ghcr.io/funnycups/luker:latest linux/amd64

ghcr.io/funnycups/luker:latest - Trivy安全扫描结果 扫描时间: 2026-08-23 04:12
全部漏洞信息
低危漏洞:33 中危漏洞:86 高危漏洞:68 严重漏洞:2

系统OS: alpine 3.23.4 扫描引擎: Trivy 扫描时间: 2026-08-23 04:12

ghcr.io/funnycups/luker:latest (alpine 3.23.4) (alpine)
低危漏洞:21 中危漏洞:26 高危漏洞:7 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
c-ares CVE-2026-33630 高危 1.34.6-r0 1.34.8-r0 c-ares: c-ares: Use-after-free / double-free in query-completion handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33630

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcrypto3 CVE-2026-45447 高危 3.5.6-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-08-17 12:18
libcurl CVE-2026-5773 高危 8.19.0-r0 8.20.0-r0 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl CVE-2026-6276 高危 8.19.0-r0 8.20.0-r0 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libexpat CVE-2026-45186 高危 2.7.5-r0 2.8.1-r0 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-05-10 07:16 修改: 2026-07-24 20:10
libexpat CVE-2026-56408 高危 2.7.5-r0 2.8.2-r0 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27
libssl3 CVE-2026-45447 高危 3.5.6-r0 3.5.7-r0 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-08-17 12:18
libcrypto3 CVE-2026-34183 中危 3.5.6-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcurl CVE-2026-4873 中危 8.19.0-r0 8.20.0-r0 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:57
libcurl CVE-2026-5545 中危 8.19.0-r0 8.20.0-r0 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-05-13 13:01 修改: 2026-06-17 10:59
libcurl CVE-2026-6253 中危 8.19.0-r0 8.20.0-r0 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl CVE-2026-6429 中危 8.19.0-r0 8.20.0-r0 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:00
libcurl CVE-2026-7009 中危 8.19.0-r0 8.20.0-r0 curl: Curl: Certificate validation bypass due to OCSP stapling flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7009

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
libcurl CVE-2026-7168 中危 8.19.0-r0 8.20.0-r0 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-05-13 13:01 修改: 2026-06-17 11:01
libcrypto3 CVE-2026-42764 中危 3.5.6-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45445 中危 3.5.6-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libexpat CVE-2026-50219 中危 2.7.5-r0 2.8.2-r0 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10
libexpat CVE-2026-56131 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat CVE-2026-56132 中危 2.7.5-r0 2.8.2-r0 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15
libexpat CVE-2026-56403 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat CVE-2026-56404 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15
libexpat CVE-2026-56405 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14
libexpat CVE-2026-56406 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29
libexpat CVE-2026-56407 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28
libexpat CVE-2026-56409 中危 2.7.5-r0 2.8.2-r0 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21
libexpat CVE-2026-56410 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18
libexpat CVE-2026-56411 中危 2.7.5-r0 2.8.2-r0 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16
libexpat CVE-2026-56412 中危 2.7.5-r0 2.8.2-r0 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31
libcrypto3 CVE-2026-34182 中危 3.5.6-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34182 中危 3.5.6-r0 3.5.7-r0 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34183 中危 3.5.6-r0 3.5.7-r0 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42764 中危 3.5.6-r0 3.5.7-r0 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45445 中危 3.5.6-r0 3.5.7-r0 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-45446 低危 3.5.6-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-7383 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-9076 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34180 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-34181 低危 3.5.6-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libexpat CVE-2026-41080 低危 2.7.5-r0 2.8.1-r0 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:1338dcfb7cdc9c31e6a016a81fedf0148121cae36bfc7b1eaeb87008f517bd9b

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18
libcrypto3 CVE-2026-42766 低危 3.5.6-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42767 低危 3.5.6-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42768 低危 3.5.6-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42769 低危 3.5.6-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libcrypto3 CVE-2026-42770 低危 3.5.6-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34180 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-34181 低危 3.5.6-r0 3.5.7-r0 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42766 低危 3.5.6-r0 3.5.7-r0 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42767 低危 3.5.6-r0 3.5.7-r0 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42768 低危 3.5.6-r0 3.5.7-r0 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42769 低危 3.5.6-r0 3.5.7-r0 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-42770 低危 3.5.6-r0 3.5.7-r0 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-45446 低危 3.5.6-r0 3.5.7-r0 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-7383 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl3 CVE-2026-9076 低危 3.5.6-r0 3.5.7-r0 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:29df493baa13de438d6d2ece3a8333032e0b7b9b9d8cce4ee82194da255f61e1

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
Node.js (node-pkg)
低危漏洞:12 中危漏洞:60 高危漏洞:61 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
protobufjs CVE-2026-41242 严重 6.11.4 8.0.1, 7.5.5 protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41242

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-18 17:16 修改: 2026-07-15 02:21
tar CVE-2026-59873 严重 7.5.13 7.5.19 tar: node-tar: Denial of Service via crafted gzip bomb

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59873

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:57
axios CVE-2026-42035 高危 1.15.0 1.15.1, 0.31.1 axios: Axios: Arbitrary HTTP header injection via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42035

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42043 高危 1.15.0 1.15.1, 0.31.1 axios: Axios: NO_PROXY bypass via crafted URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42043

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 18:16 修改: 2026-08-19 12:18
axios CVE-2026-42264 高危 1.15.0 1.15.2 axios: Axios: Prototype pollution allows information disclosure and request manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42264

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-08 04:16 修改: 2026-08-19 12:18
axios CVE-2026-44486 高危 1.15.0 1.16.0, 0.32.0 axios: Axios: Information disclosure of proxy credentials via HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44486

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-11 17:16 修改: 2026-08-21 13:17
axios CVE-2026-44487 高危 1.15.0 1.16.0, 0.32.0 axios: Axios: Information disclosure of proxy credentials via redirect flows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44487

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-11 17:16 修改: 2026-08-21 13:17
axios CVE-2026-44488 高危 1.15.0 1.16.0 axios: Axios: Denial of Service due to unenforced request and response size limits

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44488

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-11 17:16 修改: 2026-08-21 13:17
axios CVE-2026-44492 高危 1.15.0 1.16.0, 0.32.0 axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44492

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-11 17:16 修改: 2026-08-21 13:17
axios CVE-2026-44494 高危 1.15.0 1.16.0 axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44494

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-11 17:16 修改: 2026-08-21 13:17
axios CVE-2026-44495 高危 1.15.0 1.15.2, 0.31.1 axios: Axios: Information disclosure due to prototype pollution vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44495

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-11 17:16 修改: 2026-08-21 13:18
axios CVE-2026-44496 高危 1.15.0 1.16.0, 0.32.0 axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44496

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-11 17:16 修改: 2026-08-20 13:18
basic-ftp CVE-2026-41324 高危 5.2.2 5.3.0 basic-ftp: basic-ftp: Denial of Service via unbounded memory growth from malicious directory listings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41324

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 04:16 修改: 2026-06-17 10:46
basic-ftp CVE-2026-44240 高危 5.2.2 5.3.1 basic-ftp: basic-ftp: Client-side Denial of Service via unterminated multiline FTP responses

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44240

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-12 21:16 修改: 2026-06-17 10:50
brace-expansion CVE-2026-13149 高危 1.1.11 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 1.1.11 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-69152 高危 1.1.11 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-13149 高危 2.1.0 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-13149 高危 2.1.0 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 2.1.0 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-14257 高危 2.1.0 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-69152 高危 2.1.0 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-69152 高危 2.1.0 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
brace-expansion CVE-2026-13149 高危 5.0.5 5.0.7, 1.1.16, 2.1.2 brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13149

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-06-30 10:16 修改: 2026-07-08 12:17
brace-expansion CVE-2026-14257 高危 5.0.5 5.0.8, 3.0.3, 2.1.3, 1.1.17 brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14257

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-23 14:17 修改: 2026-07-23 15:48
brace-expansion CVE-2026-69152 高危 5.0.5 1.1.18, 2.1.4, 3.0.6, 5.0.9 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69152

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-08-03 17:16 修改: 2026-08-05 14:58
fast-uri CVE-2026-13676 高危 3.1.0 4.0.1, 3.1.3, 2.4.2 fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13676

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-29 14:16 修改: 2026-08-21 13:16
fast-uri CVE-2026-16221 高危 3.1.0 2.4.3, 3.1.4, 4.1.1 fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16221

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-19 15:16 修改: 2026-08-05 19:46
fast-uri CVE-2026-18446 高危 3.1.0 2.4.4, 3.1.5, 4.1.2 fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18446

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-31 15:16 修改: 2026-07-31 18:17
fast-uri CVE-2026-6321 高危 3.1.0 3.1.1, 2.4.1 fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6321

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-04 20:16 修改: 2026-08-20 13:19
fast-uri CVE-2026-6322 高危 3.1.0 3.1.2, 2.4.1 fast-uri: fast-uri: URI authority bypass due to improper delimiter handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6322

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-05 11:16 修改: 2026-08-20 13:19
form-data CVE-2026-12143 高危 4.0.5 2.5.6, 3.0.5, 4.0.6 form-data: form-data: Form field override via CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12143

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-12 19:16 修改: 2026-08-21 13:16
image-size CVE-2025-71329 高危 2.0.2 image-size: image-size: Denial of Service via crafted image buffer with zero-valued size field

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71329

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-10 14:16 修改: 2026-06-17 10:04
image-size CVE-2025-71330 高危 2.0.2 image-size: image-size: Denial of Service via crafted ICNS image buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71330

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-10 14:16 修改: 2026-06-17 10:04
ip-address CVE-2026-69192 高危 10.1.0 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
ip-address CVE-2026-69192 高危 10.1.0 10.3.1 ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69192

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-08-03 20:17 修改: 2026-08-04 15:16
linkify-it CVE-2026-48801 高危 3.0.3 5.0.1 linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48801

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-14 21:17 修改: 2026-08-06 18:23
linkify-it CVE-2026-59887 高危 3.0.3 5.0.2 linkify-it: linkify-it: Denial of Service via crafted mailto: links

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59887

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-08 17:17 修改: 2026-07-10 19:13
lodash CVE-2026-4800 高危 4.17.21 4.18.0 lodash: lodash: Arbitrary code execution via untrusted input in template imports

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4800

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-03-31 20:16 修改: 2026-08-21 13:18
lodash-es CVE-2026-4800 高危 4.17.23 4.18.0 lodash: lodash: Arbitrary code execution via untrusted input in template imports

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4800

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-03-31 20:16 修改: 2026-08-21 13:18
minimatch CVE-2026-26996 高危 3.1.2 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 minimatch: minimatch: Denial of Service via specially crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26996

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-02-20 03:16 修改: 2026-06-17 10:26
minimatch CVE-2026-27903 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27903

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
minimatch CVE-2026-27904 高危 3.1.2 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27904

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-02-26 02:16 修改: 2026-06-17 10:27
multer CVE-2026-5079 高危 2.1.1 2.2.0, 3.0.0-alpha.2 multer: Multer: Denial of Service via deeply nested field names in multipart form data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5079

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-15 14:16 修改: 2026-06-17 10:58
adm-zip CVE-2026-39244 高危 0.5.17 0.6.0 adm-zip: adm-zip: Denial of Service via crafted ZIP file leading to excessive memory allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39244

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-10 17:16 修改: 2026-07-10 19:17
protobufjs CVE-2026-44289 高危 6.11.4 7.5.6, 8.0.2 protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44289

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-13 16:16 修改: 2026-08-12 12:19
protobufjs CVE-2026-44290 高危 6.11.4 7.5.6, 8.0.2 protobufjs: protobufjs: Denial of Service via crafted schema

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44290

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44291 高危 6.11.4 7.5.6, 8.0.2 protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44291

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44293 高危 6.11.4 7.5.6, 8.0.2 protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44293

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-13 16:16 修改: 2026-08-20 13:18
protobufjs CVE-2026-48712 高危 6.11.4 7.6.1, 8.4.1 protobufjs: protobufjs: Denial of Service via uncontrolled recursion with crafted protobuf payload

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48712

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-22 18:16 修改: 2026-06-26 20:04
sigstore CVE-2026-48815 高危 4.1.0 4.1.1 sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48815

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
taffydb CVE-2019-10790 高危 2.6.2 taffy: taffydb: Internal Property Tampering

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10790

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2020-02-17 20:15 修改: 2026-06-17 02:11
axios CVE-2026-42033 高危 1.15.0 1.15.1, 0.31.1 axios: Axios: HTTP Transport Hijacking via Prototype Pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42033

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 18:16 修改: 2026-08-19 12:18
tar CVE-2026-59874 高危 7.5.13 7.5.18 tar: Node-tar: Denial of Service via malformed tar archive header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59874

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-08 16:16 修改: 2026-07-10 18:54
tar CVE-2026-73566 高危 7.5.13 7.5.21 tar: node-tar: Denial of Service via crafted long-path tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73566

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-08-13 18:18 修改: 2026-08-18 02:17
tmp CVE-2026-44705 高危 0.2.1 0.2.6 tmp: path Traversal via unsanitized prefix/postfix enables directory escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44705

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-11 17:16 修改: 2026-06-17 10:51
underscore CVE-2026-27601 高危 1.13.4 1.13.8 Underscore.js: Underscore.js: Denial of Service via recursive data structures in flatten and isEqual functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27601

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-03-03 23:15 修改: 2026-06-17 10:27
undici CVE-2026-12151 高危 6.25.0 6.27.0, 7.28.0, 8.5.0 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-06-17 17:16 修改: 2026-08-20 13:16
undici CVE-2026-12151 高危 7.24.7 6.27.0, 7.28.0, 8.5.0 undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12151

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-17 17:16 修改: 2026-08-20 13:16
undici CVE-2026-13697 高危 7.24.7 7.29.0, 8.9.0 undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13697

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-29 17:16 修改: 2026-08-04 14:17
undici CVE-2026-6734 高危 7.24.7 7.28.0, 8.2.0 undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6734

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-17 18:18 修改: 2026-08-20 13:19
undici CVE-2026-9697 高危 7.24.7 7.28.0, 8.5.0 undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9697

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-17 18:18 修改: 2026-08-20 13:19
ws CVE-2026-48779 高危 8.20.0 5.2.5, 6.2.4, 7.5.11, 8.21.0 ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48779

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-17 13:20 修改: 2026-08-21 13:18
axios CVE-2026-42034 中危 1.15.0 1.15.1, 0.31.1 axios: Axios: Denial of Service via oversized streamed uploads bypassing body limits

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42034

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42036 中危 1.15.0 1.15.1, 0.31.1 axios: Axios: Denial of Service via unbounded stream consumption when 'responseType: 'stream'' is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42036

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
ip-address CVE-2026-42338 中危 10.1.0 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-12 20:16 修改: 2026-08-21 13:17
ip-address CVE-2026-42338 中危 10.1.0 10.1.1 ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42338

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-05-12 20:16 修改: 2026-08-21 13:17
brace-expansion CVE-2026-33750 中危 1.1.11 5.0.5, 3.0.2, 2.0.3, 1.1.13 brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33750

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
axios CVE-2026-42037 中危 1.15.0 1.15.1 axios: Node.js: Axios: Information disclosure via CRLF injection in multipart Content-Type header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42037

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42038 中危 1.15.0 1.15.1, 0.31.1 axios: Axios: Information disclosure due to `no_proxy` bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42038

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
lodash CVE-2025-13465 中危 4.17.21 4.17.23 lodash: prototype pollution in _.unset and _.omit functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13465

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-01-21 20:16 修改: 2026-08-20 13:16
lodash CVE-2026-2950 中危 4.17.21 4.18.0 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2950

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-03-31 20:16 修改: 2026-07-24 20:10
axios CVE-2026-42039 中危 1.15.0 1.15.1, 0.31.1 axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42039

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 18:16 修改: 2026-08-20 13:18
lodash-es CVE-2026-2950 中危 4.17.23 4.18.0 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2950

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-03-31 20:16 修改: 2026-07-24 20:10
markdown-it CVE-2026-48988 中危 12.3.2 14.2.0 markdown-it is a Markdown parser. Versions 14.1.1 and below contain a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48988

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-17 21:16 修改: 2026-06-24 19:06
axios CVE-2026-42041 中危 1.15.0 1.15.1, 0.31.1 axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42041

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 18:16 修改: 2026-08-19 12:18
axios CVE-2026-42042 中危 1.15.0 1.15.1, 0.31.1 axios: Axios: XSRF token bypass leading to information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42042

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
axios CVE-2026-42044 中危 1.15.0 1.15.2 axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42044

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 18:16 修改: 2026-08-20 13:18
axios CVE-2026-44490 中危 1.15.0 1.16.0, 0.32.0 axios: Axios: Information disclosure and denial of service due to prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44490

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-11 17:16 修改: 2026-06-17 10:50
multer CVE-2026-5038 中危 2.1.1 2.2.0, 3.0.0-alpha.2 multer: Multer: Denial of Service via aborted or malformed multipart uploads

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5038

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-15 16:16 修改: 2026-06-17 10:58
axios GHSA-42h9-826w-cgv3 中危 1.15.0 0.33.0, 1.18.0 Axios: Excessive recursion in formDataToJSON can cause denial of service

漏洞详情: https://github.com/advisories/GHSA-42h9-826w-cgv3

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-20 17:58 修改: 2026-07-20 17:58
axios GHSA-7q8q-rj6j-mhjq 中危 1.15.0 0.33.0, 1.18.0 Axios: Nested axios option objects can consume polluted prototype values

漏洞详情: https://github.com/advisories/GHSA-7q8q-rj6j-mhjq

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-20 22:37 修改: 2026-07-20 22:37
brace-expansion CVE-2026-45149 中危 5.0.5 5.0.6 brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45149

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-05-29 20:16 修改: 2026-07-22 06:10
dompurify CVE-2026-49458 中危 3.4.2 3.4.6 dompurify: DOMPurify: Cross-site scripting due to improper sanitization of DOM nodes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49458

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:47
dompurify CVE-2026-49459 中危 3.4.2 3.4.6 dompurify: DOMPurify: Cross-site scripting bypass allows arbitrary script execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49459

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:51
dompurify CVE-2026-49978 中危 3.4.2 3.4.7 dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49978

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-14 21:17 修改: 2026-07-21 19:49
protobufjs CVE-2026-44288 中危 6.11.4 7.5.6, 8.0.2 protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44288

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44292 中危 6.11.4 7.5.6, 8.0.2 protobufjs: protobufjs: Data integrity impact due to prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44292

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-44294 中危 6.11.4 7.5.6, 8.0.2 protobufjs: protobufjs: Denial of Service due to unescaped control characters in field names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44294

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
protobufjs CVE-2026-45740 中危 6.11.4 7.5.8, 8.2.0 protobufjs: protobufjs: Denial of Service via crafted JSON descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45740

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-13 16:17 修改: 2026-06-17 10:52
protobufjs CVE-2026-54269 中危 6.11.4 7.6.3, 8.6.0 protobufjs: protobufjs-cli: protobufjs: Denial of Service due to name collision with runtime helpers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54269

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-22 18:16 修改: 2026-06-24 20:40
qs CVE-2026-8723 中危 6.14.2 6.15.2 qs: qs: Denial of Service due to improper handling of null/undefined array elements

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8723

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-17 00:16 修改: 2026-06-17 11:04
showdown CVE-2024-1899 中危 2.1.0 Showdown vulnerable to Regular Expression Denial of Service (ReDoS) in link/anchor parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1899

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2024-02-26 19:15 修改: 2026-06-17 07:05
showdown CVE-2026-59710 中危 2.1.0 showdown: Showdown: Stored Cross-Site Scripting via unescaped table header ID attributes in markdown

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59710

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-06 22:16 修改: 2026-07-07 13:57
showdown CVE-2026-59711 中危 2.1.0 showdown: Showdown: Cross-site scripting via unescaped metadata title allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59711

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-06 21:16 修改: 2026-07-07 15:16
dompurify CVE-2026-65898 中危 3.4.2 3.4.11 dompurify: DOMPurify: Cross-site scripting via permanent attribute allowlist pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65898

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:54
dompurify CVE-2026-65902 中危 3.4.2 3.4.7 dompurify: DOMPurify: Sanitization bypass via hook manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65902

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:51
dompurify GHSA-55q2-fjhq-7xh7 中危 3.4.2 3.4.13 DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS

漏洞详情: https://github.com/advisories/GHSA-55q2-fjhq-7xh7

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-08-07 15:30 修改: 2026-08-07 15:30
axios GHSA-f4gw-2p7v-4548 中危 1.15.0 1.18.0, 0.33.0 Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios

漏洞详情: https://github.com/advisories/GHSA-f4gw-2p7v-4548

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-20 22:20 修改: 2026-07-20 22:20
axios GHSA-jqh4-m9w3-8hp9 中危 1.15.0 1.18.0 Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`

漏洞详情: https://github.com/advisories/GHSA-jqh4-m9w3-8hp9

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-20 22:27 修改: 2026-07-20 22:27
tar CVE-2026-53655 中危 7.5.13 7.5.16 node-tar: node-tar: File smuggling due to inconsistent tar archive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53655

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-06-22 16:16 修改: 2026-06-26 20:03
tar CVE-2026-59871 中危 7.5.13 7.5.18 node-tar: node-tar: Denial of Service due to incorrect PAX path handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59871

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:02
tar CVE-2026-59875 中危 7.5.13 7.5.17 node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59875

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-08 16:16 修改: 2026-07-10 19:10
axios GHSA-mmx7-hfxf-jppx 中危 1.15.0 1.18.0, 0.33.0 Axios: Prototype pollution gadgets can alter axios request construction

漏洞详情: https://github.com/advisories/GHSA-mmx7-hfxf-jppx

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-20 22:25 修改: 2026-07-20 22:25
axios GHSA-mwf2-3pr3-8698 中危 1.15.0 1.18.0 Axios: HTTP/2 streamed uploads bypass `maxBodyLength`

漏洞详情: https://github.com/advisories/GHSA-mwf2-3pr3-8698

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-20 22:37 修改: 2026-07-20 22:37
axios GHSA-pmv8-rq9r-6j72 中危 1.15.0 0.33.0, 1.18.0 Axios: Deep formToJSON Key Recursion Can Cause Denial of Service

漏洞详情: https://github.com/advisories/GHSA-pmv8-rq9r-6j72

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-20 17:48 修改: 2026-07-20 17:48
undici CVE-2026-15157 中危 6.25.0 6.28.0, 7.29.0, 8.9.0 undici: undici: HTTP header injection via unvalidated blob-like body type property

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
undici CVE-2026-16728 中危 6.25.0 6.28.0, 7.29.0, 8.9.0 undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
undici CVE-2026-16729 中危 6.25.0 6.28.0, 7.29.0, 8.9.0 undici: Undici: Cookie attribute injection allows bypassing security protections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18
undici CVE-2026-9679 中危 6.25.0 6.27.0, 7.28.0, 8.5.0 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
file-type CVE-2026-31808 中危 16.5.4 21.3.1 file-type: file-type: Denial of Service due to infinite loop in ASF file parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31808

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-03-10 21:16 修改: 2026-06-17 10:34
follow-redirects GHSA-r4q5-vmmm-2653 中危 1.15.11 1.16.0 follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets

漏洞详情: https://github.com/advisories/GHSA-r4q5-vmmm-2653

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-14 01:11 修改: 2026-04-14 01:11
@protobufjs/utf8 CVE-2026-44288 中危 1.1.0 1.1.1 protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44288

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-13 16:16 修改: 2026-06-17 10:50
@sigstore/core CVE-2026-48758 中危 3.2.0 3.2.1 sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48758

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
undici CVE-2026-14643 中危 7.24.7 7.29.0, 8.9.0 undici: undici: Cross-user information disclosure due to improper Cache-Control directive parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14643

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:53
undici CVE-2026-15157 中危 7.24.7 6.28.0, 7.29.0, 8.9.0 undici: undici: HTTP header injection via unvalidated blob-like body type property

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15157

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-29 22:16 修改: 2026-08-04 15:41
undici CVE-2026-16728 中危 7.24.7 6.28.0, 7.29.0, 8.9.0 undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16728

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-29 21:17 修改: 2026-08-04 14:06
undici CVE-2026-16729 中危 7.24.7 6.28.0, 7.29.0, 8.9.0 undici: Undici: Cookie attribute injection allows bypassing security protections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16729

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-29 17:16 修改: 2026-08-05 15:18
undici CVE-2026-9678 中危 7.24.7 7.28.0, 8.5.0 undici: Undici: Information disclosure due to improper cache-control header parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9678

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:44
undici CVE-2026-9679 中危 7.24.7 6.27.0, 7.28.0, 8.5.0 undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9679

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-17 18:18 修改: 2026-06-25 17:43
uuid CVE-2026-41907 中危 9.0.1 11.1.1, 12.0.1, 13.0.1 uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41907

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 19:17 修改: 2026-06-17 10:47
@sigstore/verify CVE-2026-48816 中危 3.1.0 3.1.1 sigstore-js: github.com/sigstore/sigstore-js: sigstore-js: Insufficient verification of data authenticity allows timestamp manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48816

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-07-14 21:17 修改: 2026-07-15 20:23
ws CVE-2026-45736 中危 8.20.0 8.20.1 ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45736

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-05-15 15:16 修改: 2026-08-21 13:18
dompurify CVE-2026-65899 低危 3.4.2 3.4.9 dompurify: DOMPurify: Client-side arbitrary code execution due to improper Trusted Types policy reset

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65899

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:53
dompurify CVE-2026-65900 低危 3.4.2 3.4.8 dompurify: DOMPurify: Template expression injection allows information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65900

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:52
dompurify CVE-2026-65901 低危 3.4.2 dompurify: DOMPurify: Cross-site scripting vulnerability via attacker-controlled nodeName

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-65901

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-23 14:18 修改: 2026-07-28 15:52
dompurify GHSA-c2j3-45gr-mqc4 低危 3.4.2 3.4.12 DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

漏洞详情: https://github.com/advisories/GHSA-c2j3-45gr-mqc4

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-21 19:41 修改: 2026-07-21 19:41
body-parser CVE-2026-12590 低危 1.20.4 1.20.6, 2.3.0 body-parser: body-parser: Denial of Service via invalid limit option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12590

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-07-09 11:16 修改: 2026-07-10 02:45
undici CVE-2026-11525 低危 6.25.0 6.27.0, 7.28.0, 8.5.0 undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici CVE-2026-6733 低危 6.25.0 6.27.0, 7.28.0, 8.5.0 undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733

镜像层: sha256:6bb471c7406ae9a3bf9187b352ef8892e3d5ab002b4e0d5e4fdb8a8130d2bd8d

发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
undici CVE-2026-11525 低危 7.24.7 6.27.0, 7.28.0, 8.5.0 undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11525

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-17 18:17 修改: 2026-06-25 17:46
undici CVE-2026-6733 低危 7.24.7 6.27.0, 7.28.0, 8.5.0 undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6733

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-06-17 18:18 修改: 2026-06-27 23:46
brace-expansion CVE-2025-5889 低危 1.1.11 2.0.2, 1.1.12, 3.0.1, 4.0.1 brace-expansion: juliangruber brace-expansion index.js expand redos

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5889

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2025-06-09 19:15 修改: 2026-06-17 09:48
tmp CVE-2025-54798 低危 0.2.1 0.2.4 tmp: tmp Symbolic Link Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54798

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2025-08-07 01:15 修改: 2026-06-17 09:40
axios CVE-2026-42040 低危 1.15.0 1.15.1, 0.31.1 axios: Axios: Incorrect null byte handling can lead to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42040

镜像层: sha256:f7e6ba33475fa6aa8d843f70e5d9515aa9e934b5d8af06458df06a45b85c6aa4

发布日期: 2026-04-24 18:16 修改: 2026-06-17 10:47
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×