| tar |
CVE-2026-59873 |
严重 |
7.5.11 |
7.5.19 |
tar: node-tar: Denial of Service via crafted gzip bomb
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873
镜像层: sha256:fc2cf82e797a9f72c446b6510f7d032e40aaf1fb91af4eac722cf815020842f4
发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
|
| @grpc/grpc-js |
CVE-2026-48068 |
高危 |
1.14.3 |
1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4 |
grpc-js: @grpc/grpc-js: Server crash via malformed HTTP/2 stream initiation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48068
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-14 20:17 修改: 2026-07-21 16:17
|
| @grpc/grpc-js |
CVE-2026-48069 |
高危 |
1.14.3 |
1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4 |
grpc-js: @grpc/grpc-js: Client or server crash via malformed compressed message
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48069
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-14 20:17 修改: 2026-07-15 20:23
|
| @opentelemetry/auto-instrumentations-node |
CVE-2026-44902 |
高危 |
0.74.0 |
0.75.0 |
opentelemetry-js: opentelemetry/exporter-prometheus: opentelemetry-js: Denial of Service via malformed HTTP request
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44902
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:51
|
| @opentelemetry/exporter-prometheus |
CVE-2026-44902 |
高危 |
0.203.0 |
0.217.0 |
opentelemetry-js: opentelemetry/exporter-prometheus: opentelemetry-js: Denial of Service via malformed HTTP request
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44902
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:51
|
| @opentelemetry/exporter-prometheus |
CVE-2026-44902 |
高危 |
0.213.0 |
0.217.0 |
opentelemetry-js: opentelemetry/exporter-prometheus: opentelemetry-js: Denial of Service via malformed HTTP request
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44902
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:51
|
| @opentelemetry/exporter-prometheus |
CVE-2026-44902 |
高危 |
0.216.0 |
0.217.0 |
opentelemetry-js: opentelemetry/exporter-prometheus: opentelemetry-js: Denial of Service via malformed HTTP request
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44902
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:51
|
| @opentelemetry/propagator-jaeger |
CVE-2026-59892 |
高危 |
2.0.1 |
2.9.0 |
@opentelemetry/propagator-jaeger: OpenTelemetry JavaScript: Denial of Service via malformed HTTP header decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59892
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-08 17:17 修改: 2026-07-10 18:56
|
| @opentelemetry/propagator-jaeger |
CVE-2026-59892 |
高危 |
2.6.0 |
2.9.0 |
@opentelemetry/propagator-jaeger: OpenTelemetry JavaScript: Denial of Service via malformed HTTP header decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59892
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-08 17:17 修改: 2026-07-10 18:56
|
| @opentelemetry/propagator-jaeger |
CVE-2026-59892 |
高危 |
2.7.1 |
2.9.0 |
@opentelemetry/propagator-jaeger: OpenTelemetry JavaScript: Denial of Service via malformed HTTP header decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59892
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-08 17:17 修改: 2026-07-10 18:56
|
| @opentelemetry/sdk-node |
CVE-2026-44902 |
高危 |
0.203.0 |
0.217.0 |
opentelemetry-js: opentelemetry/exporter-prometheus: opentelemetry-js: Denial of Service via malformed HTTP request
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44902
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:51
|
| @opentelemetry/sdk-node |
CVE-2026-44902 |
高危 |
0.213.0 |
0.217.0 |
opentelemetry-js: opentelemetry/exporter-prometheus: opentelemetry-js: Denial of Service via malformed HTTP request
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44902
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:51
|
| @opentelemetry/sdk-node |
CVE-2026-44902 |
高危 |
0.216.0 |
0.217.0 |
opentelemetry-js: opentelemetry/exporter-prometheus: opentelemetry-js: Denial of Service via malformed HTTP request
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44902
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:51
|
| brace-expansion |
CVE-2026-13149 |
高危 |
5.0.4 |
5.0.7, 1.1.16, 2.1.2 |
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149
镜像层: sha256:fc2cf82e797a9f72c446b6510f7d032e40aaf1fb91af4eac722cf815020842f4
发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
|
| brace-expansion |
CVE-2026-14257 |
高危 |
5.0.4 |
5.0.8 |
brace-expansion through 5.0.7 is vulnerable to denial of service via m ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257
镜像层: sha256:fc2cf82e797a9f72c446b6510f7d032e40aaf1fb91af4eac722cf815020842f4
发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
|
| brace-expansion |
CVE-2026-13149 |
高危 |
5.0.5 |
5.0.7, 1.1.16, 2.1.2 |
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
|
| brace-expansion |
CVE-2026-13149 |
高危 |
5.0.5 |
5.0.7, 1.1.16, 2.1.2 |
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
|
| brace-expansion |
CVE-2026-14257 |
高危 |
5.0.5 |
5.0.8 |
brace-expansion through 5.0.7 is vulnerable to denial of service via m ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
|
| brace-expansion |
CVE-2026-14257 |
高危 |
5.0.5 |
5.0.8 |
brace-expansion through 5.0.7 is vulnerable to denial of service via m ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
|
| fast-uri |
CVE-2026-13676 |
高危 |
3.1.0 |
4.0.1, 3.1.3, 2.4.2 |
fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13676
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-29 14:16 修改: 2026-07-27 13:16
|
| fast-uri |
CVE-2026-16221 |
高危 |
3.1.0 |
2.4.3, 3.1.4, 4.1.1 |
Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16221
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-19 15:16 修改: 2026-07-21 18:31
|
| fast-uri |
CVE-2026-6321 |
高危 |
3.1.0 |
3.1.1 |
fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6321
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-04 20:16 修改: 2026-07-21 12:19
|
| fast-uri |
CVE-2026-6322 |
高危 |
3.1.0 |
3.1.2 |
fast-uri: fast-uri: URI authority bypass due to improper delimiter handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6322
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-05 11:16 修改: 2026-07-27 13:18
|
| find-my-way |
CVE-2026-47219 |
高危 |
9.5.0 |
9.7.0 |
find-my-way: DDoS with HTTP2
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47219
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| form-data |
CVE-2026-12143 |
高危 |
4.0.5 |
2.5.6, 3.0.5, 4.0.6 |
form-data: form-data: Form field override via CRLF injection
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-12 19:16 修改: 2026-07-23 12:17
|
| js-yaml |
CVE-2026-59869 |
高危 |
4.1.1 |
3.15.0, 4.3.0 |
js-yaml: js-yaml: Denial of Service via crafted YAML documents
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59869
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:05
|
| picomatch |
CVE-2026-33671 |
高危 |
4.0.3 |
4.0.4, 3.0.2, 2.3.2 |
picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33671
镜像层: sha256:fc2cf82e797a9f72c446b6510f7d032e40aaf1fb91af4eac722cf815020842f4
发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
|
| protobufjs |
CVE-2026-48712 |
高危 |
7.5.6 |
7.6.1, 8.4.1 |
protobufjs: protobufjs: Denial of Service via uncontrolled recursion with crafted protobuf payload
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48712
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
|
| protobufjs |
CVE-2026-44289 |
高危 |
8.0.1 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44289
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-13 16:16 修改: 2026-07-27 13:18
|
| protobufjs |
CVE-2026-44290 |
高危 |
8.0.1 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Denial of Service via crafted schema
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44290
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
|
| protobufjs |
CVE-2026-44291 |
高危 |
8.0.1 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44291
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
|
| protobufjs |
CVE-2026-44293 |
高危 |
8.0.1 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44293
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-13 16:16 修改: 2026-07-27 13:18
|
| protobufjs |
CVE-2026-48712 |
高危 |
8.0.1 |
7.6.1, 8.4.1 |
protobufjs: protobufjs: Denial of Service via uncontrolled recursion with crafted protobuf payload
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48712
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
|
| protobufjs |
CVE-2026-48712 |
高危 |
8.0.3 |
7.6.1, 8.4.1 |
protobufjs: protobufjs: Denial of Service via uncontrolled recursion with crafted protobuf payload
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48712
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
|
| sigstore |
CVE-2026-48815 |
高危 |
4.1.0 |
4.1.1 |
sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815
镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d
发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
|
| systeminformation |
CVE-2026-44724 |
高危 |
5.31.2 |
5.31.6 |
systeminformation: systeminformation: Command injection via NetworkManager connection profile name
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44724
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-27 20:16 修改: 2026-07-15 02:22
|
| systeminformation |
CVE-2026-50289 |
高危 |
5.31.2 |
5.31.7 |
systeminformation is a System and OS information library for node.js. ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50289
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:02
|
| @fastify/static |
CVE-2026-15074 |
高危 |
9.1.3 |
10.1.1 |
@fastify/static vulnerable to route guard bypass via path traversal
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15074
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-23 04:16 修改: 2026-07-23 15:33
|
| tar |
CVE-2026-59874 |
高危 |
7.5.11 |
7.5.18 |
tar: Node-tar: Denial of Service via malformed tar archive header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874
镜像层: sha256:fc2cf82e797a9f72c446b6510f7d032e40aaf1fb91af4eac722cf815020842f4
发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
|
| undici |
CVE-2026-12151 |
高危 |
6.24.1 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 17:16 修改: 2026-07-21 12:17
|
| undici |
CVE-2026-12151 |
高危 |
7.24.0 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 17:16 修改: 2026-07-21 12:17
|
| undici |
CVE-2026-6734 |
高危 |
7.24.0 |
7.28.0, 8.2.0 |
undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6734
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:18 修改: 2026-07-21 12:19
|
| undici |
CVE-2026-9697 |
高危 |
7.24.0 |
7.28.0, 8.5.0 |
undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9697
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:18 修改: 2026-07-21 12:19
|
| undici |
CVE-2026-12151 |
高危 |
7.24.6 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 17:16 修改: 2026-07-21 12:17
|
| undici |
CVE-2026-6734 |
高危 |
7.24.6 |
7.28.0, 8.2.0 |
undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6734
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:18 修改: 2026-07-21 12:19
|
| undici |
CVE-2026-9697 |
高危 |
7.24.6 |
7.28.0, 8.5.0 |
undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9697
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:18 修改: 2026-07-21 12:19
|
| ws |
CVE-2026-48779 |
高危 |
8.18.3 |
5.2.5, 6.2.4, 7.5.11, 8.21.0 |
ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48779
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 13:20 修改: 2026-07-21 12:18
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| brace-expansion |
CVE-2026-45149 |
中危 |
5.0.5 |
5.0.6 |
brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
|
| brace-expansion |
CVE-2026-45149 |
中危 |
5.0.5 |
5.0.6 |
brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| ip-address |
CVE-2026-42338 |
中危 |
10.1.0 |
10.1.1 |
ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338
镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d
发布日期: 2026-05-12 20:16 修改: 2026-07-24 13:18
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| js-yaml |
CVE-2026-53550 |
中危 |
4.1.1 |
4.2.0, 3.15.0 |
js-yaml: js-yaml: Denial of Service via crafted YAML merge keys
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53550
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 16:16 修改: 2026-07-09 20:33
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| picomatch |
CVE-2026-33672 |
中危 |
4.0.3 |
4.0.4, 3.0.2, 2.3.2 |
picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33672
镜像层: sha256:fc2cf82e797a9f72c446b6510f7d032e40aaf1fb91af4eac722cf815020842f4
发布日期: 2026-03-26 22:16 修改: 2026-06-17 10:37
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| protobufjs |
CVE-2026-45740 |
中危 |
7.5.6 |
7.5.8, 8.2.0 |
protobufjs: protobufjs: Denial of Service via crafted JSON descriptors
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45740
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-13 16:17 修改: 2026-06-17 10:52
|
| protobufjs |
CVE-2026-54269 |
中危 |
7.5.6 |
7.6.3, 8.6.0 |
protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54269
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-24 20:40
|
| protobufjs |
CVE-2026-59877 |
中危 |
7.5.6 |
7.6.5, 8.6.6 |
protobufjs: protobufjs: Denial of Service via crafted .proto schema
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59877
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:53
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.7.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.7.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.7.1 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @fastify/static |
CVE-2026-7120 |
中危 |
9.1.3 |
10.1.2 |
@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7120
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-23 04:16 修改: 2026-07-23 15:33
|
| protobufjs |
CVE-2026-44288 |
中危 |
8.0.1 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44288
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
|
| protobufjs |
CVE-2026-44292 |
中危 |
8.0.1 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Data integrity impact due to prototype pollution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44292
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
|
| protobufjs |
CVE-2026-44294 |
中危 |
8.0.1 |
7.5.6, 8.0.2 |
protobufjs: protobufjs: Denial of Service due to unescaped control characters in field names
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44294
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
|
| protobufjs |
CVE-2026-45740 |
中危 |
8.0.1 |
7.5.8, 8.2.0 |
protobufjs: protobufjs: Denial of Service via crafted JSON descriptors
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45740
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-13 16:17 修改: 2026-06-17 10:52
|
| protobufjs |
CVE-2026-54269 |
中危 |
8.0.1 |
7.6.3, 8.6.0 |
protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54269
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-24 20:40
|
| protobufjs |
CVE-2026-59877 |
中危 |
8.0.1 |
7.6.5, 8.6.6 |
protobufjs: protobufjs: Denial of Service via crafted .proto schema
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59877
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:53
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.0.1 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| protobufjs |
CVE-2026-45740 |
中危 |
8.0.3 |
7.5.8, 8.2.0 |
protobufjs: protobufjs: Denial of Service via crafted JSON descriptors
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45740
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-13 16:17 修改: 2026-06-17 10:52
|
| protobufjs |
CVE-2026-54269 |
中危 |
8.0.3 |
7.6.3, 8.6.0 |
protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54269
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-24 20:40
|
| protobufjs |
CVE-2026-59877 |
中危 |
8.0.3 |
7.6.5, 8.6.6 |
protobufjs: protobufjs: Denial of Service via crafted .proto schema
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59877
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:53
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.1.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| srvx |
CVE-2026-33732 |
中危 |
0.2.8 |
0.11.13 |
srvx is vulnerable to middleware bypass via absolute URI in request line
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33732
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-03-26 18:16 修改: 2026-06-17 10:38
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| tar |
CVE-2026-53655 |
中危 |
7.5.11 |
7.5.16 |
node-tar: node-tar: File smuggling due to inconsistent tar archive parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655
镜像层: sha256:fc2cf82e797a9f72c446b6510f7d032e40aaf1fb91af4eac722cf815020842f4
发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
|
| tar |
CVE-2026-59871 |
中危 |
7.5.11 |
7.5.18 |
node-tar: node-tar: Denial of Service due to incorrect PAX path handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871
镜像层: sha256:fc2cf82e797a9f72c446b6510f7d032e40aaf1fb91af4eac722cf815020842f4
发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
|
| tar |
CVE-2026-59875 |
中危 |
7.5.11 |
7.5.17 |
node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875
镜像层: sha256:fc2cf82e797a9f72c446b6510f7d032e40aaf1fb91af4eac722cf815020842f4
发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
|
| tar |
GHSA-r292-9mhp-454m |
中危 |
7.5.11 |
7.5.21 |
node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection
漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m
镜像层: sha256:fc2cf82e797a9f72c446b6510f7d032e40aaf1fb91af4eac722cf815020842f4
发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| undici |
CVE-2026-9679 |
中危 |
6.24.1 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @sigstore/core |
CVE-2026-48758 |
中危 |
3.2.0 |
3.2.1 |
sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758
镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d
发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
|
| @sigstore/verify |
CVE-2026-48816 |
中危 |
3.1.0 |
3.1.1 |
sigstore-js: github.com/sigstore/sigstore-js: sigstore-js: Insufficient verification of data authenticity allows timestamp manipulation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48816
镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d
发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
|
| undici |
CVE-2026-9678 |
中危 |
7.24.0 |
7.28.0, 8.5.0 |
undici: Undici: Information disclosure due to improper cache-control header parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9678
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:44
|
| undici |
CVE-2026-9679 |
中危 |
7.24.0 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| @opentelemetry/core |
CVE-2026-54285 |
中危 |
2.6.0 |
2.8.0 |
@opentelemetry/core: opentelemetry-js: @opentelemetry/core: Denial of Service via oversized baggage HTTP headers
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54285
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-22 18:16 修改: 2026-06-23 16:17
|
| brace-expansion |
CVE-2026-33750 |
中危 |
5.0.4 |
5.0.5, 3.0.2, 2.0.3, 1.1.13 |
brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750
镜像层: sha256:fc2cf82e797a9f72c446b6510f7d032e40aaf1fb91af4eac722cf815020842f4
发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
|
| undici |
CVE-2026-9678 |
中危 |
7.24.6 |
7.28.0, 8.5.0 |
undici: Undici: Information disclosure due to improper cache-control header parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9678
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:44
|
| undici |
CVE-2026-9679 |
中危 |
7.24.6 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
|
| uuid |
CVE-2026-41907 |
中危 |
8.3.2 |
11.1.1, 12.0.1, 13.0.1 |
uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
|
| brace-expansion |
CVE-2026-45149 |
中危 |
5.0.4 |
5.0.6 |
brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149
镜像层: sha256:fc2cf82e797a9f72c446b6510f7d032e40aaf1fb91af4eac722cf815020842f4
发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
|
| ws |
CVE-2026-45736 |
中危 |
8.18.3 |
8.20.1 |
ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45736
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-05-15 15:16 修改: 2026-07-22 12:18
|
| undici |
CVE-2026-6733 |
低危 |
6.24.1 |
6.27.0, 7.28.0, 8.5.0 |
undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
|
| undici |
CVE-2026-11525 |
低危 |
7.24.6 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
|
| undici |
CVE-2026-6733 |
低危 |
7.24.6 |
6.27.0, 7.28.0, 8.5.0 |
undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
|
| undici |
CVE-2026-11525 |
低危 |
6.24.1 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
|
| undici |
CVE-2026-11525 |
低危 |
7.24.0 |
6.27.0, 7.28.0, 8.5.0 |
undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
|
| undici |
CVE-2026-6733 |
低危 |
7.24.0 |
6.27.0, 7.28.0, 8.5.0 |
undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733
镜像层: sha256:6dc8dfb900845d30879789a6abdd251e5e50d93658d662ab6ea470439e728058
发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
|