| golang.org/x/image |
CVE-2026-46602 |
高危 |
v0.41.0 |
0.43.0 |
The TIFF decoder does not set a limit on the size of tiles in tiled im ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46602
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 2026-06-25 20:17 修改: 2026-06-26 17:16
|
| stdlib |
CVE-2026-39821 |
高危 |
v1.26.5 |
1.25.13, 1.26.6, 1.27.0-rc.3 |
golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 2026-05-22 16:16 修改: 2026-08-13 22:17
|
| stdlib |
CVE-2026-46600 |
高危 |
v1.26.5 |
1.26.6, 1.27.0-rc.3 |
golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 2026-07-21 20:17 修改: 2026-08-13 22:17
|
| golang.org/x/image |
CVE-2026-46604 |
中危 |
v0.41.0 |
0.43.0 |
golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via invalid TIFF image
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46604
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 2026-06-26 21:16 修改: 2026-07-01 14:07
|
| golang.org/x/image |
CVE-2026-33813 |
中危 |
v0.41.0 |
0.42.0 |
golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33813
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 2026-04-21 20:16 修改: 2026-06-25 20:17
|
| golang.org/x/image |
CVE-2026-46601 |
中危 |
v0.41.0 |
0.43.0 |
golang.org/x/image/webp: golang.org/x/image/webp: Denial of Service via malformed VP8 chunk in WebP images
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46601
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 2026-06-25 20:17 修改: 2026-06-26 17:16
|
| golang.org/x/crypto |
GO-2026-5932 |
未知 |
v0.54.0 |
|
The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
漏洞详情:
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|
| stdlib |
CVE-2026-33818 |
未知 |
v1.26.5 |
1.25.13, 1.26.6, 1.27.0-rc.3 |
Enforce a recursion limit in Unmarshal to prevent stack exhaustion whe ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 2026-08-13 22:17 修改: 2026-08-13 22:17
|
| stdlib |
CVE-2026-56853 |
未知 |
v1.26.5 |
1.25.13, 1.26.6, 1.27.0-rc.3 |
When a server is configured to support unencrypted HTTP/2, it reads a ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 2026-08-13 22:17 修改: 2026-08-13 22:17
|
| stdlib |
CVE-2026-56858 |
未知 |
v1.26.5 |
1.25.13, 1.26.6, 1.27.0-rc.3 |
Previously, pathological inputs could close an unescaped '/' early, al ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 2026-08-13 22:17 修改: 2026-08-13 22:17
|
| stdlib |
CVE-2026-56859 |
未知 |
v1.26.5 |
1.25.13, 1.26.6, 1.27.0-rc.3 |
Previously, DecodeElement would reset the depth counter causing it to ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 2026-08-13 22:17 修改: 2026-08-13 22:17
|
| stdlib |
CVE-2026-56860 |
未知 |
v1.26.5 |
1.25.13, 1.26.6, 1.27.0-rc.3 |
Previously, resolving relative paths containing parent directory ('..' ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 2026-08-13 22:17 修改: 2026-08-13 22:17
|
| stdlib |
CVE-2026-56862 |
未知 |
v1.26.5 |
1.25.13, 1.26.6, 1.27.0-rc.3 |
Handshake messages, such as KeyUpdate, are always considered as state- ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862
镜像层: sha256:31c0983a8adc77efa964f2f8eb1d328bc2d34c5ea55b53c810c4c3c6300a54d4
发布日期: 2026-08-13 22:17 修改: 2026-08-13 22:17
|