |
中危 |
2.19.2 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54515 |
中危 |
2.19.2 |
3.1.4, 2.18.9, 2.21.5, 2.22.1 |
jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-59888 |
中危 |
2.19.2 |
2.18.8, 2.21.4 |
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54514 |
中危 |
2.18.6 |
2.18.8, 2.21.4, 3.1.4 |
jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
|
| io.netty:netty-codec-dns |
GHSA-mfg7-5gfp-c4w3 |
中危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names
漏洞详情: https://github.com/advisories/GHSA-mfg7-5gfp-c4w3
镜像层: sha256:f9c620e16430b7258201b3662b9c4a451ddf93f9eb5d61398147f30d6ee8d1f8
发布日期: 2026-07-24 16:52 修改: 2026-07-24 16:52
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54515 |
中危 |
2.18.6 |
3.1.4, 2.18.9, 2.21.5, 2.22.1 |
jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
|
| io.netty:netty-codec-haproxy |
CVE-2026-59919 |
中危 |
4.1.135.Final |
4.2.16.Final, 4.1.136.Final |
io.netty/netty-codec-haproxy: Netty: Improper CR/LF neutralization in netty-codec-haproxy
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59919
镜像层: sha256:f9c620e16430b7258201b3662b9c4a451ddf93f9eb5d61398147f30d6ee8d1f8
发布日期: 2026-07-29 18:16 修改: 2026-07-30 16:33
|
| org.apache.commons:commons-configuration2 |
CVE-2026-45205 |
中危 |
2.10.1 |
2.15.0 |
commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45205
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-05-14 12:16 修改: 2026-06-17 10:51
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-59888 |
中危 |
2.18.6 |
2.18.8, 2.21.4 |
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
|
| org.eclipse.jetty:jetty-http |
CVE-2024-6763 |
中危 |
9.4.58.v20250814 |
12.0.12 |
org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6763
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2024-10-14 16:15 修改: 2026-06-17 08:18
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-59889 |
中危 |
2.18.6 |
2.21.5, 2.18.9, 2.22.1 |
jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
|
| org.eclipse.jetty:jetty-server |
CVE-2026-10051 |
中危 |
12.1.8 |
12.0.36, 12.1.10 |
In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the se ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10051
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:41
|
| org.eclipse.jetty:jetty-server |
CVE-2026-6790 |
中危 |
12.1.8 |
12.0.35, 12.1.9 |
In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6790
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:35
|
| org.eclipse.jetty:jetty-util |
CVE-2026-8384 |
中危 |
12.1.8 |
12.0.35, 12.1.9 |
In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/sec ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8384
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:39
|
| com.fasterxml.jackson.core:jackson-databind |
GHSA-mhm7-754m-9p8w |
中危 |
2.18.6 |
2.18.9, 2.21.5 |
jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`
漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w
镜像层: sha256:5283e1251fe05f4a0da29e291a276ce57694a982effc00cda584289d4c444275
发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
|
| at.yawk.lz4:lz4-java |
CVE-2026-59949 |
中危 |
1.10.3 |
1.11.1 |
LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949
镜像层: sha256:604e4c95335ba3e1f968076db56509686a83e764b3fadfb31382889ffddbbcd2
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|