docker.io/wechatopenai/weknora-sandbox:v0.6.2 linux/amd64

docker.io/wechatopenai/weknora-sandbox:v0.6.2 - Trivy安全扫描结果 扫描时间: 2026-06-10 16:57
全部漏洞信息
低危漏洞:70 中危漏洞:49 高危漏洞:22 严重漏洞:2

系统OS: debian 13.5 扫描引擎: Trivy 扫描时间: 2026-06-10 16:57

docker.io/wechatopenai/weknora-sandbox:v0.6.2 (debian 13.5) (debian)
低危漏洞:67 中危漏洞:44 高危漏洞:8 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
perl-base CVE-2026-42496 严重 5.40.1-6 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-05-26 02:16 修改: 2026-05-28 14:16
perl-base CVE-2026-8376 严重 5.40.1-6 Perl versions through 5.43.10 have a heap buffer overflow when compili ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-05-26 00:16 修改: 2026-05-27 19:16
ncurses-base CVE-2025-69720 高危 6.5+20250216-2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-03-19 15:16 修改: 2026-06-02 14:16
ncurses-bin CVE-2025-69720 高危 6.5+20250216-2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-03-19 15:16 修改: 2026-06-02 14:16
libncursesw6 CVE-2025-69720 高危 6.5+20250216-2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:bffa3c30a00bb534b2e3637bd26d9a75e095172be7d0b33924f1a61bf6cb2120

发布日期: 2026-03-19 15:16 修改: 2026-06-02 14:16
libtinfo6 CVE-2025-69720 高危 6.5+20250216-2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-03-19 15:16 修改: 2026-06-02 14:16
perl-base CVE-2026-42497 高危 5.40.1-6 Archive::Tar versions before 3.08 for Perl extract hardlinks to attack ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-05-26 02:16 修改: 2026-05-28 14:16
perl-base CVE-2026-48959 高危 5.40.1-6 IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaust ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-05-27 04:16 修改: 2026-05-29 16:16
perl-base CVE-2026-48962 高危 5.40.1-6 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-05-27 04:16 修改: 2026-05-27 19:38
perl-base CVE-2026-9538 高危 5.40.1-6 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-05-26 02:16 修改: 2026-05-28 14:16
libbz2-1.0 CVE-2026-42250 中危 1.0.8-6 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-05-28 14:16 修改: 2026-06-05 08:16
libc-bin CVE-2026-5435 中危 2.41-12+deb13u3 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-28 13:19 修改: 2026-05-05 17:38
libc-bin CVE-2026-5450 中危 2.41-12+deb13u3 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33
libc-bin CVE-2026-5928 中危 2.41-12+deb13u3 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33
libc-bin CVE-2026-6238 中危 2.41-12+deb13u3 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-28 19:37 修改: 2026-05-04 17:57
libc6 CVE-2026-5435 中危 2.41-12+deb13u3 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-28 13:19 修改: 2026-05-05 17:38
libc6 CVE-2026-5450 中危 2.41-12+deb13u3 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33
libc6 CVE-2026-5928 中危 2.41-12+deb13u3 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33
libc6 CVE-2026-6238 中危 2.41-12+deb13u3 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-28 19:37 修改: 2026-05-04 17:57
libjq1 CVE-2026-41256 中危 1.7.1-6+deb13u2 jq: embedded NUL truncates top-level jq programs loaded with -f

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 17:00
libjq1 CVE-2026-41257 中危 1.7.1-6+deb13u2 jq: signed-int overflow in stack_reallocate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 17:01
libjq1 CVE-2026-43894 中危 1.7.1-6+deb13u2 jq: jq: Arbitrary Code Execution or Denial of Service via Signed Integer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43894

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 17:01
libjq1 CVE-2026-43895 中危 1.7.1-6+deb13u2 jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 17:02
libjq1 CVE-2026-43896 中危 1.7.1-6+deb13u2 jq: stack overflow in recursive object merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 22:34
libjq1 CVE-2026-44777 中危 1.7.1-6+deb13u2 jq: stack overflow in module loading on mutual include

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 17:05
liblastlog2-2 CVE-2026-27456 中危 2.41-5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
liblastlog2-2 CVE-2026-3184 中危 2.41-5 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 19:17 修改: 2026-05-01 19:29
liblzma5 CVE-2026-34743 中危 5.8.1-1 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-02 19:21 修改: 2026-04-15 17:33
libmount1 CVE-2026-27456 中危 2.41-5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
libmount1 CVE-2026-3184 中危 2.41-5 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 19:17 修改: 2026-05-01 19:29
bsdutils CVE-2026-27456 中危 1:2.41-5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
libsmartcols1 CVE-2026-27456 中危 2.41-5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
libsmartcols1 CVE-2026-3184 中危 2.41-5 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 19:17 修改: 2026-05-01 19:29
bsdutils CVE-2026-3184 中危 1:2.41-5 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 19:17 修改: 2026-05-01 19:29
libuuid1 CVE-2026-27456 中危 2.41-5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
libuuid1 CVE-2026-3184 中危 2.41-5 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 19:17 修改: 2026-05-01 19:29
login CVE-2026-27456 中危 1:4.16.0-2+really2.41-5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
login CVE-2026-3184 中危 1:4.16.0-2+really2.41-5 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 19:17 修改: 2026-05-01 19:29
mount CVE-2026-27456 中危 2.41-5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
mount CVE-2026-3184 中危 2.41-5 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 19:17 修改: 2026-05-01 19:29
jq CVE-2026-41256 中危 1.7.1-6+deb13u2 jq: embedded NUL truncates top-level jq programs loaded with -f

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 17:00
jq CVE-2026-41257 中危 1.7.1-6+deb13u2 jq: signed-int overflow in stack_reallocate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 17:01
jq CVE-2026-43894 中危 1.7.1-6+deb13u2 jq: jq: Arbitrary Code Execution or Denial of Service via Signed Integer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43894

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 17:01
jq CVE-2026-43895 中危 1.7.1-6+deb13u2 jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 17:02
jq CVE-2026-43896 中危 1.7.1-6+deb13u2 jq: stack overflow in recursive object merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 22:34
jq CVE-2026-44777 中危 1.7.1-6+deb13u2 jq: stack overflow in module loading on mutual include

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 17:05
libblkid1 CVE-2026-27456 中危 2.41-5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
libblkid1 CVE-2026-3184 中危 2.41-5 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 19:17 修改: 2026-05-01 19:29
perl-base CVE-2025-15649 中危 5.40.1-6 IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaugh ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-05-27 04:16 修改: 2026-05-29 16:16
perl-base CVE-2026-7010 中危 5.40.1-6 HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-05-11 22:22 修改: 2026-05-12 16:48
tar CVE-2026-5704 中危 1.35+dfsg-3.1 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-06 16:16 修改: 2026-04-22 20:08
util-linux CVE-2026-27456 中危 2.41-5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
util-linux CVE-2026-3184 中危 2.41-5 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-03 19:17 修改: 2026-05-01 19:29
zlib1g CVE-2026-27171 中危 1:1.3.dfsg+really1.3.1-1+b1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-02-18 04:16 修改: 2026-03-25 21:27
liblastlog2-2 CVE-2022-0563 低危 2.41-5 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15
liblastlog2-2 CVE-2025-14104 低危 2.41-5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16
libc-bin CVE-2018-20796 低危 2.41-12+deb13u3 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-02-26 02:29 修改: 2024-11-21 04:02
libc-bin CVE-2019-1010022 低危 2.41-12+deb13u3 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
libc-bin CVE-2019-1010023 低危 2.41-12+deb13u3 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
libmount1 CVE-2022-0563 低危 2.41-5 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15
libmount1 CVE-2025-14104 低危 2.41-5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16
libc-bin CVE-2019-1010024 低危 2.41-12+deb13u3 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
libncursesw6 CVE-2025-6141 低危 6.5+20250216-2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:bffa3c30a00bb534b2e3637bd26d9a75e095172be7d0b33924f1a61bf6cb2120

发布日期: 2025-06-16 22:16 修改: 2026-06-02 14:16
libc-bin CVE-2019-1010025 低危 2.41-12+deb13u3 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
libc-bin CVE-2019-9192 低危 2.41-12+deb13u3 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-02-26 18:29 修改: 2024-11-21 04:51
libsmartcols1 CVE-2022-0563 低危 2.41-5 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15
libsmartcols1 CVE-2025-14104 低危 2.41-5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16
libsqlite3-0 CVE-2021-45346 低危 3.46.1-7+deb13u1 sqlite: crafted SQL query allows a malicious user to obtain sensitive information

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2022-02-14 19:15 修改: 2024-11-21 06:32
libsqlite3-0 CVE-2025-70873 低危 3.46.1-7+deb13u1 sqlite: SQLite: Information Disclosure via Crafted ZIP File

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-03-12 19:16 修改: 2026-04-16 21:15
libsystemd0 CVE-2013-4392 低危 257.13-1~deb13u1 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libsystemd0 CVE-2023-31437 低危 257.13-1~deb13u1 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2023-06-13 17:15 修改: 2025-01-03 20:15
libsystemd0 CVE-2023-31438 低危 257.13-1~deb13u1 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2023-06-13 17:15 修改: 2024-11-21 08:01
libsystemd0 CVE-2023-31439 低危 257.13-1~deb13u1 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2023-06-13 17:15 修改: 2024-11-21 08:01
libsystemd0 CVE-2026-40228 低危 257.13-1~deb13u1 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-10 16:16 修改: 2026-05-05 02:16
jq CVE-2026-40612 低危 1.7.1-6+deb13u2 jq: stack overflow via unbounded recursion in jv_contains

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40612

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 17:00
libtinfo6 CVE-2025-6141 低危 6.5+20250216-2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-06-16 22:16 修改: 2026-06-02 14:16
libudev1 CVE-2013-4392 低危 257.13-1~deb13u1 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libudev1 CVE-2023-31437 低危 257.13-1~deb13u1 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2023-06-13 17:15 修改: 2025-01-03 20:15
libudev1 CVE-2023-31438 低危 257.13-1~deb13u1 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2023-06-13 17:15 修改: 2024-11-21 08:01
libudev1 CVE-2023-31439 低危 257.13-1~deb13u1 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2023-06-13 17:15 修改: 2024-11-21 08:01
libudev1 CVE-2026-40228 低危 257.13-1~deb13u1 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-04-10 16:16 修改: 2026-05-05 02:16
libapt-pkg7.0 CVE-2011-3374 低危 3.0.3 It was found that apt-key in apt, all versions, do not correctly valid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30
apt CVE-2011-3374 低危 3.0.3 It was found that apt-key in apt, all versions, do not correctly valid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30
libuuid1 CVE-2022-0563 低危 2.41-5 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15
libuuid1 CVE-2025-14104 低危 2.41-5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16
bash TEMP-0841856-B18BAF 低危 5.2.37-2+b9 [Privilege escalation possible to other user than root]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6 CVE-2010-4756 低危 2.41-12+deb13u3 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
login CVE-2022-0563 低危 1:4.16.0-2+really2.41-5 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15
login CVE-2025-14104 低危 1:4.16.0-2+really2.41-5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16
login.defs CVE-2007-5686 低危 1:4.17.4-2 initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35
login.defs CVE-2024-56433 低危 1:4.17.4-2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2024-12-26 09:15 修改: 2026-04-15 00:35
login.defs TEMP-0628843-DBAD28 低危 1:4.17.4-2 [more related to CVE-2005-4890]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6 CVE-2018-20796 低危 2.41-12+deb13u3 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-02-26 02:29 修改: 2024-11-21 04:02
libc6 CVE-2019-1010022 低危 2.41-12+deb13u3 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
mount CVE-2022-0563 低危 2.41-5 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15
mount CVE-2025-14104 低危 2.41-5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16
libc6 CVE-2019-1010023 低危 2.41-12+deb13u3 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
ncurses-base CVE-2025-6141 低危 6.5+20250216-2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-06-16 22:16 修改: 2026-06-02 14:16
libc6 CVE-2019-1010024 低危 2.41-12+deb13u3 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
ncurses-bin CVE-2025-6141 低危 6.5+20250216-2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-06-16 22:16 修改: 2026-06-02 14:16
passwd CVE-2007-5686 低危 1:4.17.4-2 initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35
passwd CVE-2024-56433 低危 1:4.17.4-2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2024-12-26 09:15 修改: 2026-04-15 00:35
passwd TEMP-0628843-DBAD28 低危 1:4.17.4-2 [more related to CVE-2005-4890]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6 CVE-2019-1010025 低危 2.41-12+deb13u3 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
libc6 CVE-2019-9192 低危 2.41-12+deb13u3 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2019-02-26 18:29 修改: 2024-11-21 04:51
libblkid1 CVE-2022-0563 低危 2.41-5 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15
libblkid1 CVE-2025-14104 低危 2.41-5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16
bsdutils CVE-2022-0563 低危 1:2.41-5 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15
bsdutils CVE-2025-14104 低危 1:2.41-5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16
coreutils CVE-2017-18018 低危 9.7-3 coreutils: race condition vulnerability in chown and chgrp

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2018-01-04 04:29 修改: 2025-06-09 16:15
coreutils CVE-2025-5278 低危 9.7-3 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-05-27 21:15 修改: 2026-05-19 17:16
perl-base CVE-2011-4116 低危 5.40.1-6 perl: File:: Temp insecure temporary file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04
sysvinit-utils TEMP-0517018-A83CE6 低危 3.14-4 [sysvinit: no-root option in expert installer exposes locally exploitable security flaw]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libjq1 CVE-2025-9403 低危 1.7.1-6+deb13u2 jq: assertion failure in run_jq_tests() of the file jq_test.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9403

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2025-08-25 03:15 修改: 2026-04-29 01:00
tar CVE-2005-2541 低危 1.35+dfsg-3.1 tar: does not properly warn the user when extracting setuid or setgid files

漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2005-08-10 04:00 修改: 2026-04-16 00:27
tar TEMP-0290435-0B57B5 低危 1.35+dfsg-3.1 [tar's rmt command may have undesired side effects]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libjq1 CVE-2026-40612 低危 1.7.1-6+deb13u2 jq: stack overflow via unbounded recursion in jv_contains

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40612

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2026-05-11 18:16 修改: 2026-05-13 17:00
jq CVE-2025-9403 低危 1.7.1-6+deb13u2 jq: assertion failure in run_jq_tests() of the file jq_test.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9403

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 2025-08-25 03:15 修改: 2026-04-29 01:00
util-linux CVE-2022-0563 低危 2.41-5 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15
util-linux CVE-2025-14104 低危 2.41-5 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16
libc-bin CVE-2010-4756 低危 2.41-12+deb13u3 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
openssl CVE-2026-42764 未知 3.5.6-1~deb13u1 [NULL Pointer Dereference in QUIC Server Initial Packet Handling]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-42766 未知 3.5.6-1~deb13u1 [Possible NULL Dereference in Password-Based CMS Decryption]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-42767 未知 3.5.6-1~deb13u1 [NULL Pointer Dereference in CRMF EncryptedValue Decryption]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-42768 未知 3.5.6-1~deb13u1 [Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-42769 未知 3.5.6-1~deb13u1 [Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-42770 未知 3.5.6-1~deb13u1 [FFC-DH Peer Validation Uses Attacker-Supplied q]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-45445 未知 3.5.6-1~deb13u1 [AES-OCB IV Ignored on EVP_Cipher() Path]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-45446 未知 3.5.6-1~deb13u1 [Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-45447 未知 3.5.6-1~deb13u1 [Heap Use-After-Free in the PKCS7_verify() Function]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-7383 未知 3.5.6-1~deb13u1 [Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-9076 未知 3.5.6-1~deb13u1 [Out-of-Bounds Read in CMS Password-Based Decryption]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-34180 未知 3.5.6-1~deb13u1 [Heap Buffer Over-read in ASN.1 Content Parsing]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-34181 未知 3.5.6-1~deb13u1 [PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-34182 未知 3.5.6-1~deb13u1 [CMS AuthEnvelopedData Processing May Accept Forged Messages]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-34183 未知 3.5.6-1~deb13u1 [Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-42764 未知 3.5.6-1~deb13u1 [NULL Pointer Dereference in QUIC Server Initial Packet Handling]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-42766 未知 3.5.6-1~deb13u1 [Possible NULL Dereference in Password-Based CMS Decryption]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-42767 未知 3.5.6-1~deb13u1 [NULL Pointer Dereference in CRMF EncryptedValue Decryption]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-42768 未知 3.5.6-1~deb13u1 [Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-42769 未知 3.5.6-1~deb13u1 [Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-42770 未知 3.5.6-1~deb13u1 [FFC-DH Peer Validation Uses Attacker-Supplied q]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-45445 未知 3.5.6-1~deb13u1 [AES-OCB IV Ignored on EVP_Cipher() Path]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-45446 未知 3.5.6-1~deb13u1 [Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-45447 未知 3.5.6-1~deb13u1 [Heap Use-After-Free in the PKCS7_verify() Function]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-7383 未知 3.5.6-1~deb13u1 [Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl-provider-legacy CVE-2026-9076 未知 3.5.6-1~deb13u1 [Out-of-Bounds Read in CMS Password-Based Decryption]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-45447 未知 3.5.6-1~deb13u1 [Heap Use-After-Free in the PKCS7_verify() Function]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-7383 未知 3.5.6-1~deb13u1 [Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-9076 未知 3.5.6-1~deb13u1 [Out-of-Bounds Read in CMS Password-Based Decryption]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libjq1 CVE-2026-47770 未知 1.7.1-6+deb13u2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47770

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
jq CVE-2026-47770 未知 1.7.1-6+deb13u2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47770

镜像层: sha256:a35bc923a86c735e7cb01409653818275704eb790bd4fb9223126b5f571253f4

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl3t64 CVE-2026-34180 未知 3.5.6-1~deb13u1 [Heap Buffer Over-read in ASN.1 Content Parsing]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-34181 未知 3.5.6-1~deb13u1 [PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-34182 未知 3.5.6-1~deb13u1 [CMS AuthEnvelopedData Processing May Accept Forged Messages]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-34183 未知 3.5.6-1~deb13u1 [Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-42764 未知 3.5.6-1~deb13u1 [NULL Pointer Dereference in QUIC Server Initial Packet Handling]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-42766 未知 3.5.6-1~deb13u1 [Possible NULL Dereference in Password-Based CMS Decryption]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-42767 未知 3.5.6-1~deb13u1 [NULL Pointer Dereference in CRMF EncryptedValue Decryption]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
perl-base CVE-2026-48961 未知 5.40.1-6 IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetai ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-05-27 04:16 修改: 2026-05-29 16:16
libssl3t64 CVE-2026-42768 未知 3.5.6-1~deb13u1 [Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-42769 未知 3.5.6-1~deb13u1 [Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-42770 未知 3.5.6-1~deb13u1 [FFC-DH Peer Validation Uses Attacker-Supplied q]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-45445 未知 3.5.6-1~deb13u1 [AES-OCB IV Ignored on EVP_Cipher() Path]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
libssl3t64 CVE-2026-45446 未知 3.5.6-1~deb13u1 [Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-34180 未知 3.5.6-1~deb13u1 [Heap Buffer Over-read in ASN.1 Content Parsing]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-34181 未知 3.5.6-1~deb13u1 [PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-34182 未知 3.5.6-1~deb13u1 [CMS AuthEnvelopedData Processing May Accept Forged Messages]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
openssl CVE-2026-34183 未知 3.5.6-1~deb13u1 [Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:98df1ca0e575d9026c1abd12994fad3c14effa4558d50b6961fd586930956b26

发布日期: 2026-06-09 17:17 修改: 2026-06-09 17:17
Node.js (node-pkg)
低危漏洞:2 中危漏洞:2 高危漏洞:11 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
cross-spawn CVE-2024-21538 高危 7.0.3 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2024-11-08 05:15 修改: 2026-04-15 00:35
glob CVE-2025-64756 高危 10.4.2 11.1.0, 10.5.0 glob: glob: Command Injection Vulnerability via Malicious Filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64756

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2025-11-17 18:15 修改: 2025-12-02 19:34
minimatch CVE-2026-26996 高危 9.0.5 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2026-02-20 03:16 修改: 2026-03-06 21:32
minimatch CVE-2026-27903 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2026-02-26 02:16 修改: 2026-02-27 17:21
minimatch CVE-2026-27904 高危 9.0.5 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2026-02-26 02:16 修改: 2026-02-27 17:16
tar CVE-2026-23745 高危 6.2.1 7.5.3 node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23745

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2026-01-16 22:16 修改: 2026-02-18 16:20
tar CVE-2026-23950 高危 6.2.1 7.5.4 node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23950

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2026-01-20 01:15 修改: 2026-02-18 15:50
tar CVE-2026-24842 高危 6.2.1 7.5.7 node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24842

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2026-01-28 01:16 修改: 2026-02-02 14:30
tar CVE-2026-26960 高危 6.2.1 7.5.8 node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26960

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2026-02-20 02:16 修改: 2026-02-20 19:24
tar CVE-2026-29786 高危 6.2.1 7.5.10 node-tar: hardlink path traversal via drive-relative linkpath

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29786

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2026-03-07 16:15 修改: 2026-03-11 21:50
tar CVE-2026-31802 高危 6.2.1 7.5.11 tar: tar: File overwrite via drive-relative symlink traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31802

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2026-03-10 07:44 修改: 2026-03-18 18:13
ip-address CVE-2026-42338 中危 9.0.5 10.1.1 ip-address is a library for parsing and manipulating IPv4 and IPv6 add ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2026-05-12 20:16 修改: 2026-05-19 20:04
brace-expansion CVE-2026-33750 中危 2.0.1 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2026-03-27 15:16 修改: 2026-04-22 14:23
diff CVE-2026-24001 低危 5.2.0 8.0.3, 5.2.2, 4.0.4, 3.5.1 jsdiff: denial of service vulnerability in parsePatch and applyPatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24001

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2026-01-22 03:15 修改: 2026-03-04 15:23
brace-expansion CVE-2025-5889 低危 2.0.1 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:795ad618d50913dcf9e5f88e9d0a7c2ffcc937db67e7e326c24537f816962347

发布日期: 2025-06-09 19:15 修改: 2026-04-29 01:00
Python (python-pkg)
低危漏洞:1 中危漏洞:3 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
jaraco.context CVE-2026-23949 高危 5.3.0 6.1.0 jaraco.context: jaraco.context: Path traversal via malicious tar archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23949

镜像层: sha256:bffa3c30a00bb534b2e3637bd26d9a75e095172be7d0b33924f1a61bf6cb2120

发布日期: 2026-01-20 01:15 修改: 2026-03-11 23:12
wheel CVE-2026-24049 高危 0.45.1 0.46.2 wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24049

镜像层: sha256:bffa3c30a00bb534b2e3637bd26d9a75e095172be7d0b33924f1a61bf6cb2120

发布日期: 2026-01-22 05:16 修改: 2026-02-18 14:56
wheel CVE-2026-24049 高危 0.45.1 0.46.2 wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24049

镜像层: sha256:bffa3c30a00bb534b2e3637bd26d9a75e095172be7d0b33924f1a61bf6cb2120

发布日期: 2026-01-22 05:16 修改: 2026-02-18 14:56
pip CVE-2026-6357 中危 24.0 26.1 pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357

镜像层: sha256:bffa3c30a00bb534b2e3637bd26d9a75e095172be7d0b33924f1a61bf6cb2120

发布日期: 2026-04-27 15:16 修改: 2026-04-27 23:16
pip CVE-2025-8869 中危 24.0 25.3 pip: pip missing checks on symbolic link extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869

镜像层: sha256:bffa3c30a00bb534b2e3637bd26d9a75e095172be7d0b33924f1a61bf6cb2120

发布日期: 2025-09-24 15:15 修改: 2026-04-15 00:35
pip CVE-2026-3219 中危 24.0 26.1 pip: pip: Incorrect file installation due to improper archive handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219

镜像层: sha256:bffa3c30a00bb534b2e3637bd26d9a75e095172be7d0b33924f1a61bf6cb2120

发布日期: 2026-04-20 16:16 修改: 2026-04-20 21:16
pip CVE-2026-1703 低危 24.0 26.0 pip: pip: Information disclosure via path traversal when installing crafted wheel archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703

镜像层: sha256:bffa3c30a00bb534b2e3637bd26d9a75e095172be7d0b33924f1a61bf6cb2120

发布日期: 2026-02-02 15:16 修改: 2026-04-15 00:35