docker.io/websoft9dev/websoft9:latest linux/amd64

docker.io/websoft9dev/websoft9:latest - Trivy安全扫描结果扫描时间: 2026-08-11 19:05

全部漏洞信息

低危漏洞:162

中危漏洞:286

高危漏洞:225

严重漏洞:25

系统OS: debian 13.6 扫描引擎: Trivy 扫描时间: 2026-08-11 19:05

docker.io/websoft9dev/websoft9:latest (debian 13.6) (debian)

低危漏洞:140

中危漏洞:158

高危漏洞:59

严重漏洞:16

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libperl5.40	CVE-2026-13221	严重	5.40.1-6		Perl versions through 5.43.9 produce silently incorrect regular expres ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
libperl5.40	CVE-2026-42496	严重	5.40.1-6		perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10
libperl5.40	CVE-2026-57433	严重	5.40.1-6		Storable versions before 3.41 for Perl have a signed integer overflow ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
libperl5.40	CVE-2026-8376	严重	5.40.1-6		perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
perl	CVE-2026-13221	严重	5.40.1-6		Perl versions through 5.43.9 produce silently incorrect regular expres ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
perl	CVE-2026-42496	严重	5.40.1-6		perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10
perl	CVE-2026-57433	严重	5.40.1-6		Storable versions before 3.41 for Perl have a signed integer overflow ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
perl	CVE-2026-8376	严重	5.40.1-6		perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
perl-base	CVE-2026-13221	严重	5.40.1-6		Perl versions through 5.43.9 produce silently incorrect regular expres ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
perl-base	CVE-2026-42496	严重	5.40.1-6		perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10
perl-base	CVE-2026-57433	严重	5.40.1-6		Storable versions before 3.41 for Perl have a signed integer overflow ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
perl-base	CVE-2026-8376	严重	5.40.1-6		perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
perl-modules-5.40	CVE-2026-13221	严重	5.40.1-6		Perl versions through 5.43.9 produce silently incorrect regular expres ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
perl-modules-5.40	CVE-2026-42496	严重	5.40.1-6		perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10
perl-modules-5.40	CVE-2026-57433	严重	5.40.1-6		Storable versions before 3.41 for Perl have a signed integer overflow ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
perl-modules-5.40	CVE-2026-8376	严重	5.40.1-6		perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
libcurl4t64	CVE-2026-8927	高危	8.14.1-2+deb13u4		curl: Information disclosure due to uncleared proxy authentication state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
libjq1	CVE-2026-32316	高危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: jq: Denial of Service or potential arbitrary code execution due to integer overflow and heap-based buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32316 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-04-13 18:16 修改: 2026-06-17 10:35
liblastlog2-2	CVE-2026-53615	高危	2.41-5		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1	CVE-2026-53615	高危	2.41-5		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libncursesw6	CVE-2025-69720	高危	6.5+20250216-2		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
bsdutils	CVE-2026-53615	高危	1:2.41-5		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl	CVE-2026-12064	高危	8.14.1-2+deb13u4		curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
curl	CVE-2026-8286	高危	8.14.1-2+deb13u4		curl: curl: Insecure connection establishment due to TLS configuration mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
curl	CVE-2026-8458	高危	8.14.1-2+deb13u4		curl: libcurl: Unauthorized connection reuse due to a logical error 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
libperl5.40	CVE-2026-42497	高危	5.40.1-6		perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10
libperl5.40	CVE-2026-48962	高危	5.40.1-6		perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
libperl5.40	CVE-2026-57432	高危	5.40.1-6		perl: Perl: Information disclosure via integer overflow in pack/unpack operations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
libperl5.40	CVE-2026-9538	高危	5.40.1-6		perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
libpython3.13-minimal	CVE-2026-11940	高危	3.13.5-2+deb13u4		tarfile.extractall() with the 'data' or 'tar' filter could be bypasse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-23 17:16 修改: 2026-08-06 01:16
libpython3.13-minimal	CVE-2026-15308	高危	3.13.5-2+deb13u4		python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-09 17:16 修改: 2026-08-06 01:16
libpython3.13-minimal	CVE-2026-7210	高危	3.13.5-2+deb13u4		python: expat: Python/Expat: Denial of Service via crafted XML document 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-07-27 17:35
libpython3.13-stdlib	CVE-2026-11940	高危	3.13.5-2+deb13u4		tarfile.extractall() with the 'data' or 'tar' filter could be bypasse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-23 17:16 修改: 2026-08-06 01:16
libpython3.13-stdlib	CVE-2026-15308	高危	3.13.5-2+deb13u4		python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-09 17:16 修改: 2026-08-06 01:16
libpython3.13-stdlib	CVE-2026-7210	高危	3.13.5-2+deb13u4		python: expat: Python/Expat: Denial of Service via crafted XML document 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-07-27 17:35
libsmartcols1	CVE-2026-53615	高危	2.41-5		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libtinfo6	CVE-2025-69720	高危	6.5+20250216-2		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libuuid1	CVE-2026-53615	高危	2.41-5		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login	CVE-2026-53615	高危	1:4.16.0-2+really2.41-5		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount	CVE-2026-53615	高危	2.41-5		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
ncurses-base	CVE-2025-69720	高危	6.5+20250216-2		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
ncurses-bin	CVE-2025-69720	高危	6.5+20250216-2		ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
curl	CVE-2026-8927	高危	8.14.1-2+deb13u4		curl: Information disclosure due to uncleared proxy authentication state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
gzip	CVE-2026-41992	高危	1.13-1		GNU gzip contains a global buffer overflow vulnerability in the LZH de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
jq	CVE-2026-32316	高危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: jq: Denial of Service or potential arbitrary code execution due to integer overflow and heap-based buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32316 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-04-13 18:16 修改: 2026-06-17 10:35
libacl1	CVE-2026-54369	高危	2.3.2-2+b1		acl: Symlink traversal privilege escalation via libacl functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 14:16 修改: 2026-08-10 13:19
perl	CVE-2026-42497	高危	5.40.1-6		perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10
perl	CVE-2026-48962	高危	5.40.1-6		perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
perl	CVE-2026-57432	高危	5.40.1-6		perl: Perl: Information disclosure via integer overflow in pack/unpack operations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
perl	CVE-2026-9538	高危	5.40.1-6		perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
libblkid1	CVE-2026-53615	高危	2.41-5		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcurl3t64-gnutls	CVE-2026-12064	高危	8.14.1-2+deb13u4		curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl3t64-gnutls	CVE-2026-8286	高危	8.14.1-2+deb13u4		curl: curl: Insecure connection establishment due to TLS configuration mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libcurl3t64-gnutls	CVE-2026-8458	高危	8.14.1-2+deb13u4		curl: libcurl: Unauthorized connection reuse due to a logical error 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
perl-base	CVE-2026-42497	高危	5.40.1-6		perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10
perl-base	CVE-2026-48962	高危	5.40.1-6		perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
perl-base	CVE-2026-57432	高危	5.40.1-6		perl: Perl: Information disclosure via integer overflow in pack/unpack operations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
perl-base	CVE-2026-9538	高危	5.40.1-6		perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
libcurl3t64-gnutls	CVE-2026-8927	高危	8.14.1-2+deb13u4		curl: Information disclosure due to uncleared proxy authentication state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
libcurl4t64	CVE-2026-12064	高危	8.14.1-2+deb13u4		curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl4t64	CVE-2026-8286	高危	8.14.1-2+deb13u4		curl: curl: Insecure connection establishment due to TLS configuration mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libcurl4t64	CVE-2026-8458	高危	8.14.1-2+deb13u4		curl: libcurl: Unauthorized connection reuse due to a logical error 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
perl-modules-5.40	CVE-2026-42497	高危	5.40.1-6		perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10
perl-modules-5.40	CVE-2026-48962	高危	5.40.1-6		perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
perl-modules-5.40	CVE-2026-57432	高危	5.40.1-6		perl: Perl: Information disclosure via integer overflow in pack/unpack operations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
perl-modules-5.40	CVE-2026-9538	高危	5.40.1-6		perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
python3-cryptography	CVE-2026-69249	高危	43.0.0-3+deb13u1		python-cryptography is a package designed to expose cryptographic prim ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69249 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-08-03 22:16 修改: 2026-08-04 15:16
python3-urllib3	CVE-2025-66471	高危	2.3.0-3+deb13u2		urllib3: urllib3 Streaming API improperly handles highly compressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66471 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2025-12-05 17:16 修改: 2026-06-17 09:56
python3.13	CVE-2026-11940	高危	3.13.5-2+deb13u4		tarfile.extractall() with the 'data' or 'tar' filter could be bypasse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-23 17:16 修改: 2026-08-06 01:16
python3.13	CVE-2026-15308	高危	3.13.5-2+deb13u4		python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-09 17:16 修改: 2026-08-06 01:16
python3.13	CVE-2026-7210	高危	3.13.5-2+deb13u4		python: expat: Python/Expat: Denial of Service via crafted XML document 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-07-27 17:35
python3.13-minimal	CVE-2026-11940	高危	3.13.5-2+deb13u4		tarfile.extractall() with the 'data' or 'tar' filter could be bypasse ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-23 17:16 修改: 2026-08-06 01:16
python3.13-minimal	CVE-2026-15308	高危	3.13.5-2+deb13u4		python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-09 17:16 修改: 2026-08-06 01:16
python3.13-minimal	CVE-2026-7210	高危	3.13.5-2+deb13u4		python: expat: Python/Expat: Denial of Service via crafted XML document 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-07-27 17:35
util-linux	CVE-2026-53615	高危	2.41-5		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libjq1	CVE-2026-41256	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: embedded NUL truncates top-level jq programs loaded with -f 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
libjq1	CVE-2026-41257	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: signed-int overflow in stack_reallocate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
libjq1	CVE-2026-43894	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: jq: Arbitrary Code Execution or Denial of Service via Signed Integer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43894 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
libjq1	CVE-2026-43895	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
libjq1	CVE-2026-43896	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: stack overflow in recursive object merge 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
libjq1	CVE-2026-44777	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: stack overflow in module loading on mutual include 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
libjq1	CVE-2026-47770	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: jq: Denial of Service via deeply nested array comparison 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47770 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-25 18:16 修改: 2026-06-26 19:16
libjq1	CVE-2026-49839	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: jq: Heap out-of-bounds write via oversized raw file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49839 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-25 18:16 修改: 2026-06-26 18:53
libjq1	CVE-2026-54679	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: jq: Denial of Service via integer overflow and buffer overrun on 32-bit systems 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54679 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-25 18:16 修改: 2026-06-26 18:53
gzip	CVE-2026-41991	中危	1.13-1		gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
liblastlog2-2	CVE-2026-13595	中危	2.41-5		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
liblastlog2-2	CVE-2026-27456	中危	2.41-5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
liblastlog2-2	CVE-2026-3184	中危	2.41-5		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
bsdutils	CVE-2026-27456	中危	1:2.41-5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1	CVE-2026-13595	中危	2.41-5		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libmount1	CVE-2026-27456	中危	2.41-5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1	CVE-2026-3184	中危	2.41-5		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
jq	CVE-2024-53427	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: stack-buffer-overflow in the decNumberCopy function in decNumber.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53427 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2025-02-26 16:15 修改: 2026-06-17 08:08
libnghttp2-14	CVE-2026-58055	中危	1.64.0-1.1+deb13u1		nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
libp11-kit0	CVE-2026-13757	中危	0.25.5-3		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-29 19:16 修改: 2026-08-03 22:16
libp11-kit0	CVE-2026-18938	中危	0.25.5-3		p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-08-07 09:16 修改: 2026-08-07 16:17
libpam-modules	CVE-2026-54411	中危	1.7.0-5		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-modules-bin	CVE-2026-54411	中危	1.7.0-5		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-runtime	CVE-2026-54411	中危	1.7.0-5		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam0g	CVE-2026-54411	中危	1.7.0-5		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
jq	CVE-2026-40612	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: stack overflow via unbounded recursion in jv_contains 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40612 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:45
jq	CVE-2026-41256	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: embedded NUL truncates top-level jq programs loaded with -f 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
jq	CVE-2026-41257	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: signed-int overflow in stack_reallocate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
jq	CVE-2026-43894	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: jq: Arbitrary Code Execution or Denial of Service via Signed Integer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43894 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq	CVE-2026-43895	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq	CVE-2026-43896	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: stack overflow in recursive object merge 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq	CVE-2026-44777	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: stack overflow in module loading on mutual include 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
jq	CVE-2026-47770	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: jq: Denial of Service via deeply nested array comparison 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47770 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-25 18:16 修改: 2026-06-26 19:16
libperl5.40	CVE-2025-15649	中危	5.40.1-6		perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
libperl5.40	CVE-2026-12087	中危	5.40.1-6		perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
libperl5.40	CVE-2026-48959	中危	5.40.1-6		perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
libperl5.40	CVE-2026-48961	中危	5.40.1-6		perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
libperl5.40	CVE-2026-7010	中危	5.40.1-6		HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01
jq	CVE-2026-49839	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: jq: Heap out-of-bounds write via oversized raw file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49839 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-25 18:16 修改: 2026-06-26 18:53
jq	CVE-2026-54679	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: jq: Denial of Service via integer overflow and buffer overrun on 32-bit systems 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54679 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-25 18:16 修改: 2026-06-26 18:53
bsdutils	CVE-2026-3184	中危	1:2.41-5		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
libpython3.13-minimal	CVE-2025-12781	中危	3.13.5-2+deb13u4		cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32
libpython3.13-minimal	CVE-2025-15366	中危	3.13.5-2+deb13u4		cpython: IMAP command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16
libpython3.13-minimal	CVE-2025-15367	中危	3.13.5-2+deb13u4		cpython: POP3 command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
libpython3.13-minimal	CVE-2026-0864	中危	3.13.5-2+deb13u4		python: cpython: Python configparser: Configuration injection via crafted multi-line input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-23 18:17 修改: 2026-08-06 01:16
libpython3.13-minimal	CVE-2026-11972	中危	3.13.5-2+deb13u4		python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-23 23:16 修改: 2026-08-06 01:16
libpython3.13-minimal	CVE-2026-4360	中危	3.13.5-2+deb13u4		python: Python Tarfile: Unexpected file ownership when extracting hardlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-30 15:16 修改: 2026-08-06 01:16
libacl1	CVE-2026-54370	中危	2.3.2-2+b1		acl: TOCTOU Symlink Traversal via getfacl/setfacl 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22
libattr1	CVE-2026-54371	中危	1:2.5.2-3		attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 14:16 修改: 2026-07-15 01:16
bzip2	CVE-2026-42250	中危	1.0.8-6		bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
libpython3.13-stdlib	CVE-2025-12781	中危	3.13.5-2+deb13u4		cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32
libpython3.13-stdlib	CVE-2025-15366	中危	3.13.5-2+deb13u4		cpython: IMAP command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16
libpython3.13-stdlib	CVE-2025-15367	中危	3.13.5-2+deb13u4		cpython: POP3 command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
libpython3.13-stdlib	CVE-2026-0864	中危	3.13.5-2+deb13u4		python: cpython: Python configparser: Configuration injection via crafted multi-line input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-23 18:17 修改: 2026-08-06 01:16
libpython3.13-stdlib	CVE-2026-11972	中危	3.13.5-2+deb13u4		python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-23 23:16 修改: 2026-08-06 01:16
libpython3.13-stdlib	CVE-2026-4360	中危	3.13.5-2+deb13u4		python: Python Tarfile: Unexpected file ownership when extracting hardlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-30 15:16 修改: 2026-08-06 01:16
libblkid1	CVE-2026-13595	中危	2.41-5		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libsmartcols1	CVE-2026-13595	中危	2.41-5		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libsmartcols1	CVE-2026-27456	中危	2.41-5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsmartcols1	CVE-2026-3184	中危	2.41-5		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
libsqlite3-0	CVE-2026-11822	中危	3.46.1-7+deb13u1		SQLite before 3.53.2 contains memory corruption vulnerabilities in the ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libsqlite3-0	CVE-2026-11824	中危	3.46.1-7+deb13u1		SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libsqlite3-0	CVE-2026-50812	中危	3.46.1-7+deb13u1		A NULL pointer dereference in the SQLite Session Extension in SQLite 3 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50812 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libsqlite3-0	CVE-2026-50813	中危	3.46.1-7+deb13u1		An issue in SQLite before Fossil check-in 869a51ae84df allows a local ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50813 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libssh2-1t64	CVE-2026-66032	中危	1.11.1-1+deb13u1		libssh2: libssh2: Arbitrary code execution via double-free in SFTP session 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66032 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-24 17:17 修改: 2026-08-07 01:07
libssh2-1t64	CVE-2026-66033	中危	1.11.1-1+deb13u1		libssh2: libssh2: Denial of Service via integer underflow in AES-GCM cipher negotiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66033 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:44
libssh2-1t64	CVE-2026-66034	中危	1.11.1-1+deb13u1		libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66034 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:44
libssh2-1t64	CVE-2026-66035	中危	1.11.1-1+deb13u1		libssh2: libssh2: Arbitrary code execution via heap buffer overflow during SSH negotiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66035 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:41
libblkid1	CVE-2026-27456	中危	2.41-5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1	CVE-2026-3184	中危	2.41-5		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
libuuid1	CVE-2026-13595	中危	2.41-5		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libuuid1	CVE-2026-27456	中危	2.41-5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1	CVE-2026-3184	中危	2.41-5		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
libbz2-1.0	CVE-2026-42250	中危	1.0.8-6		bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
login	CVE-2026-13595	中危	1:4.16.0-2+really2.41-5		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
login	CVE-2026-27456	中危	1:4.16.0-2+really2.41-5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
login	CVE-2026-3184	中危	1:4.16.0-2+really2.41-5		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
libc-bin	CVE-2026-5435	中危	2.41-12+deb13u3		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
mount	CVE-2026-13595	中危	2.41-5		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
mount	CVE-2026-27456	中危	2.41-5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount	CVE-2026-3184	中危	2.41-5		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
libc-bin	CVE-2026-5450	中危	2.41-12+deb13u3		glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin	CVE-2026-5928	中危	2.41-12+deb13u3		glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin	CVE-2026-6238	中危	2.41-12+deb13u3		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6	CVE-2026-5435	中危	2.41-12+deb13u3		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6	CVE-2026-5450	中危	2.41-12+deb13u3		glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-5928	中危	2.41-12+deb13u3		glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-6238	中危	2.41-12+deb13u3		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
curl	CVE-2026-10536	中危	8.14.1-2+deb13u4		libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
curl	CVE-2026-11856	中危	8.14.1-2+deb13u4		curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
curl	CVE-2026-8924	中危	8.14.1-2+deb13u4		curl: curl: Cookie injection via malicious HTTP server using super cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
perl	CVE-2025-15649	中危	5.40.1-6		perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl	CVE-2026-12087	中危	5.40.1-6		perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl	CVE-2026-48959	中危	5.40.1-6		perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl	CVE-2026-48961	中危	5.40.1-6		perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl	CVE-2026-7010	中危	5.40.1-6		HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01
curl	CVE-2026-8926	中危	8.14.1-2+deb13u4		curl: curl: Information disclosure via incorrect .netrc password lookup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
libcurl3t64-gnutls	CVE-2026-10536	中危	8.14.1-2+deb13u4		libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
libcurl3t64-gnutls	CVE-2026-11856	中危	8.14.1-2+deb13u4		curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl3t64-gnutls	CVE-2026-8924	中危	8.14.1-2+deb13u4		curl: curl: Cookie injection via malicious HTTP server using super cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
libcurl3t64-gnutls	CVE-2026-8926	中危	8.14.1-2+deb13u4		curl: curl: Information disclosure via incorrect .netrc password lookup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
libcurl3t64-gnutls	CVE-2026-8932	中危	8.14.1-2+deb13u4		libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
libcurl3t64-gnutls	CVE-2026-9079	中危	8.14.1-2+deb13u4		libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
libcurl3t64-gnutls	CVE-2026-9080	中危	8.14.1-2+deb13u4		libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
perl-base	CVE-2025-15649	中危	5.40.1-6		perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base	CVE-2026-12087	中危	5.40.1-6		perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl-base	CVE-2026-48959	中危	5.40.1-6		perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base	CVE-2026-48961	中危	5.40.1-6		perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base	CVE-2026-7010	中危	5.40.1-6		HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01
libcurl3t64-gnutls	CVE-2026-9545	中危	8.14.1-2+deb13u4		libcurl: libcurl: Information disclosure via cached SSL session and early data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
curl	CVE-2026-8932	中危	8.14.1-2+deb13u4		libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
curl	CVE-2026-9079	中危	8.14.1-2+deb13u4		libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
curl	CVE-2026-9080	中危	8.14.1-2+deb13u4		libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
curl	CVE-2026-9545	中危	8.14.1-2+deb13u4		libcurl: libcurl: Information disclosure via cached SSL session and early data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
libcurl4t64	CVE-2026-10536	中危	8.14.1-2+deb13u4		libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
libcurl4t64	CVE-2026-11856	中危	8.14.1-2+deb13u4		curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl4t64	CVE-2026-8924	中危	8.14.1-2+deb13u4		curl: curl: Cookie injection via malicious HTTP server using super cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
perl-modules-5.40	CVE-2025-15649	中危	5.40.1-6		perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-modules-5.40	CVE-2026-12087	中危	5.40.1-6		perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl-modules-5.40	CVE-2026-48959	中危	5.40.1-6		perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-modules-5.40	CVE-2026-48961	中危	5.40.1-6		perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-modules-5.40	CVE-2026-7010	中危	5.40.1-6		HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01
libcurl4t64	CVE-2026-8926	中危	8.14.1-2+deb13u4		curl: curl: Information disclosure via incorrect .netrc password lookup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
python3-cryptography	CVE-2026-34073	中危	43.0.0-3+deb13u1		python-cryptography: Cryptography: Security bypass due to improper DNS name constraint validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34073 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
python3-cryptography	CVE-2026-69248	中危	43.0.0-3+deb13u1		cryptography is a package designed to expose cryptographic primitives ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69248 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-08-03 22:16 修改: 2026-08-04 16:16
python3-requests	CVE-2026-25645	中危	2.32.3+dfsg-5+deb13u1		requests: Requests: Security bypass due to predictable temporary file creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25
libcurl4t64	CVE-2026-8932	中危	8.14.1-2+deb13u4		libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
python3-urllib3	CVE-2026-9375	中危	2.3.0-3+deb13u2		urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9375 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-19 19:16 修改: 2026-06-22 19:49
libcurl4t64	CVE-2026-9079	中危	8.14.1-2+deb13u4		libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
libcurl4t64	CVE-2026-9080	中危	8.14.1-2+deb13u4		libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
libcurl4t64	CVE-2026-9545	中危	8.14.1-2+deb13u4		libcurl: libcurl: Information disclosure via cached SSL session and early data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
python3.13	CVE-2025-12781	中危	3.13.5-2+deb13u4		cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32
python3.13	CVE-2025-15366	中危	3.13.5-2+deb13u4		cpython: IMAP command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16
python3.13	CVE-2025-15367	中危	3.13.5-2+deb13u4		cpython: POP3 command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
python3.13	CVE-2026-0864	中危	3.13.5-2+deb13u4		python: cpython: Python configparser: Configuration injection via crafted multi-line input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-23 18:17 修改: 2026-08-06 01:16
python3.13	CVE-2026-11972	中危	3.13.5-2+deb13u4		python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-23 23:16 修改: 2026-08-06 01:16
python3.13	CVE-2026-4360	中危	3.13.5-2+deb13u4		python: Python Tarfile: Unexpected file ownership when extracting hardlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-30 15:16 修改: 2026-08-06 01:16
libexpat1	CVE-2025-66382	中危	2.8.2-1~deb13u1		libexpat: libexpat: Denial of service via crafted file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
bsdutils	CVE-2026-13595	中危	1:2.41-5		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
libjq1	CVE-2024-53427	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: stack-buffer-overflow in the decNumberCopy function in decNumber.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53427 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2025-02-26 16:15 修改: 2026-06-17 08:08
python3.13-minimal	CVE-2025-12781	中危	3.13.5-2+deb13u4		cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-21 20:16 修改: 2026-06-17 08:32
python3.13-minimal	CVE-2025-15366	中危	3.13.5-2+deb13u4		cpython: IMAP command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16
python3.13-minimal	CVE-2025-15367	中危	3.13.5-2+deb13u4		cpython: POP3 command injection in user-controlled commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
python3.13-minimal	CVE-2026-0864	中危	3.13.5-2+deb13u4		python: cpython: Python configparser: Configuration injection via crafted multi-line input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-23 18:17 修改: 2026-08-06 01:16
python3.13-minimal	CVE-2026-11972	中危	3.13.5-2+deb13u4		python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-23 23:16 修改: 2026-08-06 01:16
python3.13-minimal	CVE-2026-4360	中危	3.13.5-2+deb13u4		python: Python Tarfile: Unexpected file ownership when extracting hardlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-30 15:16 修改: 2026-08-06 01:16
sqlite3	CVE-2026-11822	中危	3.46.1-7+deb13u1		SQLite before 3.53.2 contains memory corruption vulnerabilities in the ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
sqlite3	CVE-2026-11824	中危	3.46.1-7+deb13u1		SQLite before 3.53.2 contains a heap-based buffer overflow vulnerabili ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
sqlite3	CVE-2026-50812	中危	3.46.1-7+deb13u1		A NULL pointer dereference in the SQLite Session Extension in SQLite 3 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50812 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
sqlite3	CVE-2026-50813	中危	3.46.1-7+deb13u1		An issue in SQLite before Fossil check-in 869a51ae84df allows a local ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50813 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
tar	CVE-2026-18477	中危	1.35+dfsg-3.1		tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-08-03 17:16 修改: 2026-08-05 08:16
tar	CVE-2026-18508	中危	1.35+dfsg-3.1		tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-08-03 16:16 修改: 2026-08-07 13:16
tar	CVE-2026-5704	中危	1.35+dfsg-3.1		tar: tar: Hidden file injection via crafted archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59
libjq1	CVE-2026-40612	中危	1.7.1-6+deb13u2	1.7.1-6+deb13u3	jq: stack overflow via unbounded recursion in jv_contains 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40612 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:45
util-linux	CVE-2026-13595	中危	2.41-5		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-06-29 09:16 修改: 2026-07-08 03:37
util-linux	CVE-2026-27456	中危	2.41-5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
util-linux	CVE-2026-3184	中危	2.41-5		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-03 19:17 修改: 2026-07-21 19:10
zlib1g	CVE-2026-27171	中危	1:1.3.dfsg+really1.3.1-1+b1		zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
libsystemd-shared	CVE-2023-31437	低危	257.13-1~deb13u1		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd-shared	CVE-2023-31438	低危	257.13-1~deb13u1		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd-shared	CVE-2023-31439	低危	257.13-1~deb13u1		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd-shared	CVE-2026-40228	低危	257.13-1~deb13u1		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libsystemd0	CVE-2013-4392	低危	257.13-1~deb13u1		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libsystemd0	CVE-2023-31437	低危	257.13-1~deb13u1		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2023-31438	低危	257.13-1~deb13u1		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2023-31439	低危	257.13-1~deb13u1		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2026-40228	低危	257.13-1~deb13u1		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libkrb5-3	CVE-2024-26458	低危	1.21.3-5+deb13u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libtinfo6	CVE-2025-6141	低危	6.5+20250216-2		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libudev1	CVE-2013-4392	低危	257.13-1~deb13u1		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libudev1	CVE-2023-31437	低危	257.13-1~deb13u1		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2023-31438	低危	257.13-1~deb13u1		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2023-31439	低危	257.13-1~deb13u1		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2026-40228	低危	257.13-1~deb13u1		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libkrb5-3	CVE-2024-26461	低危	1.21.3-5+deb13u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5-3	CVE-2026-11850	低危	1.21.3-5+deb13u1		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libkrb5support0	CVE-2018-5709	低危	1.21.3-5+deb13u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libkrb5support0	CVE-2024-26458	低危	1.21.3-5+deb13u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libuuid1	CVE-2022-0563	低危	2.41-5		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libuuid1	CVE-2025-14104	低危	2.41-5		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libkrb5support0	CVE-2024-26461	低危	1.21.3-5+deb13u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5support0	CVE-2026-11850	低危	1.21.3-5+deb13u1		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libc6	CVE-2019-9192	低危	2.41-12+deb13u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
curl	CVE-2025-15079	低危	8.14.1-2+deb13u4		curl: Host verification bypass during SSH transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
login	CVE-2022-0563	低危	1:4.16.0-2+really2.41-5		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
login	CVE-2025-14104	低危	1:4.16.0-2+really2.41-5		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
login.defs	CVE-2007-5686	低危	1:4.17.4-2		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35
login.defs	CVE-2024-56433	低危	1:4.17.4-2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
login.defs	TEMP-0628843-DBAD28	低危	1:4.17.4-2		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl	CVE-2025-15224	低危	8.14.1-2+deb13u4		curl: libssh key passphrase bypass without agent set 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
curl	CVE-2026-9547	低危	8.14.1-2+deb13u4		curl: curl: Man-in-the-middle attack via SSH host key bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
liblastlog2-2	CVE-2022-0563	低危	2.41-5		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
liblastlog2-2	CVE-2025-14104	低危	2.41-5		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
mount	CVE-2022-0563	低危	2.41-5		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
mount	CVE-2025-14104	低危	2.41-5		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libldap2	CVE-2015-3276	低危	2.6.10+dfsg-1		openldap: incorrect multi-keyword mode cipherstring parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3276 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2015-12-07 20:59 修改: 2026-05-06 22:30
ncurses-base	CVE-2025-6141	低危	6.5+20250216-2		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libldap2	CVE-2017-14159	低危	2.6.10+dfsg-1		openldap: Privilege escalation via PID file manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14159 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2017-09-05 18:29 修改: 2026-06-17 01:05
ncurses-bin	CVE-2025-6141	低危	6.5+20250216-2		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
passwd	CVE-2007-5686	低危	1:4.17.4-2		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35
passwd	CVE-2024-56433	低危	1:4.17.4-2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
passwd	TEMP-0628843-DBAD28	低危	1:4.17.4-2		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libldap2	CVE-2017-17740	低危	2.6.10+dfsg-1		openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17740 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2017-12-18 06:29 修改: 2026-06-17 01:11
libldap2	CVE-2020-15719	低危	2.6.10+dfsg-1		openldap: Certificate validation incorrectly matches name against CN-ID 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15719 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2020-07-14 14:15 修改: 2026-06-17 02:57
libldap2	CVE-2026-22185	低危	2.6.10+dfsg-1		OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22185 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-07 21:16 修改: 2026-06-17 10:19
diffutils	CVE-2026-53910	低危	1:3.10-4		diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
jq	CVE-2025-9403	低危	1.7.1-6+deb13u2		jq: assertion failure in run_jq_tests() of the file jq_test.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9403 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2025-08-25 03:15 修改: 2026-06-17 10:08
git	CVE-2018-1000021	低危	1:2.47.3-0+deb13u1		git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000021 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2018-02-09 23:29 修改: 2026-06-17 01:32
git	CVE-2022-24975	低危	1:2.47.3-0+deb13u1		git: The --mirror option for git leaks secret for deleted content, aka the "GitBleed" 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24975 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2022-02-11 20:15 修改: 2026-06-17 04:32
libmount1	CVE-2022-0563	低危	2.41-5		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libmount1	CVE-2025-14104	低危	2.41-5		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libapt-pkg7.0	CVE-2011-3374	低危	3.0.3		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30
libncursesw6	CVE-2025-6141	低危	6.5+20250216-2		gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
git	CVE-2024-52005	低危	1:2.47.3-0+deb13u1		git: The sideband payload is passed unfiltered to the terminal in git 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
git-man	CVE-2018-1000021	低危	1:2.47.3-0+deb13u1		git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000021 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2018-02-09 23:29 修改: 2026-06-17 01:32
perl	CVE-2011-4116	低危	5.40.1-6		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04
git-man	CVE-2022-24975	低危	1:2.47.3-0+deb13u1		git: The --mirror option for git leaks secret for deleted content, aka the "GitBleed" 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24975 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2022-02-11 20:15 修改: 2026-06-17 04:32
git-man	CVE-2024-52005	低危	1:2.47.3-0+deb13u1		git: The sideband payload is passed unfiltered to the terminal in git 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
libcurl3t64-gnutls	CVE-2025-10966	低危	8.14.1-2+deb13u4		curl: Curl missing SFTP host verification with wolfSSH backend 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10966 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2025-11-07 08:15 修改: 2026-06-17 08:29
libcurl3t64-gnutls	CVE-2025-14017	低危	8.14.1-2+deb13u4		curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
libcurl3t64-gnutls	CVE-2025-15079	低危	8.14.1-2+deb13u4		curl: Host verification bypass during SSH transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl3t64-gnutls	CVE-2025-15224	低危	8.14.1-2+deb13u4		curl: libssh key passphrase bypass without agent set 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl3t64-gnutls	CVE-2026-9547	低危	8.14.1-2+deb13u4		curl: curl: Man-in-the-middle attack via SSH host key bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
coreutils	CVE-2017-18018	低危	9.7-3		coreutils: race condition vulnerability in chown and chgrp 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2018-01-04 04:29 修改: 2026-06-17 01:12
libblkid1	CVE-2022-0563	低危	2.41-5		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libblkid1	CVE-2025-14104	低危	2.41-5		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
coreutils	CVE-2025-5278	低危	9.7-3		coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-05-27 21:15 修改: 2026-08-09 18:16
coreutils	CVE-2026-56391	低危	9.7-3		coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56391 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28
coreutils	CVE-2026-56392	低危	9.7-3		coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56392 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28
perl-base	CVE-2011-4116	低危	5.40.1-6		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04
bash	TEMP-0841856-B18BAF	低危	5.2.37-2+b9		[Privilege escalation possible to other user than root] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils	CVE-2022-0563	低危	1:2.41-5		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libc-bin	CVE-2010-4756	低危	2.41-12+deb13u3		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc-bin	CVE-2018-20796	低危	2.41-12+deb13u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libc-bin	CVE-2019-1010022	低危	2.41-12+deb13u3		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libperl5.40	CVE-2011-4116	低危	5.40.1-6		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04
libpopt0	CVE-2026-18739	低危	1.19+dfsg-2		popt-devel: popt-static: Off-by-one in poptStuffArgs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18739 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-08-04 06:16 修改: 2026-08-06 15:37
libpopt0	CVE-2026-18839	低危	1.19+dfsg-2		popt-devel: popt-static: size_t underflow in singleOptionHelp 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18839 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-08-05 21:16 修改: 2026-08-06 15:37
libc-bin	CVE-2019-1010023	低危	2.41-12+deb13u3		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libcurl4t64	CVE-2025-10966	低危	8.14.1-2+deb13u4		curl: Curl missing SFTP host verification with wolfSSH backend 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10966 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2025-11-07 08:15 修改: 2026-06-17 08:29
libcurl4t64	CVE-2025-14017	低危	8.14.1-2+deb13u4		curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
libcurl4t64	CVE-2025-15079	低危	8.14.1-2+deb13u4		curl: Host verification bypass during SSH transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl4t64	CVE-2025-15224	低危	8.14.1-2+deb13u4		curl: libssh key passphrase bypass without agent set 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
perl-modules-5.40	CVE-2011-4116	低危	5.40.1-6		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04
libcurl4t64	CVE-2026-9547	低危	8.14.1-2+deb13u4		curl: curl: Man-in-the-middle attack via SSH host key bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
libc-bin	CVE-2019-1010024	低危	2.41-12+deb13u3		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libgnutls30t64	CVE-2011-3389	低危	3.8.9-3+deb13u4		HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3389 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2011-09-06 19:55 修改: 2026-04-29 01:13
libgssapi-krb5-2	CVE-2018-5709	低危	1.21.3-5+deb13u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libpython3.13-minimal	CVE-2026-12003	低危	3.13.5-2+deb13u4		To allow builds of Python to be run from an in-tree layout (rather tha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12003 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-16 17:16 修改: 2026-08-06 01:16
libpython3.13-minimal	CVE-2026-3479	低危	3.13.5-2+deb13u4		python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
libpython3.13-minimal	CVE-2026-6879	低危	3.13.5-2+deb13u4		python: Python: Performance degradation in XML processing due to quadratic time complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-28 15:17 修改: 2026-08-06 01:16
libgssapi-krb5-2	CVE-2024-26458	低危	1.21.3-5+deb13u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libgssapi-krb5-2	CVE-2024-26461	低危	1.21.3-5+deb13u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libgssapi-krb5-2	CVE-2026-11850	低危	1.21.3-5+deb13u1		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libc-bin	CVE-2019-1010025	低危	2.41-12+deb13u3		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc-bin	CVE-2019-9192	低危	2.41-12+deb13u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
bsdutils	CVE-2025-14104	低危	1:2.41-5		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
apt	CVE-2011-3374	低危	3.0.3		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30
curl	CVE-2025-10966	低危	8.14.1-2+deb13u4		curl: Curl missing SFTP host verification with wolfSSH backend 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10966 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2025-11-07 08:15 修改: 2026-06-17 08:29
python3.13	CVE-2026-12003	低危	3.13.5-2+deb13u4		To allow builds of Python to be run from an in-tree layout (rather tha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12003 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-16 17:16 修改: 2026-08-06 01:16
python3.13	CVE-2026-3479	低危	3.13.5-2+deb13u4		python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
python3.13	CVE-2026-6879	低危	3.13.5-2+deb13u4		python: Python: Performance degradation in XML processing due to quadratic time complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-28 15:17 修改: 2026-08-06 01:16
curl	CVE-2025-14017	低危	8.14.1-2+deb13u4		curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
libpython3.13-stdlib	CVE-2026-12003	低危	3.13.5-2+deb13u4		To allow builds of Python to be run from an in-tree layout (rather tha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12003 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-16 17:16 修改: 2026-08-06 01:16
libpython3.13-stdlib	CVE-2026-3479	低危	3.13.5-2+deb13u4		python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
libpython3.13-stdlib	CVE-2026-6879	低危	3.13.5-2+deb13u4		python: Python: Performance degradation in XML processing due to quadratic time complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-28 15:17 修改: 2026-08-06 01:16
libc6	CVE-2010-4756	低危	2.41-12+deb13u3		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc6	CVE-2018-20796	低危	2.41-12+deb13u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libc6	CVE-2019-1010022	低危	2.41-12+deb13u3		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010023	低危	2.41-12+deb13u3		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libsmartcols1	CVE-2022-0563	低危	2.41-5		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
python3.13-minimal	CVE-2026-12003	低危	3.13.5-2+deb13u4		To allow builds of Python to be run from an in-tree layout (rather tha ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12003 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-16 17:16 修改: 2026-08-06 01:16
python3.13-minimal	CVE-2026-3479	低危	3.13.5-2+deb13u4		python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-03-18 19:16 修改: 2026-06-17 10:43
python3.13-minimal	CVE-2026-6879	低危	3.13.5-2+deb13u4		python: Python: Performance degradation in XML processing due to quadratic time complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-28 15:17 修改: 2026-08-06 01:16
libsmartcols1	CVE-2025-14104	低危	2.41-5		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libc6	CVE-2019-1010024	低危	2.41-12+deb13u3		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010025	低危	2.41-12+deb13u3		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libjq1	CVE-2025-9403	低危	1.7.1-6+deb13u2		jq: assertion failure in run_jq_tests() of the file jq_test.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9403 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2025-08-25 03:15 修改: 2026-06-17 10:08
sqlite3	CVE-2021-45346	低危	3.46.1-7+deb13u1		sqlite: crafted SQL query allows a malicious user to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2022-02-14 19:15 修改: 2026-06-17 04:13
sqlite3	CVE-2025-70873	低危	3.46.1-7+deb13u1		sqlite: SQLite: Information Disclosure via Crafted ZIP File 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-03-12 19:16 修改: 2026-06-17 10:03
systemd	CVE-2013-4392	低危	257.13-1~deb13u1		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
systemd	CVE-2023-31437	低危	257.13-1~deb13u1		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
systemd	CVE-2023-31438	低危	257.13-1~deb13u1		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
systemd	CVE-2023-31439	低危	257.13-1~deb13u1		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
systemd	CVE-2026-40228	低危	257.13-1~deb13u1		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
sysvinit-utils	TEMP-0517018-A83CE6	低危	3.14-4		[sysvinit: no-root option in expert installer exposes locally exploitable security flaw] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libk5crypto3	CVE-2018-5709	低危	1.21.3-5+deb13u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libsqlite3-0	CVE-2021-45346	低危	3.46.1-7+deb13u1		sqlite: crafted SQL query allows a malicious user to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2022-02-14 19:15 修改: 2026-06-17 04:13
libsqlite3-0	CVE-2025-70873	低危	3.46.1-7+deb13u1		sqlite: SQLite: Information Disclosure via Crafted ZIP File 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-03-12 19:16 修改: 2026-06-17 10:03
tar	CVE-2005-2541	低危	1.35+dfsg-3.1		tar: does not properly warn the user when extracting setuid or setgid files 漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2005-08-10 04:00 修改: 2026-04-16 00:27
tar	TEMP-0290435-0B57B5	低危	1.35+dfsg-3.1		[tar's rmt command may have undesired side effects] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libk5crypto3	CVE-2024-26458	低危	1.21.3-5+deb13u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libk5crypto3	CVE-2024-26461	低危	1.21.3-5+deb13u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libk5crypto3	CVE-2026-11850	低危	1.21.3-5+deb13u1		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-06-11 10:16 修改: 2026-06-17 10:14
libkrb5-3	CVE-2018-5709	低危	1.21.3-5+deb13u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
util-linux	CVE-2022-0563	低危	2.41-5		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
util-linux	CVE-2025-14104	低危	2.41-5		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
libsystemd-shared	CVE-2013-4392	低危	257.13-1~deb13u1		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libuuid1	CVE-2026-53613	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1	CVE-2026-53614	未知	2.41-5		[Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1	CVE-2026-53612	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6	CVE-2026-6791	未知	2.41-12+deb13u3		[Fix stack overflow in wordexp tilde expansion] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1	CVE-2026-53613	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1	CVE-2026-53614	未知	2.41-5		[Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1	CVE-2026-53612	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1	CVE-2026-53613	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login	CVE-2026-53612	未知	1:4.16.0-2+really2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login	CVE-2026-53613	未知	1:4.16.0-2+really2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login	CVE-2026-53614	未知	1:4.16.0-2+really2.41-5		[Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1	CVE-2026-53614	未知	2.41-5		[Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libperl5.40	CVE-2026-15534	未知	5.40.1-6		Perl versions through 5.45.1 have out-of-bounds heap reads and writes ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-08-09 18:16 修改: 2026-08-09 22:16
libperl5.40	CVE-2026-7017	未知	5.40.1-6		HTTP::Tiny versions before 0.095 for Perl forward credential headers t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
perl-modules-5.40	CVE-2026-15534	未知	5.40.1-6		Perl versions through 5.45.1 have out-of-bounds heap reads and writes ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-08-09 18:16 修改: 2026-08-09 22:16
perl-modules-5.40	CVE-2026-7017	未知	5.40.1-6		HTTP::Tiny versions before 0.095 for Perl forward credential headers t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
libc-bin	CVE-2026-6791	未知	2.41-12+deb13u3		[Fix stack overflow in wordexp tilde expansion] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
perl	CVE-2026-15534	未知	5.40.1-6		Perl versions through 5.45.1 have out-of-bounds heap reads and writes ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-08-09 18:16 修改: 2026-08-09 22:16
perl	CVE-2026-7017	未知	5.40.1-6		HTTP::Tiny versions before 0.095 for Perl forward credential headers t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
libexpat1	CVE-2026-72522	未知	2.8.2-1~deb13u1		libexpat before 2.8.3 has an out-of-bounds read and resultant infinite ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522 镜像层: sha256:dac075adbee3930bd47762125da66ec87f204d8281bc913b902c989bcb100409 发布日期: 2026-08-10 04:16 修改: 2026-08-10 04:16
liblastlog2-2	CVE-2026-53612	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
liblastlog2-2	CVE-2026-53613	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1	CVE-2026-53612	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1	CVE-2026-53613	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount	CVE-2026-53612	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount	CVE-2026-53613	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount	CVE-2026-53614	未知	2.41-5		[Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1	CVE-2026-53614	未知	2.41-5		[Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
liblastlog2-2	CVE-2026-53614	未知	2.41-5		[Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils	CVE-2026-53612	未知	1:2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils	CVE-2026-53613	未知	1:2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils	CVE-2026-53614	未知	1:2.41-5		[Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1	CVE-2026-53612	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
perl-base	CVE-2026-15534	未知	5.40.1-6		Perl versions through 5.45.1 have out-of-bounds heap reads and writes ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-08-09 18:16 修改: 2026-08-09 22:16
util-linux	CVE-2026-53612	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux	CVE-2026-53613	未知	2.41-5		[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux	CVE-2026-53614	未知	2.41-5		[Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
perl-base	CVE-2026-7017	未知	5.40.1-6		HTTP::Tiny versions before 0.095 for Perl forward credential headers t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017 镜像层: sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035 发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

Node.js (node-pkg)

低危漏洞:9

中危漏洞:26

高危漏洞:47

严重漏洞:3

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
liquidjs	CVE-2026-45618	严重	10.6.1	10.26.0	LiquidJS is Vulnerable to Remote Code Execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45618 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tar	CVE-2026-59873	严重	4.4.19	7.5.19	tar: node-tar: Denial of Service via crafted gzip bomb 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar	CVE-2026-59873	严重	6.1.13	7.5.19	tar: node-tar: Denial of Service via crafted gzip bomb 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
ansi-regex	CVE-2021-3807	高危	5.0.0	6.0.1, 5.0.1, 4.1.1, 3.0.1	nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3807 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2021-09-17 07:15 修改: 2026-06-17 04:05
brace-expansion	CVE-2026-13149	高危	1.1.12	5.0.7, 1.1.16, 2.1.2	brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion	CVE-2026-14257	高危	1.1.12	5.0.8, 3.0.3, 2.1.3, 1.1.17	brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion	CVE-2026-69152	高危	1.1.12	1.1.18, 2.1.4, 3.0.6, 5.0.9	brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
dicer	CVE-2022-24434	高危	0.3.0		dicer: nodejs service crash by sending a crafted payload 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24434 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2022-05-20 20:15 修改: 2026-06-17 04:31
express-fileupload	CVE-2022-27261	高危	1.1.9		Express-FileUpload Arbitrary File Overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27261 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2022-04-12 17:15 修改: 2026-06-17 04:36
fast-uri	CVE-2026-13676	高危	3.0.2	4.0.1, 3.1.3, 2.4.2	fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13676 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-06-29 14:16 修改: 2026-08-10 13:17
fast-uri	CVE-2026-16221	高危	3.0.2	2.4.3, 3.1.4, 4.1.1	Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16221 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-19 15:16 修改: 2026-08-05 19:46
fast-uri	CVE-2026-18446	高危	3.0.2	2.4.4, 3.1.5, 4.1.2	fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18446 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-31 15:16 修改: 2026-07-31 18:17
fast-uri	CVE-2026-6321	高危	3.0.2	3.1.1, 2.4.1	fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6321 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-05-04 20:16 修改: 2026-07-21 12:19
fast-uri	CVE-2026-6322	高危	3.0.2	3.1.2, 2.4.1	fast-uri: fast-uri: URI authority bypass due to improper delimiter handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6322 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-05-05 11:16 修改: 2026-08-10 13:20
ip	CVE-2024-29415	高危	2.0.1		node-ip: Incomplete fix for CVE-2023-42282 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29415 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2024-05-27 20:15 修改: 2026-06-17 07:22
js-yaml	CVE-2026-59869	高危	4.1.0	3.15.0, 4.3.0	js-yaml: js-yaml: Denial of Service via crafted YAML documents 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59869 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-08 16:16 修改: 2026-07-13 15:05
js-yaml	GHSA-5p4m-2wfm-xmqj	高危	4.1.0	4.3.1, 3.15.1	JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported 漏洞详情: https://github.com/advisories/GHSA-5p4m-2wfm-xmqj 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-08-06 20:27 修改: 2026-08-06 20:27
jws	CVE-2025-65945	高危	3.2.2	3.2.3, 4.0.1	node-jws: auth0/node-jws: Improper signature verification in HS256 algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65945 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2025-12-04 19:16 修改: 2026-07-24 20:20
ansi-regex	CVE-2021-3807	高危	3.0.0	6.0.1, 5.0.1, 4.1.1, 3.0.1	nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3807 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2021-09-17 07:15 修改: 2026-06-17 04:05
liquidjs	CVE-2026-30952	高危	10.6.1	10.25.0	liquidjs has a path traversal fallback vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-30952 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-03-10 21:16 修改: 2026-06-17 10:33
liquidjs	CVE-2026-33285	高危	10.6.1		LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33285 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-03-26 01:16 修改: 2026-06-17 10:37
liquidjs	CVE-2026-33287	高危	10.6.1		LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33287 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-03-26 01:16 修改: 2026-06-17 10:37
liquidjs	CVE-2026-35525	高危	10.6.1	10.25.3	LiquidJS: Root restriction bypass for partial and layout loading through symlinked templates 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35525 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-04-08 20:16 修改: 2026-07-24 21:10
liquidjs	CVE-2026-41311	高危	10.6.1	10.25.7	liquidjs has a Denial of Service via circular block reference in layout 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41311 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-05-09 04:16 修改: 2026-07-24 21:10
liquidjs	CVE-2026-45357	高危	10.6.1		LiquidJS has a memory and render limit bypass via unbounded width padding in `date` filter (strftime) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45357 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-06-17 23:17 修改: 2026-06-22 18:27
liquidjs	CVE-2026-45617	高危	10.6.1	10.26.0	LiquidJS Vulnerable to ReDoS via Quadratic Backtracking in `strip_html` Filter Regex 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45617 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-06-17 23:17 修改: 2026-06-22 18:27
liquidjs	CVE-2026-55575	高危	10.6.1	10.27.1	LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55575 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-08 20:16 修改: 2026-07-10 19:06
lodash	CVE-2026-4800	高危	4.17.21	4.18.0	lodash: lodash: Arbitrary code execution via untrusted input in template imports 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4800 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-03-31 20:16 修改: 2026-08-10 13:19
minimatch	CVE-2022-3517	高危	3.0.4	3.0.5	nodejs-minimatch: ReDoS via the braceExpand function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3517 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2022-10-17 20:15 修改: 2026-06-17 04:59
minimatch	CVE-2026-26996	高危	3.0.4	10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3	minimatch: minimatch: Denial of Service via specially crafted glob patterns 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch	CVE-2026-27903	高危	3.0.4	10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3	minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch	CVE-2026-27904	高危	3.0.4	10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4	minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
path-to-regexp	CVE-2024-52798	高危	0.1.10	0.1.12	path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52798 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2024-12-05 23:15 修改: 2026-06-17 08:07
path-to-regexp	CVE-2026-4867	高危	0.1.10	0.1.13	path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4867 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:57
ansi-regex	CVE-2021-3807	高危	5.0.0	6.0.1, 5.0.1, 4.1.1, 3.0.1	nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3807 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2021-09-17 07:15 修改: 2026-06-17 04:05
tar	CVE-2026-23745	高危	4.4.19	7.5.3	node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-01-16 22:16 修改: 2026-08-10 13:18
tar	CVE-2026-23950	高危	4.4.19	7.5.4	node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18
tar	CVE-2026-24842	高危	4.4.19	7.5.7	node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-01-28 01:16 修改: 2026-08-10 13:18
tar	CVE-2026-26960	高危	4.4.19	7.5.8	node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar	CVE-2026-29786	高危	4.4.19	7.5.10	node-tar: hardlink path traversal via drive-relative linkpath 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19
tar	CVE-2026-31802	高危	4.4.19	7.5.11	tar: tar: File overwrite via drive-relative symlink traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar	CVE-2026-59874	高危	4.4.19	7.5.18	tar: Node-tar: Denial of Service via malformed tar archive header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
ansi-regex	CVE-2021-3807	高危	5.0.0	6.0.1, 5.0.1, 4.1.1, 3.0.1	nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3807 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2021-09-17 07:15 修改: 2026-06-17 04:05
tar	CVE-2026-23745	高危	6.1.13	7.5.3	node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-01-16 22:16 修改: 2026-08-10 13:18
tar	CVE-2026-23950	高危	6.1.13	7.5.4	node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-01-20 01:15 修改: 2026-07-15 02:18
tar	CVE-2026-24842	高危	6.1.13	7.5.7	node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-01-28 01:16 修改: 2026-08-10 13:18
tar	CVE-2026-26960	高危	6.1.13	7.5.8	node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-02-20 02:16 修改: 2026-06-17 10:26
tar	CVE-2026-29786	高危	6.1.13	7.5.10	node-tar: hardlink path traversal via drive-relative linkpath 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-03-07 16:15 修改: 2026-07-15 02:19
tar	CVE-2026-31802	高危	6.1.13	7.5.11	tar: tar: File overwrite via drive-relative symlink traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-03-10 07:44 修改: 2026-06-17 10:34
tar	CVE-2026-59874	高危	6.1.13	7.5.18	tar: Node-tar: Denial of Service via malformed tar archive header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
liquidjs	CVE-2026-44645	中危	10.6.1		LiquidJS has a renderLimit DoS guard bypass via empty `{% for %}` body 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44645 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-06-17 23:17 修改: 2026-06-22 18:27
liquidjs	CVE-2026-44646	中危	10.6.1		LiquidJS's `{% render %}` tag silently bypasses per-render `ownPropertyOnly:true` via `Context.spawn()` 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44646 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-06-17 23:17 修改: 2026-06-22 18:27
ajv	CVE-2025-69873	中危	8.12.0	8.18.0, 6.14.0	ajv: ReDoS via $data reference 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-02-11 19:15 修改: 2026-08-10 13:17
lodash	CVE-2025-13465	中危	4.17.21	4.17.23	lodash: prototype pollution in _.unset and _.omit functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13465 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-01-21 20:16 修改: 2026-08-10 13:17
lodash	CVE-2026-2950	中危	4.17.21	4.18.0	lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2950 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-03-31 20:16 修改: 2026-07-24 20:10
brace-expansion	CVE-2026-33750	中危	1.1.12	5.0.5, 3.0.2, 2.0.3, 1.1.13	brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
ajv	CVE-2025-69873	中危	8.17.1	8.18.0, 6.14.0	ajv: ReDoS via $data reference 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69873 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-02-11 19:15 修改: 2026-08-10 13:17
tar	CVE-2024-28863	中危	4.4.19	6.2.1	node-tar: denial of service while parsing a tar file due to lack of folders depth validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28863 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2024-03-21 23:15 修改: 2026-06-17 07:21
tar	CVE-2026-53655	中危	4.4.19	7.5.16	node-tar: node-tar: File smuggling due to inconsistent tar archive parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar	CVE-2026-59871	中危	4.4.19	7.5.18	node-tar: node-tar: Denial of Service due to incorrect PAX path handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar	CVE-2026-59875	中危	4.4.19	7.5.17	node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar	GHSA-r292-9mhp-454m	中危	4.4.19	7.5.21	node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection 漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
js-yaml	CVE-2025-64718	中危	4.1.0	4.1.1, 3.14.2	js-yaml: js-yaml prototype pollution in merge 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64718 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2025-11-13 16:15 修改: 2026-06-17 09:55
js-yaml	CVE-2026-53550	中危	4.1.0	4.2.0, 3.15.0	js-yaml: js-yaml: Denial of Service via crafted YAML merge keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53550 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-06-22 16:16 修改: 2026-07-09 20:33
liquidjs	CVE-2026-39412	中危	10.6.1	10.25.4	LiquidJS: ownPropertyOnly bypass via sort_natural filter — prototype property information disclosure through sorting side-channel 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39412 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-04-08 20:16 修改: 2026-07-24 21:10
liquidjs	CVE-2026-39859	中危	10.6.1	10.25.5	LiquidJS: `renderFile()` / `parseFile()` bypass configured `root` and allow arbitrary file read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39859 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-04-08 20:16 修改: 2026-07-24 21:10
qs	CVE-2025-15284	中危	6.11.0	6.14.1	qs: qs: Denial of Service via improper input validation in array parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
qs	CVE-2025-15284	中危	6.13.0	6.14.1	qs: qs: Denial of Service via improper input validation in array parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15284 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2025-12-29 23:15 修改: 2026-06-17 08:37
qs	CVE-2026-8723	中危	6.13.0	6.15.2	### Summary `qs.stringify` throws `TypeError` when called with `arr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
liquidjs	CVE-2026-44644	中危	10.6.1		LiquidJS's strip_html filter bypass via newline characters in HTML tags enables XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44644 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-06-17 23:17 修改: 2026-06-22 18:27
tar	CVE-2024-28863	中危	6.1.13	6.2.1	node-tar: denial of service while parsing a tar file due to lack of folders depth validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28863 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2024-03-21 23:15 修改: 2026-06-17 07:21
tar	CVE-2026-53655	中危	6.1.13	7.5.16	node-tar: node-tar: File smuggling due to inconsistent tar archive parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar	CVE-2026-59871	中危	6.1.13	7.5.18	node-tar: node-tar: Denial of Service due to incorrect PAX path handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar	CVE-2026-59875	中危	6.1.13	7.5.17	node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar	GHSA-r292-9mhp-454m	中危	6.1.13	7.5.21	node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection 漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
uuid	CVE-2026-41907	中危	3.4.0	11.1.1, 12.0.1, 13.0.1	uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
on-headers	CVE-2025-7339	低危	1.0.2	1.1.0	on-headers: on-headers vulnerable to http response header manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7339 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2025-07-17 16:15 修改: 2026-06-17 10:04
body-parser	CVE-2026-12590	低危	1.20.3	1.20.6, 2.3.0	body-parser: body-parser: Denial of Service via invalid limit option 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
cookie	CVE-2024-47764	低危	0.6.0	0.7.0	cookie: cookie accepts cookie name, path, and domain with out of bounds characters 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47764 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2024-10-04 20:15 修改: 2026-06-17 07:57
liquidjs	CVE-2026-34166	低危	10.6.1	10.25.3	LiquidJS Has Memory Limit Bypass via Quadratic Amplification in `replace` Filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34166 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-04-08 19:25 修改: 2026-07-24 22:10
qs	CVE-2026-2391	低危	6.11.0	6.14.2	qs: qs's arrayLimit bypass in comma parsing allows denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
debug	CVE-2017-16137	低危	3.2.6	2.6.9, 3.1.0, 3.2.7, 4.3.1	nodejs-debug: Regular expression Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16137 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2018-06-07 02:29 修改: 2026-06-17 01:08
@tootallnate/once	CVE-2026-3449	低危	1.1.2	3.0.1, 2.0.1	@tootallnate/once: @tootallnate/once: Denial of Service due to incorrect control flow scoping with AbortSignal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3449 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-03-03 05:17 修改: 2026-06-17 10:43
qs	CVE-2026-2391	低危	6.13.0	6.14.2	qs: qs's arrayLimit bypass in comma parsing allows denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2391 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2026-02-12 05:17 修改: 2026-06-17 10:30
send	CVE-2024-43799	低危	0.18.0	0.19.0	send: Code Execution Vulnerability in Send Library 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43799 镜像层: sha256:258207757074517771b17c938766d48f80e51867411007d603d6c88afccba35c 发布日期: 2024-09-10 15:15 修改: 2026-06-17 07:51

Python (python-pkg)

低危漏洞:1

中危漏洞:5

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
jaraco.context	CVE-2026-23949	高危	5.3.0	6.1.0	jaraco.context: jaraco.context: Path traversal via malicious tar archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23949 镜像层: sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed 发布日期: 2026-01-20 01:15 修改: 2026-06-17 10:22
wheel	CVE-2026-24049	高危	0.45.1	0.46.2	wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24049 镜像层: sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed 发布日期: 2026-01-22 05:16 修改: 2026-08-10 13:18
pip	CVE-2026-3219	中危	24.0	26.1	pip: pip: Incorrect file installation due to improper archive handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219 镜像层: sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed 发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
pip	CVE-2026-6357	中危	24.0	26.1	pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357 镜像层: sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed 发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
pip	CVE-2026-8643	中危	24.0	26.1.2	python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643 镜像层: sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed 发布日期: 2026-06-01 17:17 修改: 2026-08-05 13:24
setuptools	CVE-2026-59890	中危	79.0.1	83.0.0	setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890 镜像层: sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
pip	CVE-2025-8869	中危	24.0	25.3	pip: pip missing checks on symbolic link extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869 镜像层: sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed 发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
pip	CVE-2026-1703	低危	24.0	26.0	pip: pip: Information disclosure via path traversal when installing crafted wheel archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703 镜像层: sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed 发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16

app/gitea/gitea (gobinary)

低危漏洞:8

中危漏洞:54

高危漏洞:56

严重漏洞:6

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
code.gitea.io/gitea	CVE-2026-20896	严重	v1.25.5	1.26.3	Gitea Docker image: `REVERSE_PROXY_TRUSTED_PROXIES = *` default lets any source IP impersonate any user via `X-WEBAUTH-USER` 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-20896 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-07 18:16
code.gitea.io/gitea	CVE-2026-22874	严重	v1.25.5	1.26.3	Gitea: Incomplete SSRF Protection in Webhook and Migration Allow-list Default Filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22874 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-07 18:16
code.gitea.io/gitea	CVE-2026-56750	严重	v1.25.5	1.27.0	Gitea Remember-Me Token Theft Not Invalidating Attacker Session 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56750 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58426	严重	v1.25.5	1.26.2	Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58426 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:17 修改: 2026-07-06 18:17
code.gitea.io/gitea	CVE-2026-58443	严重	v1.25.5	1.27.0	Gitea: Public-only repository tokens can update private PR head branches 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58443 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
google.golang.org/grpc	CVE-2026-33186	严重	v1.75.0	1.79.3	google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33186 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-03-20 23:16 修改: 2026-08-10 13:18
code.gitea.io/gitea	CVE-2026-22555	高危	v1.25.5	1.26.0	Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22555 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-06 21:16
code.gitea.io/gitea	CVE-2026-24451	高危	v1.25.5	1.26.3	Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24451 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-07 18:16
code.gitea.io/gitea	CVE-2026-24791	高危	v1.25.5	1.26.2	Gitea: Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24791 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-25038	高危	v1.25.5	1.26.3	Gitea: Unauthorized Access to Labels of Private Organizations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25038 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-07 18:16
code.gitea.io/gitea	CVE-2026-26231	高危	v1.25.5	1.26.2	Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26231 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-07 18:16
code.gitea.io/gitea	CVE-2026-27771	高危	v1.25.5	1.26.2	Gitea has insufficient permission checks for Composer package source links 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27771 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-07 18:16
code.gitea.io/gitea	CVE-2026-27775	高危	v1.25.5	1.26.3	Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27775 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-06 18:17
code.gitea.io/gitea	CVE-2026-28699	高危	v1.25.5	1.26.2	Gitea: OAuth2 access token scope enforcement bypass via HTTP Basic authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28699 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-06 18:17
code.gitea.io/gitea	CVE-2026-28737	高危	v1.25.5	1.26.0	Gitea: Stored XSS via glTF `extensionsRequired` in Gitea 3D File Viewer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28737 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-07 18:16
code.gitea.io/gitea	CVE-2026-28744	高危	v1.25.5	1.26.2	Gitea: Git Smart HTTP Skips Repository Token Scopes for Bearer Tokens 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28744 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:17 修改: 2026-07-06 18:17
code.gitea.io/gitea	CVE-2026-54481	高危	v1.25.5	1.27.0	Gitea: Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54481 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-55987	高危	v1.25.5	1.27.0	Gitea: OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55987 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-56654	高危	v1.25.5	1.27.0	Gitea: Privilege Escalation via Access Token Scope Escalation in API 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56654 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-56755	高危	v1.25.5	1.27.0	Gitea: Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56755 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-57894	高危	v1.25.5	1.27.0	Gitea: Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57894 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58314	高危	v1.25.5	1.27.0	Gitea: Two SSRF findings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58314 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58419	高危	v1.25.5	1.26.4	Gitea: Notification API leaks private issue metadata after access revocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58419 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:17 修改: 2026-07-06 18:18
code.gitea.io/gitea	CVE-2026-58421	高危	v1.25.5	1.26.4	Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58421 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:17 修改: 2026-07-06 18:18
code.gitea.io/gitea	CVE-2026-58422	高危	v1.25.5	1.26.4	Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58422 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:17 修改: 2026-07-06 18:18
code.gitea.io/gitea	CVE-2026-58423	高危	v1.25.5	1.26.3	Gitea: LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58423 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:17 修改: 2026-07-06 18:18
code.gitea.io/gitea	CVE-2026-58424	高危	v1.25.5	1.26.3	Gitea: Permanent Fork PR Workflow Approval Gate Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58424 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:17 修改: 2026-07-06 18:18
code.gitea.io/gitea	CVE-2026-58436	高危	v1.25.5	1.27.0	Gitea: ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58436 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58437	高危	v1.25.5	1.27.0	Gitea: Repository Visibility Manipulation via Git Push Options 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58437 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58439	高危	v1.25.5	1.27.0	Gitea: Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58439 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/go-git/go-billy/v5	CVE-2026-44973	高危	v5.6.2	5.9.0	github.com/go-git/go-billy: Go-billy: Arbitrary file access due to path traversal vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44973 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-28 22:16 修改: 2026-07-21 10:10
github.com/go-git/go-git/v5	CVE-2026-45022	高危	v5.16.5	5.19.0	go-git is an extensible git implementation library written in pure Go. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45022 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:51
github.com/go-git/go-git/v5	CVE-2026-71556	高危	v5.16.5	5.19.2	go-git is an extensible git implementation library written in pure Go. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71556 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-08-07 17:17 修改: 2026-08-07 17:17
golang.org/x/crypto	CVE-2026-39828	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-08-10 13:19
golang.org/x/crypto	CVE-2026-39829	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-08-10 13:19
golang.org/x/crypto	CVE-2026-39830	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-08-10 13:19
golang.org/x/crypto	CVE-2026-39831	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39832	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-08-10 13:19
golang.org/x/crypto	CVE-2026-39835	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-08-06 13:18
golang.org/x/crypto	CVE-2026-42508	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-08-07 12:17
golang.org/x/crypto	CVE-2026-46595	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-08-06 13:18
golang.org/x/crypto	CVE-2026-46597	高危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/image	CVE-2026-46602	高危	v0.30.0	0.43.0	The TIFF decoder does not set a limit on the size of tiles in tiled im ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46602 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-06-25 20:17 修改: 2026-06-26 17:16
golang.org/x/image	CVE-2026-46604	高危	v0.30.0	0.43.0	The TIFF decoder can panic when decoding an invalid image with an out- ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46604 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-06-26 21:16 修改: 2026-07-01 14:07
golang.org/x/net	CVE-2026-25681	高危	v0.47.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-27136	高危	v0.47.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-33814	高危	v0.47.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:18
golang.org/x/net	CVE-2026-39821	高危	v0.47.0	0.55.0	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 16:16 修改: 2026-08-10 13:19
golang.org/x/text	CVE-2026-56852	高危	v0.31.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
code.gitea.io/gitea	CVE-2026-20779	高危	v1.25.5	1.26.3	Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth `X-Gitea-OTP` surface 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-20779 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-07 18:16
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.75.0	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
stdlib	CVE-2026-27145	高危	v1.25.8	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-06-02 23:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-32280	高危	v1.25.8	1.25.9, 1.26.2	crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-04-08 02:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-32281	高危	v1.25.8	1.25.9, 1.26.2	crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32283	高危	v1.25.8	1.25.9, 1.26.2	crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-04-08 02:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-33811	高危	v1.25.8	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-33814	高危	v1.25.8	1.25.10, 1.26.3	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-39820	高危	v1.25.8	1.25.10, 1.26.3	net/mail: golang: Go net/mail: Denial of Service via crafted email inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:19
stdlib	CVE-2026-39822	高危	v1.25.8	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-39836	高危	v1.25.8	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42499	高危	v1.25.8	1.25.10, 1.26.3	net/mail: golang: net/mail: Denial of Service via pathological email address parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:19
stdlib	CVE-2026-42504	高危	v1.25.8	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
github.com/go-git/go-git/v5	CVE-2026-34165	中危	v5.16.5	5.17.1	github.com/go-git/go-git/v5: go-git: Denial of Service via crafted .idx file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34165 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-03-31 15:16 修改: 2026-07-24 21:10
github.com/go-git/go-git/v5	CVE-2026-41506	中危	v5.16.5	5.18.0	golang: github.com/go-git/go-git: go-git: Information disclosure of HTTP authentication credentials via redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41506 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-08 14:16 修改: 2026-06-17 10:46
github.com/go-git/go-git/v5	CVE-2026-45571	中危	v5.16.5	5.19.1	github.com/go-git/go-git: go-git: Path validation flaw allows unauthorized file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45571 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:52
github.com/go-git/go-git/v5	CVE-2026-71557	中危	v5.16.5	5.19.2	go-git is an extensible git implementation library written in pure Go. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71557 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-08-07 17:17 修改: 2026-08-07 18:17
github.com/go-git/go-git/v5	GHSA-w5pp-99ch-qj29	中危	v5.16.5	5.19.1	go-git: Malformed Git object data may cause panics or resource exhaustion 漏洞详情: https://github.com/advisories/GHSA-w5pp-99ch-qj29 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-29 19:43 修改: 2026-05-29 19:43
code.gitea.io/gitea	CVE-2026-27783	中危	v1.25.5	1.26.2	Gitea: Missing repository-unit authorization on issue-template API endpoints 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27783 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-06 18:17
code.gitea.io/gitea	CVE-2026-42931	中危	v1.25.5	1.27.0	Gitea: Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42931 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-50105	中危	v1.25.5	1.27.0	Gitea: RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50105 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-55982	中危	v1.25.5	1.27.0	Gitea: OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55982 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-56443	中危	v1.25.5	1.27.0	Gitea: Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56443 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-56657	中危	v1.25.5	1.27.0	Gitea SSH Key Parser Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56657 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-57886	中危	v1.25.5	1.27.0	Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57886 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-57897	中危	v1.25.5	1.27.0	Gitea: Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57897 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58418	中危	v1.25.5	1.26.4	Gitea: SSRF via HTTP Redirect in Repository Migration 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58418 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:17 修改: 2026-07-06 18:18
golang.org/x/crypto	CVE-2026-39827	中危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39833	中危	v0.45.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39834	中危	v0.45.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-46598	中危	v0.45.0	0.52.0	golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
code.gitea.io/gitea	CVE-2026-58425	中危	v1.25.5	1.27.0	Gitea: OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58425 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58428	中危	v1.25.5	1.27.0	Gitea: Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58428 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/image	CVE-2026-33809	中危	v0.30.0	0.38.0	golang: golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via maliciously crafted TIFF file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33809 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-03-25 19:16 修改: 2026-06-17 10:38
golang.org/x/image	CVE-2026-33812	中危	v0.30.0	0.39.0	golang.org/x/image: golang: golang.org/x/image: Denial of Service due to excessive memory allocation when parsing malicious font files 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33812 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-04-21 20:16 修改: 2026-06-17 10:38
golang.org/x/image	CVE-2026-33813	中危	v0.30.0	0.42.0	golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33813 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-04-21 20:16 修改: 2026-06-25 20:17
golang.org/x/image	CVE-2026-46599	中危	v0.30.0	0.41.0	golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46599 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
golang.org/x/image	CVE-2026-46601	中危	v0.30.0	0.43.0	golang.org/x/image/webp: golang.org/x/image/webp: Denial of Service via malformed VP8 chunk in WebP images 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46601 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-06-25 20:17 修改: 2026-06-26 17:16
code.gitea.io/gitea	CVE-2026-58429	中危	v1.25.5	1.27.0	Gitea: Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58429 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58432	中危	v1.25.5	1.27.0	Gitea: draft release attachment disclosure via missing web authorization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58432 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58435	中危	v1.25.5	1.27.0	Gitea LFS Deploy-Key Privilege Escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58435 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58441	中危	v1.25.5	1.27.0	Gitea: SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58441 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/net	CVE-2026-25680	中危	v0.47.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42502	中危	v0.47.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42506	中危	v0.47.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
code.gitea.io/gitea	CVE-2026-58442	中危	v1.25.5	1.27.0	Gitea: Repository migration SSRF via multi-answer DNS allow-list bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58442 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58444	中危	v1.25.5	1.27.0	Gitea: Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58444 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58507	中危	v1.25.5	1.27.0	Gitea: Private Repository Existence Disclosure via go-get Meta Endpoint 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58507 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58510	中危	v1.25.5	1.27.0	Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58510 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-59763	中危	v1.25.5	1.27.0	Gitea: Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59763 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-59765	中危	v1.25.5	1.27.0	Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59765 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-59766	中危	v1.25.5	1.27.0	Gitea CVE-2026-20800 sibling endpoints not covered: revoked user still reads private repo objects via `/api/v1/user/starred` and private issue titles via `/api/v1/user/times` 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59766 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	GHSA-rjvx-x5h2-6px5	中危	v1.25.5	1.26.0	Gitea: API Fork Endpoint Authorization Bypass Allows Organization Members to Bypass Repository Creation Restrictions 漏洞详情: https://github.com/advisories/GHSA-rjvx-x5h2-6px5 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-21 20:26 修改: 2026-07-21 20:26
github.com/Azure/go-ntlmssp	CVE-2026-32952	中危	v0.0.0-20221128193559-754e69321358	0.1.1	go-ntlmssp: go-ntlmssp: Denial of Service via malicious NTLM challenge 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32952 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:36
github.com/go-chi/chi/v5	CVE-2025-69725	中危	v5.2.3	5.2.4	go-chi/chi: Go-chi/chi: Open Redirect vulnerability allows redirection to malicious websites 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69725 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-02-19 17:24 修改: 2026-07-05 02:17
code.gitea.io/gitea	CVE-2026-20706	中危	v1.25.5	1.26.2	Gitea: Token scope bypass on web archive download endpoint 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-20706 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-06 19:17
github.com/go-git/go-billy/v5	CVE-2026-44740	中危	v5.6.2	5.9.0	github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44740 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-06-01 17:17 修改: 2026-07-22 07:10
code.gitea.io/gitea	CVE-2026-25714	中危	v1.25.5	1.26.2	Gitea: Incomplete CVE-2025-68941 fix: /user/orgs missing checkTokenPublicOnly + switch-case logic flaw 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25714 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-07 18:16
code.gitea.io/gitea	CVE-2026-27761	中危	v1.25.5	1.26.3	Gitea: API access token scope enforcement bypass on repository RSS/Atom feed endpoints leaks private repository commit data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27761 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-03 21:16 修改: 2026-07-07 18:16
stdlib	CVE-2026-32282	中危	v1.25.8	1.25.9, 1.26.2	golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32288	中危	v1.25.8	1.25.9, 1.26.2	archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32289	中危	v1.25.8	1.25.9, 1.26.2	html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-39823	中危	v1.25.8	1.25.10, 1.26.3	html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39825	中危	v1.25.8	1.25.10, 1.26.3	net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39826	中危	v1.25.8	1.25.10, 1.26.3	html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42505	中危	v1.25.8	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.25.8	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
code.gitea.io/gitea	CVE-2026-23603	低危	v1.25.5	1.27.0	Gitea: Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23603 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-55984	低危	v1.25.5	1.27.0	Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55984 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58434	低危	v1.25.5	1.27.0	Gitea: Private Repository Metadata Remains Accessible After Access Revocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58434 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58445	低危	v1.25.5	1.27.0	Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58445 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
code.gitea.io/gitea	CVE-2026-58511	低危	v1.25.5	1.27.0	Gitea: Webhook Authorization Header Returned in Plaintext via API 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58511 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/go-git/go-git/v5	CVE-2026-33762	低危	v5.16.5	5.17.1	github.com/go-git/go-git/v5: go-git: Denial of Service via crafted Git index file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33762 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-03-31 15:16 修改: 2026-07-24 21:10
github.com/go-git/go-git/v5	CVE-2026-45570	低危	v5.16.5	5.19.1	go-git is an extensible git implementation library written in pure Go. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45570 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:52
filippo.io/edwards25519	CVE-2026-26958	低危	v1.1.0	1.1.1	filippo.io/edwards25519: filippo.io/edwards25519: Cryptographic integrity bypass due to incorrect MultiScalarMult results 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26958 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-02-19 23:16 修改: 2026-06-17 10:26
golang.org/x/net	CVE-2026-46600	未知	v0.47.0	0.56.0	Parsing an invalid SVCB or HTTPS RR can panic when the size of a param ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
golang.org/x/sys	CVE-2026-39824	未知	v0.38.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
golang.org/x/image	CVE-2026-42500	未知	v0.30.0	0.41.0	Decoding a paletted BMP file with an out-of-range palette index result ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42500 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
golang.org/x/crypto	GO-2026-5932	未知	v0.45.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:9eed236c645aff18314304a35b99aa5de995bd31d98988a9a3e6d0e4851c85cc 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

portainer (gobinary)

低危漏洞:3

中危漏洞:34

高危漏洞:49

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/containerd/containerd	CVE-2026-46680	高危	v1.7.30	1.7.32	github.com/containerd/containerd: containerd: Privilege escalation via incorrect user ID handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46680 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-01 18:16 修改: 2026-07-03 04:17
github.com/containerd/containerd	CVE-2026-53488	高危	v1.7.30	1.7.33	github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53488 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-01 02:17 修改: 2026-07-03 04:17
github.com/containerd/containerd/v2	CVE-2026-46680	高危	v2.1.5	2.0.9, 2.2.4, 2.3.1	github.com/containerd/containerd: containerd: Privilege escalation via incorrect user ID handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46680 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-01 18:16 修改: 2026-07-03 04:17
github.com/containerd/containerd/v2	CVE-2026-53488	高危	v2.1.5	2.0.10, 2.1.9, 2.2.5, 2.3.2	github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53488 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-01 02:17 修改: 2026-07-03 04:17
github.com/containerd/containerd/v2	CVE-2026-53489	高危	v2.1.5	2.1.9, 2.2.5, 2.3.2	github.com/containerd/containerd: containerd: Arbitrary host file read via symlink following in CRI checkpoint restore 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53489 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-01 19:16 修改: 2026-07-02 19:33
github.com/containerd/containerd/v2	CVE-2026-53492	高危	v2.1.5	2.1.9, 2.2.5, 2.3.2	github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53492 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-01 19:16 修改: 2026-07-02 19:33
github.com/docker/cli	CVE-2025-15558	高危	v28.5.1+incompatible	29.2.0	docker/cli: Docker CLI for Windows: Privilege escalation via malicious plugin binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15558 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-03-04 17:16 修改: 2026-07-15 02:17
github.com/docker/docker	CVE-2026-34040	高危	v28.5.1+incompatible	29.3.1	Moby: Moby: Authorization bypass vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34040 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
github.com/docker/docker	CVE-2026-41567	高危	v28.5.1+incompatible		docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-06-05 02:17 修改: 2026-08-10 13:19
github.com/docker/docker	CVE-2026-42306	高危	v28.5.1+incompatible		github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47
github.com/go-git/go-billy/v5	CVE-2026-44973	高危	v5.8.0	5.9.0	github.com/go-git/go-billy: Go-billy: Arbitrary file access due to path traversal vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44973 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-28 22:16 修改: 2026-07-21 10:10
github.com/go-git/go-git/v5	CVE-2026-45022	高危	v5.17.0	5.19.0	go-git is an extensible git implementation library written in pure Go. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45022 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:51
github.com/go-git/go-git/v5	CVE-2026-71556	高危	v5.17.0	5.19.2	go-git is an extensible git implementation library written in pure Go. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71556 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-08-07 17:17 修改: 2026-08-07 17:17
github.com/jpillora/chisel	CVE-2026-48113	高危	v1.10.0	1.11.5	Chisel has an ACL Bypass via Post-Handshake SSH Channel ExtraData Injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48113 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-08-03 21:16 修改: 2026-08-04 18:16
github.com/moby/buildkit	CVE-2026-33747	高危	v0.25.1	0.28.1	BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33747 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-03-27 01:16 修改: 2026-06-17 10:38
github.com/moby/buildkit	CVE-2026-33748	高危	v0.25.1	0.28.1	github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33748 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
github.com/moby/spdystream	CVE-2026-35469	高危	v0.5.0	0.5.1	Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35469 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-16 22:16 修改: 2026-08-10 13:19
go.opentelemetry.io/otel/sdk	CVE-2026-39883	高危	v1.42.0	1.43.0	github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39883 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-08 21:17 修改: 2026-07-24 21:10
golang.org/x/crypto	CVE-2026-39828	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-08-10 13:19
golang.org/x/crypto	CVE-2026-39829	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-08-10 13:19
golang.org/x/crypto	CVE-2026-39830	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-08-10 13:19
golang.org/x/crypto	CVE-2026-39831	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39832	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-08-10 13:19
golang.org/x/crypto	CVE-2026-39835	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-08-06 13:18
golang.org/x/crypto	CVE-2026-42508	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-08-07 12:17
golang.org/x/crypto	CVE-2026-46595	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-08-06 13:18
golang.org/x/crypto	CVE-2026-46597	高危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-25681	高危	v0.48.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-27136	高危	v0.48.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-33814	高危	v0.48.0	0.53.0	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:18
golang.org/x/net	CVE-2026-39821	高危	v0.48.0	0.55.0	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 16:16 修改: 2026-08-10 13:19
golang.org/x/text	CVE-2026-56852	高危	v0.33.0	0.39.0	golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.79.3	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
helm.sh/helm/v4	CVE-2026-35204	高危	v4.1.1	4.1.4	github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35204 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-09 16:16 修改: 2026-07-15 02:20
helm.sh/helm/v4	CVE-2026-35205	高危	v4.1.1	4.1.4	github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to insufficient plugin provenance verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35205 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-09 16:16 修改: 2026-07-15 02:20
oras.land/oras-go/v2	CVE-2026-50151	高危	v2.6.0	2.6.1	oras-go: oras-go: Credential forwarding via unvalidated Location header during blob upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50151 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-17 20:17 修改: 2026-07-23 16:15
oras.land/oras-go/v2	CVE-2026-50163	高危	v2.6.0	2.6.2	oras-go: Oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50163 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:02
stdlib	CVE-2026-27145	高危	v1.26.1	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-06-02 23:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-32280	高危	v1.26.1	1.25.9, 1.26.2	crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-08 02:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-32281	高危	v1.26.1	1.25.9, 1.26.2	crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32283	高危	v1.26.1	1.25.9, 1.26.2	crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-08 02:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-33810	高危	v1.26.1	1.26.2	crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33810 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-08 02:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-33811	高危	v1.26.1	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-33814	高危	v1.26.1	1.25.10, 1.26.3	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-39820	高危	v1.26.1	1.25.10, 1.26.3	net/mail: golang: Go net/mail: Denial of Service via crafted email inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:19
stdlib	CVE-2026-39822	高危	v1.26.1	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-39836	高危	v1.26.1	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42499	高危	v1.26.1	1.25.10, 1.26.3	net/mail: golang: net/mail: Denial of Service via pathological email address parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:19
stdlib	CVE-2026-42504	高危	v1.26.1	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
github.com/docker/docker	CVE-2026-41568	中危	v28.5.1+incompatible		github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46
github.com/Azure/go-ntlmssp	CVE-2026-32952	中危	v0.0.0-20200615164410-66371956d46c	0.1.1	go-ntlmssp: go-ntlmssp: Denial of Service via malicious NTLM challenge 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32952 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:36
golang.org/x/net	CVE-2026-25680	中危	v0.48.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42502	中危	v0.48.0	0.55.0	golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
golang.org/x/net	CVE-2026-42506	中危	v0.48.0	0.55.0	golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp	CVE-2026-39882	中危	v1.35.0	1.43.0	github.com/open-telemetry/opentelemetry-go: golang: OpenTelemetry-Go: Memory exhaustion via uncapped HTTP response body reading 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39882 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-08 21:17 修改: 2026-07-24 21:10
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	CVE-2026-39882	中危	v1.35.0	1.43.0	github.com/open-telemetry/opentelemetry-go: golang: OpenTelemetry-Go: Memory exhaustion via uncapped HTTP response body reading 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39882 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-08 21:17 修改: 2026-07-24 21:10
github.com/go-git/go-billy/v5	CVE-2026-44740	中危	v5.8.0	5.9.0	github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44740 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-06-01 17:17 修改: 2026-07-22 07:10
github.com/containerd/containerd	CVE-2026-47262	中危	v1.7.30	1.7.33	github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47262 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-01 19:16 修改: 2026-07-02 19:40
helm.sh/helm/v4	CVE-2026-35206	中危	v4.1.1	4.1.4	github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35206 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-09 21:16 修改: 2026-06-17 10:40
github.com/containerd/containerd/v2	CVE-2026-47262	中危	v2.1.5	2.0.10, 2.1.9, 2.2.5, 2.3.2	github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47262 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-01 19:16 修改: 2026-07-02 19:40
github.com/go-git/go-git/v5	CVE-2026-34165	中危	v5.17.0	5.17.1	github.com/go-git/go-git/v5: go-git: Denial of Service via crafted .idx file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34165 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-03-31 15:16 修改: 2026-07-24 21:10
oras.land/oras-go/v2	CVE-2026-50162	中危	v2.6.0	2.6.1	oras-go: oras-go: File store write outside working directory via symlink traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50162 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:08
oras.land/oras-go/v2	GHSA-vh4v-2xq2-g5cg	中危	v2.6.0	2.6.1	ORAS Go forwards registry credentials across registry redirects 漏洞详情: https://github.com/advisories/GHSA-vh4v-2xq2-g5cg 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-01 21:54 修改: 2026-07-01 21:54
github.com/go-git/go-git/v5	CVE-2026-41506	中危	v5.17.0	5.18.0	golang: github.com/go-git/go-git: go-git: Information disclosure of HTTP authentication credentials via redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41506 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-08 14:16 修改: 2026-06-17 10:46
github.com/go-git/go-git/v5	CVE-2026-45571	中危	v5.17.0	5.19.1	github.com/go-git/go-git: go-git: Path validation flaw allows unauthorized file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45571 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:52
github.com/go-git/go-git/v5	CVE-2026-71557	中危	v5.17.0	5.19.2	go-git is an extensible git implementation library written in pure Go. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71557 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-08-07 17:17 修改: 2026-08-07 18:17
github.com/go-git/go-git/v5	GHSA-w5pp-99ch-qj29	中危	v5.17.0	5.19.1	go-git: Malformed Git object data may cause panics or resource exhaustion 漏洞详情: https://github.com/advisories/GHSA-w5pp-99ch-qj29 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-29 19:43 修改: 2026-05-29 19:43
github.com/gorilla/csrf	CVE-2025-47909	中危	v1.7.3		Hosts listed in TrustedOrigins implicitly allow requests from the corr ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47909 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2025-08-29 16:15 修改: 2026-06-17 09:28
github.com/in-toto/in-toto-golang	GHSA-pmwq-pjrm-6p5r	中危	v0.9.0	0.11.0	in-toto-golang and in-toto-python have inconsistent negation behavior 漏洞详情: https://github.com/advisories/GHSA-pmwq-pjrm-6p5r 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-08 22:24 修改: 2026-05-08 22:24
golang.org/x/crypto	CVE-2026-39827	中危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39833	中危	v0.46.0	0.52.0	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-39834	中危	v0.46.0	0.52.0	golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
golang.org/x/crypto	CVE-2026-46598	中危	v0.46.0	0.52.0	golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
github.com/containerd/containerd/v2	CVE-2026-50195	中危	v2.1.5	2.1.9, 2.2.5, 2.3.2	github.com/containerd/containerd: containerd: Arbitrary code execution via CRI checkpoint image tag poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50195 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-01 19:16 修改: 2026-07-02 19:43
github.com/docker/docker	CVE-2026-33997	中危	v28.5.1+incompatible	29.3.1	moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-03-31 03:15 修改: 2026-08-10 13:19
stdlib	CVE-2026-32282	中危	v1.26.1	1.25.9, 1.26.2	golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32288	中危	v1.26.1	1.25.9, 1.26.2	archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32289	中危	v1.26.1	1.25.9, 1.26.2	html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-39823	中危	v1.26.1	1.25.10, 1.26.3	html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39825	中危	v1.26.1	1.25.10, 1.26.3	net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39826	中危	v1.26.1	1.25.10, 1.26.3	html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42505	中危	v1.26.1	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.26.1	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
oras.land/oras-go/v2	CVE-2026-48978	低危	v2.6.0	2.6.1	oras-go: oras-go: Information disclosure and TLS downgrade via malicious registry realm 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48978 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-17 20:17 修改: 2026-07-23 18:08
github.com/go-git/go-git/v5	CVE-2026-33762	低危	v5.17.0	5.17.1	github.com/go-git/go-git/v5: go-git: Denial of Service via crafted Git index file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33762 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-03-31 15:16 修改: 2026-07-24 21:10
github.com/go-git/go-git/v5	CVE-2026-45570	低危	v5.17.0	5.19.1	go-git is an extensible git implementation library written in pure Go. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45570 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:52
golang.org/x/crypto	GO-2026-5932	未知	v0.46.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/net	CVE-2026-46600	未知	v0.48.0	0.56.0	Parsing an invalid SVCB or HTTPS RR can panic when the size of a param ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
golang.org/x/sys	CVE-2026-39824	未知	v0.41.0	0.44.0	Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824 镜像层: sha256:fe152fed76ec5fa1c4c0dbc7949e339b1cd4c25c9adb1d1a274283510439bd00 发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10

usr/local/bin/init_portainer (gobinary)

低危漏洞:1

中危漏洞:9

高危漏洞:12

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2026-25679	高危	v1.24.13	1.25.8, 1.26.1	net/url: Incorrect parsing of IPv6 host literals in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-03-06 22:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-27145	高危	v1.24.13	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-06-02 23:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-32280	高危	v1.24.13	1.25.9, 1.26.2	crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-04-08 02:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-32281	高危	v1.24.13	1.25.9, 1.26.2	crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32283	高危	v1.24.13	1.25.9, 1.26.2	crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-04-08 02:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-33811	高危	v1.24.13	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-33814	高危	v1.24.13	1.25.10, 1.26.3	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:18
stdlib	CVE-2026-39820	高危	v1.24.13	1.25.10, 1.26.3	net/mail: golang: Go net/mail: Denial of Service via crafted email inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:19
stdlib	CVE-2026-39822	高危	v1.24.13	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-39836	高危	v1.24.13	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42499	高危	v1.24.13	1.25.10, 1.26.3	net/mail: golang: net/mail: Denial of Service via pathological email address parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-05-07 20:16 修改: 2026-08-10 13:19
stdlib	CVE-2026-42504	高危	v1.24.13	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-27142	中危	v1.24.13	1.25.8, 1.26.1	html/template: URLs in meta content attribute actions are not escaped in html/template 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
stdlib	CVE-2026-32282	中危	v1.24.13	1.25.9, 1.26.2	golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32288	中危	v1.24.13	1.25.9, 1.26.2	archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32289	中危	v1.24.13	1.25.9, 1.26.2	html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-39823	中危	v1.24.13	1.25.10, 1.26.3	html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39825	中危	v1.24.13	1.25.10, 1.26.3	net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39826	中危	v1.24.13	1.25.10, 1.26.3	html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42505	中危	v1.24.13	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.24.13	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-27139	低危	v1.24.13	1.25.8, 1.26.1	os: FileInfo can escape from a Root in golang os module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139 镜像层: sha256:377073658fee7357013d2807d18b142a17dac33fecd8416798d8d995ce286459 发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

/app/schema/paths/nginx/certificates/certID/upload/post.json ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/websoft9/appstore/current/library/apps/apisix/src/config/mkcert/lvh.me+1-key.pem ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/websoft9/appstore/current/library/apps/apisix/src/config/mkcert/rootCA-key.pem ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/websoft9/appstore/releases/72658e7ede1398ee/library/apps/apisix/src/config/mkcert/lvh.me+1-key.pem ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/websoft9/appstore/releases/72658e7ede1398ee/library/apps/apisix/src/config/mkcert/rootCA-key.pem ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/websoft9/appstore/staging/72658e7ede1398ee/library/apps/apisix/src/config/mkcert/lvh.me+1-key.pem ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/websoft9/appstore/staging/72658e7ede1398ee/library/apps/apisix/src/config/mkcert/rootCA-key.pem ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/websoft9/library/apps/apisix/src/config/mkcert/lvh.me+1-key.pem ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

/websoft9/library/apps/apisix/src/config/mkcert/rootCA-key.pem ()

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息