ghcr.io/abner1zhou/trend-kids-backend:4498582bcc593e5de39a94fcadc8489eb00de588 linux/amd64

ghcr.io/abner1zhou/trend-kids-backend:4498582bcc593e5de39a94fcadc8489eb00de588 - Trivy安全扫描结果 扫描时间: 2026-07-20 14:04
全部漏洞信息
低危漏洞:29 中危漏洞:56 高危漏洞:28 严重漏洞:5

系统OS: ubuntu 22.04 扫描引擎: Trivy 扫描时间: 2026-07-20 14:04

ghcr.io/abner1zhou/trend-kids-backend:4498582bcc593e5de39a94fcadc8489eb00de588 (ubuntu 22.04) (ubuntu)
低危漏洞:23 中危漏洞:32 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-27456 中危 1:2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
gzip CVE-2026-41991 中危 1.10-4ubuntu4.1 1.10-4ubuntu4.2 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
gzip CVE-2026-41992 中危 1.10-4ubuntu4.1 1.10-4ubuntu4.2 GNU gzip contains a global buffer overflow vulnerability in the LZH de ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
libblkid1 CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libc-bin CVE-2026-4046 中危 2.35-0ubuntu3.13 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc-bin CVE-2026-5435 中危 2.35-0ubuntu3.13 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc-bin CVE-2026-6238 中危 2.35-0ubuntu3.13 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6 CVE-2026-4046 中危 2.35-0ubuntu3.13 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc6 CVE-2026-5435 中危 2.35-0ubuntu3.13 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6 CVE-2026-6238 中危 2.35-0ubuntu3.13 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libexpat1 CVE-2025-66382 中危 2.4.7-1ubuntu0.7 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libmount1 CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libnghttp2-14 CVE-2026-58055 中危 1.43.0-1ubuntu0.3 1.43.0-1ubuntu0.4 nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade re ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
libp11-kit0 CVE-2026-13757 中危 0.24.0-6build1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
libpng16-16 CVE-2026-40930 中危 1.6.37-3ubuntu0.5 LIBPNG is a reference library for use in applications that process PNG ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40930

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2026-06-04 16:16 修改: 2026-06-17 10:45
libsmartcols1 CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
libuuid1 CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
locales CVE-2026-4046 中危 2.35-0ubuntu3.13 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
locales CVE-2026-5435 中危 2.35-0ubuntu3.13 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
locales CVE-2026-6238 中危 2.35-0ubuntu3.13 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
mount CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
p11-kit CVE-2026-13757 中危 0.24.0-6build1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
p11-kit-modules CVE-2026-13757 中危 0.24.0-6build1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
tar CVE-2025-45582 中危 1.34+dfsg-1ubuntu0.1.22.04.3 1.34+dfsg-1ubuntu0.1.22.04.4 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25
tar CVE-2026-5704 中危 1.34+dfsg-1ubuntu0.1.22.04.3 1.34+dfsg-1ubuntu0.1.22.04.5 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59
util-linux CVE-2026-27456 中危 2.37.2-4ubuntu3.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
wget CVE-2021-31879 中危 1.21.2-2ubuntu1.1 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
wget CVE-2026-15146 中危 1.21.2-2ubuntu1.1 wget: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15146

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2026-07-10 19:17 修改: 2026-07-15 19:16
wget CVE-2026-58469 中危 1.21.2-2ubuntu1.1 1.21.2-2ubuntu1.3 GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buff ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58469

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:59
wget CVE-2026-58470 中危 1.21.2-2ubuntu1.1 1.21.2-2ubuntu1.3 wget: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58470

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:01
wget CVE-2026-58471 中危 1.21.2-2ubuntu1.1 1.21.2-2ubuntu1.3 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58471

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:02
wget CVE-2026-58472 中危 1.21.2-2ubuntu1.1 1.21.2-2ubuntu1.3 wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58472

镜像层: sha256:ce097ce6053f3af97846c221c1094407ad1404fb69088cc9562dbde9c38f5698

发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:58
libncursesw6 CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
libncursesw6 CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libgcc-s1 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
login CVE-2023-29383 低危 1:4.8.1-2ubuntu2.2 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49
login CVE-2024-56433 低危 1:4.8.1-2ubuntu2.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libgcrypt20 CVE-2024-2236 低危 1.9.4-3ubuntu3.2 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
ncurses-base CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
ncurses-base CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
ncurses-bin CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
ncurses-bin CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libpcre2-8-0 CVE-2022-41409 低危 10.39-3ubuntu0.1 pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
libpcre3 CVE-2017-11164 低危 2:8.39-13ubuntu0.22.04.1 pcre: OP_KETRMAX feature in the match function in pcre_exec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2017-07-11 03:29 修改: 2026-06-17 01:01
passwd CVE-2023-29383 低危 1:4.8.1-2ubuntu2.2 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49
passwd CVE-2024-56433 低危 1:4.8.1-2ubuntu2.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
gcc-12-base CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
libncurses6 CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
libstdc++6 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
libsystemd0 CVE-2026-40228 低危 249.11-0ubuntu3.21 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libtinfo6 CVE-2023-50495 低危 6.3-2ubuntu0.1 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
libtinfo6 CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libudev1 CVE-2026-40228 低危 249.11-0ubuntu3.21 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libncurses6 CVE-2025-69720 低危 6.3-2ubuntu0.1 6.3-2ubuntu0.2 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libzstd1 CVE-2022-4899 低危 1.4.8+dfsg-3build1 zstd: mysql: buffer overrun in util.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899

镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d

发布日期: 2023-03-31 20:15 修改: 2026-06-17 05:22
Java (jar)
低危漏洞:6 中危漏洞:24 高危漏洞:28 严重漏洞:5
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41293 严重 11.0.18 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43512 严重 11.0.18 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43515 严重 11.0.18 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: tomcat: Improper Authorization allows security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.springframework.boot:spring-boot CVE-2026-40976 严重 4.0.3 4.0.6 Spring Boot: Spring Boot: Security bypass due to ineffective default web security

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40976

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-28 00:16 修改: 2026-07-15 02:21
org.springframework.security:spring-security-web CVE-2026-22732 严重 7.0.3 6.5.9, 7.0.4 Spring Security: Spring Security: Security policy bypass and information disclosure due to unwritten HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22732

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-03-19 23:16 修改: 2026-06-17 10:20
io.netty:netty-handler CVE-2026-44249 高危 4.2.10.Final 4.2.15.Final, 4.1.135.Final netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-11 22:16 修改: 2026-07-15 02:21
io.netty:netty-handler CVE-2026-45416 高危 4.2.10.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-12 15:16 修改: 2026-07-15 02:22
io.netty:netty-handler CVE-2026-50010 高危 4.2.10.Final 4.2.15.Final, 4.1.135.Final netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50010

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-12 16:16 修改: 2026-07-15 01:16
io.netty:netty-resolver-dns CVE-2026-45674 高危 4.2.10.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-12 15:16 修改: 2026-07-15 02:22
io.netty:netty-resolver-dns CVE-2026-47691 高危 4.2.10.Final 4.2.15.Final, 4.1.135.Final io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-12 16:16 修改: 2026-07-15 02:22
org.apache.commons:commons-compress CVE-2021-35515 高危 1.19 1.21 apache-commons-compress: infinite loop when reading a specially crafted 7Z archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35515

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57
org.apache.commons:commons-compress CVE-2021-35516 高危 1.19 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35516

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57
org.apache.commons:commons-compress CVE-2021-35517 高危 1.19 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35517

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:57
org.apache.commons:commons-compress CVE-2021-36090 高危 1.19 1.21 apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36090

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2021-07-13 08:15 修改: 2026-06-17 03:58
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.20.2 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.20.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-23 21:17 修改: 2026-07-17 13:18
com.thoughtworks.xstream:xstream CVE-2024-47072 高危 1.4.20 1.4.21 com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47072

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2024-11-08 00:15 修改: 2026-06-17 07:56
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-24880 高危 11.0.18 9.0.116, 10.1.52, 11.0.20 Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-29129 高危 11.0.18 9.0.116, 10.1.53, 11.0.20 Apache Tomcat: Apache Tomcat: Configured cipher preference order not preserved

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29129

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:29
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-34483 高危 11.0.18 9.0.116, 10.1.54, 11.0.21 Apache Tomcat: Apache Tomcat: Information disclosure due to improper encoding in JsonAccessLogValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34483

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:39
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41284 高危 11.0.18 9.0.118, 10.1.55, 11.0.22 tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-42498 高危 11.0.18 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43513 高危 11.0.18 9.0.118, 10.1.55, 11.0.22 tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
org.ini4j:ini4j CVE-2022-41404 高危 0.5.4 org.ini4j: unspecified DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41404

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2022-10-11 23:15 修改: 2026-06-17 05:03
commons-io:commons-io CVE-2024-47554 高危 2.8.0 2.14.0 apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47554

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2024-10-03 12:15 修改: 2026-06-17 07:57
org.springframework.boot:spring-boot CVE-2026-40973 高危 4.0.3 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-28 00:16 修改: 2026-06-17 10:45
org.springframework.security:spring-security-config CVE-2026-22753 高危 7.0.3 7.0.5 Spring Security: Spring Security: Security bypass due to incorrect servlet path matching

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22753

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-22 06:16 修改: 2026-06-17 10:20
org.springframework.security:spring-security-config CVE-2026-22754 高危 7.0.3 7.0.5 Spring Security: Spring Security: Authorization bypass due to incorrect servlet path matching

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22754

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-22 06:16 修改: 2026-07-15 02:18
io.netty:netty-codec-dns CVE-2026-42579 高危 4.2.10.Final 4.2.13.Final, 4.1.133.Final netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-05-13 19:17 修改: 2026-07-15 02:21
tools.jackson.core:jackson-core CVE-2026-29062 高危 3.0.4 3.1.0 jackson-core: jackson-core: Denial of Service via excessive JSON nesting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29062

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-03-06 08:16 修改: 2026-07-15 02:19
tools.jackson.core:jackson-core GHSA-2m67-wjpj-xhg9 高危 3.0.4 3.1.1 Jackson Core: Document length constraint bypass in blocking, async, and DataInput parsers

漏洞详情: https://github.com/advisories/GHSA-2m67-wjpj-xhg9

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-04 04:17 修改: 2026-04-08 22:42
tools.jackson.core:jackson-databind CVE-2026-54512 高危 3.0.4 3.1.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
tools.jackson.core:jackson-databind CVE-2026-54513 高危 3.0.4 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-23 21:17 修改: 2026-07-17 13:18
org.bouncycastle:bcpkix-jdk15on CVE-2026-5588 中危 1.70 1.84 bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-15 10:16 修改: 2026-07-16 12:18
org.bouncycastle:bcprov-jdk15on CVE-2023-33201 中危 1.70 bouncycastle: potential blind LDAP injection attack using a self-signed certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33201

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2023-07-05 03:15 修改: 2026-06-17 06:01
org.bouncycastle:bcprov-jdk15on CVE-2024-29857 中危 1.70 1.78 org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2024-05-14 15:17 修改: 2026-06-17 07:23
org.bouncycastle:bcprov-jdk15on CVE-2024-30171 中危 1.70 1.78 bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-30171

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2024-05-14 15:21 修改: 2026-06-17 07:26
org.bouncycastle:bcprov-jdk15on CVE-2024-34447 中危 1.70 1.78 org.bouncycastle: Use of Incorrectly-Resolved Name or Reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34447

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2024-05-03 16:15 修改: 2026-06-17 07:33
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.20.2 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.20.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.ruoyi:ruoyi-common CVE-2022-4348 中危 3.9.2 RuoYi-Cloud Cross-site Scripting vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4348

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2022-12-08 08:15 修改: 2026-06-17 05:20
org.apache.commons:commons-compress CVE-2024-25710 中危 1.19 1.26.0 commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25710

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2024-02-19 09:15 修改: 2026-06-17 07:16
org.apache.poi:poi-ooxml CVE-2025-31672 中危 4.1.2 5.4.0 org.apache.poi/poi-ooxml: Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31672

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2025-04-09 12:15 修改: 2026-06-17 09:10
org.springframework.security:spring-security-core CVE-2026-22751 中危 7.0.3 6.5.10, 7.0.5 Spring Security: JdbcOneTimeTokenService: Spring Security: Authentication bypass due to race condition in One-Time Token login

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22751

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-21 19:16 修改: 2026-06-17 10:20
io.netty:netty-resolver-dns CVE-2026-45673 中危 4.2.10.Final 4.2.15.Final, 4.1.135.Final netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-12 15:16 修改: 2026-06-17 10:52
org.springframework.security:spring-security-web CVE-2026-22747 中危 7.0.3 7.0.5 Spring Security: Spring Security: User impersonation via malformed X.509 certificate Common Name (CN) values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22747

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-22 06:16 修改: 2026-07-15 02:18
org.springframework:spring-webmvc CVE-2026-22737 中危 7.0.5 7.0.6, 6.2.17 Spring Framework: Spring Framework: Information disclosure via Java scripting engine enabled template views

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22737

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc CVE-2026-22745 中危 7.0.5 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.20.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-25854 中危 11.0.18 9.0.116, 10.1.53, 11.0.20 Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25854

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:25
tools.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 3.0.4 3.1.0 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-32990 中危 11.0.18 9.0.116, 10.1.53, 11.0.20 Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32990

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:36
org.bouncycastle:bcpkix-jdk15on CVE-2025-8916 中危 1.70 1.79 org.bouncycastle: BouncyCastle denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8916

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2025-08-13 10:15 修改: 2026-06-17 10:07
tools.jackson.core:jackson-databind CVE-2026-54514 中危 3.0.4 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
tools.jackson.core:jackson-databind CVE-2026-54516 中危 3.0.4 3.1.4 jackson-databind: jackson-databind: Security bypass due to improper handling of renamed properties

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54516

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:52
tools.jackson.core:jackson-databind CVE-2026-54517 中危 3.0.4 3.1.4 jackson-databind: jackson-databind: Information disclosure via improper JsonView filter application

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54517

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:51
tools.jackson.core:jackson-databind CVE-2026-54518 中危 3.0.4 3.1.4 jackson-databind: jackson-databind: Information disclosure and data manipulation via view-based access control bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54518

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-23 22:16 修改: 2026-06-27 20:49
org.springframework.security:spring-security-core CVE-2026-22746 低危 7.0.3 6.5.10, 7.0.5 Spring Security: Spring Security: Timing attack defense bypass allows information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22746

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-22 06:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc CVE-2026-22735 低危 7.0.5 7.0.6, 6.2.17 org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring MVC and WebFlux: Stream corruption vulnerability when using Server-Sent Events

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22735

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-03-20 00:16 修改: 2026-06-17 10:20
org.springframework:spring-webmvc CVE-2026-22741 低危 7.0.5 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20
ch.qos.logback:logback-core CVE-2026-10532 低危 1.5.32 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-06-01 13:16 修改: 2026-06-17 10:12
ch.qos.logback:logback-core CVE-2026-9828 低危 1.5.32 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05
org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43514 低危 11.0.18 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514

镜像层: sha256:2aee9362b1535fcea126704c0c44f979fdd8ecc907b81b4ac8055da5f1b92014

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×