docker.io/webodm/webodm_webapp:3.2.7 linux/amd64

docker.io/webodm/webodm_webapp:3.2.7 - Trivy安全扫描结果 扫描时间: 2026-08-11 14:35
全部漏洞信息
低危漏洞:131 中危漏洞:239 高危漏洞:82 严重漏洞:8

系统OS: ubuntu 22.04 扫描引擎: Trivy 扫描时间: 2026-08-11 14:35

docker.io/webodm/webodm_webapp:3.2.7 (ubuntu 22.04) (ubuntu)
低危漏洞:118 中危漏洞:166 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
nodejs CVE-2023-44487 高危 20.20.2-1nodesource1 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-10-10 14:15 修改: 2026-06-17 06:27

nodejs CVE-2026-45447 高危 20.20.2-1nodesource1 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-08-10 13:19

gdal-data CVE-2026-4738 中危 3.4.1+dfsg-1build4 Improper Restriction of Operations within the Bounds of a Memory Buffe ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4738

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-03-24 04:17 修改: 2026-06-17 10:57

git CVE-2024-52005 中危 1:2.34.1-1ubuntu1.17 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06

git-man CVE-2024-52005 中危 1:2.34.1-1ubuntu1.17 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06

gzip CVE-2026-41991 中危 1.10-4ubuntu4.1 1.10-4ubuntu4.2 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02

gzip CVE-2026-41992 中危 1.10-4ubuntu4.1 1.10-4ubuntu4.2 GNU gzip contains a global buffer overflow vulnerability in the LZH de ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02

libblkid1 CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libc-bin CVE-2026-4046 中危 2.35-0ubuntu3.13 2.35-0ubuntu3.14 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

libc-bin CVE-2026-5435 中危 2.35-0ubuntu3.13 2.35-0ubuntu3.14 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

libc-bin CVE-2026-5450 中危 2.35-0ubuntu3.13 2.35-0ubuntu3.14 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc-bin CVE-2026-5928 中危 2.35-0ubuntu3.13 2.35-0ubuntu3.14 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc-bin CVE-2026-6238 中危 2.35-0ubuntu3.13 2.35-0ubuntu3.14 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

libc6 CVE-2026-4046 中危 2.35-0ubuntu3.13 2.35-0ubuntu3.14 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

libc6 CVE-2026-5435 中危 2.35-0ubuntu3.13 2.35-0ubuntu3.14 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

libc6 CVE-2026-5450 中危 2.35-0ubuntu3.13 2.35-0ubuntu3.14 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc6 CVE-2026-5928 中危 2.35-0ubuntu3.13 2.35-0ubuntu3.14 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc6 CVE-2026-6238 中危 2.35-0ubuntu3.13 2.35-0ubuntu3.14 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

libdav1d5 CVE-2023-32570 中危 0.9.2-1 VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that ca ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32570

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-05-10 05:15 修改: 2026-06-17 05:59

libdav1d5 CVE-2024-1580 中危 0.9.2-1 An integer overflow in dav1d AV1 decoder that can occur when decoding ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1580

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-02-19 11:15 修改: 2026-06-17 07:04

libde265-0 CVE-2023-51792 中危 1.0.8-1ubuntu0.3 Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attac ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51792

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-04-19 17:15 修改: 2026-06-17 06:41

libde265-0 CVE-2024-38949 中危 1.0.8-1ubuntu0.3 Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attacker ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38949

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-06-26 20:15 修改: 2026-06-17 07:41

libde265-0 CVE-2024-38950 中危 1.0.8-1ubuntu0.3 Heap Buffer Overflow vulnerability in Libde265 v1.0.15 allows attacker ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38950

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-06-26 20:15 修改: 2026-06-17 07:41

libde265-0 CVE-2026-33164 中危 1.0.8-1ubuntu0.3 libde265 is an open source implementation of the h.265 video codec. Pr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33164

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-03-20 21:17 修改: 2026-06-17 10:37

libde265-0 CVE-2026-33165 中危 1.0.8-1ubuntu0.3 libde265 is an open source implementation of the h.265 video codec. Pr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33165

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-03-20 21:17 修改: 2026-06-17 10:37

libde265-0 CVE-2026-45382 中危 1.0.8-1ubuntu0.3 libde265 is an open source implementation of the h.265 video codec. Pr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45382

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-21 21:16 修改: 2026-07-23 18:18

libde265-0 CVE-2026-45383 中危 1.0.8-1ubuntu0.3 libde265 is an open source implementation of the h.265 video codec. Ve ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45383

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-21 21:16 修改: 2026-07-23 18:18

libde265-0 CVE-2026-49295 中危 1.0.8-1ubuntu0.3 libde265 is an open source implementation of the h.265 video codec. Pr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49295

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-19 21:17 修改: 2026-06-26 19:17

libde265-0 CVE-2026-49337 中危 1.0.8-1ubuntu0.3 libde265 is an open source implementation of the h.265 video codec. Pr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49337

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-19 21:17 修改: 2026-06-23 15:44

libde265-0 CVE-2026-49346 中危 1.0.8-1ubuntu0.3 libde265 is an open source implementation of the h.265 video codec. Pr ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49346

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-19 21:17 修改: 2026-06-26 19:17

libde265-0 CVE-2026-54240 中危 1.0.8-1ubuntu0.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54240

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libde265-0 CVE-2026-54241 中危 1.0.8-1ubuntu0.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54241

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libexpat1 CVE-2025-66382 中危 2.4.7-1ubuntu0.7 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56

libgdal30 CVE-2026-4738 中危 3.4.1+dfsg-1build4 Improper Restriction of Operations within the Bounds of a Memory Buffe ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4738

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-03-24 04:17 修改: 2026-06-17 10:57

libgif7 CVE-2026-23868 中危 5.1.9-2ubuntu0.1 5.1.9-2ubuntu0.3 giflib: Giflib: Double-free vulnerability leading to memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23868

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-03-10 20:16 修改: 2026-07-15 02:18

libgif7 CVE-2026-26740 中危 5.1.9-2ubuntu0.1 5.1.9-2ubuntu0.3 giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26740

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-03-18 18:16 修改: 2026-07-23 12:17

libgssapi-krb5-2 CVE-2026-11850 中危 1.19.2-2ubuntu0.7 1.19.2-2ubuntu0.8 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14

libgssapi-krb5-2 CVE-2026-40355 中危 1.19.2-2ubuntu0.7 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

libgssapi-krb5-2 CVE-2026-40356 中危 1.19.2-2ubuntu0.7 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

libhdf5-103-1 CVE-2017-17507 中危 1.10.7+repack-4ubuntu2 hdf5: Out-of-bounds read in the H5T_conv_struct_opt function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17507

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2017-12-11 03:29 修改: 2026-06-17 01:10

libhdf5-103-1 CVE-2018-11205 中危 1.10.7+repack-4ubuntu2 hdf5: out of bounds read in H5VM_memcpyvv in H5VM.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11205

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-05-16 15:29 修改: 2026-06-17 01:35

libhdf5-103-1 CVE-2018-17432 中危 1.10.7+repack-4ubuntu2 hdf5: NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17432

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-103-1 CVE-2018-17433 中危 1.10.7+repack-4ubuntu2 hdf5: heap-based buffer overflow in ReadGifImageDesc() in gifread.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17433

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-103-1 CVE-2018-17434 中危 1.10.7+repack-4ubuntu2 hdf5: SIGFPE signal in apply_filters() in h5repack_filters.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17434

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-103-1 CVE-2018-17437 中危 1.10.7+repack-4ubuntu2 hdf5: memory leak in H5O_dtype_decode_helper() in H5Odtype.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17437

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-103-1 CVE-2018-17438 中危 1.10.7+repack-4ubuntu2 hdf5: SIGFPE signal in function H5D__select_io() of H5Dselect.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17438

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-103-1 CVE-2019-8396 中危 1.10.7+repack-4ubuntu2 hdf5: buffer overflow in function H5O__layout_encode in H5Olayout.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8396

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2019-02-17 06:29 修改: 2026-06-17 02:41

libhdf5-103-1 CVE-2019-8397 中危 1.10.7+repack-4ubuntu2 hdf5: Out-of-Bounds Read in function H5T_close_real in H5T.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8397

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2019-02-17 06:29 修改: 2026-06-17 02:41

libhdf5-103-1 CVE-2019-9151 中危 1.10.7+repack-4ubuntu2 hdf5: out of bounds read in function H5VM_memcpyvv in H5VM.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9151

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2019-02-25 19:29 修改: 2026-06-17 02:43

libhdf5-103-1 CVE-2019-9152 中危 1.10.7+repack-4ubuntu2 hdf5: out of bounds read in function H5MM_xstrdup in H5MM.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9152

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2019-02-25 19:29 修改: 2026-06-17 02:43

libhdf5-103-1 CVE-2022-25942 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Group libhdf5 gif2h5 out-of-bounds read vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25942

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-08-22 19:15 修改: 2026-06-17 04:34

libhdf5-103-1 CVE-2022-25972 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Group libhdf5 gif2h5 out-of-bounds write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25972

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-08-22 19:15 修改: 2026-06-17 04:34

libhdf5-103-1 CVE-2022-26061 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Group libhdf5 gif2h5 heap-based buffer overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26061

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-08-22 19:15 修改: 2026-06-17 04:34

libhdf5-103-1 CVE-2024-32609 中危 1.10.7+repack-4ubuntu2 hdf5: multiple CVEs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32609

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-05-14 15:36 修改: 2026-06-17 07:29

libhdf5-103-1 CVE-2025-2153 中危 1.10.7+repack-4ubuntu2 A vulnerability, which was classified as critical, was found in HDF5 1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2153

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-10 14:15 修改: 2026-06-17 09:06

libhdf5-103-1 CVE-2025-2308 中危 1.10.7+repack-4ubuntu2 A vulnerability, which was classified as critical, was found in HDF5 1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2308

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-14 21:15 修改: 2026-06-17 09:06

libhdf5-103-1 CVE-2025-2309 中危 1.10.7+repack-4ubuntu2 A vulnerability has been found in HDF5 1.14.6 and classified as critic ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2309

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-14 21:15 修改: 2026-06-17 09:06

libhdf5-103-1 CVE-2025-2310 中危 1.10.7+repack-4ubuntu2 HDF5: HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2310

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-14 21:15 修改: 2026-06-17 09:06

libhdf5-103-1 CVE-2025-2912 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 H5Omessage.c H5O_msg_flush heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2912

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 16:15 修改: 2026-06-17 09:07

libhdf5-103-1 CVE-2025-2913 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 H5FL.c H5FL__blk_gc_list use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2913

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 17:15 修改: 2026-06-17 09:07

libhdf5-103-1 CVE-2025-2914 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2914

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 17:15 修改: 2026-06-17 09:07

libhdf5-103-1 CVE-2025-2915 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 H5Faccum.c H5F__accum_free heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2915

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 17:15 修改: 2026-06-17 09:07

libhdf5-103-1 CVE-2025-2923 中危 1.10.7+repack-4ubuntu2 A vulnerability, which was classified as problematic, has been found i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2923

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 19:15 修改: 2026-06-17 09:07

libhdf5-103-1 CVE-2025-2924 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2924

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 20:15 修改: 2026-06-17 09:07

libhdf5-103-1 CVE-2025-2926 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2926

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 20:15 修改: 2026-06-17 09:07

libhdf5-103-1 CVE-2025-6269 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6269

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-19 16:15 修改: 2026-06-17 10:01

libhdf5-103-1 CVE-2025-6516 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6516

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-23 17:15 修改: 2026-06-17 10:02

libhdf5-103-1 CVE-2025-6750 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6750

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-27 03:15 修改: 2026-06-17 10:02

libhdf5-103-1 CVE-2025-7067 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7067

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-07-04 18:15 修改: 2026-06-17 10:04

libhdf5-103-1 CVE-2025-7069 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Heap Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7069

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-07-04 21:15 修改: 2026-06-17 10:04

libhdf5-hl-100 CVE-2017-17507 中危 1.10.7+repack-4ubuntu2 hdf5: Out-of-bounds read in the H5T_conv_struct_opt function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17507

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2017-12-11 03:29 修改: 2026-06-17 01:10

libhdf5-hl-100 CVE-2018-11205 中危 1.10.7+repack-4ubuntu2 hdf5: out of bounds read in H5VM_memcpyvv in H5VM.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11205

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-05-16 15:29 修改: 2026-06-17 01:35

libhdf5-hl-100 CVE-2018-17432 中危 1.10.7+repack-4ubuntu2 hdf5: NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17432

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-hl-100 CVE-2018-17433 中危 1.10.7+repack-4ubuntu2 hdf5: heap-based buffer overflow in ReadGifImageDesc() in gifread.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17433

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-hl-100 CVE-2018-17434 中危 1.10.7+repack-4ubuntu2 hdf5: SIGFPE signal in apply_filters() in h5repack_filters.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17434

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-hl-100 CVE-2018-17437 中危 1.10.7+repack-4ubuntu2 hdf5: memory leak in H5O_dtype_decode_helper() in H5Odtype.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17437

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-hl-100 CVE-2018-17438 中危 1.10.7+repack-4ubuntu2 hdf5: SIGFPE signal in function H5D__select_io() of H5Dselect.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17438

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-hl-100 CVE-2019-8396 中危 1.10.7+repack-4ubuntu2 hdf5: buffer overflow in function H5O__layout_encode in H5Olayout.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8396

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2019-02-17 06:29 修改: 2026-06-17 02:41

libhdf5-hl-100 CVE-2019-8397 中危 1.10.7+repack-4ubuntu2 hdf5: Out-of-Bounds Read in function H5T_close_real in H5T.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8397

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2019-02-17 06:29 修改: 2026-06-17 02:41

libhdf5-hl-100 CVE-2019-9151 中危 1.10.7+repack-4ubuntu2 hdf5: out of bounds read in function H5VM_memcpyvv in H5VM.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9151

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2019-02-25 19:29 修改: 2026-06-17 02:43

libhdf5-hl-100 CVE-2019-9152 中危 1.10.7+repack-4ubuntu2 hdf5: out of bounds read in function H5MM_xstrdup in H5MM.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9152

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2019-02-25 19:29 修改: 2026-06-17 02:43

libhdf5-hl-100 CVE-2022-25942 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Group libhdf5 gif2h5 out-of-bounds read vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25942

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-08-22 19:15 修改: 2026-06-17 04:34

libhdf5-hl-100 CVE-2022-25972 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Group libhdf5 gif2h5 out-of-bounds write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25972

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-08-22 19:15 修改: 2026-06-17 04:34

libhdf5-hl-100 CVE-2022-26061 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Group libhdf5 gif2h5 heap-based buffer overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26061

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-08-22 19:15 修改: 2026-06-17 04:34

libhdf5-hl-100 CVE-2024-32609 中危 1.10.7+repack-4ubuntu2 hdf5: multiple CVEs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32609

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-05-14 15:36 修改: 2026-06-17 07:29

libhdf5-hl-100 CVE-2025-2153 中危 1.10.7+repack-4ubuntu2 A vulnerability, which was classified as critical, was found in HDF5 1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2153

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-10 14:15 修改: 2026-06-17 09:06

libhdf5-hl-100 CVE-2025-2308 中危 1.10.7+repack-4ubuntu2 A vulnerability, which was classified as critical, was found in HDF5 1 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2308

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-14 21:15 修改: 2026-06-17 09:06

libhdf5-hl-100 CVE-2025-2309 中危 1.10.7+repack-4ubuntu2 A vulnerability has been found in HDF5 1.14.6 and classified as critic ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2309

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-14 21:15 修改: 2026-06-17 09:06

libhdf5-hl-100 CVE-2025-2310 中危 1.10.7+repack-4ubuntu2 HDF5: HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2310

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-14 21:15 修改: 2026-06-17 09:06

libhdf5-hl-100 CVE-2025-2912 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 H5Omessage.c H5O_msg_flush heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2912

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 16:15 修改: 2026-06-17 09:07

libhdf5-hl-100 CVE-2025-2913 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 H5FL.c H5FL__blk_gc_list use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2913

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 17:15 修改: 2026-06-17 09:07

libhdf5-hl-100 CVE-2025-2914 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2914

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 17:15 修改: 2026-06-17 09:07

libhdf5-hl-100 CVE-2025-2915 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 H5Faccum.c H5F__accum_free heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2915

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 17:15 修改: 2026-06-17 09:07

libhdf5-hl-100 CVE-2025-2923 中危 1.10.7+repack-4ubuntu2 A vulnerability, which was classified as problematic, has been found i ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2923

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 19:15 修改: 2026-06-17 09:07

libhdf5-hl-100 CVE-2025-2924 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2924

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 20:15 修改: 2026-06-17 09:07

libhdf5-hl-100 CVE-2025-2926 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-2926

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-03-28 20:15 修改: 2026-06-17 09:07

libhdf5-hl-100 CVE-2025-6269 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6269

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-19 16:15 修改: 2026-06-17 10:01

libhdf5-hl-100 CVE-2025-6516 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6516

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-23 17:15 修改: 2026-06-17 10:02

libhdf5-hl-100 CVE-2025-6750 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6750

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-27 03:15 修改: 2026-06-17 10:02

libhdf5-hl-100 CVE-2025-7067 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7067

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-07-04 18:15 修改: 2026-06-17 10:04

libhdf5-hl-100 CVE-2025-7069 中危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Heap Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7069

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-07-04 21:15 修改: 2026-06-17 10:04

libheif1 CVE-2023-0996 中危 1.12.0-2build1 There is a vulnerability in the strided image data parsing code in the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0996

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-02-24 04:15 修改: 2026-06-17 05:26

libheif1 CVE-2023-29659 中危 1.12.0-2build1 A Segmentation fault caused by a floating point exception exists in li ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29659

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-05-05 16:15 修改: 2026-06-17 05:50

libheif1 CVE-2025-68431 中危 1.12.0-2build1 libheif is an HEIF and AVIF file format decoder and encoder. Prior to ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68431

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-12-29 19:15 修改: 2026-06-17 09:59

libheif1 CVE-2026-32814 中危 1.12.0-2build1 libheif: libheif: Information Disclosure via Crafted HEIF/AVIF Files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32814

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-05-19 21:16 修改: 2026-07-24 09:10

libheif1 CVE-2026-32882 中危 1.12.0-2build1 libheif: libheif: Denial of Service and Information Disclosure vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32882

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-05-19 21:16 修改: 2026-07-24 09:10

libheif1 CVE-2026-47247 中危 1.12.0-2build1 libheif is a HEIF and AVIF file format decoder and encoder. Prior to v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47247

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-21 22:17 修改: 2026-07-27 15:20

libk5crypto3 CVE-2026-11850 中危 1.19.2-2ubuntu0.7 1.19.2-2ubuntu0.8 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14

libk5crypto3 CVE-2026-40355 中危 1.19.2-2ubuntu0.7 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

libk5crypto3 CVE-2026-40356 中危 1.19.2-2ubuntu0.7 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

libkrb5-3 CVE-2026-11850 中危 1.19.2-2ubuntu0.7 1.19.2-2ubuntu0.8 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14

libkrb5-3 CVE-2026-40355 中危 1.19.2-2ubuntu0.7 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

libkrb5-3 CVE-2026-40356 中危 1.19.2-2ubuntu0.7 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

libkrb5support0 CVE-2026-11850 中危 1.19.2-2ubuntu0.7 1.19.2-2ubuntu0.8 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14

libkrb5support0 CVE-2026-40355 中危 1.19.2-2ubuntu0.7 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

libkrb5support0 CVE-2026-40356 中危 1.19.2-2ubuntu0.7 1.19.2-2ubuntu0.8 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

libmount1 CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libnetcdf19 CVE-2025-14932 中危 1:4.8.1-1 NSF Unidata NetCDF-C Time Unit Stack-based Buffer Overflow Remote Code ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14932

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-12-23 21:15 修改: 2026-06-17 08:36

libnetcdf19 CVE-2025-14933 中危 1:4.8.1-1 NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Executio ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14933

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-12-23 21:15 修改: 2026-06-17 08:36

libnetcdf19 CVE-2025-14934 中危 1:4.8.1-1 NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14934

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-12-23 21:15 修改: 2026-06-17 08:36

libnetcdf19 CVE-2025-14935 中危 1:4.8.1-1 NSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overflow Remote ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14935

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-12-23 21:15 修改: 2026-06-17 08:36

libnetcdf19 CVE-2025-14936 中危 1:4.8.1-1 NSF Unidata NetCDF-C Attribute Name Stack-based Buffer Overflow Remote ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14936

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-12-23 21:15 修改: 2026-06-17 08:36

libopenjp2-7 CVE-2023-39328 中危 2.4.0-6ubuntu0.5 openjpeg: denail of service via crafted image file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39328

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-07-09 14:15 修改: 2026-06-26 10:16

libopenjp2-7 CVE-2023-39329 中危 2.4.0-6ubuntu0.5 openjpeg: Resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39329

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-07-13 03:15 修改: 2026-06-17 06:12

libp11-kit0 CVE-2026-13757 中危 0.24.0-6build1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-29 19:16 修改: 2026-08-03 22:16

libpam-modules CVE-2026-54411 中危 1.4.0-11ubuntu2.6 1.4.0-11ubuntu2.7 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpam-modules-bin CVE-2026-54411 中危 1.4.0-11ubuntu2.6 1.4.0-11ubuntu2.7 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpam-runtime CVE-2026-54411 中危 1.4.0-11ubuntu2.6 1.4.0-11ubuntu2.7 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpam0g CVE-2026-54411 中危 1.4.0-11ubuntu2.6 1.4.0-11ubuntu2.7 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpng16-16 CVE-2026-40930 中危 1.6.37-3ubuntu0.5 LIBPNG is a reference library for use in applications that process PNG ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40930

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-04 16:16 修改: 2026-07-22 20:10

libsmartcols1 CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libsqlite3-0 CVE-2026-50812 中危 3.37.2-2ubuntu0.6 3.37.2-2ubuntu0.7 A NULL pointer dereference in the SQLite Session Extension in SQLite 3 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50812

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48

libsqlite3-0 CVE-2026-50813 中危 3.37.2-2ubuntu0.6 3.37.2-2ubuntu0.7 An issue in SQLite before Fossil check-in 869a51ae84df allows a local ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50813

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48

liburiparser1 CVE-2024-34402 中危 0.9.6+dfsg-1 uriparser: integer overflow via long keys or values in ComposeQueryEngine() in UriQuery.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34402

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-05-03 01:15 修改: 2026-06-17 07:33

liburiparser1 CVE-2024-34403 中危 0.9.6+dfsg-1 uriparser: integer overflow via a long string in ComposeQueryMallocExMm() in UriQuery.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34403

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-05-03 01:15 修改: 2026-06-17 07:33

liburiparser1 CVE-2025-67899 中危 0.9.6+dfsg-1 uriparser: uriparser: Unbounded recursion and stack consumption via large input

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67899

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-12-14 23:15 修改: 2026-06-17 09:58

liburiparser1 CVE-2026-42371 中危 0.9.6+dfsg-1 uriparser: uriparser: Denial of Service via numeric truncation with oversized URIs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42371

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-04-27 07:16 修改: 2026-06-17 10:47

libuuid1 CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

mount CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

nginx CVE-2026-42533 中危 1.30.4-1~jammy nginx: NGINX: Arbitrary code execution via crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42533

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-15 15:16 修改: 2026-08-10 15:28

bsdutils CVE-2026-27456 中危 1:2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

gdal-bin CVE-2026-4738 中危 3.4.1+dfsg-1build4 Improper Restriction of Operations within the Bounds of a Memory Buffe ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4738

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-03-24 04:17 修改: 2026-06-17 10:57

nodejs CVE-2021-44532 中危 20.20.2-1nodesource1 nodejs: Certificate Verification Bypass via String Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44532

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-02-24 19:15 修改: 2026-06-17 04:12

nodejs CVE-2022-40735 中危 20.20.2-1nodesource1

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40735

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-11-14 23:15 修改: 2026-06-17 05:01

nodejs CVE-2023-38552 中危 20.20.2-1nodesource1 nodejs: integrity checks according to policies can be circumvented

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38552

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-10-18 04:15 修改: 2026-06-17 06:10

nodejs CVE-2023-39333 中危 20.20.2-1nodesource1 nodejs: code injection via WebAssembly export names

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39333

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-09-07 16:15 修改: 2026-06-17 06:12

nodejs CVE-2023-46809 中危 20.20.2-1nodesource1 nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46809

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-09-07 16:15 修改: 2026-06-17 06:31

nodejs CVE-2023-5363 中危 20.20.2-1nodesource1 openssl: Incorrect cipher key and IV length processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5363

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-10-25 18:17 修改: 2026-06-17 06:48

nodejs CVE-2024-22018 中危 20.20.2-1nodesource1 nodejs: fs.lstat bypasses permission model

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22018

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-07-10 02:15 修改: 2026-06-17 07:10

nodejs CVE-2024-22025 中危 20.20.2-1nodesource1 nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22025

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-03-19 05:15 修改: 2026-06-17 07:10

nodejs CVE-2024-27982 中危 20.20.2-1nodesource1 nodejs: HTTP Request Smuggling via Content Length Obfuscation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27982

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-05-07 17:15 修改: 2026-06-17 07:20

nodejs CVE-2024-27983 中危 20.20.2-1nodesource1 nodejs: CONTINUATION frames DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27983

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-04-09 01:15 修改: 2026-06-17 07:20

nodejs CVE-2025-11187 中危 20.20.2-1nodesource1 openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11187

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:29

nodejs CVE-2025-15467 中危 20.20.2-1nodesource1 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-27 16:16 修改: 2026-08-10 13:17

nodejs CVE-2025-23085 中危 20.20.2-1nodesource1 nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-23085

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-02-07 07:15 修改: 2026-06-17 08:51

nodejs CVE-2025-9230 中危 20.20.2-1nodesource1 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18

nodejs CVE-2025-9231 中危 20.20.2-1nodesource1 openssl: Timing side-channel in SM2 algorithm on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9231

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18

nodejs CVE-2026-34182 中危 20.20.2-1nodesource1 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-34183 中危 20.20.2-1nodesource1 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-35188 中危 20.20.2-1nodesource1 openssl: Double-free When Checking OCSP Stapled Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35188

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-42764 中危 20.20.2-1nodesource1 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-45445 中危 20.20.2-1nodesource1 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-54876 中危 20.20.2-1nodesource1 Issue summary: A malicious TLS server can cause a memory leak in a TLS ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54876

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-08-05 15:16 修改: 2026-08-05 20:17

python3-gdal CVE-2026-4738 中危 3.4.1+dfsg-1build4 Improper Restriction of Operations within the Bounds of a Memory Buffe ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4738

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-03-24 04:17 修改: 2026-06-17 10:57

python3-urllib3 CVE-2026-9375 中危 1.26.5-1~exp1ubuntu0.7 urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9375

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-19 19:16 修改: 2026-06-22 19:49

tar CVE-2025-45582 中危 1.34+dfsg-1ubuntu0.1.22.04.3 1.34+dfsg-1ubuntu0.1.22.04.4 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25

tar CVE-2026-5704 中危 1.34+dfsg-1ubuntu0.1.22.04.3 1.34+dfsg-1ubuntu0.1.22.04.6 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59

util-linux CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libncurses6 CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libncursesw6 CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libncursesw6 CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libhdf5-103-1 CVE-2021-46244 低危 1.10.7+repack-4ubuntu2 hdf5: Divide by zero via the function H5T__complete_copy () at /hdf5/src/H5T.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46244

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-01-21 21:15 修改: 2026-06-17 04:14

libhdf5-103-1 CVE-2025-6816 低危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6816

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-28 08:15 修改: 2026-06-17 10:02

libhdf5-103-1 CVE-2025-6817 低危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Resource Consumption Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6817

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-28 12:15 修改: 2026-06-17 10:02

libhdf5-103-1 CVE-2025-6818 低危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Heap Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6818

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-28 16:15 修改: 2026-06-17 10:02

libhdf5-103-1 CVE-2025-6856 低危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Use-After-Free Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6856

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-29 10:15 修改: 2026-06-17 10:02

libhdf5-103-1 CVE-2025-6857 低危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6857

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-29 10:15 修改: 2026-06-17 10:02

libhdf5-103-1 CVE-2025-6858 低危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Null Pointer Dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6858

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-29 11:15 修改: 2026-06-17 10:02

libopenjp2-7 CVE-2019-6988 低危 2.4.0-6ubuntu0.5 openjpeg: DoS via memory exhaustion in opj_decompress

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6988

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2019-01-28 16:29 修改: 2026-06-17 02:39

libgcc-s1 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libgomp1 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libgcrypt20 CVE-2024-2236 低危 1.9.4-3ubuntu3.2 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24

libde265-0 CVE-2025-61147 低危 1.0.8-1ubuntu0.3 strukturag libde265 commit d9fea9d wa discovered to contain a segmenta ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61147

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-02-23 20:28 修改: 2026-06-17 09:50

libhdf5-hl-100 CVE-2018-13867 低危 1.10.7+repack-4ubuntu2 hdf5: out of bounds read in the function H5F__accum_read in H5Faccum.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-13867

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-07-10 21:29 修改: 2026-06-17 01:40

libpcre2-8-0 CVE-2022-41409 低危 10.39-3ubuntu0.1 pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03

libhdf5-hl-100 CVE-2018-14031 低危 1.10.7+repack-4ubuntu2 hdf5: heap-based buffer over-read in the function H5T_copy in H5T.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14031

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-07-13 02:29 修改: 2026-06-17 01:40

libpoppler118 CVE-2019-9543 低危 22.02.0-2ubuntu0.13 poppler: recursive function call in JBIG2Stream::readGenericBitmap() in JBIG2Stream.cc causing denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9543

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2019-03-01 19:29 修改: 2026-06-17 02:43

libpoppler118 CVE-2019-9545 低危 22.02.0-2ubuntu0.13 poppler: recursive function call in JBIG2Stream::readTextRegion() in JBIG2Stream.cc causing denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9545

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2019-03-01 19:29 修改: 2026-06-17 02:43

libquadmath0 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libhdf5-hl-100 CVE-2018-14033 低危 1.10.7+repack-4ubuntu2 hdf5: heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14033

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-07-13 02:29 修改: 2026-06-17 01:40

libhdf5-hl-100 CVE-2018-14460 低危 1.10.7+repack-4ubuntu2 hdf5: Heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14460

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-07-20 15:29 修改: 2026-06-17 01:41

libhdf5-hl-100 CVE-2018-16438 低危 1.10.7+repack-4ubuntu2 hdf5: out of bounds read in H5L_extern_query at H5Lexternal.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16438

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-04 00:29 修改: 2026-06-17 01:44

libstdc++6 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libsystemd0 CVE-2026-40228 低危 249.11-0ubuntu3.21 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libtinfo6 CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libtinfo6 CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libudev1 CVE-2026-40228 低危 249.11-0ubuntu3.21 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libhdf5-hl-100 CVE-2018-17436 低危 1.10.7+repack-4ubuntu2 hdf5: invalid write access in ReadCode() in decompress.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17436

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-hl-100 CVE-2018-17439 低危 1.10.7+repack-4ubuntu2 hdf5: stack-based buffer overflow in H5S_extent_get_dims() in H5S.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17439

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-hl-100 CVE-2020-10809 低危 1.10.7+repack-4ubuntu2 hdf5: Heap-based buffer overflow in function Decompress() in decompress.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10809

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2020-03-22 18:15 修改: 2026-06-17 02:48

libhdf5-hl-100 CVE-2020-10810 低危 1.10.7+repack-4ubuntu2 hdf5: Null pointer dereference in function H5AC_unpin_entry() in H5AC.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10810

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2020-03-22 18:15 修改: 2026-06-17 02:48

libhdf5-hl-100 CVE-2020-10811 低危 1.10.7+repack-4ubuntu2 hdf5: Heap-based buffer over-read in function H5O__layout_decode() in H5Olayout.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10811

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2020-03-22 18:15 修改: 2026-06-17 02:48

libxerces-c3.2 CVE-2012-0880 低危 3.2.3+debian-3ubuntu0.1 xml: xerces-c hash table collisions CPU usage DoS (oCERT-2011-003)

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-0880

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2017-08-08 21:29 修改: 2026-05-13 00:24

libzstd1 CVE-2022-4899 低危 1.4.8+dfsg-3build1 zstd: mysql: buffer overrun in util.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-03-31 20:15 修改: 2026-06-17 05:22

login CVE-2023-29383 低危 1:4.8.1-2ubuntu2.2 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49

login CVE-2024-56433 低危 1:4.8.1-2ubuntu2.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

libhdf5-hl-100 CVE-2020-18494 低危 1.10.7+repack-4ubuntu2 hdf5: Buffer overflow in function H5S_close at H5S.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-18494

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-08-22 19:15 修改: 2026-06-17 02:59

ncurses-base CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

ncurses-base CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

ncurses-bin CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

ncurses-bin CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libhdf5-hl-100 CVE-2021-37501 低危 1.10.7+repack-4ubuntu2 hdf5: heap buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37501

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-02-03 18:15 修改: 2026-06-17 04:00

libhdf5-hl-100 CVE-2021-46242 低危 1.10.7+repack-4ubuntu2 hdf5: Heap-use-after free via the component H5AC_unpin_entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46242

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-01-21 21:15 修改: 2026-06-17 04:14

libhdf5-hl-100 CVE-2021-46243 低危 1.10.7+repack-4ubuntu2 hdf5: Untrusted pointer dereference via the function H5O__dtype_decode_helper at hdf5/src/H5Odtype.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46243

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-01-21 21:15 修改: 2026-06-17 04:14

libhdf5-hl-100 CVE-2021-46244 低危 1.10.7+repack-4ubuntu2 hdf5: Divide by zero via the function H5T__complete_copy () at /hdf5/src/H5T.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46244

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-01-21 21:15 修改: 2026-06-17 04:14

libhdf5-hl-100 CVE-2025-6816 低危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6816

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-28 08:15 修改: 2026-06-17 10:02

libhdf5-hl-100 CVE-2025-6817 低危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Resource Consumption Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6817

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-28 12:15 修改: 2026-06-17 10:02

libhdf5-hl-100 CVE-2025-6818 低危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Heap Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6818

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-28 16:15 修改: 2026-06-17 10:02

libhdf5-hl-100 CVE-2025-6856 低危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Use-After-Free Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6856

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-29 10:15 修改: 2026-06-17 10:02

libhdf5-hl-100 CVE-2025-6857 低危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6857

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-29 10:15 修改: 2026-06-17 10:02

libhdf5-hl-100 CVE-2025-6858 低危 1.10.7+repack-4ubuntu2 hdf5: HDF5 Null Pointer Dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6858

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-29 11:15 修改: 2026-06-17 10:02

libgfortran5 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

gcc-12-base CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libhdf5-103-1 CVE-2018-13867 低危 1.10.7+repack-4ubuntu2 hdf5: out of bounds read in the function H5F__accum_read in H5Faccum.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-13867

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-07-10 21:29 修改: 2026-06-17 01:40

libhdf5-103-1 CVE-2018-14031 低危 1.10.7+repack-4ubuntu2 hdf5: heap-based buffer over-read in the function H5T_copy in H5T.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14031

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-07-13 02:29 修改: 2026-06-17 01:40

libhdf5-103-1 CVE-2018-14033 低危 1.10.7+repack-4ubuntu2 hdf5: heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14033

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-07-13 02:29 修改: 2026-06-17 01:40

libhdf5-103-1 CVE-2018-14460 低危 1.10.7+repack-4ubuntu2 hdf5: Heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14460

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-07-20 15:29 修改: 2026-06-17 01:41

libheif1 CVE-2024-25269 低危 1.12.0-2build1 libheif <= 1.17.6 contains a memory leak in the function JpegEncoder:: ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25269

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-03-05 01:15 修改: 2026-06-17 07:15

libicu70 CVE-2025-5222 低危 70.1-2 icu: Stack buffer overflow in the SRBRoot::addTag function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-05-27 21:15 修改: 2026-07-14 13:17

libhdf5-103-1 CVE-2018-16438 低危 1.10.7+repack-4ubuntu2 hdf5: out of bounds read in H5L_extern_query at H5Lexternal.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16438

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-04 00:29 修改: 2026-06-17 01:44

libhdf5-103-1 CVE-2018-17436 低危 1.10.7+repack-4ubuntu2 hdf5: invalid write access in ReadCode() in decompress.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17436

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-103-1 CVE-2018-17439 低危 1.10.7+repack-4ubuntu2 hdf5: stack-based buffer overflow in H5S_extent_get_dims() in H5S.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17439

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2018-09-24 14:29 修改: 2026-06-17 01:45

libhdf5-103-1 CVE-2020-10809 低危 1.10.7+repack-4ubuntu2 hdf5: Heap-based buffer overflow in function Decompress() in decompress.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10809

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2020-03-22 18:15 修改: 2026-06-17 02:48

libhdf5-103-1 CVE-2020-10810 低危 1.10.7+repack-4ubuntu2 hdf5: Null pointer dereference in function H5AC_unpin_entry() in H5AC.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10810

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2020-03-22 18:15 修改: 2026-06-17 02:48

libhdf5-103-1 CVE-2020-10811 低危 1.10.7+repack-4ubuntu2 hdf5: Heap-based buffer over-read in function H5O__layout_decode() in H5Olayout.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10811

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2020-03-22 18:15 修改: 2026-06-17 02:48

nodejs CVE-2019-1563 低危 20.20.2-1nodesource1 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28

nodejs CVE-2021-22930 低危 20.20.2-1nodesource1 nodejs: Use-after-free on close http2 on stream canceling

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22930

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2021-10-07 14:15 修改: 2026-06-17 03:38

nodejs CVE-2021-23840 低危 20.20.2-1nodesource1 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

nodejs CVE-2023-0464 低危 20.20.2-1nodesource1 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25

nodejs CVE-2023-0465 低危 20.20.2-1nodesource1 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

nodejs CVE-2023-0466 低危 20.20.2-1nodesource1 openssl: Certificate policy check not enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25

nodejs CVE-2023-1255 低危 20.20.2-1nodesource1 openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1255

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-04-20 17:15 修改: 2026-06-17 05:27

nodejs CVE-2023-2975 低危 20.20.2-1nodesource1 openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2975

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-07-14 12:15 修改: 2026-06-17 05:53

nodejs CVE-2023-3446 低危 20.20.2-1nodesource1 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14

nodejs CVE-2023-3817 低危 20.20.2-1nodesource1 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14

nodejs CVE-2023-5678 低危 20.20.2-1nodesource1 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49

nodejs CVE-2023-6129 低危 20.20.2-1nodesource1 openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-01-09 17:15 修改: 2026-06-17 06:50

nodejs CVE-2023-6237 低危 20.20.2-1nodesource1 openssl: Excessive time spent checking invalid RSA public keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6237

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-04-25 07:15 修改: 2026-06-17 06:50

nodejs CVE-2024-0727 低危 20.20.2-1nodesource1 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54

nodejs CVE-2024-13176 低危 20.20.2-1nodesource1 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01

nodejs CVE-2024-2511 低危 20.20.2-1nodesource1 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24

nodejs CVE-2025-15468 低危 20.20.2-1nodesource1 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37

nodejs CVE-2025-15469 低危 20.20.2-1nodesource1 openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37

nodejs CVE-2025-66199 低危 20.20.2-1nodesource1 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56

nodejs CVE-2025-68160 低危 20.20.2-1nodesource1 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58

nodejs CVE-2025-69418 低危 20.20.2-1nodesource1 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

nodejs CVE-2025-69419 低危 20.20.2-1nodesource1 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

nodejs CVE-2025-69420 低危 20.20.2-1nodesource1 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

nodejs CVE-2025-69421 低危 20.20.2-1nodesource1 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

nodejs CVE-2025-9232 低危 20.20.2-1nodesource1 openssl: Out-of-bounds read in HTTP client no_proxy handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9232

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18

nodejs CVE-2026-22795 低危 20.20.2-1nodesource1 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

nodejs CVE-2026-22796 低危 20.20.2-1nodesource1 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

nodejs CVE-2026-2673 低危 20.20.2-1nodesource1 openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31

nodejs CVE-2026-28387 低危 20.20.2-1nodesource1 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

nodejs CVE-2026-28388 低危 20.20.2-1nodesource1 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

nodejs CVE-2026-28389 低危 20.20.2-1nodesource1 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

nodejs CVE-2026-28390 低危 20.20.2-1nodesource1 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

nodejs CVE-2026-34180 低危 20.20.2-1nodesource1 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-34181 低危 20.20.2-1nodesource1 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-42765 低危 20.20.2-1nodesource1 openssl: NULL Dereference in Certificate Verification with OCSP Checking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42765

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-42766 低危 20.20.2-1nodesource1 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-42767 低危 20.20.2-1nodesource1 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-42768 低危 20.20.2-1nodesource1 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-42769 低危 20.20.2-1nodesource1 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-42770 低危 20.20.2-1nodesource1 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-42771 低危 20.20.2-1nodesource1 openssl: Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42771

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-45446 低危 20.20.2-1nodesource1 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-7383 低危 20.20.2-1nodesource1 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

nodejs CVE-2026-9076 低危 20.20.2-1nodesource1 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

passwd CVE-2023-29383 低危 1:4.8.1-2ubuntu2.2 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49

passwd CVE-2024-56433 低危 1:4.8.1-2ubuntu2.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

libhdf5-103-1 CVE-2020-18494 低危 1.10.7+repack-4ubuntu2 hdf5: Buffer overflow in function H5S_close at H5S.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-18494

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-08-22 19:15 修改: 2026-06-17 02:59

libhdf5-103-1 CVE-2021-37501 低危 1.10.7+repack-4ubuntu2 hdf5: heap buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37501

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2023-02-03 18:15 修改: 2026-06-17 04:00

libhdf5-103-1 CVE-2021-46242 低危 1.10.7+repack-4ubuntu2 hdf5: Heap-use-after free via the component H5AC_unpin_entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46242

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-01-21 21:15 修改: 2026-06-17 04:14

libhdf5-103-1 CVE-2021-46243 低危 1.10.7+repack-4ubuntu2 hdf5: Untrusted pointer dereference via the function H5O__dtype_decode_helper at hdf5/src/H5Odtype.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46243

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2022-01-21 21:15 修改: 2026-06-17 04:14

libncurses6 CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

Node.js (node-pkg)
低危漏洞:6 中危漏洞:54 高危漏洞:51 严重漏洞:5
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
babel-traverse CVE-2023-45133 严重 6.26.0 7.23.2 babel: arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45133

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2023-10-12 17:15 修改: 2026-06-17 06:28

form-data CVE-2025-7783 严重 2.3.3 2.5.4, 3.0.4, 4.0.4 form-data: Unsafe random function in form-data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7783

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2025-07-18 17:15 修改: 2026-06-17 10:05

loader-utils CVE-2022-37601 严重 0.2.17 2.0.3, 1.4.1 loader-utils: prototype pollution in function parseQuery in parseQuery.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37601

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-10-12 20:15 修改: 2026-06-17 04:55

loader-utils CVE-2022-37601 严重 0.2.17 2.0.3, 1.4.1 loader-utils: prototype pollution in function parseQuery in parseQuery.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37601

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-10-12 20:15 修改: 2026-06-17 04:55

tar CVE-2026-59873 严重 6.2.1 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57

brace-expansion CVE-2026-69152 高危 2.0.1 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

braces CVE-2024-4068 高危 1.8.5 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01

braces CVE-2024-4068 高危 2.3.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01

braces CVE-2024-4068 高危 2.3.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01

cross-spawn CVE-2024-21538 高危 7.0.3 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-11-08 05:15 修改: 2026-07-28 16:17

fast-uri CVE-2026-18446 高危 3.1.4 2.4.4, 3.1.5, 4.1.2 fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18446

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-31 15:16 修改: 2026-07-31 18:17

fast-uri CVE-2026-18446 高危 3.1.4 2.4.4, 3.1.5, 4.1.2 fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18446

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-31 15:16 修改: 2026-07-31 18:17

fast-uri CVE-2026-18446 高危 3.1.4 2.4.4, 3.1.5, 4.1.2 fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18446

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-31 15:16 修改: 2026-07-31 18:17

brace-expansion CVE-2026-14257 高危 1.1.16 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48

form-data CVE-2026-12143 高危 2.3.3 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-06-12 19:16 修改: 2026-08-10 13:17

glob CVE-2025-64756 高危 10.4.2 11.1.0, 10.5.0 glob: glob: Command Injection Vulnerability via Malicious Filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64756

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-11-17 18:15 修改: 2026-06-17 09:55

ip-address CVE-2026-69192 高危 9.0.5 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16

is-svg CVE-2021-28092 高危 2.1.0 4.2.2 nodejs-is-svg: ReDoS via malicious string

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28092

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-03-12 22:15 修改: 2026-06-17 03:45

is-svg CVE-2021-29059 高危 2.1.0 4.3.0 nodejs-is-svg: Regular expression denial of service if the application is provided and checks a crafted invalid SVG string

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29059

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-06-21 16:15 修改: 2026-06-17 03:47

js-yaml GHSA-5p4m-2wfm-xmqj 高危 3.15.0 4.3.1, 3.15.1 JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27

js-yaml CVE-2026-59869 高危 3.7.0 3.15.0, 4.3.0 js-yaml: js-yaml: Denial of Service via crafted YAML documents

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59869

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:05

js-yaml GHSA-5p4m-2wfm-xmqj 高危 3.7.0 4.3.1, 3.15.1 JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27

js-yaml GHSA-8j8c-7jfh-h6hx 高危 3.7.0 3.13.1 Code Injection in js-yaml

漏洞详情: https://github.com/advisories/GHSA-8j8c-7jfh-h6hx

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2019-06-04 20:14 修改: 2020-08-31 18:36

json5 CVE-2022-46175 高危 0.5.1 2.2.2, 1.0.2 json5: Prototype Pollution in JSON5 via Parse Method

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46175

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-12-24 04:15 修改: 2026-06-17 05:11

json5 CVE-2022-46175 高危 0.5.1 2.2.2, 1.0.2 json5: Prototype Pollution in JSON5 via Parse Method

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46175

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-12-24 04:15 修改: 2026-06-17 05:11

json5 CVE-2022-46175 高危 0.5.1 2.2.2, 1.0.2 json5: Prototype Pollution in JSON5 via Parse Method

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46175

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-12-24 04:15 修改: 2026-06-17 05:11

json5 CVE-2022-46175 高危 0.5.1 2.2.2, 1.0.2 json5: Prototype Pollution in JSON5 via Parse Method

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46175

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-12-24 04:15 修改: 2026-06-17 05:11

json5 CVE-2022-46175 高危 0.5.1 2.2.2, 1.0.2 json5: Prototype Pollution in JSON5 via Parse Method

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46175

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-12-24 04:15 修改: 2026-06-17 05:11

brace-expansion CVE-2026-69152 高危 1.1.16 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

brace-expansion CVE-2026-13149 高危 2.0.1 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17

merge CVE-2020-28499 高危 1.2.1 2.1.1 Prototype Pollution in merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28499

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-02-18 16:15 修改: 2026-06-17 03:10

mime CVE-2017-16138 高危 1.3.6 2.0.3, 1.4.1 nodejs-mime: Regular expression Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16138

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2018-06-07 02:29 修改: 2026-06-17 01:08

minimatch CVE-2026-26996 高危 9.0.5 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26

minimatch CVE-2026-27903 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27

minimatch CVE-2026-27904 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27

node-fetch CVE-2022-0235 高危 1.7.3 3.1.1, 2.6.7 node-fetch: exposure of sensitive information to an unauthorized actor

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0235

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-01-16 17:15 修改: 2026-06-17 04:20

postcss CVE-2026-45623 高危 5.2.18 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-27 18:16 修改: 2026-08-07 00:13

postcss GHSA-r28c-9q8g-f849 高危 5.2.18 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24

postcss CVE-2026-45623 高危 6.0.23 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-27 18:16 修改: 2026-08-07 00:13

postcss CVE-2026-45623 高危 6.0.23 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-27 18:16 修改: 2026-08-07 00:13

postcss CVE-2026-45623 高危 6.0.23 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-27 18:16 修改: 2026-08-07 00:13

postcss CVE-2026-45623 高危 6.0.23 8.5.12 postcss: PostCSS: Information disclosure and denial of service via crafted CSS input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45623

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-27 18:16 修改: 2026-08-07 00:13

postcss GHSA-r28c-9q8g-f849 高危 6.0.23 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24

postcss GHSA-r28c-9q8g-f849 高危 6.0.23 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24

postcss GHSA-r28c-9q8g-f849 高危 6.0.23 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24

postcss GHSA-r28c-9q8g-f849 高危 6.0.23 8.5.18 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

漏洞详情: https://github.com/advisories/GHSA-r28c-9q8g-f849

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-24 16:24 修改: 2026-07-24 16:24

sharp GHSA-f88m-g3jw-g9cj 高危 0.34.5 0.35.0 sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

漏洞详情: https://github.com/advisories/GHSA-f88m-g3jw-g9cj

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-21 22:07 修改: 2026-07-21 22:07

sigstore CVE-2026-48815 高危 2.3.1 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23

brace-expansion CVE-2026-14257 高危 2.0.1 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48

tar CVE-2026-23745 高危 6.2.1 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-16 22:16 修改: 2026-08-10 13:18

tar CVE-2026-23950 高危 6.2.1 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18

tar CVE-2026-24842 高危 6.2.1 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-28 01:16 修改: 2026-08-10 13:18

tar CVE-2026-26960 高危 6.2.1 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26

tar CVE-2026-29786 高危 6.2.1 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19

tar CVE-2026-31802 高危 6.2.1 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34

tar CVE-2026-59874 高危 6.2.1 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54

codemirror CVE-2020-7760 中危 5.11.0 5.58.2 codemirror: ReDoS in tokenBase function in javascript.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7760

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2020-10-30 11:15 修改: 2026-06-17 03:25

node-notifier CVE-2020-7789 中危 5.4.5 8.0.1 nodejs-node-notifier: command injection due to the options params not being sanitised when being passed an array

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7789

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2020-12-11 10:15 修改: 2026-06-17 03:25

ip-address CVE-2026-42338 中危 9.0.5 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-05-12 20:16 修改: 2026-08-10 13:19

js-yaml CVE-2025-64718 中危 3.7.0 4.1.1, 3.14.2 js-yaml: js-yaml prototype pollution in merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64718

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2025-11-13 16:15 修改: 2026-06-17 09:55

postcss CVE-2021-23382 中危 5.2.18 8.2.13, 7.0.36 nodejs-postcss: ReDoS via getAnnotationURL() and loadAnnotation() in lib/previous-map.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23382

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-04-26 16:15 修改: 2026-06-17 03:38

postcss CVE-2023-44270 中危 5.2.18 8.4.31 PostCSS: Improper input validation in PostCSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44270

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2023-09-29 22:15 修改: 2026-06-17 06:27

postcss CVE-2026-41305 中危 5.2.18 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46

postcss CVE-2026-69153 中危 5.2.18 8.5.23 postcss: PostCSS: Information disclosure via crafted sourceMappingURL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69153

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

js-yaml CVE-2026-53550 中危 3.7.0 4.2.0, 3.15.0 js-yaml: js-yaml: Denial of Service via crafted YAML merge keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53550

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-06-22 16:16 修改: 2026-07-09 20:33

js-yaml GHSA-2pr6-76vf-7546 中危 3.7.0 3.13.0 Denial of Service in js-yaml

漏洞详情: https://github.com/advisories/GHSA-2pr6-76vf-7546

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2019-06-05 14:35 修改: 2021-08-04 21:32

codemirror CVE-2020-7760 中危 5.11.0 5.58.2 codemirror: ReDoS in tokenBase function in javascript.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7760

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2020-10-30 11:15 修改: 2026-06-17 03:25

color-string CVE-2021-29060 中危 0.3.0 1.5.5 nodejs-color-string: Regular expression denial of service when the application is provided and checks a crafted invalid HWB string

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29060

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-06-21 16:15 修改: 2026-06-17 03:47

jquery-ui CVE-2021-41182 中危 1.12.1 1.13.0 jquery-ui: XSS in the altField option of the datepicker widget

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41182

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-10-26 15:15 修改: 2026-06-17 04:08

jquery-ui CVE-2021-41182 中危 1.12.1 1.13.0 jquery-ui: XSS in the altField option of the datepicker widget

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41182

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-10-26 15:15 修改: 2026-06-17 04:08

jquery-ui CVE-2021-41183 中危 1.12.1 1.13.0 jquery-ui: XSS in *Text options of the datepicker widget

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41183

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-10-26 15:15 修改: 2026-06-17 04:08

jszip CVE-2022-48285 中危 2.7.0 3.8.0 jszip: directory traversal via a crafted ZIP archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48285

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2023-01-29 05:15 修改: 2026-06-17 05:14

postcss CVE-2021-23382 中危 6.0.23 8.2.13, 7.0.36 nodejs-postcss: ReDoS via getAnnotationURL() and loadAnnotation() in lib/previous-map.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23382

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-04-26 16:15 修改: 2026-06-17 03:38

postcss CVE-2021-23382 中危 6.0.23 8.2.13, 7.0.36 nodejs-postcss: ReDoS via getAnnotationURL() and loadAnnotation() in lib/previous-map.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23382

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-04-26 16:15 修改: 2026-06-17 03:38

postcss CVE-2021-23382 中危 6.0.23 8.2.13, 7.0.36 nodejs-postcss: ReDoS via getAnnotationURL() and loadAnnotation() in lib/previous-map.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23382

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-04-26 16:15 修改: 2026-06-17 03:38

postcss CVE-2021-23382 中危 6.0.23 8.2.13, 7.0.36 nodejs-postcss: ReDoS via getAnnotationURL() and loadAnnotation() in lib/previous-map.js

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23382

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-04-26 16:15 修改: 2026-06-17 03:38

postcss CVE-2023-44270 中危 6.0.23 8.4.31 PostCSS: Improper input validation in PostCSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44270

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2023-09-29 22:15 修改: 2026-06-17 06:27

postcss CVE-2023-44270 中危 6.0.23 8.4.31 PostCSS: Improper input validation in PostCSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44270

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2023-09-29 22:15 修改: 2026-06-17 06:27

postcss CVE-2023-44270 中危 6.0.23 8.4.31 PostCSS: Improper input validation in PostCSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44270

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2023-09-29 22:15 修改: 2026-06-17 06:27

postcss CVE-2023-44270 中危 6.0.23 8.4.31 PostCSS: Improper input validation in PostCSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44270

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2023-09-29 22:15 修改: 2026-06-17 06:27

postcss CVE-2026-41305 中危 6.0.23 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46

postcss CVE-2026-41305 中危 6.0.23 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46

postcss CVE-2026-41305 中危 6.0.23 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46

postcss CVE-2026-41305 中危 6.0.23 8.5.10 postcss: PostCSS: Cross-Site Scripting (XSS) via improper escaping of style closing tags

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41305

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:46

postcss CVE-2026-69153 中危 6.0.23 8.5.23 postcss: PostCSS: Information disclosure via crafted sourceMappingURL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69153

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

postcss CVE-2026-69153 中危 6.0.23 8.5.23 postcss: PostCSS: Information disclosure via crafted sourceMappingURL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69153

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

postcss CVE-2026-69153 中危 6.0.23 8.5.23 postcss: PostCSS: Information disclosure via crafted sourceMappingURL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69153

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

postcss CVE-2026-69153 中危 6.0.23 8.5.23 postcss: PostCSS: Information disclosure via crafted sourceMappingURL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69153

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58

public GHSA-4vvp-x9h2-x2vf 中危 1.0.0 Path Traversal in public

漏洞详情: https://github.com/advisories/GHSA-4vvp-x9h2-x2vf

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2020-09-03 20:26 修改: 2020-08-31 18:48

qs CVE-2025-15284 中危 6.5.5 6.14.1 qs: qs: Denial of Service via improper input validation in array parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37

request CVE-2023-28155 中危 2.88.2 request: bypass of SSRF mitigations when following a cross-protocol redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28155

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2023-03-16 15:15 修改: 2026-06-17 05:46

jquery-ui CVE-2021-41183 中危 1.12.1 1.13.0 jquery-ui: XSS in *Text options of the datepicker widget

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41183

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-10-26 15:15 修改: 2026-06-17 04:08

jquery-ui CVE-2021-41184 中危 1.12.1 1.13.0 jquery-ui: XSS in the 'of' option of the .position() util

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41184

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-10-26 15:15 修改: 2026-06-17 04:08

jquery-ui CVE-2021-41184 中危 1.12.1 1.13.0 jquery-ui: XSS in the 'of' option of the .position() util

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41184

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-10-26 15:15 修改: 2026-06-17 04:08

micromatch CVE-2024-4067 中危 2.3.11 4.0.8 micromatch: vulnerable to Regular Expression Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4067

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01

micromatch CVE-2024-4067 中危 3.1.10 4.0.8 micromatch: vulnerable to Regular Expression Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4067

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01

micromatch CVE-2024-4067 中危 3.1.10 4.0.8 micromatch: vulnerable to Regular Expression Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4067

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2024-05-14 15:42 修改: 2026-06-17 08:01

jquery-ui CVE-2022-31160 中危 1.12.1 1.13.2 jqueryui: XSS when refreshing a checkboxradio with an HTML-like initial text label

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31160

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-07-20 20:15 修改: 2026-06-17 04:44

jquery-ui CVE-2022-31160 中危 1.12.1 1.13.2 jqueryui: XSS when refreshing a checkboxradio with an HTML-like initial text label

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31160

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-07-20 20:15 修改: 2026-06-17 04:44

brace-expansion CVE-2026-33750 中危 2.0.1 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38

@sigstore/core CVE-2026-48758 中危 1.1.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23

tar CVE-2026-53655 中危 6.2.1 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03

tar CVE-2026-59871 中危 6.2.1 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02

tar CVE-2026-59875 中危 6.2.1 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10

tar GHSA-r292-9mhp-454m 中危 6.2.1 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26

tough-cookie CVE-2023-26136 中危 2.5.0 4.1.3 tough-cookie: prototype pollution in cookie memstore

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26136

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2023-07-01 05:15 修改: 2026-06-17 05:42

uuid CVE-2026-41907 中危 3.4.0 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47

webpack CVE-2024-43788 中危 5.89.0 5.94.0 webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43788

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2024-08-27 17:15 修改: 2026-06-17 07:51

webpack CVE-2024-43788 中危 5.89.0 5.94.0 webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43788

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2024-08-27 17:15 修改: 2026-06-17 07:51

yargs-parser CVE-2020-7608 中危 9.0.2 13.1.2, 15.0.1, 18.1.1, 5.0.1 nodejs-yargs-parser: prototype pollution vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7608

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2020-03-16 20:15 修改: 2026-06-17 03:25

diff CVE-2026-24001 低危 5.2.0 8.0.3, 5.2.2, 4.0.4, 3.5.1 jsdiff: denial of service vulnerability in parsePatch and applyPatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24001

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-01-22 03:15 修改: 2026-07-15 02:18

webpack CVE-2025-68157 低危 5.89.0 5.104.0 webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68157

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-02-05 23:15 修改: 2026-06-17 09:58

webpack CVE-2025-68157 低危 5.89.0 5.104.0 webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68157

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-02-05 23:15 修改: 2026-06-17 09:58

webpack CVE-2025-68458 低危 5.89.0 5.104.1 webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68458

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2026-02-05 23:15 修改: 2026-06-17 09:59

webpack CVE-2025-68458 低危 5.89.0 5.104.1 webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68458

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-02-05 23:15 修改: 2026-06-17 09:59

brace-expansion CVE-2025-5889 低危 2.0.1 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:ed8704f17885a5924fbce11c093199a530a53a23f17479f6b9a432b8006eea4f

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48

Python (python-pkg)
低危漏洞:7 中危漏洞:19 高危漏洞:29 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Django CVE-2022-28346 严重 2.2.27 2.2.28, 3.2.13, 4.0.4 Django: SQL injection in QuerySet.annotate(),aggregate() and extra()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28346

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-04-12 05:15 修改: 2026-06-17 04:38

Django CVE-2022-28347 严重 2.2.27 2.2.28, 3.2.13, 4.0.4 Django: SQL injection via QuerySet.explain(options) on PostgreSQL

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28347

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-04-12 05:15 修改: 2026-06-17 04:38

Django CVE-2025-64459 严重 2.2.27 5.2.8, 5.1.14, 4.2.26 django: Django SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64459

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2025-11-05 15:15 修改: 2026-06-17 09:54

Django CVE-2022-36359 高危 2.2.27 3.2.15, 4.0.7 An issue was discovered in the HTTP FileResponse class in Django 3.2 b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-36359

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-08-03 14:15 修改: 2026-06-17 04:53

Django CVE-2025-57833 高危 2.2.27 4.2.24, 5.1.12, 5.2.6 django: Django SQL injection in FilteredRelation column aliases

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-57833

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2025-09-03 21:15 修改: 2026-06-17 09:43

Django CVE-2025-64458 高危 2.2.27 5.2.8, 5.1.14, 4.2.26 Django: Denial-of-service vulnerability in Django on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64458

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2025-11-05 15:15 修改: 2026-06-17 09:54

GDAL CVE-2026-49014 高危 3.4.1 3.13.1 In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49014

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-05-27 02:16 修改: 2026-07-24 12:10

PyJWT CVE-2022-29217 高危 1.5.3 2.4.0 python-jwt: Key confusion through non-blocklisted public key formats

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29217

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2022-05-24 15:15 修改: 2026-06-17 04:39

PyJWT CVE-2026-32597 高危 1.5.3 2.12.0 pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32597

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-03-13 19:55 修改: 2026-07-22 12:17

PyJWT CVE-2026-48526 高危 1.5.3 2.13.0 python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48526

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-05-28 16:16 修改: 2026-08-06 13:18

celery CVE-2021-23727 高危 4.4.0 5.2.2 celery: stored command injection vulnerability may allow privileges escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23727

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-12-29 17:15 修改: 2026-06-17 03:38

pillow CVE-2026-25990 高危 11.3.0 12.1.1 pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25990

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-02-11 21:16 修改: 2026-07-21 12:17

pillow CVE-2026-40192 高危 11.3.0 12.2.0 Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40192

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-04-15 23:16 修改: 2026-07-20 12:19

pillow CVE-2026-42311 高危 11.3.0 12.2.0 Pillow: python-pillow: Pillow: Arbitrary code execution via malicious PSD file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42311

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-05-09 06:16 修改: 2026-07-24 21:10

pillow CVE-2026-54058 高危 11.3.0 12.3.0 Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54058

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-14 17:17 修改: 2026-08-06 15:46

pillow CVE-2026-54059 高危 11.3.0 12.3.0 python-pillow: Pillow: Denial of Service via crafted PCF font data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54059

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58

pillow CVE-2026-54060 高危 11.3.0 12.3.0 python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54060

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58

pillow CVE-2026-55379 高危 11.3.0 12.3.0 python-pillow: Pillow: Denial of Service via crafted BDF font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55379

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:59

pillow CVE-2026-55380 高危 11.3.0 12.3.0 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55380

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58

pillow CVE-2026-59197 高危 11.3.0 12.3.0 Pillow: Pillow: Native heap out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59197

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-14 17:17 修改: 2026-07-21 19:17

pillow CVE-2026-59199 高危 11.3.0 12.3.0 Pillow: Pillow: Denial of Service via out-of-bounds write in image processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59199

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-14 16:17 修改: 2026-07-15 16:16

pillow CVE-2026-59200 高危 11.3.0 12.3.0 Pillow: Pillow: Denial of service via crafted PDF stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59200

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-14 17:17 修改: 2026-07-21 15:52

pillow CVE-2026-59204 高危 11.3.0 12.3.0 Pillow: Pillow: Denial of Service via crafted JPEG2000 image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59204

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-14 16:17 修改: 2026-07-21 19:17

pillow CVE-2026-59205 高危 11.3.0 12.3.0 Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59205

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-14 16:17 修改: 2026-07-14 20:09

setuptools CVE-2024-6345 高危 67.0.0 70.0.0 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2024-07-15 01:15 修改: 2026-06-17 08:17

setuptools CVE-2025-47273 高危 67.0.0 78.1.1 setuptools: Path Traversal Vulnerability in setuptools PackageIndex

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27

urllib3 CVE-2021-33503 高危 1.25.11 1.26.5 python-urllib3: ReDoS in the parsing of authority part of URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33503

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2021-06-29 11:15 修改: 2026-06-17 03:54

urllib3 CVE-2023-43804 高危 1.25.11 2.0.6, 1.26.17 python-urllib3: Cookie request header isn't stripped during cross-origin redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43804

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2023-10-04 17:15 修改: 2026-06-17 06:26

urllib3 CVE-2025-66418 高危 1.25.11 2.6.0 urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66418

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2025-12-05 16:15 修改: 2026-06-17 09:56

urllib3 CVE-2025-66471 高危 1.25.11 2.6.0 urllib3: urllib3 Streaming API improperly handles highly compressed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66471

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2025-12-05 17:16 修改: 2026-06-17 09:56

urllib3 CVE-2026-21441 高危 1.25.11 2.6.3 urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21441

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-01-07 22:15 修改: 2026-08-10 13:17

urllib3 CVE-2026-44431 高危 1.25.11 2.7.0 urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44431

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-05-13 16:16 修改: 2026-06-26 12:16

pillow CVE-2026-55798 中危 11.3.0 12.3.0 python-pillow: Pillow: Arbitrary command injection via shell metacharacters in file paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55798

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58

pillow CVE-2026-59198 中危 11.3.0 12.3.0 Pillow: Pillow: Information disclosure via TGA RLE encoder out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59198

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-14 16:17 修改: 2026-07-14 20:18

pip CVE-2026-3219 中危 26.0.1 26.1 pip: pip: Incorrect file installation due to improper archive handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43

pip CVE-2026-6357 中危 26.0.1 26.1 pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00

pip CVE-2026-8643 中危 26.0.1 26.1.2 python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-06-01 17:17 修改: 2026-08-05 13:24

pydantic CVE-2024-3772 中危 1.10.8 2.4.0, 1.10.13 python-pydantic: regular expression denial of service via crafted email string

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3772

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2024-04-15 03:16 修改: 2026-06-17 07:44

requests CVE-2026-25645 中危 2.32.5 2.33.0 requests: Requests: Security bypass due to predictable temporary file creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25

Django CVE-2026-53878 中危 2.2.27 5.2.16, 6.0.7 django: Django: HTTP header injection via DomainNameValidator accepting newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53878

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-07 15:16 修改: 2026-07-09 12:58

Django CVE-2024-45231 中危 2.2.27 5.1.1, 5.0.9, 4.2.16 python-django: Potential user email enumeration via response status on password reset

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45231

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2024-10-08 16:15 修改: 2026-06-17 07:53

setuptools CVE-2026-59890 中危 67.0.0 83.0.0 setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04

Markdown CVE-2025-69534 中危 3.3.4 3.8.1 python-markdown: denial of service via malformed HTML-like sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-03-05 15:16 修改: 2026-07-15 02:17

Django CVE-2025-48432 中危 2.2.27 5.2.2, 5.1.10, 4.2.22 django: Django Path Injection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48432

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2025-06-05 03:15 修改: 2026-06-17 09:29

Django CVE-2026-53877 中危 2.2.27 5.2.16, 6.0.7 django: Django: Information disclosure via heap buffer over-read in GDALRaster

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53877

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-07 15:16 修改: 2026-07-09 12:59

pillow CVE-2026-42308 中危 11.3.0 12.2.0 Pillow: python: Pillow: Denial of Service via integer overflow in font processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42308

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-05-09 06:16 修改: 2026-07-24 21:10

pillow CVE-2026-42309 中危 11.3.0 12.2.0 Pillow: Pillow: Denial of Service via specially crafted coordinate input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42309

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-05-09 06:16 修改: 2026-07-24 21:10

pillow CVE-2026-42310 中危 11.3.0 12.2.0 Pillow: Pillow: Denial of Service via malicious PDF processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42310

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-05-09 06:16 修改: 2026-07-24 21:10

urllib3 CVE-2023-45803 中危 1.25.11 2.0.7, 1.26.18 urllib3: Request body not stripped after redirect from 303 status changes request method to GET

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45803

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2023-10-17 20:15 修改: 2026-06-17 06:29

urllib3 CVE-2024-37891 中危 1.25.11 1.26.19, 2.2.2 urllib3: proxy-authorization request header is not stripped during cross-origin redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37891

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2024-06-17 20:15 修改: 2026-06-17 07:38

urllib3 CVE-2025-50181 中危 1.25.11 2.5.0 urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50181

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2025-06-19 01:15 修改: 2026-06-17 09:34

GDAL CVE-2026-8088 低危 3.4.1 3.13.0 A weakness has been identified in OSGeo gdal up to 3.13.0dev-4. The af ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8088

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-05-07 20:16 修改: 2026-06-17 11:03

Django CVE-2026-48588 低危 2.2.27 5.2.16, 6.0.7 django: Django: Information disclosure due to improper caching of Set-Cookie responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48588

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-07-07 15:16 修改: 2026-07-09 13:01

Django CVE-2026-6873 低危 2.2.27 5.2.15, 6.0.6 python-django: Django: Information disclosure via non-injective cookie salt derivation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6873

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-06-03 14:16 修改: 2026-07-21 19:10

Django CVE-2026-8404 低危 2.2.27 5.2.15, 6.0.6 Django: Django: Information disclosure due to improper handling of Cache-Control directives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8404

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-06-03 14:16 修改: 2026-07-21 19:10

Django CVE-2026-48587 低危 2.2.27 5.2.15, 6.0.6 django: Django: Information disclosure via improper handling of Vary header whitespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48587

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-06-03 14:16 修改: 2026-07-21 19:10

GDAL CVE-2026-8087 低危 3.4.1 3.13.0 A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4. I ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8087

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2026-05-07 20:16 修改: 2026-06-17 11:03

djangorestframework CVE-2024-21520 低危 3.13.1 3.15.2 djangorestframework: Cross-site Scripting (XSS) via break_long_headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21520

镜像层: sha256:78a712057a55d4aed356a9740386ee57e0b59f52a252130e278e22ca48047c88

发布日期: 2024-06-26 05:15 修改: 2026-06-17 07:09

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×