ghcr.io/docling-project/docling-serve-cpu:v1.21.0 linux/amd64

ghcr.io/docling-project/docling-serve-cpu:v1.21.0 - Trivy安全扫描结果 扫描时间: 2026-08-03 16:04
全部漏洞信息
低危漏洞:22 中危漏洞:39 高危漏洞:23 严重漏洞:0

系统OS: centos-stream 9 扫描引擎: Trivy 扫描时间: 2026-08-03 16:04

Java (jar)
低危漏洞:0 中危漏洞:7 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
com.fasterxml.jackson.core:jackson-core GHSA-r7wm-3cxj-wff9 高危 2.16.1 2.18.8, 2.21.4, 2.22.1 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

漏洞详情: https://github.com/advisories/GHSA-r7wm-3cxj-wff9

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-21 21:58 修改: 2026-07-21 21:58
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.16.1 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.16.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-23 21:17 修改: 2026-07-30 12:19
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.16.1 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.16.1 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.16.1 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59888 中危 2.16.1 2.18.8, 2.21.4 com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59888

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:18
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.17.1 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:58
org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.17.1 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.17.1 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:39
Node.js (node-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Python (python-pkg)
低危漏洞:22 中危漏洞:32 高危漏洞:20 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
aiohttp CVE-2025-69223 高危 3.13.2 3.13.3 aiohttp: AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69223

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-01-05 22:15 修改: 2026-07-21 12:17
cryptography GHSA-537c-gmf6-5ccf 高危 48.0.0 48.0.1 Vulnerable OpenSSL included in cryptography wheels

漏洞详情: https://github.com/advisories/GHSA-537c-gmf6-5ccf

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-15 20:12 修改: 2026-06-15 20:12
mcp CVE-2026-59950 高危 1.27.2 1.28.1 MCP Python SDK: WebSocket server transport does not support Host/Origin validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59950

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-15 21:16 修改: 2026-07-17 18:07
msgpack GHSA-6v7p-g79w-8964 高危 1.1.2 1.2.1 MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error

漏洞详情: https://github.com/advisories/GHSA-6v7p-g79w-8964

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-19 21:42 修改: 2026-06-19 21:42
pillow CVE-2026-54058 高危 12.2.0 12.3.0 Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54058

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-14 17:17 修改: 2026-07-15 20:08
pillow CVE-2026-54059 高危 12.2.0 12.3.0 python-pillow: Pillow: Denial of Service via crafted PCF font data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54059

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
pillow CVE-2026-54060 高危 12.2.0 12.3.0 python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54060

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
pillow CVE-2026-55379 高危 12.2.0 12.3.0 python-pillow: Pillow: Denial of Service via crafted BDF font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55379

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:59
pillow CVE-2026-55380 高危 12.2.0 12.3.0 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55380

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
pillow CVE-2026-59197 高危 12.2.0 12.3.0 Pillow: Pillow: Native heap out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59197

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-14 17:17 修改: 2026-07-21 19:17
pillow CVE-2026-59199 高危 12.2.0 12.3.0 Pillow: Pillow: Denial of Service via out-of-bounds write in image processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59199

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-14 16:17 修改: 2026-07-15 16:16
pillow CVE-2026-59200 高危 12.2.0 12.3.0 Pillow: Pillow: Denial of service via crafted PDF stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59200

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-14 17:17 修改: 2026-07-21 15:52
pillow CVE-2026-59204 高危 12.2.0 12.3.0 Pillow: Pillow: Denial of Service via crafted JPEG2000 image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59204

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-14 16:17 修改: 2026-07-21 19:17
pillow CVE-2026-59205 高危 12.2.0 12.3.0 Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59205

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-14 16:17 修改: 2026-07-14 20:09
pyasn1 CVE-2026-59884 高危 0.6.3 0.6.4 python-pyasn1: pyasn1: Denial of Service via crafted BER input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59884

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:37
pyasn1 CVE-2026-59885 高危 0.6.3 0.6.4 pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59885

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:38
pyasn1 CVE-2026-59886 高危 0.6.3 0.6.4 pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59886

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:38
ray CVE-2026-41486 高危 2.52.1 2.55.0 Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41486

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-05-08 22:16 修改: 2026-06-17 10:46
ray CVE-2026-57516 高危 2.52.1 2.56.0 Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57516

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-01 17:16 修改: 2026-07-14 22:17
starlette CVE-2026-54283 高危 1.2.1 1.3.1 starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54283

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:16
aiohttp CVE-2026-54277 中危 3.13.5 3.14.1 aiohttp: aiohttp: Denial of Service via oversized HTTP request lines bypassing max_line_size check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54277

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-30 18:11
aiohttp CVE-2026-54278 中危 3.13.5 3.14.1 aiohttp: aiohttp: Denial of Service due to excessive memory consumption from compressed request body

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54278

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:27
aiohttp CVE-2025-69227 中危 3.13.2 3.13.3 aiohttp: aiohttp: Denial of Service via specially crafted POST request

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69227

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-01-06 00:15 修改: 2026-06-17 10:00
idna CVE-2026-45409 中危 3.11 3.15 python-idna: idna: Denial of Service via specially crafted long inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10
aiohttp CVE-2025-69228 中危 3.13.2 3.13.3 aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69228

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-01-06 00:15 修改: 2026-06-17 10:00
aiohttp CVE-2025-69229 中危 3.13.2 3.13.3 aiohttp: AIOHTTP: Denial of Service via excessive CPU usage in chunked message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69229

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-01-06 00:15 修改: 2026-06-17 10:00
aiohttp CVE-2026-22815 中危 3.13.2 3.13.4 aiohttp: AIOHTTP: Denial of Service via insufficient header/trailer handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22815

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-04-01 21:16 修改: 2026-06-17 10:20
aiohttp CVE-2026-34515 中危 3.13.2 3.13.4 aiohttp: AIOHTTP: Information disclosure via static resource handler on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34515

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-04-01 21:16 修改: 2026-06-17 10:39
aiohttp CVE-2026-34516 中危 3.13.2 3.13.4 aiohttp: AIOHTTP: Denial of Service via excessive multipart headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34516

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-04-01 21:16 修改: 2026-06-17 10:39
aiohttp CVE-2026-34525 中危 3.13.2 3.13.4 aiohttp: aiohttp: Security bypass via multiple Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34525

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-04-01 21:17 修改: 2026-06-17 10:39
aiohttp CVE-2026-34993 中危 3.13.2 3.14.0 aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34993

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-02 20:16 修改: 2026-07-22 12:17
aiohttp CVE-2026-47265 中危 3.13.2 3.14.0 python-aiohttp: AIOHTTP: Information disclosure via improper handling of cookies during cross-origin redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47265

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-02 20:16 修改: 2026-07-21 19:10
aiohttp CVE-2026-54273 中危 3.13.2 3.14.1 aiohttp: AIOHTTP: Denial of Service via excessive pipelined requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54273

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:37
aiohttp CVE-2026-54274 中危 3.13.2 3.14.1 aiohttp: aiohttp: Denial of Service via incomplete websocket frame payloads

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54274

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:37
aiohttp CVE-2026-54276 中危 3.13.2 3.14.1 aiohttp: aiohttp: Information disclosure via DigestAuthMiddleware after cross-origin redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54276

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-30 18:18
aiohttp CVE-2026-54277 中危 3.13.2 3.14.1 aiohttp: aiohttp: Denial of Service via oversized HTTP request lines bypassing max_line_size check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54277

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-30 18:11
pillow CVE-2026-55798 中危 12.2.0 12.3.0 python-pillow: Pillow: Arbitrary command injection via shell metacharacters in file paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55798

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-06 19:17 修改: 2026-07-07 18:58
pillow CVE-2026-59198 中危 12.2.0 12.3.0 Pillow: Pillow: Information disclosure via TGA RLE encoder out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59198

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-14 16:17 修改: 2026-07-14 20:18
pillow CVE-2026-59203 中危 12.2.0 12.3.0 Pillow: Pillow: Denial of Service via crafted EPS file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59203

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-14 16:17 修改: 2026-07-15 14:18
pip CVE-2025-8869 中危 24.2 25.3 pip: pip missing checks on symbolic link extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869

镜像层: sha256:1af67ada2aa2cc1091a189b410a303e1c3c39c24a84274c32e25eb1218d2417f

发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
pip CVE-2026-3219 中危 24.2 26.1 pip: pip: Incorrect file installation due to improper archive handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219

镜像层: sha256:1af67ada2aa2cc1091a189b410a303e1c3c39c24a84274c32e25eb1218d2417f

发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
pip CVE-2026-6357 中危 24.2 26.1 pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357

镜像层: sha256:1af67ada2aa2cc1091a189b410a303e1c3c39c24a84274c32e25eb1218d2417f

发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
pip CVE-2026-8643 中危 24.2 26.1.2 python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643

镜像层: sha256:1af67ada2aa2cc1091a189b410a303e1c3c39c24a84274c32e25eb1218d2417f

发布日期: 2026-06-01 17:17 修改: 2026-07-22 12:18
aiohttp CVE-2026-54278 中危 3.13.2 3.14.1 aiohttp: aiohttp: Denial of Service due to excessive memory consumption from compressed request body

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54278

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:27
aiohttp CVE-2026-34993 中危 3.13.5 3.14.0 aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34993

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-02 20:16 修改: 2026-07-22 12:17
aiohttp CVE-2026-47265 中危 3.13.5 3.14.0 python-aiohttp: AIOHTTP: Information disclosure via improper handling of cookies during cross-origin redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47265

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-02 20:16 修改: 2026-07-21 19:10
pydantic-settings GHSA-4xgf-cpjx-pc3j 中危 2.14.1 2.14.2 pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

漏洞详情: https://github.com/advisories/GHSA-4xgf-cpjx-pc3j

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-19 22:10 修改: 2026-06-19 22:10
aiohttp CVE-2026-54273 中危 3.13.5 3.14.1 aiohttp: AIOHTTP: Denial of Service via excessive pipelined requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54273

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:37
aiohttp CVE-2026-54274 中危 3.13.5 3.14.1 aiohttp: aiohttp: Denial of Service via incomplete websocket frame payloads

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54274

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:37
ray CVE-2026-27482 中危 2.52.1 2.54.0 Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27482

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-02-21 10:16 修改: 2026-06-17 10:27
setuptools CVE-2026-59890 中危 81.0.0 83.0.0 setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
aiohttp CVE-2026-54276 中危 3.13.5 3.14.1 aiohttp: aiohttp: Information disclosure via DigestAuthMiddleware after cross-origin redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54276

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-30 18:18
aiohttp CVE-2026-34514 低危 3.13.2 3.13.4 aiohttp: AIOHTTP: Header Injection via content_type parameter manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34514

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-04-01 21:16 修改: 2026-06-17 10:39
aiohttp CVE-2026-34517 低危 3.13.2 3.13.4 aiohttp: AIOHTTP: Denial of Service via large multipart form fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34517

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-04-01 21:16 修改: 2026-06-17 10:39
aiohttp CVE-2026-50269 低危 3.13.5 3.14.0 aiohttp: AIOHTTP: CRLF injection in multipart headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50269

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:39
aiohttp CVE-2026-54275 低危 3.13.5 3.14.1 aiohttp: AIOHTTP: TLS SNI check bypass via connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54275

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:36
aiohttp CVE-2026-54279 低危 3.13.5 3.14.1 aiohttp: AIOHTTP: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54279

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:36
aiohttp CVE-2026-54280 低危 3.13.5 3.14.1 AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54280

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:35
aiohttp CVE-2026-34518 低危 3.13.2 3.13.4 aiohttp: AIOHTTP: Information disclosure via retained Cookie and Proxy-Authorization headers during redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34518

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-04-01 21:17 修改: 2026-06-17 10:39
aiohttp CVE-2026-34519 低危 3.13.2 3.13.4 aiohttp: aiohttp: Header injection vulnerability via reason parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34519

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-04-01 21:17 修改: 2026-06-17 10:39
aiohttp CVE-2026-34520 低危 3.13.2 3.13.4 aiohttp: AIOHTTP: Header injection vulnerability due to improper character handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34520

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-04-01 21:17 修改: 2026-06-17 10:39
pip CVE-2026-1703 低危 24.2 26.0 pip: pip: Information disclosure via path traversal when installing crafted wheel archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703

镜像层: sha256:1af67ada2aa2cc1091a189b410a303e1c3c39c24a84274c32e25eb1218d2417f

发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16
aiohttp CVE-2026-50269 低危 3.13.2 3.14.0 aiohttp: AIOHTTP: CRLF injection in multipart headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50269

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:39
aiohttp CVE-2026-54275 低危 3.13.2 3.14.1 aiohttp: AIOHTTP: TLS SNI check bypass via connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54275

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:36
aiohttp CVE-2026-54279 低危 3.13.2 3.14.1 aiohttp: AIOHTTP: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54279

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:36
aiohttp CVE-2026-54280 低危 3.13.2 3.14.1 AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54280

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:35
python-multipart CVE-2026-53540 低危 0.0.30 0.0.31 python-multipart: Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53540

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:50
aiohttp CVE-2025-69224 低危 3.13.2 3.13.3 aiohttp: aiohttp: Request smuggling via non-ASCII characters in HTTP parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69224

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-01-05 23:15 修改: 2026-06-17 10:00
aiohttp CVE-2025-69225 低危 3.13.2 3.13.3 aiohttp: aiohttp: Request smuggling vulnerability via non-ASCII decimals in Range header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69225

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-01-06 00:15 修改: 2026-06-17 10:00
aiohttp CVE-2025-69226 低危 3.13.2 3.13.3 aiohttp: aiohttp: Information disclosure of path components via static file path normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69226

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-01-05 23:15 修改: 2026-06-17 10:00
aiohttp CVE-2025-69230 低危 3.13.2 3.13.3 aiohttp: aiohttp: Denial of Service via specially crafted invalid cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69230

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-01-06 00:15 修改: 2026-06-17 10:00
aiohttp CVE-2026-34513 低危 3.13.2 3.13.4 aiohttp: AIOHTTP: Denial of Service due to unbounded DNS cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34513

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-04-01 21:16 修改: 2026-06-17 10:39
starlette CVE-2026-54282 低危 1.2.1 1.3.0 starlette: Starlette: Information disclosure due to improper HTTP request path validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54282

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:18
torch CVE-2025-3000 低危 2.12.0+cpu 2.13.0 A vulnerability classified as critical has been found in PyTorch 2.6.0 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3000

镜像层: sha256:fcf737f07b4af5874b3a68776c0147001809d9c5e3c9df3c0ebeb9380bd7f7e4

发布日期: 2025-03-31 15:15 修改: 2026-06-17 09:18
/opt/app-root/lib/python3.12/site-packages/skimage/data/_fetchers.py ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×