docker.io/swarmpit/install:1.9 linux/amd64

docker.io/swarmpit/install:1.9 - Trivy安全扫描结果扫描时间: 2026-01-22 23:20

全部漏洞信息

低危漏洞:14

中危漏洞:346

高危漏洞:384

严重漏洞:41

系统OS: alpine 3.12.0 扫描引擎: Trivy 扫描时间: 2026-01-22 23:20

docker.io/swarmpit/install:1.9 (alpine 3.12.0) (alpine)

低危漏洞:7

中危漏洞:31

高危漏洞:62

严重漏洞:13

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
apk-tools	CVE-2021-36159	严重	2.10.5-r1	2.10.7-r0	libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36159 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-08-03 14:15 修改: 2024-11-21 06:13
expat	CVE-2022-22822	严重	2.2.9-r1	2.2.10-r0	expat: Integer overflow in addBinding in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22822 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17
expat	CVE-2022-22823	严重	2.2.9-r1	2.2.10-r0	expat: Integer overflow in build_model in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22823 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17
expat	CVE-2022-22824	严重	2.2.9-r1	2.2.10-r0	expat: Integer overflow in defineAttribute in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22824 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17
expat	CVE-2022-23852	严重	2.2.9-r1	2.2.10-r1	expat: Integer overflow in function XML_GetBuffer 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23852 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-01-24 02:15 修改: 2025-05-05 17:17
expat	CVE-2022-25235	严重	2.2.9-r1	2.2.10-r2	expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25235 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-02-16 01:15 修改: 2025-05-05 17:18
expat	CVE-2022-25236	严重	2.2.9-r1	2.2.10-r2	expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25236 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-02-16 01:15 修改: 2025-05-05 17:18
expat	CVE-2022-25315	严重	2.2.9-r1	2.2.10-r2	expat: Integer overflow in storeRawNames() 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25315 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-02-18 05:15 修改: 2025-05-05 17:18
libcrypto1.1	CVE-2021-3711	严重	1.1.1g-r0	1.1.1l-r0	openssl: SM2 Decryption Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-08-24 15:15 修改: 2024-11-21 06:22
libcurl	CVE-2021-22945	严重	7.69.1-r1	7.79.0-r0	curl: use-after-free and double-free in MQTT sending 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22945 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-09-23 13:15 修改: 2025-06-09 15:15
libssl1.1	CVE-2021-3711	严重	1.1.1g-r0	1.1.1l-r0	openssl: SM2 Decryption Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-08-24 15:15 修改: 2024-11-21 06:22
openssl	CVE-2021-3711	严重	1.1.1g-r0	1.1.1l-r0	openssl: SM2 Decryption Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3711 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2021-08-24 15:15 修改: 2024-11-21 06:22
zlib	CVE-2022-37434	严重	1.2.11-r3	1.2.12-r2	zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2022-08-05 07:15 修改: 2025-05-30 20:15
apk-tools	CVE-2021-30139	高危	2.10.5-r1	2.10.6-r0	漏洞详情: https://avd.aquasec.com/nvd/cve-2021-30139 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-04-21 16:15 修改: 2024-11-21 06:03
busybox	CVE-2021-28831	高危	1.31.1-r16	1.31.1-r20	busybox: invalid free or segmentation fault via malformed gzip data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28831 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-03-19 05:15 修改: 2025-12-17 22:15
busybox	CVE-2021-42378	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42378 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
busybox	CVE-2021-42379	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42379 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
busybox	CVE-2021-42380	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42380 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
busybox	CVE-2021-42381	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42381 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
busybox	CVE-2021-42382	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42382 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
expat	CVE-2021-45960	高危	2.2.9-r1	2.2.10-r0	expat: Large number of prefixed XML attributes on a single tag can crash libexpat 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45960 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-01-01 19:15 修改: 2025-05-05 17:17
expat	CVE-2021-46143	高危	2.2.9-r1	2.2.10-r0	expat: Integer overflow in doProlog in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46143 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-01-06 04:15 修改: 2025-05-05 17:17
expat	CVE-2022-22825	高危	2.2.9-r1	2.2.10-r0	expat: Integer overflow in lookup in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22825 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17
expat	CVE-2022-22826	高危	2.2.9-r1	2.2.10-r0	expat: Integer overflow in nextScaffoldPart in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22826 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17
expat	CVE-2022-22827	高危	2.2.9-r1	2.2.10-r0	expat: Integer overflow in storeAtts in xmlparse.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22827 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17
expat	CVE-2022-23990	高危	2.2.9-r1	2.2.10-r1	expat: integer overflow in the doProlog function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23990 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-01-26 19:15 修改: 2025-05-05 17:17
expat	CVE-2022-25314	高危	2.2.9-r1	2.2.10-r2	expat: Integer overflow in copyString() 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25314 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-02-18 05:15 修改: 2025-05-05 17:18
git	CVE-2021-21300	高危	2.26.2-r0	2.26.3-r0	git: remote code execution during clone operation on case-insensitive filesystems 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21300 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-03-09 20:15 修改: 2024-11-21 05:47
git	CVE-2021-40330	高危	2.26.2-r0	2.26.3-r1	git: unexpected cross-protocol requests via a repository path containing a newline character 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40330 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-08-31 04:15 修改: 2024-11-21 06:23
krb5-libs	CVE-2020-28196	高危	1.18.2-r0	1.18.3-r0	krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2020-11-06 08:15 修改: 2025-12-03 19:15
krb5-libs	CVE-2021-36222	高危	1.18.2-r0	1.18.4-r0	krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2021-07-22 18:15 修改: 2024-11-21 06:13
busybox	CVE-2021-42383	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42383 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-04-23 20:15
libcrypto1.1	CVE-2021-23840	高危	1.1.1g-r0	1.1.1j-r0	openssl: integer overflow in CipherUpdate 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-02-16 17:15 修改: 2024-11-21 05:51
libcrypto1.1	CVE-2021-3450	高危	1.1.1g-r0	1.1.1k-r0	openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-03-25 15:15 修改: 2024-11-21 06:21
libcrypto1.1	CVE-2021-3712	高危	1.1.1g-r0	1.1.1l-r0	openssl: Read buffer overruns processing ASN.1 strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-08-24 15:15 修改: 2024-11-21 06:22
libcrypto1.1	CVE-2022-0778	高危	1.1.1g-r0	1.1.1n-r0	openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2022-03-15 17:15 修改: 2024-11-21 06:39
busybox	CVE-2021-42384	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42384 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
libcurl	CVE-2020-8231	高危	7.69.1-r1	7.69.1-r2	curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2020-12-14 20:15 修改: 2024-11-21 05:38
libcurl	CVE-2020-8285	高危	7.69.1-r1	7.69.1-r3	curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2020-12-14 20:15 修改: 2024-11-21 05:38
libcurl	CVE-2020-8286	高危	7.69.1-r1	7.69.1-r3	curl: Inferior OCSP verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8286 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2020-12-14 20:15 修改: 2024-11-21 05:38
libcurl	CVE-2021-22901	高危	7.69.1-r1	7.77.0-r0	curl: Use-after-free in TLS session handling when using OpenSSL TLS backend 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22901 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-06-11 16:15 修改: 2024-11-21 05:50
libcurl	CVE-2021-22946	高危	7.69.1-r1	7.79.0-r0	curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-09-29 20:15 修改: 2024-11-21 05:50
libcurl	CVE-2022-22576	高危	7.69.1-r1	7.79.1-r1	curl: OAUTH2 bearer bypass in connection re-use 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22576 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-05-26 17:15 修改: 2024-11-21 06:47
libcurl	CVE-2022-27775	高危	7.69.1-r1	7.79.1-r1	curl: bad local IPv6 connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27775 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56
busybox	CVE-2021-42385	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42385 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
libssl1.1	CVE-2021-23840	高危	1.1.1g-r0	1.1.1j-r0	openssl: integer overflow in CipherUpdate 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-02-16 17:15 修改: 2024-11-21 05:51
libssl1.1	CVE-2021-3450	高危	1.1.1g-r0	1.1.1k-r0	openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-03-25 15:15 修改: 2024-11-21 06:21
libssl1.1	CVE-2021-3712	高危	1.1.1g-r0	1.1.1l-r0	openssl: Read buffer overruns processing ASN.1 strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-08-24 15:15 修改: 2024-11-21 06:22
libssl1.1	CVE-2022-0778	高危	1.1.1g-r0	1.1.1n-r0	openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2022-03-15 17:15 修改: 2024-11-21 06:39
ncurses-libs	CVE-2021-39537	高危	6.2_p20200523-r0	6.2_p20200523-r1	ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537 镜像层: sha256:1507bc7946120bee0d209a97b1157c96acd3ad4de9cc7f9aec68d6ebbac53337 发布日期: 2021-09-20 16:15 修改: 2024-11-21 06:19
ncurses-terminfo-base	CVE-2021-39537	高危	6.2_p20200523-r0	6.2_p20200523-r1	ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537 镜像层: sha256:1507bc7946120bee0d209a97b1157c96acd3ad4de9cc7f9aec68d6ebbac53337 发布日期: 2021-09-20 16:15 修改: 2024-11-21 06:19
openssh-client	CVE-2021-28041	高危	8.3_p1-r0	8.3_p1-r2	openssh: double-free memory corruption may lead to arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28041 镜像层: sha256:1507bc7946120bee0d209a97b1157c96acd3ad4de9cc7f9aec68d6ebbac53337 发布日期: 2021-03-05 21:15 修改: 2024-11-21 05:59
openssh-client	CVE-2021-41617	高危	8.3_p1-r0	8.3_p1-r3	openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41617 镜像层: sha256:1507bc7946120bee0d209a97b1157c96acd3ad4de9cc7f9aec68d6ebbac53337 发布日期: 2021-09-26 19:15 修改: 2024-11-21 06:26
openssh-keygen	CVE-2021-28041	高危	8.3_p1-r0	8.3_p1-r2	openssh: double-free memory corruption may lead to arbitrary code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28041 镜像层: sha256:1507bc7946120bee0d209a97b1157c96acd3ad4de9cc7f9aec68d6ebbac53337 发布日期: 2021-03-05 21:15 修改: 2024-11-21 05:59
openssh-keygen	CVE-2021-41617	高危	8.3_p1-r0	8.3_p1-r3	openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41617 镜像层: sha256:1507bc7946120bee0d209a97b1157c96acd3ad4de9cc7f9aec68d6ebbac53337 发布日期: 2021-09-26 19:15 修改: 2024-11-21 06:26
busybox	CVE-2021-42386	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42386 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
openssl	CVE-2021-23840	高危	1.1.1g-r0	1.1.1j-r0	openssl: integer overflow in CipherUpdate 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2021-02-16 17:15 修改: 2024-11-21 05:51
openssl	CVE-2021-3450	高危	1.1.1g-r0	1.1.1k-r0	openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2021-03-25 15:15 修改: 2024-11-21 06:21
openssl	CVE-2021-3712	高危	1.1.1g-r0	1.1.1l-r0	openssl: Read buffer overruns processing ASN.1 strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2021-08-24 15:15 修改: 2024-11-21 06:22
openssl	CVE-2022-0778	高危	1.1.1g-r0	1.1.1n-r0	openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2022-03-15 17:15 修改: 2024-11-21 06:39
ssl_client	CVE-2021-28831	高危	1.31.1-r16	1.31.1-r20	busybox: invalid free or segmentation fault via malformed gzip data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28831 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-03-19 05:15 修改: 2025-12-17 22:15
ssl_client	CVE-2021-42378	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42378 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
ssl_client	CVE-2021-42379	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42379 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
ssl_client	CVE-2021-42380	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42380 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
ssl_client	CVE-2021-42381	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42381 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
ssl_client	CVE-2021-42382	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42382 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
ssl_client	CVE-2021-42383	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42383 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-04-23 20:15
ssl_client	CVE-2021-42384	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42384 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
ssl_client	CVE-2021-42385	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42385 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
ssl_client	CVE-2021-42386	高危	1.31.1-r16	1.31.1-r21	busybox: use-after-free in awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42386 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
ssl_client	CVE-2022-28391	高危	1.31.1-r16	1.31.1-r22	busybox: remote attackers may execute arbitrary code if netstat is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28391 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2022-04-03 21:15 修改: 2025-06-09 16:15
xz	CVE-2022-1271	高危	5.2.5-r0	5.2.5-r1	gzip: arbitrary-file-write vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2022-08-31 16:15 修改: 2025-06-09 15:15
xz-libs	CVE-2022-1271	高危	5.2.5-r0	5.2.5-r1	gzip: arbitrary-file-write vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2022-08-31 16:15 修改: 2025-06-09 15:15
busybox	CVE-2022-28391	高危	1.31.1-r16	1.31.1-r22	busybox: remote attackers may execute arbitrary code if netstat is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28391 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2022-04-03 21:15 修改: 2025-06-09 16:15
zlib	CVE-2018-25032	高危	1.2.11-r3	1.2.12-r0	zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2022-03-25 09:15 修改: 2025-08-21 20:37
libcrypto1.1	CVE-2020-1971	中危	1.1.1g-r0	1.1.1i-r0	openssl: EDIPARTYNAME NULL pointer de-reference 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2020-12-08 16:15 修改: 2024-11-21 05:11
libcrypto1.1	CVE-2021-23841	中危	1.1.1g-r0	1.1.1j-r0	openssl: NULL pointer dereference in X509_issuer_and_serial_hash() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-02-16 17:15 修改: 2024-11-21 05:51
openssh-client	CVE-2020-14145	中危	8.3_p1-r0	8.3_p1-r1	openssh: Observable discrepancy leading to an information leak in the algorithm negotiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14145 镜像层: sha256:1507bc7946120bee0d209a97b1157c96acd3ad4de9cc7f9aec68d6ebbac53337 发布日期: 2020-06-29 18:15 修改: 2025-12-18 15:15
libcurl	CVE-2021-22876	中危	7.69.1-r1	7.76.0-r0	curl: Leak of authentication credentials in URL via automatic Referer 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-04-01 18:15 修改: 2025-06-09 15:15
libcurl	CVE-2021-22922	中危	7.69.1-r1	7.78.0-r0	curl: Content not matching hash in Metalink is not being discarded 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-08-05 21:15 修改: 2024-11-21 05:50
openssh-keygen	CVE-2020-14145	中危	8.3_p1-r0	8.3_p1-r1	openssh: Observable discrepancy leading to an information leak in the algorithm negotiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14145 镜像层: sha256:1507bc7946120bee0d209a97b1157c96acd3ad4de9cc7f9aec68d6ebbac53337 发布日期: 2020-06-29 18:15 修改: 2025-12-18 15:15
libcurl	CVE-2021-22923	中危	7.69.1-r1	7.78.0-r0	curl: Metalink download sends credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-08-05 21:15 修改: 2024-11-21 05:50
libcurl	CVE-2021-22925	中危	7.69.1-r1	7.78.0-r0	curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22925 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-08-05 21:15 修改: 2024-11-21 05:50
libcurl	CVE-2021-22947	中危	7.69.1-r1	7.79.0-r0	curl: Server responses received before STARTTLS processed after TLS handshake 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-09-29 20:15 修改: 2024-11-21 05:50
libcurl	CVE-2022-27774	中危	7.69.1-r1	7.79.1-r1	curl: credential leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56
libcurl	CVE-2022-27776	中危	7.69.1-r1	7.79.1-r1	curl: auth/cookie leak on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56
openssl	CVE-2020-1971	中危	1.1.1g-r0	1.1.1i-r0	openssl: EDIPARTYNAME NULL pointer de-reference 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2020-12-08 16:15 修改: 2024-11-21 05:11
openssl	CVE-2021-23841	中危	1.1.1g-r0	1.1.1j-r0	openssl: NULL pointer dereference in X509_issuer_and_serial_hash() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2021-02-16 17:15 修改: 2024-11-21 05:51
openssl	CVE-2021-3449	中危	1.1.1g-r0	1.1.1k-r0	openssl: NULL pointer dereference in signature_algorithms processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2021-03-25 15:15 修改: 2024-11-21 06:21
libcrypto1.1	CVE-2021-3449	中危	1.1.1g-r0	1.1.1k-r0	openssl: NULL pointer dereference in signature_algorithms processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-03-25 15:15 修改: 2024-11-21 06:21
libblkid	CVE-2022-0563	中危	2.35.2-r0	2.37.4-r0	util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15
busybox	CVE-2021-42374	中危	1.31.1-r16	1.31.1-r21	busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42374 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
expat	CVE-2022-25313	中危	2.2.9-r1	2.2.10-r2	expat: Stack exhaustion in doctype parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25313 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2022-02-18 05:15 修改: 2025-05-30 20:15
krb5-libs	CVE-2021-37750	中危	1.18.2-r0	1.18.5-r0	krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2021-08-23 05:15 修改: 2024-11-21 06:15
libssl1.1	CVE-2020-1971	中危	1.1.1g-r0	1.1.1i-r0	openssl: EDIPARTYNAME NULL pointer de-reference 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2020-12-08 16:15 修改: 2024-11-21 05:11
libssl1.1	CVE-2021-23841	中危	1.1.1g-r0	1.1.1j-r0	openssl: NULL pointer dereference in X509_issuer_and_serial_hash() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-02-16 17:15 修改: 2024-11-21 05:51
libssl1.1	CVE-2021-3449	中危	1.1.1g-r0	1.1.1k-r0	openssl: NULL pointer dereference in signature_algorithms processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-03-25 15:15 修改: 2024-11-21 06:21
libuuid	CVE-2021-3995	中危	2.35.2-r0	2.37.3-r0	util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3995 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2022-08-23 20:15 修改: 2024-11-21 06:23
libuuid	CVE-2021-3996	中危	2.35.2-r0	2.37.3-r0	util-linux: Unauthorized unmount of filesystems in libmount 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3996 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2022-08-23 20:15 修改: 2024-11-21 06:23
libuuid	CVE-2022-0563	中危	2.35.2-r0	2.37.4-r0	util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15
ssl_client	CVE-2021-42374	中危	1.31.1-r16	1.31.1-r21	busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42374 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-11-15 21:15 修改: 2025-11-03 21:15
musl	CVE-2020-28928	中危	1.1.24-r8	1.1.24-r10	In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2020-11-24 18:15 修改: 2024-11-21 05:23
musl-utils	CVE-2020-28928	中危	1.1.24-r8	1.1.24-r10	In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2020-11-24 18:15 修改: 2024-11-21 05:23
libblkid	CVE-2021-3995	中危	2.35.2-r0	2.37.3-r0	util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3995 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2022-08-23 20:15 修改: 2024-11-21 06:23
libblkid	CVE-2021-3996	中危	2.35.2-r0	2.37.3-r0	util-linux: Unauthorized unmount of filesystems in libmount 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3996 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2022-08-23 20:15 修改: 2024-11-21 06:23
zstd-libs	CVE-2021-24032	中危	1.4.5-r0	1.4.9-r0	zstd: Race condition allows attacker to access world-readable destination file 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24032 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2021-03-04 21:15 修改: 2024-11-21 05:52
libcurl	CVE-2021-22898	低危	7.69.1-r1	7.77.0-r0	curl: TELNET stack contents disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-06-11 16:15 修改: 2024-11-21 05:50
libcurl	CVE-2021-22924	低危	7.69.1-r1	7.78.0-r0	curl: Bad connection reuse due to flawed path name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-08-05 21:15 修改: 2025-06-09 15:15
libcrypto1.1	CVE-2021-23839	低危	1.1.1g-r0	1.1.1j-r0	openssl: incorrect SSLv2 rollback protection 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-02-16 17:15 修改: 2024-11-21 05:51
openssl	CVE-2021-23839	低危	1.1.1g-r0	1.1.1j-r0	openssl: incorrect SSLv2 rollback protection 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839 镜像层: sha256:2ac15bdd84136c0fae31af1a61ab886d6ed81c0ed2a7af159edc354ec5c2739b 发布日期: 2021-02-16 17:15 修改: 2024-11-21 05:51
libcurl	CVE-2020-8284	低危	7.69.1-r1	7.74.0-r0	curl: FTP PASV command response can cause curl to connect to arbitrary host 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8284 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2020-12-14 20:15 修改: 2024-11-21 05:38
libcurl	CVE-2021-22890	低危	7.69.1-r1	7.76.0-r0	curl: TLS 1.3 session ticket mix-up with HTTPS proxy host 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22890 镜像层: sha256:2cb7fca9201c1168b605d2d910e0fba6c67f38713bc8eadf5de537e29d1783be 发布日期: 2021-04-01 18:15 修改: 2025-06-09 15:15
libssl1.1	CVE-2021-23839	低危	1.1.1g-r0	1.1.1j-r0	openssl: incorrect SSLv2 rollback protection 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839 镜像层: sha256:50644c29ef5a27c9a40c393a73ece2479de78325cae7d762ef3cdc19bf42dd0a 发布日期: 2021-02-16 17:15 修改: 2024-11-21 05:51

usr/local/bin/containerd (gobinary)

低危漏洞:1

中危漏洞:45

高危漏洞:46

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2022-23806	严重	1.13.15	1.16.14, 1.17.7	golang: crypto/elliptic: IsOnCurve returns true for invalid field elements 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23806 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2023-24538	严重	1.13.15	1.19.8, 1.20.3	golang: html/template: backticks not treated as string delimiters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24540	严重	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2024-24790	严重	1.13.15	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2024-11-21 08:59
stdlib	CVE-2021-27918	高危	1.13.15	1.15.9, 1.16.1	golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58
stdlib	CVE-2021-33195	高危	1.13.15	1.15.13, 1.16.5	golang: net: lookup functions may return invalid host names 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33195 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33196	高危	1.13.15	1.15.13, 1.16.5	golang: archive/zip: malformed archive may cause panic or memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33196 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33198	高危	1.13.15	1.15.13, 1.16.5	golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33198 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-39293	高危	1.13.15	1.16.8, 1.17.1	golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39293 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-24 01:15 修改: 2024-11-21 06:19
stdlib	CVE-2021-41771	高危	1.13.15	1.16.10, 1.17.3	golang: debug/macho: invalid dynamic symbol table command can cause panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41771 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-41772	高危	1.13.15	1.16.10, 1.17.3	golang: archive/zip: Reader.Open panics on empty string 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-44716	高危	1.13.15	1.16.12, 1.17.5	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-23772	高危	1.13.15	1.16.14, 1.17.7	golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2022-24675	高危	1.13.15	1.17.9, 1.18.1	golang: encoding/pem: fix stack overflow in Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24675 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:50
stdlib	CVE-2022-24921	高危	1.13.15	1.16.15, 1.17.8	golang: regexp: stack exhaustion via a deeply nested expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24921 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-03-05 20:15 修改: 2024-11-21 06:51
stdlib	CVE-2022-27664	高危	1.13.15	1.18.6, 1.19.1	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-09-06 18:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28131	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Decoder.Skip 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28327	高危	1.13.15	1.17.9, 1.18.1	golang: crypto/elliptic: panic caused by oversized scalar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28327 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:57
stdlib	CVE-2022-2879	高危	1.13.15	1.18.7, 1.19.2	golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-2880	高危	1.13.15	1.18.7, 1.19.2	golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-29804	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-30580	高危	1.13.15	1.17.11, 1.18.3	golang: os/exec: Code injection in Cmd.Start 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:02
stdlib	CVE-2022-30630	高危	1.13.15	1.17.12, 1.18.4	golang: io/fs: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30631	高危	1.13.15	1.17.12, 1.18.4	golang: compress/gzip: stack exhaustion in Reader.Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2025-10-20 18:15
stdlib	CVE-2022-30632	高危	1.13.15	1.17.12, 1.18.4	golang: path/filepath: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30633	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30634	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-07-15 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30635	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/gob: stack exhaustion in Decoder.Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-32189	高危	1.13.15	1.17.13, 1.18.5	golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41715	高危	1.13.15	1.18.7, 1.19.2	golang: regexp/syntax: limit memory used by parsing regexps 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:16 修改: 2024-11-21 07:23
stdlib	CVE-2022-41716	高危	1.13.15	1.18.8, 1.19.3	Due to unsanitized NUL values, attackers may be able to maliciously se ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-11-02 16:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41720	高危	1.13.15	1.18.9, 1.19.4	golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-07 17:15 修改: 2025-04-23 16:15
stdlib	CVE-2022-41722	高危	1.13.15	1.19.6, 1.20.1	golang: path/filepath: path-filepath filepath.Clean path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41723	高危	1.13.15	1.19.6, 1.20.1	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2025-05-05 16:15
stdlib	CVE-2022-41724	高危	1.13.15	1.19.6, 1.20.1	golang: crypto/tls: large handshake records may cause panics 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41725	高危	1.13.15	1.19.6, 1.20.1	golang: net/http, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24534	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto: denial of service from excessive memory allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24536	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24537	高危	1.13.15	1.19.8, 1.20.3	golang: go/parser: Infinite loop in parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24539	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29400	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29403	高危	1.13.15	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-06-08 21:15 修改: 2025-01-06 20:15
stdlib	CVE-2023-39325	高危	1.13.15	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-10-11 22:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45283	高危	1.13.15	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45287	高危	1.13.15	1.20.0	golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-05 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45288	高危	1.13.15	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-04-04 21:15 修改: 2025-11-04 19:16
stdlib	CVE-2024-34156	高危	1.13.15	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2025-47907	高危	1.13.15	1.23.12, 1.24.6	database/sql: Postgres Scan Race Condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-08-07 16:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-58183	高危	1.13.15	1.24.8, 1.25.2	golang: archive/tar: Unbounded allocation when parsing GNU sparse map 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61729	高危	1.13.15	1.24.11, 1.25.5	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-02 19:15 修改: 2025-12-19 18:25
stdlib	CVE-2020-24553	中危	1.13.15	1.14.8, 1.15.1	golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14
stdlib	CVE-2021-3114	中危	1.13.15	1.14.14, 1.15.7	golang: crypto/elliptic: incorrect operations on the P-224 curve 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3114 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-01-26 18:16 修改: 2024-11-21 06:20
stdlib	CVE-2021-31525	中危	1.13.15	1.15.12, 1.16.4	golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31525 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-05-27 13:15 修改: 2024-11-21 06:05
stdlib	CVE-2021-33197	中危	1.13.15	1.15.13, 1.16.5	golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33197 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-34558	中危	1.13.15	1.15.14, 1.16.6	golang: crypto/tls: certificate of wrong type is causing TLS client to panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34558 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-07-15 14:15 修改: 2024-11-21 06:10
stdlib	CVE-2021-36221	中危	1.13.15	1.15.15, 1.16.7	golang: net/http/httputil: panic due to racy read of persistConn after handler panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36221 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-08 06:15 修改: 2024-11-21 06:13
stdlib	CVE-2021-44717	中危	1.13.15	1.16.12, 1.17.5	golang: syscall: don't close fd 0 on ForkExec error 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-1705	中危	1.13.15	1.17.12, 1.18.4	golang: net/http: improper sanitization of Transfer-Encoding header 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-1962	中危	1.13.15	1.17.12, 1.18.4	golang: go/parser: stack exhaustion in all Parse* functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-29526	中危	1.13.15	1.17.10, 1.18.2	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-06-23 17:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-32148	中危	1.13.15	1.17.12, 1.18.4	golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41717	中危	1.13.15	1.18.9, 1.19.4	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-08 20:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24532	中危	1.13.15	1.19.7, 1.20.2	golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-03-08 20:15 修改: 2024-11-21 07:48
stdlib	CVE-2023-29406	中危	1.13.15	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-07-11 20:15 修改: 2024-11-21 07:56
stdlib	CVE-2023-29409	中危	1.13.15	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-08-02 20:15 修改: 2024-11-21 07:57
stdlib	CVE-2023-39318	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39319	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39326	中危	1.13.15	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-06 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45284	中危	1.13.15	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45289	中危	1.13.15	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45290	中危	1.13.15	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2024-24783	中危	1.13.15	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24784	中危	1.13.15	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24785	中危	1.13.15	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2025-03-14 02:15
stdlib	CVE-2024-24789	中危	1.13.15	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2025-01-31 15:15
stdlib	CVE-2024-24791	中危	1.13.15	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-07-02 22:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-34155	中危	1.13.15	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-34158	中危	1.13.15	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-45336	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45336 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2024-45341	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45341 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-0913	中危	1.13.15	1.23.10, 1.24.4	Inconsistent handling of O_CREATE\|O_EXCL on Unix and Windows in os in syscall 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 18:15 修改: 2025-08-08 14:53
stdlib	CVE-2025-22866	中危	1.13.15	1.22.12, 1.23.6, 1.24.0-rc.3	crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22866 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-02-06 17:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-22871	中危	1.13.15	1.23.8, 1.24.2	net/http: Request smuggling due to acceptance of invalid chunked data in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-04-08 20:15 修改: 2025-04-18 15:15
stdlib	CVE-2025-4673	中危	1.13.15	1.23.10, 1.24.4	net/http: Sensitive headers not cleared on cross-origin redirect in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 17:15 修改: 2025-06-12 16:06
stdlib	CVE-2025-47906	中危	1.13.15	1.23.12, 1.24.6	os/exec: Unexpected paths returned from LookPath in os/exec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-09-18 19:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-47912	中危	1.13.15	1.24.8, 1.25.2	net/url: Insufficient validation of bracketed IPv6 hostnames in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58185	中危	1.13.15	1.24.8, 1.25.2	encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58186	中危	1.13.15	1.24.8, 1.25.2	golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58187	中危	1.13.15	1.24.9, 1.25.3	crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-20 23:15
stdlib	CVE-2025-58188	中危	1.13.15	1.24.8, 1.25.2	crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58189	中危	1.13.15	1.24.8, 1.25.2	crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61723	中危	1.13.15	1.24.8, 1.25.2	encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61724	中危	1.13.15	1.24.8, 1.25.2	net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61725	中危	1.13.15	1.24.8, 1.25.2	net/mail: Excessive CPU consumption in ParseAddress in net/mail 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-12-09 18:15
stdlib	CVE-2025-61727	中危	1.13.15	1.24.11, 1.25.5	golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-03 20:16 修改: 2025-12-18 20:15
stdlib	CVE-2022-30629	低危	1.13.15	1.17.11, 1.18.3	golang: crypto/tls: session tickets lack random ticket_age_add 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03

usr/local/bin/containerd-shim (gobinary)

低危漏洞:1

中危漏洞:45

高危漏洞:46

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2022-23806	严重	1.13.15	1.16.14, 1.17.7	golang: crypto/elliptic: IsOnCurve returns true for invalid field elements 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23806 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2023-24538	严重	1.13.15	1.19.8, 1.20.3	golang: html/template: backticks not treated as string delimiters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24540	严重	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2024-24790	严重	1.13.15	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2024-11-21 08:59
stdlib	CVE-2021-27918	高危	1.13.15	1.15.9, 1.16.1	golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58
stdlib	CVE-2021-33195	高危	1.13.15	1.15.13, 1.16.5	golang: net: lookup functions may return invalid host names 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33195 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33196	高危	1.13.15	1.15.13, 1.16.5	golang: archive/zip: malformed archive may cause panic or memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33196 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33198	高危	1.13.15	1.15.13, 1.16.5	golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33198 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-39293	高危	1.13.15	1.16.8, 1.17.1	golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39293 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-24 01:15 修改: 2024-11-21 06:19
stdlib	CVE-2021-41771	高危	1.13.15	1.16.10, 1.17.3	golang: debug/macho: invalid dynamic symbol table command can cause panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41771 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-41772	高危	1.13.15	1.16.10, 1.17.3	golang: archive/zip: Reader.Open panics on empty string 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-44716	高危	1.13.15	1.16.12, 1.17.5	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-23772	高危	1.13.15	1.16.14, 1.17.7	golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2022-24675	高危	1.13.15	1.17.9, 1.18.1	golang: encoding/pem: fix stack overflow in Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24675 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:50
stdlib	CVE-2022-24921	高危	1.13.15	1.16.15, 1.17.8	golang: regexp: stack exhaustion via a deeply nested expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24921 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-03-05 20:15 修改: 2024-11-21 06:51
stdlib	CVE-2022-27664	高危	1.13.15	1.18.6, 1.19.1	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-09-06 18:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28131	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Decoder.Skip 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28327	高危	1.13.15	1.17.9, 1.18.1	golang: crypto/elliptic: panic caused by oversized scalar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28327 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:57
stdlib	CVE-2022-2879	高危	1.13.15	1.18.7, 1.19.2	golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-2880	高危	1.13.15	1.18.7, 1.19.2	golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-29804	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-30580	高危	1.13.15	1.17.11, 1.18.3	golang: os/exec: Code injection in Cmd.Start 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:02
stdlib	CVE-2022-30630	高危	1.13.15	1.17.12, 1.18.4	golang: io/fs: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30631	高危	1.13.15	1.17.12, 1.18.4	golang: compress/gzip: stack exhaustion in Reader.Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2025-10-20 18:15
stdlib	CVE-2022-30632	高危	1.13.15	1.17.12, 1.18.4	golang: path/filepath: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30633	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30634	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-07-15 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30635	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/gob: stack exhaustion in Decoder.Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-32189	高危	1.13.15	1.17.13, 1.18.5	golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41715	高危	1.13.15	1.18.7, 1.19.2	golang: regexp/syntax: limit memory used by parsing regexps 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:16 修改: 2024-11-21 07:23
stdlib	CVE-2022-41716	高危	1.13.15	1.18.8, 1.19.3	Due to unsanitized NUL values, attackers may be able to maliciously se ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-11-02 16:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41720	高危	1.13.15	1.18.9, 1.19.4	golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-07 17:15 修改: 2025-04-23 16:15
stdlib	CVE-2022-41722	高危	1.13.15	1.19.6, 1.20.1	golang: path/filepath: path-filepath filepath.Clean path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41723	高危	1.13.15	1.19.6, 1.20.1	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2025-05-05 16:15
stdlib	CVE-2022-41724	高危	1.13.15	1.19.6, 1.20.1	golang: crypto/tls: large handshake records may cause panics 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41725	高危	1.13.15	1.19.6, 1.20.1	golang: net/http, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24534	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto: denial of service from excessive memory allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24536	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24537	高危	1.13.15	1.19.8, 1.20.3	golang: go/parser: Infinite loop in parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24539	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29400	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29403	高危	1.13.15	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-06-08 21:15 修改: 2025-01-06 20:15
stdlib	CVE-2023-39325	高危	1.13.15	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-10-11 22:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45283	高危	1.13.15	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45287	高危	1.13.15	1.20.0	golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-05 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45288	高危	1.13.15	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-04-04 21:15 修改: 2025-11-04 19:16
stdlib	CVE-2024-34156	高危	1.13.15	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2025-47907	高危	1.13.15	1.23.12, 1.24.6	database/sql: Postgres Scan Race Condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-08-07 16:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-58183	高危	1.13.15	1.24.8, 1.25.2	golang: archive/tar: Unbounded allocation when parsing GNU sparse map 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61729	高危	1.13.15	1.24.11, 1.25.5	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-02 19:15 修改: 2025-12-19 18:25
stdlib	CVE-2020-24553	中危	1.13.15	1.14.8, 1.15.1	golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14
stdlib	CVE-2021-3114	中危	1.13.15	1.14.14, 1.15.7	golang: crypto/elliptic: incorrect operations on the P-224 curve 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3114 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-01-26 18:16 修改: 2024-11-21 06:20
stdlib	CVE-2021-31525	中危	1.13.15	1.15.12, 1.16.4	golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31525 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-05-27 13:15 修改: 2024-11-21 06:05
stdlib	CVE-2021-33197	中危	1.13.15	1.15.13, 1.16.5	golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33197 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-34558	中危	1.13.15	1.15.14, 1.16.6	golang: crypto/tls: certificate of wrong type is causing TLS client to panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34558 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-07-15 14:15 修改: 2024-11-21 06:10
stdlib	CVE-2021-36221	中危	1.13.15	1.15.15, 1.16.7	golang: net/http/httputil: panic due to racy read of persistConn after handler panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36221 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-08 06:15 修改: 2024-11-21 06:13
stdlib	CVE-2021-44717	中危	1.13.15	1.16.12, 1.17.5	golang: syscall: don't close fd 0 on ForkExec error 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-1705	中危	1.13.15	1.17.12, 1.18.4	golang: net/http: improper sanitization of Transfer-Encoding header 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-1962	中危	1.13.15	1.17.12, 1.18.4	golang: go/parser: stack exhaustion in all Parse* functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-29526	中危	1.13.15	1.17.10, 1.18.2	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-06-23 17:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-32148	中危	1.13.15	1.17.12, 1.18.4	golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41717	中危	1.13.15	1.18.9, 1.19.4	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-08 20:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24532	中危	1.13.15	1.19.7, 1.20.2	golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-03-08 20:15 修改: 2024-11-21 07:48
stdlib	CVE-2023-29406	中危	1.13.15	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-07-11 20:15 修改: 2024-11-21 07:56
stdlib	CVE-2023-29409	中危	1.13.15	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-08-02 20:15 修改: 2024-11-21 07:57
stdlib	CVE-2023-39318	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39319	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39326	中危	1.13.15	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-06 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45284	中危	1.13.15	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45289	中危	1.13.15	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45290	中危	1.13.15	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2024-24783	中危	1.13.15	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24784	中危	1.13.15	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24785	中危	1.13.15	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2025-03-14 02:15
stdlib	CVE-2024-24789	中危	1.13.15	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2025-01-31 15:15
stdlib	CVE-2024-24791	中危	1.13.15	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-07-02 22:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-34155	中危	1.13.15	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-34158	中危	1.13.15	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-45336	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45336 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2024-45341	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45341 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-0913	中危	1.13.15	1.23.10, 1.24.4	Inconsistent handling of O_CREATE\|O_EXCL on Unix and Windows in os in syscall 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 18:15 修改: 2025-08-08 14:53
stdlib	CVE-2025-22866	中危	1.13.15	1.22.12, 1.23.6, 1.24.0-rc.3	crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22866 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-02-06 17:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-22871	中危	1.13.15	1.23.8, 1.24.2	net/http: Request smuggling due to acceptance of invalid chunked data in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-04-08 20:15 修改: 2025-04-18 15:15
stdlib	CVE-2025-4673	中危	1.13.15	1.23.10, 1.24.4	net/http: Sensitive headers not cleared on cross-origin redirect in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 17:15 修改: 2025-06-12 16:06
stdlib	CVE-2025-47906	中危	1.13.15	1.23.12, 1.24.6	os/exec: Unexpected paths returned from LookPath in os/exec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-09-18 19:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-47912	中危	1.13.15	1.24.8, 1.25.2	net/url: Insufficient validation of bracketed IPv6 hostnames in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58185	中危	1.13.15	1.24.8, 1.25.2	encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58186	中危	1.13.15	1.24.8, 1.25.2	golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58187	中危	1.13.15	1.24.9, 1.25.3	crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-20 23:15
stdlib	CVE-2025-58188	中危	1.13.15	1.24.8, 1.25.2	crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58189	中危	1.13.15	1.24.8, 1.25.2	crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61723	中危	1.13.15	1.24.8, 1.25.2	encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61724	中危	1.13.15	1.24.8, 1.25.2	net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61725	中危	1.13.15	1.24.8, 1.25.2	net/mail: Excessive CPU consumption in ParseAddress in net/mail 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-12-09 18:15
stdlib	CVE-2025-61727	中危	1.13.15	1.24.11, 1.25.5	golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-03 20:16 修改: 2025-12-18 20:15
stdlib	CVE-2022-30629	低危	1.13.15	1.17.11, 1.18.3	golang: crypto/tls: session tickets lack random ticket_age_add 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03

usr/local/bin/ctr (gobinary)

低危漏洞:1

中危漏洞:45

高危漏洞:46

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2022-23806	严重	1.13.15	1.16.14, 1.17.7	golang: crypto/elliptic: IsOnCurve returns true for invalid field elements 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23806 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2023-24538	严重	1.13.15	1.19.8, 1.20.3	golang: html/template: backticks not treated as string delimiters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24540	严重	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2024-24790	严重	1.13.15	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2024-11-21 08:59
stdlib	CVE-2021-27918	高危	1.13.15	1.15.9, 1.16.1	golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58
stdlib	CVE-2021-33195	高危	1.13.15	1.15.13, 1.16.5	golang: net: lookup functions may return invalid host names 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33195 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33196	高危	1.13.15	1.15.13, 1.16.5	golang: archive/zip: malformed archive may cause panic or memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33196 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33198	高危	1.13.15	1.15.13, 1.16.5	golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33198 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-39293	高危	1.13.15	1.16.8, 1.17.1	golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39293 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-24 01:15 修改: 2024-11-21 06:19
stdlib	CVE-2021-41771	高危	1.13.15	1.16.10, 1.17.3	golang: debug/macho: invalid dynamic symbol table command can cause panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41771 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-41772	高危	1.13.15	1.16.10, 1.17.3	golang: archive/zip: Reader.Open panics on empty string 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-44716	高危	1.13.15	1.16.12, 1.17.5	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-23772	高危	1.13.15	1.16.14, 1.17.7	golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2022-24675	高危	1.13.15	1.17.9, 1.18.1	golang: encoding/pem: fix stack overflow in Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24675 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:50
stdlib	CVE-2022-24921	高危	1.13.15	1.16.15, 1.17.8	golang: regexp: stack exhaustion via a deeply nested expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24921 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-03-05 20:15 修改: 2024-11-21 06:51
stdlib	CVE-2022-27664	高危	1.13.15	1.18.6, 1.19.1	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-09-06 18:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28131	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Decoder.Skip 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28327	高危	1.13.15	1.17.9, 1.18.1	golang: crypto/elliptic: panic caused by oversized scalar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28327 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:57
stdlib	CVE-2022-2879	高危	1.13.15	1.18.7, 1.19.2	golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-2880	高危	1.13.15	1.18.7, 1.19.2	golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-29804	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-30580	高危	1.13.15	1.17.11, 1.18.3	golang: os/exec: Code injection in Cmd.Start 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:02
stdlib	CVE-2022-30630	高危	1.13.15	1.17.12, 1.18.4	golang: io/fs: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30631	高危	1.13.15	1.17.12, 1.18.4	golang: compress/gzip: stack exhaustion in Reader.Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2025-10-20 18:15
stdlib	CVE-2022-30632	高危	1.13.15	1.17.12, 1.18.4	golang: path/filepath: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30633	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30634	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-07-15 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30635	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/gob: stack exhaustion in Decoder.Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-32189	高危	1.13.15	1.17.13, 1.18.5	golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41715	高危	1.13.15	1.18.7, 1.19.2	golang: regexp/syntax: limit memory used by parsing regexps 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:16 修改: 2024-11-21 07:23
stdlib	CVE-2022-41716	高危	1.13.15	1.18.8, 1.19.3	Due to unsanitized NUL values, attackers may be able to maliciously se ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-11-02 16:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41720	高危	1.13.15	1.18.9, 1.19.4	golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-07 17:15 修改: 2025-04-23 16:15
stdlib	CVE-2022-41722	高危	1.13.15	1.19.6, 1.20.1	golang: path/filepath: path-filepath filepath.Clean path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41723	高危	1.13.15	1.19.6, 1.20.1	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2025-05-05 16:15
stdlib	CVE-2022-41724	高危	1.13.15	1.19.6, 1.20.1	golang: crypto/tls: large handshake records may cause panics 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41725	高危	1.13.15	1.19.6, 1.20.1	golang: net/http, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24534	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto: denial of service from excessive memory allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24536	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24537	高危	1.13.15	1.19.8, 1.20.3	golang: go/parser: Infinite loop in parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24539	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29400	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29403	高危	1.13.15	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-06-08 21:15 修改: 2025-01-06 20:15
stdlib	CVE-2023-39325	高危	1.13.15	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-10-11 22:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45283	高危	1.13.15	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45287	高危	1.13.15	1.20.0	golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-05 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45288	高危	1.13.15	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-04-04 21:15 修改: 2025-11-04 19:16
stdlib	CVE-2024-34156	高危	1.13.15	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2025-47907	高危	1.13.15	1.23.12, 1.24.6	database/sql: Postgres Scan Race Condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-08-07 16:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-58183	高危	1.13.15	1.24.8, 1.25.2	golang: archive/tar: Unbounded allocation when parsing GNU sparse map 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61729	高危	1.13.15	1.24.11, 1.25.5	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-02 19:15 修改: 2025-12-19 18:25
stdlib	CVE-2020-24553	中危	1.13.15	1.14.8, 1.15.1	golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14
stdlib	CVE-2021-3114	中危	1.13.15	1.14.14, 1.15.7	golang: crypto/elliptic: incorrect operations on the P-224 curve 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3114 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-01-26 18:16 修改: 2024-11-21 06:20
stdlib	CVE-2021-31525	中危	1.13.15	1.15.12, 1.16.4	golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31525 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-05-27 13:15 修改: 2024-11-21 06:05
stdlib	CVE-2021-33197	中危	1.13.15	1.15.13, 1.16.5	golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33197 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-34558	中危	1.13.15	1.15.14, 1.16.6	golang: crypto/tls: certificate of wrong type is causing TLS client to panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34558 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-07-15 14:15 修改: 2024-11-21 06:10
stdlib	CVE-2021-36221	中危	1.13.15	1.15.15, 1.16.7	golang: net/http/httputil: panic due to racy read of persistConn after handler panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36221 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-08 06:15 修改: 2024-11-21 06:13
stdlib	CVE-2021-44717	中危	1.13.15	1.16.12, 1.17.5	golang: syscall: don't close fd 0 on ForkExec error 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-1705	中危	1.13.15	1.17.12, 1.18.4	golang: net/http: improper sanitization of Transfer-Encoding header 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-1962	中危	1.13.15	1.17.12, 1.18.4	golang: go/parser: stack exhaustion in all Parse* functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-29526	中危	1.13.15	1.17.10, 1.18.2	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-06-23 17:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-32148	中危	1.13.15	1.17.12, 1.18.4	golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41717	中危	1.13.15	1.18.9, 1.19.4	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-08 20:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24532	中危	1.13.15	1.19.7, 1.20.2	golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-03-08 20:15 修改: 2024-11-21 07:48
stdlib	CVE-2023-29406	中危	1.13.15	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-07-11 20:15 修改: 2024-11-21 07:56
stdlib	CVE-2023-29409	中危	1.13.15	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-08-02 20:15 修改: 2024-11-21 07:57
stdlib	CVE-2023-39318	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39319	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39326	中危	1.13.15	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-06 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45284	中危	1.13.15	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45289	中危	1.13.15	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45290	中危	1.13.15	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2024-24783	中危	1.13.15	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24784	中危	1.13.15	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24785	中危	1.13.15	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2025-03-14 02:15
stdlib	CVE-2024-24789	中危	1.13.15	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2025-01-31 15:15
stdlib	CVE-2024-24791	中危	1.13.15	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-07-02 22:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-34155	中危	1.13.15	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-34158	中危	1.13.15	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-45336	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45336 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2024-45341	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45341 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-0913	中危	1.13.15	1.23.10, 1.24.4	Inconsistent handling of O_CREATE\|O_EXCL on Unix and Windows in os in syscall 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 18:15 修改: 2025-08-08 14:53
stdlib	CVE-2025-22866	中危	1.13.15	1.22.12, 1.23.6, 1.24.0-rc.3	crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22866 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-02-06 17:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-22871	中危	1.13.15	1.23.8, 1.24.2	net/http: Request smuggling due to acceptance of invalid chunked data in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-04-08 20:15 修改: 2025-04-18 15:15
stdlib	CVE-2025-4673	中危	1.13.15	1.23.10, 1.24.4	net/http: Sensitive headers not cleared on cross-origin redirect in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 17:15 修改: 2025-06-12 16:06
stdlib	CVE-2025-47906	中危	1.13.15	1.23.12, 1.24.6	os/exec: Unexpected paths returned from LookPath in os/exec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-09-18 19:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-47912	中危	1.13.15	1.24.8, 1.25.2	net/url: Insufficient validation of bracketed IPv6 hostnames in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58185	中危	1.13.15	1.24.8, 1.25.2	encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58186	中危	1.13.15	1.24.8, 1.25.2	golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58187	中危	1.13.15	1.24.9, 1.25.3	crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-20 23:15
stdlib	CVE-2025-58188	中危	1.13.15	1.24.8, 1.25.2	crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58189	中危	1.13.15	1.24.8, 1.25.2	crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61723	中危	1.13.15	1.24.8, 1.25.2	encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61724	中危	1.13.15	1.24.8, 1.25.2	net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61725	中危	1.13.15	1.24.8, 1.25.2	net/mail: Excessive CPU consumption in ParseAddress in net/mail 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-12-09 18:15
stdlib	CVE-2025-61727	中危	1.13.15	1.24.11, 1.25.5	golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-03 20:16 修改: 2025-12-18 20:15
stdlib	CVE-2022-30629	低危	1.13.15	1.17.11, 1.18.3	golang: crypto/tls: session tickets lack random ticket_age_add 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03

usr/local/bin/docker (gobinary)

低危漏洞:1

中危漏洞:45

高危漏洞:46

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2022-23806	严重	1.13.15	1.16.14, 1.17.7	golang: crypto/elliptic: IsOnCurve returns true for invalid field elements 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23806 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2023-24538	严重	1.13.15	1.19.8, 1.20.3	golang: html/template: backticks not treated as string delimiters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24540	严重	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2024-24790	严重	1.13.15	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2024-11-21 08:59
stdlib	CVE-2021-27918	高危	1.13.15	1.15.9, 1.16.1	golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58
stdlib	CVE-2021-33195	高危	1.13.15	1.15.13, 1.16.5	golang: net: lookup functions may return invalid host names 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33195 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33196	高危	1.13.15	1.15.13, 1.16.5	golang: archive/zip: malformed archive may cause panic or memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33196 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33198	高危	1.13.15	1.15.13, 1.16.5	golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33198 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-39293	高危	1.13.15	1.16.8, 1.17.1	golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39293 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-24 01:15 修改: 2024-11-21 06:19
stdlib	CVE-2021-41771	高危	1.13.15	1.16.10, 1.17.3	golang: debug/macho: invalid dynamic symbol table command can cause panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41771 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-41772	高危	1.13.15	1.16.10, 1.17.3	golang: archive/zip: Reader.Open panics on empty string 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-44716	高危	1.13.15	1.16.12, 1.17.5	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-23772	高危	1.13.15	1.16.14, 1.17.7	golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2022-24675	高危	1.13.15	1.17.9, 1.18.1	golang: encoding/pem: fix stack overflow in Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24675 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:50
stdlib	CVE-2022-24921	高危	1.13.15	1.16.15, 1.17.8	golang: regexp: stack exhaustion via a deeply nested expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24921 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-03-05 20:15 修改: 2024-11-21 06:51
stdlib	CVE-2022-27664	高危	1.13.15	1.18.6, 1.19.1	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-09-06 18:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28131	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Decoder.Skip 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28327	高危	1.13.15	1.17.9, 1.18.1	golang: crypto/elliptic: panic caused by oversized scalar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28327 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:57
stdlib	CVE-2022-2879	高危	1.13.15	1.18.7, 1.19.2	golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-2880	高危	1.13.15	1.18.7, 1.19.2	golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-29804	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-30580	高危	1.13.15	1.17.11, 1.18.3	golang: os/exec: Code injection in Cmd.Start 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:02
stdlib	CVE-2022-30630	高危	1.13.15	1.17.12, 1.18.4	golang: io/fs: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30631	高危	1.13.15	1.17.12, 1.18.4	golang: compress/gzip: stack exhaustion in Reader.Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2025-10-20 18:15
stdlib	CVE-2022-30632	高危	1.13.15	1.17.12, 1.18.4	golang: path/filepath: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30633	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30634	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-07-15 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30635	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/gob: stack exhaustion in Decoder.Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-32189	高危	1.13.15	1.17.13, 1.18.5	golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41715	高危	1.13.15	1.18.7, 1.19.2	golang: regexp/syntax: limit memory used by parsing regexps 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:16 修改: 2024-11-21 07:23
stdlib	CVE-2022-41716	高危	1.13.15	1.18.8, 1.19.3	Due to unsanitized NUL values, attackers may be able to maliciously se ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-11-02 16:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41720	高危	1.13.15	1.18.9, 1.19.4	golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-07 17:15 修改: 2025-04-23 16:15
stdlib	CVE-2022-41722	高危	1.13.15	1.19.6, 1.20.1	golang: path/filepath: path-filepath filepath.Clean path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41723	高危	1.13.15	1.19.6, 1.20.1	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2025-05-05 16:15
stdlib	CVE-2022-41724	高危	1.13.15	1.19.6, 1.20.1	golang: crypto/tls: large handshake records may cause panics 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41725	高危	1.13.15	1.19.6, 1.20.1	golang: net/http, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24534	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto: denial of service from excessive memory allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24536	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24537	高危	1.13.15	1.19.8, 1.20.3	golang: go/parser: Infinite loop in parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24539	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29400	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29403	高危	1.13.15	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-06-08 21:15 修改: 2025-01-06 20:15
stdlib	CVE-2023-39325	高危	1.13.15	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-10-11 22:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45283	高危	1.13.15	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45287	高危	1.13.15	1.20.0	golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-05 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45288	高危	1.13.15	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-04-04 21:15 修改: 2025-11-04 19:16
stdlib	CVE-2024-34156	高危	1.13.15	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2025-47907	高危	1.13.15	1.23.12, 1.24.6	database/sql: Postgres Scan Race Condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-08-07 16:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-58183	高危	1.13.15	1.24.8, 1.25.2	golang: archive/tar: Unbounded allocation when parsing GNU sparse map 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61729	高危	1.13.15	1.24.11, 1.25.5	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-02 19:15 修改: 2025-12-19 18:25
stdlib	CVE-2020-24553	中危	1.13.15	1.14.8, 1.15.1	golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14
stdlib	CVE-2021-3114	中危	1.13.15	1.14.14, 1.15.7	golang: crypto/elliptic: incorrect operations on the P-224 curve 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3114 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-01-26 18:16 修改: 2024-11-21 06:20
stdlib	CVE-2021-31525	中危	1.13.15	1.15.12, 1.16.4	golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31525 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-05-27 13:15 修改: 2024-11-21 06:05
stdlib	CVE-2021-33197	中危	1.13.15	1.15.13, 1.16.5	golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33197 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-34558	中危	1.13.15	1.15.14, 1.16.6	golang: crypto/tls: certificate of wrong type is causing TLS client to panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34558 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-07-15 14:15 修改: 2024-11-21 06:10
stdlib	CVE-2021-36221	中危	1.13.15	1.15.15, 1.16.7	golang: net/http/httputil: panic due to racy read of persistConn after handler panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36221 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-08 06:15 修改: 2024-11-21 06:13
stdlib	CVE-2021-44717	中危	1.13.15	1.16.12, 1.17.5	golang: syscall: don't close fd 0 on ForkExec error 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-1705	中危	1.13.15	1.17.12, 1.18.4	golang: net/http: improper sanitization of Transfer-Encoding header 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-1962	中危	1.13.15	1.17.12, 1.18.4	golang: go/parser: stack exhaustion in all Parse* functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-29526	中危	1.13.15	1.17.10, 1.18.2	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-06-23 17:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-32148	中危	1.13.15	1.17.12, 1.18.4	golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41717	中危	1.13.15	1.18.9, 1.19.4	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-08 20:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24532	中危	1.13.15	1.19.7, 1.20.2	golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-03-08 20:15 修改: 2024-11-21 07:48
stdlib	CVE-2023-29406	中危	1.13.15	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-07-11 20:15 修改: 2024-11-21 07:56
stdlib	CVE-2023-29409	中危	1.13.15	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-08-02 20:15 修改: 2024-11-21 07:57
stdlib	CVE-2023-39318	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39319	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39326	中危	1.13.15	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-06 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45284	中危	1.13.15	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45289	中危	1.13.15	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45290	中危	1.13.15	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2024-24783	中危	1.13.15	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24784	中危	1.13.15	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24785	中危	1.13.15	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2025-03-14 02:15
stdlib	CVE-2024-24789	中危	1.13.15	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2025-01-31 15:15
stdlib	CVE-2024-24791	中危	1.13.15	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-07-02 22:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-34155	中危	1.13.15	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-34158	中危	1.13.15	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-45336	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45336 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2024-45341	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45341 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-0913	中危	1.13.15	1.23.10, 1.24.4	Inconsistent handling of O_CREATE\|O_EXCL on Unix and Windows in os in syscall 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 18:15 修改: 2025-08-08 14:53
stdlib	CVE-2025-22866	中危	1.13.15	1.22.12, 1.23.6, 1.24.0-rc.3	crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22866 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-02-06 17:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-22871	中危	1.13.15	1.23.8, 1.24.2	net/http: Request smuggling due to acceptance of invalid chunked data in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-04-08 20:15 修改: 2025-04-18 15:15
stdlib	CVE-2025-4673	中危	1.13.15	1.23.10, 1.24.4	net/http: Sensitive headers not cleared on cross-origin redirect in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 17:15 修改: 2025-06-12 16:06
stdlib	CVE-2025-47906	中危	1.13.15	1.23.12, 1.24.6	os/exec: Unexpected paths returned from LookPath in os/exec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-09-18 19:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-47912	中危	1.13.15	1.24.8, 1.25.2	net/url: Insufficient validation of bracketed IPv6 hostnames in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58185	中危	1.13.15	1.24.8, 1.25.2	encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58186	中危	1.13.15	1.24.8, 1.25.2	golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58187	中危	1.13.15	1.24.9, 1.25.3	crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-20 23:15
stdlib	CVE-2025-58188	中危	1.13.15	1.24.8, 1.25.2	crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58189	中危	1.13.15	1.24.8, 1.25.2	crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61723	中危	1.13.15	1.24.8, 1.25.2	encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61724	中危	1.13.15	1.24.8, 1.25.2	net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61725	中危	1.13.15	1.24.8, 1.25.2	net/mail: Excessive CPU consumption in ParseAddress in net/mail 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-12-09 18:15
stdlib	CVE-2025-61727	中危	1.13.15	1.24.11, 1.25.5	golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-03 20:16 修改: 2025-12-18 20:15
stdlib	CVE-2022-30629	低危	1.13.15	1.17.11, 1.18.3	golang: crypto/tls: session tickets lack random ticket_age_add 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03

usr/local/bin/docker-proxy (gobinary)

低危漏洞:1

中危漏洞:45

高危漏洞:46

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2022-23806	严重	1.13.15	1.16.14, 1.17.7	golang: crypto/elliptic: IsOnCurve returns true for invalid field elements 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23806 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2023-24538	严重	1.13.15	1.19.8, 1.20.3	golang: html/template: backticks not treated as string delimiters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24540	严重	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2024-24790	严重	1.13.15	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2024-11-21 08:59
stdlib	CVE-2021-27918	高危	1.13.15	1.15.9, 1.16.1	golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58
stdlib	CVE-2021-33195	高危	1.13.15	1.15.13, 1.16.5	golang: net: lookup functions may return invalid host names 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33195 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33196	高危	1.13.15	1.15.13, 1.16.5	golang: archive/zip: malformed archive may cause panic or memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33196 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33198	高危	1.13.15	1.15.13, 1.16.5	golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33198 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-39293	高危	1.13.15	1.16.8, 1.17.1	golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39293 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-24 01:15 修改: 2024-11-21 06:19
stdlib	CVE-2021-41771	高危	1.13.15	1.16.10, 1.17.3	golang: debug/macho: invalid dynamic symbol table command can cause panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41771 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-41772	高危	1.13.15	1.16.10, 1.17.3	golang: archive/zip: Reader.Open panics on empty string 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-44716	高危	1.13.15	1.16.12, 1.17.5	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-23772	高危	1.13.15	1.16.14, 1.17.7	golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2022-24675	高危	1.13.15	1.17.9, 1.18.1	golang: encoding/pem: fix stack overflow in Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24675 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:50
stdlib	CVE-2022-24921	高危	1.13.15	1.16.15, 1.17.8	golang: regexp: stack exhaustion via a deeply nested expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24921 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-03-05 20:15 修改: 2024-11-21 06:51
stdlib	CVE-2022-27664	高危	1.13.15	1.18.6, 1.19.1	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-09-06 18:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28131	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Decoder.Skip 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28327	高危	1.13.15	1.17.9, 1.18.1	golang: crypto/elliptic: panic caused by oversized scalar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28327 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:57
stdlib	CVE-2022-2879	高危	1.13.15	1.18.7, 1.19.2	golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-2880	高危	1.13.15	1.18.7, 1.19.2	golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-29804	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-30580	高危	1.13.15	1.17.11, 1.18.3	golang: os/exec: Code injection in Cmd.Start 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:02
stdlib	CVE-2022-30630	高危	1.13.15	1.17.12, 1.18.4	golang: io/fs: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30631	高危	1.13.15	1.17.12, 1.18.4	golang: compress/gzip: stack exhaustion in Reader.Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2025-10-20 18:15
stdlib	CVE-2022-30632	高危	1.13.15	1.17.12, 1.18.4	golang: path/filepath: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30633	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30634	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-07-15 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30635	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/gob: stack exhaustion in Decoder.Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-32189	高危	1.13.15	1.17.13, 1.18.5	golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41715	高危	1.13.15	1.18.7, 1.19.2	golang: regexp/syntax: limit memory used by parsing regexps 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:16 修改: 2024-11-21 07:23
stdlib	CVE-2022-41716	高危	1.13.15	1.18.8, 1.19.3	Due to unsanitized NUL values, attackers may be able to maliciously se ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-11-02 16:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41720	高危	1.13.15	1.18.9, 1.19.4	golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-07 17:15 修改: 2025-04-23 16:15
stdlib	CVE-2022-41722	高危	1.13.15	1.19.6, 1.20.1	golang: path/filepath: path-filepath filepath.Clean path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41723	高危	1.13.15	1.19.6, 1.20.1	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2025-05-05 16:15
stdlib	CVE-2022-41724	高危	1.13.15	1.19.6, 1.20.1	golang: crypto/tls: large handshake records may cause panics 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41725	高危	1.13.15	1.19.6, 1.20.1	golang: net/http, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24534	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto: denial of service from excessive memory allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24536	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24537	高危	1.13.15	1.19.8, 1.20.3	golang: go/parser: Infinite loop in parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24539	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29400	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29403	高危	1.13.15	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-06-08 21:15 修改: 2025-01-06 20:15
stdlib	CVE-2023-39325	高危	1.13.15	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-10-11 22:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45283	高危	1.13.15	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45287	高危	1.13.15	1.20.0	golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-05 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45288	高危	1.13.15	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-04-04 21:15 修改: 2025-11-04 19:16
stdlib	CVE-2024-34156	高危	1.13.15	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2025-47907	高危	1.13.15	1.23.12, 1.24.6	database/sql: Postgres Scan Race Condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-08-07 16:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-58183	高危	1.13.15	1.24.8, 1.25.2	golang: archive/tar: Unbounded allocation when parsing GNU sparse map 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61729	高危	1.13.15	1.24.11, 1.25.5	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-02 19:15 修改: 2025-12-19 18:25
stdlib	CVE-2020-24553	中危	1.13.15	1.14.8, 1.15.1	golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14
stdlib	CVE-2021-3114	中危	1.13.15	1.14.14, 1.15.7	golang: crypto/elliptic: incorrect operations on the P-224 curve 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3114 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-01-26 18:16 修改: 2024-11-21 06:20
stdlib	CVE-2021-31525	中危	1.13.15	1.15.12, 1.16.4	golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31525 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-05-27 13:15 修改: 2024-11-21 06:05
stdlib	CVE-2021-33197	中危	1.13.15	1.15.13, 1.16.5	golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33197 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-34558	中危	1.13.15	1.15.14, 1.16.6	golang: crypto/tls: certificate of wrong type is causing TLS client to panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34558 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-07-15 14:15 修改: 2024-11-21 06:10
stdlib	CVE-2021-36221	中危	1.13.15	1.15.15, 1.16.7	golang: net/http/httputil: panic due to racy read of persistConn after handler panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36221 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-08 06:15 修改: 2024-11-21 06:13
stdlib	CVE-2021-44717	中危	1.13.15	1.16.12, 1.17.5	golang: syscall: don't close fd 0 on ForkExec error 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-1705	中危	1.13.15	1.17.12, 1.18.4	golang: net/http: improper sanitization of Transfer-Encoding header 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-1962	中危	1.13.15	1.17.12, 1.18.4	golang: go/parser: stack exhaustion in all Parse* functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-29526	中危	1.13.15	1.17.10, 1.18.2	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-06-23 17:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-32148	中危	1.13.15	1.17.12, 1.18.4	golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41717	中危	1.13.15	1.18.9, 1.19.4	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-08 20:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24532	中危	1.13.15	1.19.7, 1.20.2	golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-03-08 20:15 修改: 2024-11-21 07:48
stdlib	CVE-2023-29406	中危	1.13.15	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-07-11 20:15 修改: 2024-11-21 07:56
stdlib	CVE-2023-29409	中危	1.13.15	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-08-02 20:15 修改: 2024-11-21 07:57
stdlib	CVE-2023-39318	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39319	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39326	中危	1.13.15	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-06 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45284	中危	1.13.15	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45289	中危	1.13.15	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45290	中危	1.13.15	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2024-24783	中危	1.13.15	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24784	中危	1.13.15	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24785	中危	1.13.15	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2025-03-14 02:15
stdlib	CVE-2024-24789	中危	1.13.15	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2025-01-31 15:15
stdlib	CVE-2024-24791	中危	1.13.15	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-07-02 22:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-34155	中危	1.13.15	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-34158	中危	1.13.15	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-45336	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45336 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2024-45341	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45341 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-0913	中危	1.13.15	1.23.10, 1.24.4	Inconsistent handling of O_CREATE\|O_EXCL on Unix and Windows in os in syscall 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 18:15 修改: 2025-08-08 14:53
stdlib	CVE-2025-22866	中危	1.13.15	1.22.12, 1.23.6, 1.24.0-rc.3	crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22866 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-02-06 17:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-22871	中危	1.13.15	1.23.8, 1.24.2	net/http: Request smuggling due to acceptance of invalid chunked data in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-04-08 20:15 修改: 2025-04-18 15:15
stdlib	CVE-2025-4673	中危	1.13.15	1.23.10, 1.24.4	net/http: Sensitive headers not cleared on cross-origin redirect in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 17:15 修改: 2025-06-12 16:06
stdlib	CVE-2025-47906	中危	1.13.15	1.23.12, 1.24.6	os/exec: Unexpected paths returned from LookPath in os/exec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-09-18 19:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-47912	中危	1.13.15	1.24.8, 1.25.2	net/url: Insufficient validation of bracketed IPv6 hostnames in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58185	中危	1.13.15	1.24.8, 1.25.2	encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58186	中危	1.13.15	1.24.8, 1.25.2	golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58187	中危	1.13.15	1.24.9, 1.25.3	crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-20 23:15
stdlib	CVE-2025-58188	中危	1.13.15	1.24.8, 1.25.2	crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58189	中危	1.13.15	1.24.8, 1.25.2	crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61723	中危	1.13.15	1.24.8, 1.25.2	encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61724	中危	1.13.15	1.24.8, 1.25.2	net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61725	中危	1.13.15	1.24.8, 1.25.2	net/mail: Excessive CPU consumption in ParseAddress in net/mail 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-12-09 18:15
stdlib	CVE-2025-61727	中危	1.13.15	1.24.11, 1.25.5	golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-03 20:16 修改: 2025-12-18 20:15
stdlib	CVE-2022-30629	低危	1.13.15	1.17.11, 1.18.3	golang: crypto/tls: session tickets lack random ticket_age_add 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03

usr/local/bin/dockerd (gobinary)

低危漏洞:1

中危漏洞:45

高危漏洞:46

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2022-23806	严重	1.13.15	1.16.14, 1.17.7	golang: crypto/elliptic: IsOnCurve returns true for invalid field elements 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23806 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2023-24538	严重	1.13.15	1.19.8, 1.20.3	golang: html/template: backticks not treated as string delimiters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24540	严重	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2024-24790	严重	1.13.15	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2024-11-21 08:59
stdlib	CVE-2021-27918	高危	1.13.15	1.15.9, 1.16.1	golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58
stdlib	CVE-2021-33195	高危	1.13.15	1.15.13, 1.16.5	golang: net: lookup functions may return invalid host names 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33195 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33196	高危	1.13.15	1.15.13, 1.16.5	golang: archive/zip: malformed archive may cause panic or memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33196 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33198	高危	1.13.15	1.15.13, 1.16.5	golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33198 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-39293	高危	1.13.15	1.16.8, 1.17.1	golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39293 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-24 01:15 修改: 2024-11-21 06:19
stdlib	CVE-2021-41771	高危	1.13.15	1.16.10, 1.17.3	golang: debug/macho: invalid dynamic symbol table command can cause panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41771 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-41772	高危	1.13.15	1.16.10, 1.17.3	golang: archive/zip: Reader.Open panics on empty string 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-44716	高危	1.13.15	1.16.12, 1.17.5	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-23772	高危	1.13.15	1.16.14, 1.17.7	golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2022-24675	高危	1.13.15	1.17.9, 1.18.1	golang: encoding/pem: fix stack overflow in Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24675 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:50
stdlib	CVE-2022-24921	高危	1.13.15	1.16.15, 1.17.8	golang: regexp: stack exhaustion via a deeply nested expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24921 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-03-05 20:15 修改: 2024-11-21 06:51
stdlib	CVE-2022-27664	高危	1.13.15	1.18.6, 1.19.1	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-09-06 18:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28131	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Decoder.Skip 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28327	高危	1.13.15	1.17.9, 1.18.1	golang: crypto/elliptic: panic caused by oversized scalar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28327 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:57
stdlib	CVE-2022-2879	高危	1.13.15	1.18.7, 1.19.2	golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-2880	高危	1.13.15	1.18.7, 1.19.2	golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-29804	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-30580	高危	1.13.15	1.17.11, 1.18.3	golang: os/exec: Code injection in Cmd.Start 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:02
stdlib	CVE-2022-30630	高危	1.13.15	1.17.12, 1.18.4	golang: io/fs: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30631	高危	1.13.15	1.17.12, 1.18.4	golang: compress/gzip: stack exhaustion in Reader.Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2025-10-20 18:15
stdlib	CVE-2022-30632	高危	1.13.15	1.17.12, 1.18.4	golang: path/filepath: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30633	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30634	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-07-15 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30635	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/gob: stack exhaustion in Decoder.Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-32189	高危	1.13.15	1.17.13, 1.18.5	golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41715	高危	1.13.15	1.18.7, 1.19.2	golang: regexp/syntax: limit memory used by parsing regexps 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:16 修改: 2024-11-21 07:23
stdlib	CVE-2022-41716	高危	1.13.15	1.18.8, 1.19.3	Due to unsanitized NUL values, attackers may be able to maliciously se ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-11-02 16:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41720	高危	1.13.15	1.18.9, 1.19.4	golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-07 17:15 修改: 2025-04-23 16:15
stdlib	CVE-2022-41722	高危	1.13.15	1.19.6, 1.20.1	golang: path/filepath: path-filepath filepath.Clean path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41723	高危	1.13.15	1.19.6, 1.20.1	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2025-05-05 16:15
stdlib	CVE-2022-41724	高危	1.13.15	1.19.6, 1.20.1	golang: crypto/tls: large handshake records may cause panics 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41725	高危	1.13.15	1.19.6, 1.20.1	golang: net/http, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24534	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto: denial of service from excessive memory allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24536	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24537	高危	1.13.15	1.19.8, 1.20.3	golang: go/parser: Infinite loop in parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24539	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29400	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29403	高危	1.13.15	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-06-08 21:15 修改: 2025-01-06 20:15
stdlib	CVE-2023-39325	高危	1.13.15	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-10-11 22:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45283	高危	1.13.15	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45287	高危	1.13.15	1.20.0	golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-05 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45288	高危	1.13.15	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-04-04 21:15 修改: 2025-11-04 19:16
stdlib	CVE-2024-34156	高危	1.13.15	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2025-47907	高危	1.13.15	1.23.12, 1.24.6	database/sql: Postgres Scan Race Condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-08-07 16:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-58183	高危	1.13.15	1.24.8, 1.25.2	golang: archive/tar: Unbounded allocation when parsing GNU sparse map 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61729	高危	1.13.15	1.24.11, 1.25.5	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-02 19:15 修改: 2025-12-19 18:25
stdlib	CVE-2020-24553	中危	1.13.15	1.14.8, 1.15.1	golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14
stdlib	CVE-2021-3114	中危	1.13.15	1.14.14, 1.15.7	golang: crypto/elliptic: incorrect operations on the P-224 curve 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3114 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-01-26 18:16 修改: 2024-11-21 06:20
stdlib	CVE-2021-31525	中危	1.13.15	1.15.12, 1.16.4	golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31525 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-05-27 13:15 修改: 2024-11-21 06:05
stdlib	CVE-2021-33197	中危	1.13.15	1.15.13, 1.16.5	golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33197 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-34558	中危	1.13.15	1.15.14, 1.16.6	golang: crypto/tls: certificate of wrong type is causing TLS client to panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34558 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-07-15 14:15 修改: 2024-11-21 06:10
stdlib	CVE-2021-36221	中危	1.13.15	1.15.15, 1.16.7	golang: net/http/httputil: panic due to racy read of persistConn after handler panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36221 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-08 06:15 修改: 2024-11-21 06:13
stdlib	CVE-2021-44717	中危	1.13.15	1.16.12, 1.17.5	golang: syscall: don't close fd 0 on ForkExec error 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-1705	中危	1.13.15	1.17.12, 1.18.4	golang: net/http: improper sanitization of Transfer-Encoding header 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-1962	中危	1.13.15	1.17.12, 1.18.4	golang: go/parser: stack exhaustion in all Parse* functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-29526	中危	1.13.15	1.17.10, 1.18.2	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-06-23 17:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-32148	中危	1.13.15	1.17.12, 1.18.4	golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41717	中危	1.13.15	1.18.9, 1.19.4	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-08 20:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24532	中危	1.13.15	1.19.7, 1.20.2	golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-03-08 20:15 修改: 2024-11-21 07:48
stdlib	CVE-2023-29406	中危	1.13.15	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-07-11 20:15 修改: 2024-11-21 07:56
stdlib	CVE-2023-29409	中危	1.13.15	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-08-02 20:15 修改: 2024-11-21 07:57
stdlib	CVE-2023-39318	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39319	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39326	中危	1.13.15	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-06 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45284	中危	1.13.15	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45289	中危	1.13.15	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45290	中危	1.13.15	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2024-24783	中危	1.13.15	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24784	中危	1.13.15	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24785	中危	1.13.15	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2025-03-14 02:15
stdlib	CVE-2024-24789	中危	1.13.15	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2025-01-31 15:15
stdlib	CVE-2024-24791	中危	1.13.15	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-07-02 22:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-34155	中危	1.13.15	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-34158	中危	1.13.15	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-45336	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45336 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2024-45341	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45341 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-0913	中危	1.13.15	1.23.10, 1.24.4	Inconsistent handling of O_CREATE\|O_EXCL on Unix and Windows in os in syscall 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 18:15 修改: 2025-08-08 14:53
stdlib	CVE-2025-22866	中危	1.13.15	1.22.12, 1.23.6, 1.24.0-rc.3	crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22866 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-02-06 17:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-22871	中危	1.13.15	1.23.8, 1.24.2	net/http: Request smuggling due to acceptance of invalid chunked data in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-04-08 20:15 修改: 2025-04-18 15:15
stdlib	CVE-2025-4673	中危	1.13.15	1.23.10, 1.24.4	net/http: Sensitive headers not cleared on cross-origin redirect in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 17:15 修改: 2025-06-12 16:06
stdlib	CVE-2025-47906	中危	1.13.15	1.23.12, 1.24.6	os/exec: Unexpected paths returned from LookPath in os/exec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-09-18 19:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-47912	中危	1.13.15	1.24.8, 1.25.2	net/url: Insufficient validation of bracketed IPv6 hostnames in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58185	中危	1.13.15	1.24.8, 1.25.2	encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58186	中危	1.13.15	1.24.8, 1.25.2	golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58187	中危	1.13.15	1.24.9, 1.25.3	crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-20 23:15
stdlib	CVE-2025-58188	中危	1.13.15	1.24.8, 1.25.2	crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58189	中危	1.13.15	1.24.8, 1.25.2	crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61723	中危	1.13.15	1.24.8, 1.25.2	encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61724	中危	1.13.15	1.24.8, 1.25.2	net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61725	中危	1.13.15	1.24.8, 1.25.2	net/mail: Excessive CPU consumption in ParseAddress in net/mail 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-12-09 18:15
stdlib	CVE-2025-61727	中危	1.13.15	1.24.11, 1.25.5	golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-03 20:16 修改: 2025-12-18 20:15
stdlib	CVE-2022-30629	低危	1.13.15	1.17.11, 1.18.3	golang: crypto/tls: session tickets lack random ticket_age_add 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03

usr/local/bin/runc (gobinary)

低危漏洞:1

中危漏洞:45

高危漏洞:46

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2022-23806	严重	1.13.15	1.16.14, 1.17.7	golang: crypto/elliptic: IsOnCurve returns true for invalid field elements 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23806 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2023-24538	严重	1.13.15	1.19.8, 1.20.3	golang: html/template: backticks not treated as string delimiters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24540	严重	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2024-24790	严重	1.13.15	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2024-11-21 08:59
stdlib	CVE-2021-27918	高危	1.13.15	1.15.9, 1.16.1	golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58
stdlib	CVE-2021-33195	高危	1.13.15	1.15.13, 1.16.5	golang: net: lookup functions may return invalid host names 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33195 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33196	高危	1.13.15	1.15.13, 1.16.5	golang: archive/zip: malformed archive may cause panic or memory exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33196 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-33198	高危	1.13.15	1.15.13, 1.16.5	golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33198 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-39293	高危	1.13.15	1.16.8, 1.17.1	golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196) 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39293 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-24 01:15 修改: 2024-11-21 06:19
stdlib	CVE-2021-41771	高危	1.13.15	1.16.10, 1.17.3	golang: debug/macho: invalid dynamic symbol table command can cause panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41771 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-41772	高危	1.13.15	1.16.10, 1.17.3	golang: archive/zip: Reader.Open panics on empty string 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26
stdlib	CVE-2021-44716	高危	1.13.15	1.16.12, 1.17.5	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-23772	高危	1.13.15	1.16.14, 1.17.7	golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23772 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49
stdlib	CVE-2022-24675	高危	1.13.15	1.17.9, 1.18.1	golang: encoding/pem: fix stack overflow in Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24675 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:50
stdlib	CVE-2022-24921	高危	1.13.15	1.16.15, 1.17.8	golang: regexp: stack exhaustion via a deeply nested expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24921 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-03-05 20:15 修改: 2024-11-21 06:51
stdlib	CVE-2022-27664	高危	1.13.15	1.18.6, 1.19.1	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-09-06 18:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28131	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Decoder.Skip 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:56
stdlib	CVE-2022-28327	高危	1.13.15	1.17.9, 1.18.1	golang: crypto/elliptic: panic caused by oversized scalar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28327 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:57
stdlib	CVE-2022-2879	高危	1.13.15	1.18.7, 1.19.2	golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-2880	高危	1.13.15	1.18.7, 1.19.2	golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01
stdlib	CVE-2022-29804	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-30580	高危	1.13.15	1.17.11, 1.18.3	golang: os/exec: Code injection in Cmd.Start 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:02
stdlib	CVE-2022-30630	高危	1.13.15	1.17.12, 1.18.4	golang: io/fs: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30631	高危	1.13.15	1.17.12, 1.18.4	golang: compress/gzip: stack exhaustion in Reader.Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2025-10-20 18:15
stdlib	CVE-2022-30632	高危	1.13.15	1.17.12, 1.18.4	golang: path/filepath: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30633	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30634	高危	1.13.15	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-07-15 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-30635	高危	1.13.15	1.17.12, 1.18.4	golang: encoding/gob: stack exhaustion in Decoder.Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03
stdlib	CVE-2022-32189	高危	1.13.15	1.17.13, 1.18.5	golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41715	高危	1.13.15	1.18.7, 1.19.2	golang: regexp/syntax: limit memory used by parsing regexps 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-10-14 15:16 修改: 2024-11-21 07:23
stdlib	CVE-2022-41716	高危	1.13.15	1.18.8, 1.19.3	Due to unsanitized NUL values, attackers may be able to maliciously se ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-11-02 16:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41720	高危	1.13.15	1.18.9, 1.19.4	golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-07 17:15 修改: 2025-04-23 16:15
stdlib	CVE-2022-41722	高危	1.13.15	1.19.6, 1.20.1	golang: path/filepath: path-filepath filepath.Clean path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41723	高危	1.13.15	1.19.6, 1.20.1	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2025-05-05 16:15
stdlib	CVE-2022-41724	高危	1.13.15	1.19.6, 1.20.1	golang: crypto/tls: large handshake records may cause panics 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2022-41725	高危	1.13.15	1.19.6, 1.20.1	golang: net/http, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24534	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto: denial of service from excessive memory allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24536	高危	1.13.15	1.19.8, 1.20.3	golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15
stdlib	CVE-2023-24537	高危	1.13.15	1.19.8, 1.20.3	golang: go/parser: Infinite loop in parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15
stdlib	CVE-2023-24539	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29400	高危	1.13.15	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15
stdlib	CVE-2023-29403	高危	1.13.15	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-06-08 21:15 修改: 2025-01-06 20:15
stdlib	CVE-2023-39325	高危	1.13.15	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-10-11 22:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45283	高危	1.13.15	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45287	高危	1.13.15	1.20.0	golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-05 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45288	高危	1.13.15	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-04-04 21:15 修改: 2025-11-04 19:16
stdlib	CVE-2024-34156	高危	1.13.15	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2025-47907	高危	1.13.15	1.23.12, 1.24.6	database/sql: Postgres Scan Race Condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-08-07 16:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-58183	高危	1.13.15	1.24.8, 1.25.2	golang: archive/tar: Unbounded allocation when parsing GNU sparse map 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61729	高危	1.13.15	1.24.11, 1.25.5	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-02 19:15 修改: 2025-12-19 18:25
stdlib	CVE-2020-24553	中危	1.13.15	1.14.8, 1.15.1	golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14
stdlib	CVE-2021-3114	中危	1.13.15	1.14.14, 1.15.7	golang: crypto/elliptic: incorrect operations on the P-224 curve 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3114 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-01-26 18:16 修改: 2024-11-21 06:20
stdlib	CVE-2021-31525	中危	1.13.15	1.15.12, 1.16.4	golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31525 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-05-27 13:15 修改: 2024-11-21 06:05
stdlib	CVE-2021-33197	中危	1.13.15	1.15.13, 1.16.5	golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33197 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08
stdlib	CVE-2021-34558	中危	1.13.15	1.15.14, 1.16.6	golang: crypto/tls: certificate of wrong type is causing TLS client to panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34558 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-07-15 14:15 修改: 2024-11-21 06:10
stdlib	CVE-2021-36221	中危	1.13.15	1.15.15, 1.16.7	golang: net/http/httputil: panic due to racy read of persistConn after handler panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36221 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2021-08-08 06:15 修改: 2024-11-21 06:13
stdlib	CVE-2021-44717	中危	1.13.15	1.16.12, 1.17.5	golang: syscall: don't close fd 0 on ForkExec error 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31
stdlib	CVE-2022-1705	中危	1.13.15	1.17.12, 1.18.4	golang: net/http: improper sanitization of Transfer-Encoding header 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-1962	中危	1.13.15	1.17.12, 1.18.4	golang: go/parser: stack exhaustion in all Parse* functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:41
stdlib	CVE-2022-29526	中危	1.13.15	1.17.10, 1.18.2	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-06-23 17:15 修改: 2024-11-21 06:59
stdlib	CVE-2022-32148	中危	1.13.15	1.17.12, 1.18.4	golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05
stdlib	CVE-2022-41717	中危	1.13.15	1.18.9, 1.19.4	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-12-08 20:15 修改: 2024-11-21 07:23
stdlib	CVE-2023-24532	中危	1.13.15	1.19.7, 1.20.2	golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-03-08 20:15 修改: 2024-11-21 07:48
stdlib	CVE-2023-29406	中危	1.13.15	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-07-11 20:15 修改: 2024-11-21 07:56
stdlib	CVE-2023-29409	中危	1.13.15	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-08-02 20:15 修改: 2024-11-21 07:57
stdlib	CVE-2023-39318	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39319	中危	1.13.15	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-39326	中危	1.13.15	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-12-06 17:15 修改: 2024-11-21 08:15
stdlib	CVE-2023-45284	中危	1.13.15	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45289	中危	1.13.15	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2023-45290	中危	1.13.15	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:26
stdlib	CVE-2024-24783	中危	1.13.15	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24784	中危	1.13.15	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-24785	中危	1.13.15	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-03-05 23:15 修改: 2025-03-14 02:15
stdlib	CVE-2024-24789	中危	1.13.15	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-06-05 16:15 修改: 2025-01-31 15:15
stdlib	CVE-2024-24791	中危	1.13.15	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-07-02 22:15 修改: 2024-11-21 08:59
stdlib	CVE-2024-34155	中危	1.13.15	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-34158	中危	1.13.15	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2024-09-06 21:15 修改: 2024-11-21 09:18
stdlib	CVE-2024-45336	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45336 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2024-45341	中危	1.13.15	1.22.11, 1.23.5, 1.24.0-rc.2	golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45341 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-01-28 02:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-0913	中危	1.13.15	1.23.10, 1.24.4	Inconsistent handling of O_CREATE\|O_EXCL on Unix and Windows in os in syscall 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 18:15 修改: 2025-08-08 14:53
stdlib	CVE-2025-22866	中危	1.13.15	1.22.12, 1.23.6, 1.24.0-rc.3	crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22866 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-02-06 17:15 修改: 2025-02-21 18:15
stdlib	CVE-2025-22871	中危	1.13.15	1.23.8, 1.24.2	net/http: Request smuggling due to acceptance of invalid chunked data in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-04-08 20:15 修改: 2025-04-18 15:15
stdlib	CVE-2025-4673	中危	1.13.15	1.23.10, 1.24.4	net/http: Sensitive headers not cleared on cross-origin redirect in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-06-11 17:15 修改: 2025-06-12 16:06
stdlib	CVE-2025-47906	中危	1.13.15	1.23.12, 1.24.6	os/exec: Unexpected paths returned from LookPath in os/exec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-09-18 19:15 修改: 2025-11-04 22:16
stdlib	CVE-2025-47912	中危	1.13.15	1.24.8, 1.25.2	net/url: Insufficient validation of bracketed IPv6 hostnames in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58185	中危	1.13.15	1.24.8, 1.25.2	encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58186	中危	1.13.15	1.24.8, 1.25.2	golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58187	中危	1.13.15	1.24.9, 1.25.3	crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-20 23:15
stdlib	CVE-2025-58188	中危	1.13.15	1.24.8, 1.25.2	crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-58189	中危	1.13.15	1.24.8, 1.25.2	crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61723	中危	1.13.15	1.24.8, 1.25.2	encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61724	中危	1.13.15	1.24.8, 1.25.2	net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-11-04 22:16
stdlib	CVE-2025-61725	中危	1.13.15	1.24.8, 1.25.2	net/mail: Excessive CPU consumption in ParseAddress in net/mail 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-10-29 23:16 修改: 2025-12-09 18:15
stdlib	CVE-2025-61727	中危	1.13.15	1.24.11, 1.25.5	golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2025-12-03 20:16 修改: 2025-12-18 20:15
stdlib	CVE-2022-30629	低危	1.13.15	1.17.11, 1.18.3	golang: crypto/tls: session tickets lack random ticket_age_add 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629 镜像层: sha256:13baed61c795612da6fbea6b1d8e4f7cf7bdd1a88483cee37416efe664cd5daf 发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03