ghcr.io/berriai/litellm:v1.84.10 linux/amd64

ghcr.io/berriai/litellm:v1.84.10 - Trivy安全扫描结果 扫描时间: 2026-08-21 09:12
全部漏洞信息
低危漏洞:14 中危漏洞:91 高危漏洞:59 严重漏洞:2

系统OS: wolfi 20230201 扫描引擎: Trivy 扫描时间: 2026-08-21 09:12

ghcr.io/berriai/litellm:v1.84.10 (wolfi 20230201) (wolfi)
低危漏洞:2 中危漏洞:27 高危漏洞:7 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
busybox CVE-2026-38753 高危 1.37.0-r61 1.38.0-r0 busybox: Busybox: Denial of Service via crafted AWK script in awk_sub() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-38753

镜像层: sha256:e4ec9eb458d81072c8fd07363e2856cf57e4b424d8545814156400ea06927cb5

发布日期: 2026-07-15 21:16 修改: 2026-07-20 16:16
busybox CVE-2026-38754 高危 1.37.0-r61 1.38.0-r0 A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-38754

镜像层: sha256:e4ec9eb458d81072c8fd07363e2856cf57e4b424d8545814156400ea06927cb5

发布日期: 2026-07-15 22:16 修改: 2026-07-22 15:16
libexpat1 CVE-2026-56408 高危 2.8.1-r1 2.8.2-r0 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
python-3.13 CVE-2026-11940 高危 3.13.14-r0 3.13.14-r2 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
python-3.13 CVE-2026-15308 高危 3.13.14-r0 3.13.14-r3 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-09 17:16 修改: 2026-08-13 01:16
python-3.13-base CVE-2026-11940 高危 3.13.14-r0 3.13.14-r2 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
python-3.13-base CVE-2026-15308 高危 3.13.14-r0 3.13.14-r3 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-09 17:16 修改: 2026-08-13 01:16
libcrypt1 CVE-2026-6791 中危 2.43-r8 2.43-r10 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:469fc7229c4df05f818b17c0116a45104c2597d1d9ceac238d2f8fae25cd55fb

发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18
busybox CVE-2026-38752 中危 1.37.0-r61 1.38.0-r1 busybox: BusyBox: Denial of Service via crafted AWK script

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-38752

镜像层: sha256:e4ec9eb458d81072c8fd07363e2856cf57e4b424d8545814156400ea06927cb5

发布日期: 2026-07-15 22:16 修改: 2026-07-20 16:16
libexpat1 CVE-2026-50219 中危 2.8.1-r1 2.8.2-r0 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
libexpat1 CVE-2026-56131 中危 2.8.1-r1 2.8.2-r0 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56132 中危 2.8.1-r1 2.8.2-r0 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56403 中危 2.8.1-r1 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56404 中危 2.8.1-r1 2.8.2-r0 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat1 CVE-2026-56405 中危 2.8.1-r1 2.8.2-r0 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat1 CVE-2026-56406 中危 2.8.1-r1 2.8.2-r0 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat1 CVE-2026-56407 中危 2.8.1-r1 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat1 CVE-2026-56409 中危 2.8.1-r1 2.8.2-r0 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat1 CVE-2026-56410 中危 2.8.1-r1 2.8.2-r0 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat1 CVE-2026-56411 中危 2.8.1-r1 2.8.2-r0 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat1 CVE-2026-56412 中危 2.8.1-r1 2.8.2-r0 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libnghttp2-14 CVE-2026-58055 中危 1.69.0-r0 1.70.0-r0 nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
busybox CVE-2026-38755 中危 1.37.0-r61 1.38.0-r0 busybox: Busybox: Denial of Service via heap overflow in evalcommand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-38755

镜像层: sha256:e4ec9eb458d81072c8fd07363e2856cf57e4b424d8545814156400ea06927cb5

发布日期: 2026-07-15 22:16 修改: 2026-07-20 16:16
glibc CVE-2026-6791 中危 2.43-r8 2.43-r10 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:469fc7229c4df05f818b17c0116a45104c2597d1d9ceac238d2f8fae25cd55fb

发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18
python-3.13 CVE-2025-15366 中危 3.13.14-r0 3.13.15-r0 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16
python-3.13 CVE-2026-0864 中危 3.13.14-r0 3.13.14-r2 python: cpython: Python configparser: Configuration injection via crafted multi-line input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52
python-3.13 CVE-2026-11972 中危 3.13.14-r0 3.13.14-r2 python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
python-3.13 CVE-2026-4360 中危 3.13.14-r0 3.13.14-r2 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
glibc-locale-posix CVE-2026-6791 中危 2.43-r8 2.43-r10 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:469fc7229c4df05f818b17c0116a45104c2597d1d9ceac238d2f8fae25cd55fb

发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18
ld-linux CVE-2026-6791 中危 2.43-r8 2.43-r10 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:469fc7229c4df05f818b17c0116a45104c2597d1d9ceac238d2f8fae25cd55fb

发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18
python-3.13-base CVE-2025-15366 中危 3.13.14-r0 3.13.15-r0 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-01-20 22:15 修改: 2026-08-06 01:16
python-3.13-base CVE-2026-0864 中危 3.13.14-r0 3.13.14-r2 python: cpython: Python configparser: Configuration injection via crafted multi-line input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0864

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-23 18:17 修改: 2026-08-18 17:52
python-3.13-base CVE-2026-11972 中危 3.13.14-r0 3.13.14-r2 python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11972

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-23 23:16 修改: 2026-08-13 01:16
python-3.13-base CVE-2026-4360 中危 3.13.14-r0 3.13.14-r2 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16
python-3.13 CVE-2026-6879 低危 3.13.14-r0 3.13.15-r0 python: Python: Performance degradation in XML processing due to quadratic time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16
python-3.13-base CVE-2026-6879 低危 3.13.14-r0 3.13.15-r0 python: Python: Performance degradation in XML processing due to quadratic time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6879

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-28 15:17 修改: 2026-08-13 01:16
openssl CVE-2026-54876 未知 3.6.3-r2 3.6.3-r4 Issue summary: A malicious TLS server can cause a memory leak in a TLS ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54876

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-08-05 15:16 修改: 2026-08-05 20:17
libcrypto3 CVE-2026-54876 未知 3.6.3-r2 3.6.3-r4 Issue summary: A malicious TLS server can cause a memory leak in a TLS ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54876

镜像层: sha256:d4abef11f918ff59ff893bea14e311f163533b1f71ace50272995f3aa79b51ce

发布日期: 2026-08-05 15:16 修改: 2026-08-05 20:17
libssl3 CVE-2026-54876 未知 3.6.3-r2 3.6.3-r4 Issue summary: A malicious TLS server can cause a memory leak in a TLS ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54876

镜像层: sha256:d4abef11f918ff59ff893bea14e311f163533b1f71ace50272995f3aa79b51ce

发布日期: 2026-08-05 15:16 修改: 2026-08-05 20:17
Node.js (node-pkg)
低危漏洞:0 中危漏洞:13 高危漏洞:10 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
tar CVE-2026-59873 严重 7.5.11 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
tar CVE-2026-59873 严重 7.5.11 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
brace-expansion CVE-2026-14257 高危 5.0.5 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-14257 高危 5.0.5 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-69152 高危 5.0.5 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-69152 高危 5.0.5 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
ip-address CVE-2026-69192 高危 10.1.0 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
sigstore CVE-2026-48815 高危 4.1.0 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
brace-expansion CVE-2026-13149 高危 5.0.5 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-13149 高危 5.0.5 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
tar CVE-2026-59874 高危 7.5.11 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-59874 高危 7.5.11 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
@sigstore/verify CVE-2026-48816 中危 3.1.0 3.1.1 sigstore-js: github.com/sigstore/sigstore-js: sigstore-js: Insufficient verification of data authenticity allows timestamp manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48816

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
brace-expansion CVE-2026-45149 中危 5.0.5 5.0.6 brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
brace-expansion CVE-2026-45149 中危 5.0.5 5.0.6 brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
@sigstore/core CVE-2026-48758 中危 3.2.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
ip-address CVE-2026-42338 中危 10.1.0 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-05-12 20:16 修改: 2026-08-19 12:18
tar CVE-2026-53655 中危 7.5.11 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-53655 中危 7.5.11 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 7.5.11 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59871 中危 7.5.11 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 7.5.11 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar CVE-2026-59875 中危 7.5.11 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
tar GHSA-r292-9mhp-454m 中危 7.5.11 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
tar GHSA-r292-9mhp-454m 中危 7.5.11 7.5.21 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

漏洞详情: https://github.com/advisories/GHSA-r292-9mhp-454m

镜像层: sha256:c1ea36d282bb024cb26eb85fcfde5c07ab191337c0a02e600c9fe5895e94275f

发布日期: 2026-07-24 16:26 修改: 2026-07-24 16:26
Python (python-pkg)
低危漏洞:12 中危漏洞:49 高危漏洞:42 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
PyJWT CVE-2026-48526 高危 2.12.0 2.13.0 python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48526

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-05-28 16:16 修改: 2026-08-17 12:18
PyJWT CVE-2026-48526 高危 2.12.0 2.13.0 python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48526

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-28 16:16 修改: 2026-08-17 12:18
aiohttp CVE-2026-69244 高危 3.14.1 3.14.3 aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69244

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-08-03 21:16 修改: 2026-08-04 15:16
aiohttp CVE-2026-69244 高危 3.14.1 3.14.3 aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69244

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-08-03 21:16 修改: 2026-08-04 15:16
cryptography CVE-2026-69247 高危 48.0.1 50.0.0 cryptography is a package designed to expose cryptographic primitives ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69247

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-08-03 22:16 修改: 2026-08-04 15:16
cryptography CVE-2026-69247 高危 48.0.1 50.0.0 cryptography is a package designed to expose cryptographic primitives ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69247

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-08-03 22:16 修改: 2026-08-04 15:16
cryptography CVE-2026-69249 高危 48.0.1 49.0.0 python-cryptography is a package designed to expose cryptographic prim ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69249

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-08-03 22:16 修改: 2026-08-04 15:16
cryptography CVE-2026-69249 高危 48.0.1 49.0.0 python-cryptography is a package designed to expose cryptographic prim ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69249

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-08-03 22:16 修改: 2026-08-04 15:16
ddtrace CVE-2026-50271 高危 2.19.0 4.8.2 dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50271

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-17 21:17 修改: 2026-07-23 18:06
ddtrace CVE-2026-50271 高危 2.19.0 4.8.2 dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50271

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-17 21:17 修改: 2026-07-23 18:06
mcp CVE-2026-52869 高危 1.26.0 1.27.2 MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52869

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-15 20:17 修改: 2026-07-17 18:06
mcp CVE-2026-52869 高危 1.26.0 1.27.2 MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52869

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-15 20:17 修改: 2026-07-17 18:06
mcp CVE-2026-52870 高危 1.26.0 1.27.2 MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52870

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-15 20:17 修改: 2026-07-17 18:07
mcp CVE-2026-52870 高危 1.26.0 1.27.2 MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52870

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-15 20:17 修改: 2026-07-17 18:07
mcp CVE-2026-59950 高危 1.26.0 1.28.1 MCP Python SDK: WebSocket server transport does not support Host/Origin validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59950

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-15 21:16 修改: 2026-07-17 18:07
mcp CVE-2026-59950 高危 1.26.0 1.28.1 MCP Python SDK: WebSocket server transport does not support Host/Origin validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59950

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-15 21:16 修改: 2026-07-17 18:07
pyasn1 CVE-2026-59884 高危 0.6.3 0.6.4 python-pyasn1: pyasn1: Denial of Service via crafted BER input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59884

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:37
pyasn1 CVE-2026-59884 高危 0.6.3 0.6.4 python-pyasn1: pyasn1: Denial of Service via crafted BER input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59884

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:37
pyasn1 CVE-2026-59885 高危 0.6.3 0.6.4 pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59885

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:38
pyasn1 CVE-2026-59885 高危 0.6.3 0.6.4 pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59885

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:38
pyasn1 CVE-2026-59886 高危 0.6.3 0.6.4 pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59886

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:38
pyasn1 CVE-2026-59886 高危 0.6.3 0.6.4 pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59886

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:38
pypdf CVE-2026-59935 高危 6.10.2 6.14.2 pypdf: pypdf: Denial of Service via crafted PDF with unterminated inline image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59935

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-08 20:16 修改: 2026-07-09 20:42
pypdf CVE-2026-59935 高危 6.10.2 6.14.2 pypdf: pypdf: Denial of Service via crafted PDF with unterminated inline image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59935

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-08 20:16 修改: 2026-07-09 20:42
pypdf CVE-2026-59936 高危 6.10.2 6.14.1 pypdf: pypdf: Denial of Service via crafted PDF inline image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59936

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-08 20:16 修改: 2026-07-09 20:41
pypdf CVE-2026-59936 高危 6.10.2 6.14.1 pypdf: pypdf: Denial of Service via crafted PDF inline image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59936

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-08 20:16 修改: 2026-07-09 20:41
python-multipart CVE-2026-53539 高危 0.0.27 0.0.30 python-multipart: Python-Multipart: Denial of Service via crafted form-urlencoded bodies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53539

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:50
python-multipart CVE-2026-53539 高危 0.0.27 0.0.30 python-multipart: Python-Multipart: Denial of Service via crafted form-urlencoded bodies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53539

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:50
setuptools CVE-2024-6345 高危 68.1.2 70.0.0 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2024-07-15 01:15 修改: 2026-06-17 08:17
setuptools CVE-2025-47273 高危 68.1.2 78.1.1 setuptools: Path Traversal Vulnerability in setuptools PackageIndex

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27
starlette CVE-2026-48818 高危 0.50.0 1.1.0 starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48818

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-17 19:18 修改: 2026-08-04 19:16
starlette CVE-2026-48818 高危 0.50.0 1.1.0 starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48818

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-17 19:18 修改: 2026-08-04 19:16
starlette CVE-2026-54283 高危 0.50.0 1.3.1 starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54283

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:16
starlette CVE-2026-54283 高危 0.50.0 1.3.1 starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54283

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:16
tornado CVE-2026-49853 高危 6.5.5 6.5.6 Tornado is a Python web framework and asynchronous networking library. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49853

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-14 21:17 修改: 2026-07-21 16:17
tornado CVE-2026-49853 高危 6.5.5 6.5.6 Tornado is a Python web framework and asynchronous networking library. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49853

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-14 21:17 修改: 2026-07-21 16:17
tornado CVE-2026-49855 高危 6.5.5 6.5.6 Tornado is a Python web framework and asynchronous networking library. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49855

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
tornado CVE-2026-49855 高危 6.5.5 6.5.6 Tornado is a Python web framework and asynchronous networking library. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49855

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
urllib3 CVE-2026-44431 高危 2.6.3 2.7.0 urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44431

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-05-13 16:16 修改: 2026-06-26 12:16
urllib3 CVE-2026-44431 高危 2.6.3 2.7.0 urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44431

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-13 16:16 修改: 2026-06-26 12:16
urllib3 CVE-2026-44432 高危 2.6.3 2.7.0 urllib3: urllib3: Denial of Service due to excessive HTTP response decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44432

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-05-13 16:16 修改: 2026-08-19 12:18
urllib3 CVE-2026-44432 高危 2.6.3 2.7.0 urllib3: urllib3: Denial of Service due to excessive HTTP response decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44432

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-13 16:16 修改: 2026-08-19 12:18
pypdf CVE-2026-48155 中危 6.10.2 6.12.0 pypdf: pypdf: Denial of Service via crafted PDF with large character offsets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48155

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:54
pypdf CVE-2026-48155 中危 6.10.2 6.12.0 pypdf: pypdf: Denial of Service via crafted PDF with large character offsets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48155

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:54
pypdf CVE-2026-48156 中危 6.10.2 6.12.0 pypdf: pypdf: Denial of Service via crafted PDF

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48156

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:54
pypdf CVE-2026-48156 中危 6.10.2 6.12.0 pypdf: pypdf: Denial of Service via crafted PDF

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48156

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:54
pypdf CVE-2026-48735 中危 6.10.2 6.12.1 pypdf: pypdf: Denial of Service via crafted PDF with large XMP metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48735

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
pypdf CVE-2026-48735 中危 6.10.2 6.12.1 pypdf: pypdf: Denial of Service via crafted PDF with large XMP metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48735

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
pypdf CVE-2026-49460 中危 6.10.2 6.12.2 pypdf: pypdf: Denial of Service via crafted PDF with FlateDecode filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49460

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-22 21:16 修改: 2026-06-25 16:51
pypdf CVE-2026-49460 中危 6.10.2 6.12.2 pypdf: pypdf: Denial of Service via crafted PDF with FlateDecode filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49460

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-22 21:16 修改: 2026-06-25 16:51
pypdf CVE-2026-49461 中危 6.10.2 6.12.2 pypdf: pypdf: Denial of Service via crafted PDF with self-referencing form XObject

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49461

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-22 21:16 修改: 2026-06-25 16:48
pypdf CVE-2026-49461 中危 6.10.2 6.12.2 pypdf: pypdf: Denial of Service via crafted PDF with self-referencing form XObject

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49461

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-22 21:16 修改: 2026-06-25 16:48
pypdf CVE-2026-54530 中危 6.10.2 6.13.0 pypdf: python-pypdf: pypdf: Denial of Service via crafted PDF processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54530

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-22 21:16 修改: 2026-06-25 16:47
pypdf CVE-2026-54530 中危 6.10.2 6.13.0 pypdf: python-pypdf: pypdf: Denial of Service via crafted PDF processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54530

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-22 21:16 修改: 2026-06-25 16:47
pypdf CVE-2026-54531 中危 6.10.2 6.13.0 pypdf: pypdf: Denial of Service via crafted PDF with outlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54531

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-22 21:16 修改: 2026-06-25 16:46
pypdf CVE-2026-54531 中危 6.10.2 6.13.0 pypdf: pypdf: Denial of Service via crafted PDF with outlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54531

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-22 21:16 修改: 2026-06-25 16:46
pypdf CVE-2026-54651 中危 6.10.2 6.13.1 pypdf: python-pypdf: pypdf: Denial of Service via crafted PDF

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54651

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-22 21:16 修改: 2026-06-24 16:41
pypdf CVE-2026-54651 中危 6.10.2 6.13.1 pypdf: python-pypdf: pypdf: Denial of Service via crafted PDF

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54651

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-22 21:16 修改: 2026-06-24 16:41
pypdf CVE-2026-59937 中危 6.10.2 6.14.0 pypdf: pypdf: Denial of Service via crafted PDF with malformed cross-reference streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59937

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-08 18:16 修改: 2026-07-09 20:39
pypdf CVE-2026-59937 中危 6.10.2 6.14.0 pypdf: pypdf: Denial of Service via crafted PDF with malformed cross-reference streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59937

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-08 18:16 修改: 2026-07-09 20:39
pypdf CVE-2026-59938 中危 6.10.2 6.14.0 pypdf: pypdf: Possible large memory usage for wrong image dimensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59938

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-08 18:16 修改: 2026-07-09 20:41
pypdf CVE-2026-59938 中危 6.10.2 6.14.0 pypdf: pypdf: Possible large memory usage for wrong image dimensions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59938

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-08 18:16 修改: 2026-07-09 20:41
pypdf CVE-2026-71852 中危 6.10.2 6.15.0 pypdf: pypdf: Denial of Service via crafted PDF with large CID font width ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71852

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-08-07 19:18 修改: 2026-08-10 13:20
pypdf CVE-2026-71852 中危 6.10.2 6.15.0 pypdf: pypdf: Denial of Service via crafted PDF with large CID font width ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71852

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-08-07 19:18 修改: 2026-08-10 13:20
pypdf CVE-2026-71870 中危 6.10.2 6.15.0 pypdf: pypdf: Denial of Service via crafted PDF with large /ToUnicode streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71870

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-08-07 20:16 修改: 2026-08-10 13:20
pypdf CVE-2026-71870 中危 6.10.2 6.15.0 pypdf: pypdf: Denial of Service via crafted PDF with large /ToUnicode streams

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71870

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-08-07 20:16 修改: 2026-08-10 13:20
pypdf GHSA-jm82-fx9c-mx94 中危 6.10.2 6.13.3 pypdf: Missing stream length values ignore defined limits

漏洞详情: https://github.com/advisories/GHSA-jm82-fx9c-mx94

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-18 14:28 修改: 2026-06-18 14:28
pypdf GHSA-jm82-fx9c-mx94 中危 6.10.2 6.13.3 pypdf: Missing stream length values ignore defined limits

漏洞详情: https://github.com/advisories/GHSA-jm82-fx9c-mx94

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-18 14:28 修改: 2026-06-18 14:28
aiohttp CVE-2026-69243 中危 3.14.1 3.14.2 aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69243

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-08-03 21:16 修改: 2026-08-05 16:17
aiohttp CVE-2026-69243 中危 3.14.1 3.14.2 aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69243

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-08-03 21:16 修改: 2026-08-05 16:17
PyJWT CVE-2026-48523 中危 2.12.0 2.13.0 python-pyjwt: PyJWT: Verifier-side algorithm bypass leads to unauthorized information access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48523

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
PyJWT CVE-2026-48523 中危 2.12.0 2.13.0 python-pyjwt: PyJWT: Verifier-side algorithm bypass leads to unauthorized information access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48523

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
setuptools CVE-2026-59890 中危 68.1.2 83.0.0 setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
PyJWT CVE-2026-48525 中危 2.12.0 2.13.0 python-pyjwt: PyJWT: Denial of Service via processing of crafted detached JWS tokens

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48525

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
PyJWT CVE-2026-48525 中危 2.12.0 2.13.0 python-pyjwt: PyJWT: Denial of Service via processing of crafted detached JWS tokens

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48525

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
cryptography CVE-2026-69248 中危 48.0.1 49.0.0 cryptography is a package designed to expose cryptographic primitives ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69248

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-08-03 22:16 修改: 2026-08-04 16:16
cryptography CVE-2026-69248 中危 48.0.1 49.0.0 cryptography is a package designed to expose cryptographic primitives ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69248

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-08-03 22:16 修改: 2026-08-04 16:16
starlette CVE-2026-48710 中危 0.50.0 1.0.1 starlette: Starlette: Security restriction bypass via malformed HTTP Host header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48710

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-05-26 22:16 修改: 2026-08-10 13:19
starlette CVE-2026-48710 中危 0.50.0 1.0.1 starlette: Starlette: Security restriction bypass via malformed HTTP Host header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48710

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-26 22:16 修改: 2026-08-10 13:19
starlette CVE-2026-48817 中危 0.50.0 1.1.0 starlette: Starlette: Information disclosure and unintended method execution via non-standard HTTP methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48817

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-17 20:17 修改: 2026-06-26 19:18
starlette CVE-2026-48817 中危 0.50.0 1.1.0 starlette: Starlette: Information disclosure and unintended method execution via non-standard HTTP methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48817

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-17 20:17 修改: 2026-06-26 19:18
PyJWT CVE-2026-48522 中危 2.12.0 2.13.0 python-pyjwt: PyJWT: Server-Side Request Forgery (SSRF) via uncontrolled URL fetching in PyJWKClient

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48522

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
PyJWT CVE-2026-48522 中危 2.12.0 2.13.0 python-pyjwt: PyJWT: Server-Side Request Forgery (SSRF) via uncontrolled URL fetching in PyJWKClient

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48522

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
pydantic-settings GHSA-4xgf-cpjx-pc3j 中危 2.14.0 2.14.2 pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

漏洞详情: https://github.com/advisories/GHSA-4xgf-cpjx-pc3j

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-19 22:10 修改: 2026-06-19 22:10
pydantic-settings GHSA-4xgf-cpjx-pc3j 中危 2.14.0 2.14.2 pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

漏洞详情: https://github.com/advisories/GHSA-4xgf-cpjx-pc3j

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-19 22:10 修改: 2026-06-19 22:10
tornado GHSA-pw6j-qg29-8w7f 中危 6.5.5 6.5.7 Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse

漏洞详情: https://github.com/advisories/GHSA-pw6j-qg29-8w7f

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-15 20:37 修改: 2026-06-15 20:37
tornado GHSA-pw6j-qg29-8w7f 中危 6.5.5 6.5.7 Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse

漏洞详情: https://github.com/advisories/GHSA-pw6j-qg29-8w7f

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-15 20:37 修改: 2026-06-15 20:37
idna CVE-2026-45409 中危 3.13 3.15 python-idna: idna: Denial of Service via specially crafted long inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10
idna CVE-2026-45409 中危 3.13 3.15 python-idna: idna: Denial of Service via specially crafted long inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10
aiohttp CVE-2026-59881 中危 3.14.1 3.14.2 aiohttp: AIOHTTP: Denial of Service via unnegotiated WebSocket compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59881

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-30 19:18 修改: 2026-07-30 20:03
aiohttp CVE-2026-59881 中危 3.14.1 3.14.2 aiohttp: AIOHTTP: Denial of Service via unnegotiated WebSocket compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59881

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-30 19:18 修改: 2026-07-30 20:03
python-multipart CVE-2026-53537 低危 0.0.27 0.0.30 multipart: Python-Multipart: Information disclosure via header parsing discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53537

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:54
python-multipart CVE-2026-53538 低危 0.0.27 0.0.30 python-multipart: Python-Multipart: Information disclosure due to parser differential in form data handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53538

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:52
python-multipart CVE-2026-53538 低危 0.0.27 0.0.30 python-multipart: Python-Multipart: Information disclosure due to parser differential in form data handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53538

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:52
python-multipart CVE-2026-53540 低危 0.0.27 0.0.31 python-multipart: Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53540

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:50
python-multipart CVE-2026-53540 低危 0.0.27 0.0.31 python-multipart: Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53540

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:50
PyJWT CVE-2026-48524 低危 2.12.0 2.13.0 python-pyjwt: PyJWT: Denial of Service via unverified JSON Web Token key IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48524

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
tornado CVE-2026-49854 低危 6.5.5 6.5.6 tornado: Tornado: Information disclosure via out-of-bounds read in websocket_mask

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49854

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-07-14 21:17 修改: 2026-07-15 19:50
tornado CVE-2026-49854 低危 6.5.5 6.5.6 tornado: Tornado: Information disclosure via out-of-bounds read in websocket_mask

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49854

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-07-14 21:17 修改: 2026-07-15 19:50
PyJWT CVE-2026-48524 低危 2.12.0 2.13.0 python-pyjwt: PyJWT: Denial of Service via unverified JSON Web Token key IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48524

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
python-multipart CVE-2026-53537 低危 0.0.27 0.0.30 multipart: Python-Multipart: Information disclosure via header parsing discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53537

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:54
starlette CVE-2026-54282 低危 0.50.0 1.3.0 starlette: Starlette: Information disclosure due to improper HTTP request path validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54282

镜像层: sha256:70f4d5a289e692b40d0fad309ef2545670c3ee08d868ed591ec3838f7fdcc3ff

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:18
starlette CVE-2026-54282 低危 0.50.0 1.3.0 starlette: Starlette: Information disclosure due to improper HTTP request path validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54282

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:18
root/.cache/uv/archive-v0/zZf8_5NwhLEv4l8Pd2gBx/uv_build-0.11.8.data/scripts/uv-build (rustbinary)
低危漏洞:0 中危漏洞:2 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
rkyv GHSA-vfvv-c25p-m7mm 中危 0.8.15 0.8.16 rkyv: Panic safety bugs in `InlineVec::clear` and `SerVec::clear` enable arbitrary code execution

漏洞详情: https://github.com/advisories/GHSA-vfvv-c25p-m7mm

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-15 18:09 修改: 2026-05-15 18:09
tar GHSA-3pv8-6f4r-ffg2 中危 0.4.45 0.4.46 tar has a PAX header desynchronization issue

漏洞详情: https://github.com/advisories/GHSA-3pv8-6f4r-ffg2

镜像层: sha256:0cc3ecaf33b2473d954064d8f9e2dcc8c6636d29d516a7562eaf5153911d172f

发布日期: 2026-05-29 19:16 修改: 2026-05-29 19:16
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×