docker.io/whyour/qinglong:2.17.2 linux/amd64

docker.io/whyour/qinglong:2.17.2 - Trivy安全扫描结果 扫描时间: 2024-11-04 22:29
全部漏洞信息
低危漏洞:16 中危漏洞:61 高危漏洞:42 严重漏洞:8

系统OS: alpine 3.18.6 扫描引擎: Trivy 扫描时间: 2024-11-04 22:29

docker.io/whyour/qinglong:2.17.2 (alpine 3.18.6) (alpine)
低危漏洞:12 中危漏洞:37 高危漏洞:20 严重漏洞:5
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
git CVE-2024-32002 严重 2.40.1-r0 2.40.3-r0 git: Recursive clones RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32002

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 19:15 修改: 2024-06-26 10:15
git-perl CVE-2024-32002 严重 2.40.1-r0 2.40.3-r0 git: Recursive clones RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32002

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 19:15 修改: 2024-06-26 10:15
libexpat CVE-2024-45491 严重 2.6.0-r0 2.6.3-r0 libexpat: Integer Overflow or Wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
libexpat CVE-2024-45492 严重 2.6.0-r0 2.6.3-r0 libexpat: integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
perl-git CVE-2024-32002 严重 2.40.1-r0 2.40.3-r0 git: Recursive clones RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32002

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 19:15 修改: 2024-06-26 10:15
curl CVE-2024-6197 高危 8.5.0-r0 8.9.0-r0 curl: freeing stack buffer in utf8asn1str

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6197

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-07-24 08:15 修改: 2024-08-26 15:25
git-perl CVE-2024-32004 高危 2.40.1-r0 2.40.3-r0 git: RCE while cloning local repos

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32004

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 19:15 修改: 2024-06-26 10:15
git-perl CVE-2024-32465 高危 2.40.1-r0 2.40.3-r0 git: additional local RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32465

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 20:15 修改: 2024-06-26 10:15
libcurl CVE-2024-2398 高危 8.5.0-r0 8.7.1-r0 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
libcurl CVE-2024-6197 高危 8.5.0-r0 8.9.0-r0 curl: freeing stack buffer in utf8asn1str

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6197

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-07-24 08:15 修改: 2024-08-26 15:25
curl CVE-2024-2398 高危 8.5.0-r0 8.7.1-r0 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
git CVE-2024-32004 高危 2.40.1-r0 2.40.3-r0 git: RCE while cloning local repos

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32004

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 19:15 修改: 2024-06-26 10:15
libexpat CVE-2024-28757 高危 2.6.0-r0 2.6.2-r0 expat: XML Entity Expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-10 05:15 修改: 2024-05-01 19:15
libexpat CVE-2024-45490 高危 2.6.0-r0 2.6.3-r0 libexpat: Negative Length Parsing Vulnerability in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-08-30 03:15 修改: 2024-10-18 12:24
nodejs CVE-2024-27983 高危 18.19.1-r0 18.20.1-r0 nodejs: CONTINUATION frames DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27983

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-04-09 01:15 修改: 2024-06-10 17:16
openssh CVE-2024-6387 高危 9.3_p2-r1 9.3_p2-r2 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
openssh-client-common CVE-2024-6387 高危 9.3_p2-r1 9.3_p2-r2 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
openssh-client-default CVE-2024-6387 高危 9.3_p2-r1 9.3_p2-r2 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
openssh-keygen CVE-2024-6387 高危 9.3_p2-r1 9.3_p2-r2 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
openssh-server CVE-2024-6387 高危 9.3_p2-r1 9.3_p2-r2 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
openssh-server-common CVE-2024-6387 高危 9.3_p2-r1 9.3_p2-r2 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
openssh-sftp-server CVE-2024-6387 高危 9.3_p2-r1 9.3_p2-r2 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
git CVE-2024-32465 高危 2.40.1-r0 2.40.3-r0 git: additional local RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32465

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 20:15 修改: 2024-06-26 10:15
perl-git CVE-2024-32004 高危 2.40.1-r0 2.40.3-r0 git: RCE while cloning local repos

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32004

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 19:15 修改: 2024-06-26 10:15
perl-git CVE-2024-32465 高危 2.40.1-r0 2.40.3-r0 git: additional local RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32465

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 20:15 修改: 2024-06-26 10:15
libcrypto3 CVE-2024-5535 中危 3.1.4-r5 3.1.6-r0 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libcrypto3 CVE-2024-6119 中危 3.1.4-r5 3.1.7-r0 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
c-ares CVE-2024-25629 中危 1.19.1-r0 1.19.1-r1 c-ares: Out of bounds read in ares__read_line()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25629

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-02-23 15:15 修改: 2024-04-19 23:15
busybox CVE-2023-42363 中危 1.36.1-r5 1.36.1-r7 busybox: use-after-free in awk

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2023-11-27 22:15 修改: 2023-11-30 05:06
libcurl CVE-2024-0853 中危 8.5.0-r0 8.6.0-r0 curl: OCSP verification bypass with TLS session reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0853

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-02-03 14:15 修改: 2024-05-03 13:15
libcurl CVE-2024-2004 中危 8.5.0-r0 8.7.1-r0 curl: Usage of disabled protocol

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2004

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-27 08:15 修改: 2024-10-29 16:35
libcurl CVE-2024-2379 中危 8.5.0-r0 8.7.1-r0 curl: QUIC certificate check bypass with wolfSSL

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
libcurl CVE-2024-2466 中危 8.5.0-r0 8.7.1-r0 curl: TLS certificate check bypass with mbedTLS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2466

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-27 08:15 修改: 2024-08-23 19:35
libcurl CVE-2024-6874 中危 8.5.0-r0 8.9.0-r0 curl: macidn punycode buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6874

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-07-24 08:15 修改: 2024-09-10 15:27
busybox CVE-2023-42364 中危 1.36.1-r5 1.36.1-r7 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2023-11-27 23:15 修改: 2024-10-11 21:36
curl CVE-2024-0853 中危 8.5.0-r0 8.6.0-r0 curl: OCSP verification bypass with TLS session reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0853

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-02-03 14:15 修改: 2024-05-03 13:15
curl CVE-2024-2004 中危 8.5.0-r0 8.7.1-r0 curl: Usage of disabled protocol

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2004

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-27 08:15 修改: 2024-10-29 16:35
curl CVE-2024-2379 中危 8.5.0-r0 8.7.1-r0 curl: QUIC certificate check bypass with wolfSSL

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
libssl3 CVE-2024-4603 中危 3.1.4-r5 3.1.5-r0 openssl: Excessive time spent checking DSA keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2024-05-16 16:15 修改: 2024-10-14 15:15
libssl3 CVE-2024-4741 中危 3.1.4-r5 3.1.6-r0 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl3 CVE-2024-5535 中危 3.1.4-r5 3.1.6-r0 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libssl3 CVE-2024-6119 中危 3.1.4-r5 3.1.7-r0 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
curl CVE-2024-2466 中危 8.5.0-r0 8.7.1-r0 curl: TLS certificate check bypass with mbedTLS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2466

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-27 08:15 修改: 2024-08-23 19:35
nodejs CVE-2024-27982 中危 18.19.1-r0 18.20.1-r0 nodejs: HTTP Request Smuggling via Content Length Obfuscation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27982

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-07 17:15 修改: 2024-05-07 20:07
curl CVE-2024-6874 中危 8.5.0-r0 8.9.0-r0 curl: macidn punycode buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6874

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-07-24 08:15 修改: 2024-09-10 15:27
busybox CVE-2023-42365 中危 1.36.1-r5 1.36.1-r7 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
busybox CVE-2023-42366 中危 1.36.1-r5 1.36.1-r6 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
busybox-binsh CVE-2023-42363 中危 1.36.1-r5 1.36.1-r7 busybox: use-after-free in awk

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2023-11-27 22:15 修改: 2023-11-30 05:06
busybox-binsh CVE-2023-42364 中危 1.36.1-r5 1.36.1-r7 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2023-11-27 23:15 修改: 2024-10-11 21:36
busybox-binsh CVE-2023-42365 中危 1.36.1-r5 1.36.1-r7 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
busybox-binsh CVE-2023-42366 中危 1.36.1-r5 1.36.1-r6 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
openssl CVE-2024-4603 中危 3.1.4-r5 3.1.5-r0 openssl: Excessive time spent checking DSA keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-16 16:15 修改: 2024-10-14 15:15
openssl CVE-2024-4741 中危 3.1.4-r5 3.1.6-r0 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl CVE-2024-5535 中危 3.1.4-r5 3.1.6-r0 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
openssl CVE-2024-6119 中危 3.1.4-r5 3.1.7-r0 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
krb5-libs CVE-2023-36054 中危 1.20.1-r1 1.20.2-r0 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:0b331e1bec153919d9a2612c129595c8e27d3ac1786d4f8c9ee3817e339f6178

发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
libcrypto3 CVE-2024-4603 中危 3.1.4-r5 3.1.5-r0 openssl: Excessive time spent checking DSA keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2024-05-16 16:15 修改: 2024-10-14 15:15
libcrypto3 CVE-2024-4741 中危 3.1.4-r5 3.1.6-r0 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
ssl_client CVE-2023-42363 中危 1.36.1-r5 1.36.1-r7 busybox: use-after-free in awk

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2023-11-27 22:15 修改: 2023-11-30 05:06
ssl_client CVE-2023-42364 中危 1.36.1-r5 1.36.1-r7 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2023-11-27 23:15 修改: 2024-10-11 21:36
ssl_client CVE-2023-42365 中危 1.36.1-r5 1.36.1-r7 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
ssl_client CVE-2023-42366 中危 1.36.1-r5 1.36.1-r6 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
git-perl CVE-2024-32020 低危 2.40.1-r0 2.40.3-r0 git: insecure hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32020

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 19:15 修改: 2024-06-10 18:15
openssl CVE-2024-2511 低危 3.1.4-r5 3.1.4-r6 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
openssl CVE-2024-9143 低危 3.1.4-r5 3.1.7-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53
git-perl CVE-2024-32021 低危 2.40.1-r0 2.40.3-r0 git: symlink bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32021

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 20:15 修改: 2024-06-26 10:15
libssl3 CVE-2024-2511 低危 3.1.4-r5 3.1.4-r6 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl3 CVE-2024-9143 低危 3.1.4-r5 3.1.7-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53
perl-git CVE-2024-32020 低危 2.40.1-r0 2.40.3-r0 git: insecure hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32020

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 19:15 修改: 2024-06-10 18:15
perl-git CVE-2024-32021 低危 2.40.1-r0 2.40.3-r0 git: symlink bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32021

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 20:15 修改: 2024-06-26 10:15
git CVE-2024-32021 低危 2.40.1-r0 2.40.3-r0 git: symlink bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32021

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 20:15 修改: 2024-06-26 10:15
libcrypto3 CVE-2024-2511 低危 3.1.4-r5 3.1.4-r6 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libcrypto3 CVE-2024-9143 低危 3.1.4-r5 3.1.7-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:aedc3bda2944bb9bcb6c3d475bee8b460db9a9b0f3e0b33a6ed2fd1ae0f1d445

发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53
git CVE-2024-32020 低危 2.40.1-r0 2.40.3-r0 git: insecure hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32020

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 19:15 修改: 2024-06-10 18:15
Node.js (node-pkg)
低危漏洞:4 中危漏洞:15 高危漏洞:19 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
protobufjs CVE-2023-36665 严重 7.2.3 7.2.5, 6.11.4 protobufjs: prototype pollution using user-controlled protobuf message

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36665

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2023-07-05 14:15 修改: 2024-06-28 18:15
underscore CVE-2021-23358 严重 1.4.4 1.12.1 nodejs-underscore: Arbitrary code execution via the template function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23358

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2021-03-29 14:15 修改: 2023-11-07 03:30
braces CVE-2024-4068 高危 3.0.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-05-14 15:42 修改: 2024-07-03 02:07
braces CVE-2024-4068 高危 3.0.2 3.0.3 braces: fails to limit the number of characters it can handle

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4068

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-14 15:42 修改: 2024-07-03 02:07
dottie CVE-2023-26132 高危 2.0.3 2.0.4 Versions of the package dottie before 2.0.4 are vulnerable to Prototyp ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26132

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2023-06-10 05:15 修改: 2023-11-07 04:09
http-cache-semantics CVE-2022-25881 高危 4.1.0 4.1.1 http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25881

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2023-01-31 05:15 修改: 2023-11-07 03:44
http-proxy-middleware CVE-2024-21536 高危 2.0.6 2.0.7, 3.0.3 http-proxy-middleware: Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21536

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-10-19 05:15 修改: 2024-11-01 18:03
ip CVE-2024-29415 高危 2.0.0 node-ip: Incomplete fix for CVE-2023-42282

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29415

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-05-27 20:15 修改: 2024-08-16 14:35
ip CVE-2024-29415 高危 2.0.0 node-ip: Incomplete fix for CVE-2023-42282

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29415

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-05-27 20:15 修改: 2024-08-16 14:35
jsonwebtoken CVE-2022-23539 高危 8.5.1 9.0.0 jsonwebtoken: Unrestricted key type could lead to legacy keys usagen

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23539

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2022-12-23 00:15 修改: 2024-06-21 19:15
nedb CVE-2021-23395 高危 1.8.0 Prototype Pollution in nedb

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23395

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2021-06-15 20:15 修改: 2023-08-08 14:22
path-to-regexp CVE-2024-45296 高危 0.1.7 1.9.0, 0.1.10, 8.0.0, 3.3.0, 6.3.0 path-to-regexp: Backtracking regular expressions cause ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45296

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-09-09 19:15 修改: 2024-09-10 12:09
path-to-regexp CVE-2024-45296 高危 1.8.0 1.9.0, 0.1.10, 8.0.0, 3.3.0, 6.3.0 path-to-regexp: Backtracking regular expressions cause ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45296

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-09-09 19:15 修改: 2024-09-10 12:09
path-to-regexp CVE-2024-45296 高危 2.2.1 1.9.0, 0.1.10, 8.0.0, 3.3.0, 6.3.0 path-to-regexp: Backtracking regular expressions cause ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45296

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-09-09 19:15 修改: 2024-09-10 12:09
pnpm CVE-2023-37478 高危 8.3.1 7.33.4, 8.6.8 pnpm incorrectly parses tar archives relative to specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37478

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2023-08-01 12:15 修改: 2023-08-04 17:44
body-parser CVE-2024-45590 高危 1.20.1 1.20.3 body-parser: Denial of Service Vulnerability in body-parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45590

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-09-10 16:15 修改: 2024-09-20 16:26
semver CVE-2022-25883 高危 5.7.1 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2023-06-21 05:15 修改: 2023-11-07 03:44
semver CVE-2022-25883 高危 7.3.8 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2023-06-21 05:15 修改: 2023-11-07 03:44
semver CVE-2022-25883 高危 7.5.1 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2023-06-21 05:15 修改: 2023-11-07 03:44
body-parser CVE-2024-45590 高危 1.20.2 1.20.3 body-parser: Denial of Service Vulnerability in body-parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45590

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-09-10 16:15 修改: 2024-09-20 16:26
ws CVE-2024-37890 高危 7.4.6 5.2.4, 6.2.3, 7.5.10, 8.17.1 nodejs-ws: denial of service when handling a request with many HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37890

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-06-17 20:15 修改: 2024-06-20 12:44
@grpc/grpc-js CVE-2024-37168 中危 1.8.15 1.10.9, 1.9.15, 1.8.22 grps-js: allocate memory for incoming messages well above configured limits

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37168

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-06-10 22:15 修改: 2024-06-11 13:54
express CVE-2024-29041 中危 4.18.2 4.19.2, 5.0.0-beta.3 express: cause malformed URLs to be evaluated

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29041

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-03-25 21:15 修改: 2024-03-26 12:55
express CVE-2024-43796 中危 4.18.2 4.20.0, 5.0.0 express: Improper Input Handling in Express Redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43796

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-09-10 15:15 修改: 2024-09-20 16:07
follow-redirects CVE-2023-26159 中危 1.15.2 1.15.4 follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26159

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-01-02 05:15 修改: 2024-01-23 03:15
follow-redirects CVE-2024-28849 中危 1.15.2 1.15.6 follow-redirects: Possible credential leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28849

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-03-14 17:15 修改: 2024-03-23 03:15
jsonwebtoken CVE-2022-23540 中危 8.5.1 9.0.0 jsonwebtoken: Insecure default algorithm in jwt.verify() could lead to signature validation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23540

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2022-12-22 19:15 修改: 2024-06-21 19:15
jsonwebtoken CVE-2022-23541 中危 8.5.1 9.0.0 jsonwebtoken: Insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23541

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2022-12-22 18:15 修改: 2024-06-21 19:15
micromatch CVE-2024-4067 中危 4.0.5 4.0.8 micromatch: vulnerable to Regular Expression Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4067

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-05-14 15:42 修改: 2024-08-28 00:15
send CVE-2024-43799 中危 0.18.0 0.19.0 send: Code Execution Vulnerability in Send Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43799

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-09-10 15:15 修改: 2024-09-20 16:57
serve-static CVE-2024-43800 中危 1.15.0 1.16.0, 2.1.0 serve-static: Improper Sanitization in serve-static

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43800

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-09-10 15:15 修改: 2024-09-20 17:36
tar CVE-2024-28863 中危 6.1.13 6.2.1 node-tar: denial of service while parsing a tar file due to lack of folders depth validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28863

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-21 23:15 修改: 2024-06-10 17:16
tar CVE-2024-28863 中危 6.1.15 6.2.1 node-tar: denial of service while parsing a tar file due to lack of folders depth validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28863

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-03-21 23:15 修改: 2024-06-10 17:16
tough-cookie CVE-2023-26136 中危 4.0.0 4.1.3 tough-cookie: prototype pollution in cookie memstore

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26136

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2023-07-01 05:15 修改: 2024-06-21 19:15
follow-redirects CVE-2024-28849 中危 1.15.5 1.15.6 follow-redirects: Possible credential leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28849

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-14 17:15 修改: 2024-03-23 03:15
nodemailer GHSA-9h6g-pr28-7cqp 中危 6.9.3 6.9.9 nodemailer ReDoS when trying to send a specially crafted email

漏洞详情: https://github.com/advisories/GHSA-9h6g-pr28-7cqp

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
cookie CVE-2024-47764 低危 0.5.0 0.7.0 cookie: cookie accepts cookie name, path, and domain with out of bounds characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47764

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-10-04 20:15 修改: 2024-10-07 17:48
ip CVE-2023-42282 低危 2.0.0 2.0.1, 1.1.9 nodejs-ip: arbitrary code execution via the isPublic() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42282

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-02-08 17:15 修改: 2024-10-09 15:14
ip CVE-2023-42282 低危 2.0.0 2.0.1, 1.1.9 nodejs-ip: arbitrary code execution via the isPublic() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42282

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-02-08 17:15 修改: 2024-10-09 15:14
cookie CVE-2024-47764 低危 0.4.2 0.7.0 cookie: cookie accepts cookie name, path, and domain with out of bounds characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47764

镜像层: sha256:390316927d50de2b25a6e480b4edcd6a5fbb413719fa26c82bb075bcf8f79bbb

发布日期: 2024-10-04 20:15 修改: 2024-10-07 17:48
Python (python-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
setuptools CVE-2024-6345 高危 65.5.1 70.0.0 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:c2417e6d09d8d7544a77cd89c5003f9dc9218884609aaf6492aaa4bdc5098f1b

发布日期: 2024-07-15 01:15 修改: 2024-07-15 13:00
usr/local/lib/node_modules/tsx/node_modules/@esbuild/linux-x64/bin/esbuild (gobinary)
低危漏洞:0 中危漏洞:9 高危漏洞:2 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2024-24790 严重 1.20.12 1.21.11, 1.22.4 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib CVE-2023-45288 高危 1.20.12 1.21.9, 1.22.2 golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib CVE-2024-34156 高危 1.20.12 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib CVE-2023-45289 中危 1.20.12 1.21.8, 1.22.1 golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib CVE-2023-45290 中危 1.20.12 1.21.8, 1.22.1 golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib CVE-2024-24783 中危 1.20.12 1.21.8, 1.22.1 golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib CVE-2024-24784 中危 1.20.12 1.21.8, 1.22.1 golang: net/mail: comments in display names are incorrectly handled

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib CVE-2024-24785 中危 1.20.12 1.21.8, 1.22.1 golang: html/template: errors returned from MarshalJSON methods may break template escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib CVE-2024-24789 中危 1.20.12 1.21.11, 1.22.4 golang: archive/zip: Incorrect handling of certain ZIP files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib CVE-2024-24791 中危 1.20.12 1.21.12, 1.22.5 net/http: Denial of service due to improper 100-continue handling in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib CVE-2024-34155 中危 1.20.12 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-09-06 21:15 修改: 2024-09-09 13:03
stdlib CVE-2024-34158 中危 1.20.12 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:12882f79e7a9ef0fa7a4befcd2466c974d178b8a98dd5fc981157aa93a925030

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35