ghcr.io/idaholab/malcolm/netbox:26.08.0 linux/amd64

ghcr.io/idaholab/malcolm/netbox:26.08.0 - Trivy安全扫描结果 扫描时间: 2026-08-26 10:51
全部漏洞信息
低危漏洞:9 中危漏洞:60 高危漏洞:13 严重漏洞:0

系统OS: ubuntu 26.04 扫描引擎: Trivy 扫描时间: 2026-08-26 10:51

ghcr.io/idaholab/malcolm/netbox:26.08.0 (ubuntu 26.04) (ubuntu)
低危漏洞:8 中危漏洞:56 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-27456 中危 1:2.41.3-3ubuntu2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
bsdutils CVE-2026-3184 中危 1:2.41.3-3ubuntu2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
git CVE-2024-52005 中危 1:2.53.0-1ubuntu1 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
git-man CVE-2024-52005 中危 1:2.53.0-1ubuntu1 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
jq CVE-2026-41256 中危 1.8.1-4ubuntu2 jq: embedded NUL truncates top-level jq programs loaded with -f

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
jq CVE-2026-41257 中危 1.8.1-4ubuntu2 jq: signed-int overflow in stack_reallocate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
jq CVE-2026-43895 中危 1.8.1-4ubuntu2 jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq CVE-2026-43896 中危 1.8.1-4ubuntu2 jq: stack overflow in recursive object merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
jq CVE-2026-44777 中危 1.8.1-4ubuntu2 jq: stack overflow in module loading on mutual include

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
libattr1 CVE-2026-54371 中危 1:2.5.2-4 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-06-29 14:16 修改: 2026-08-24 13:19
libblkid1 CVE-2026-27456 中危 2.41.3-3ubuntu2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1 CVE-2026-3184 中危 2.41.3-3ubuntu2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
libexpat1 CVE-2025-66382 中危 2.7.4-1 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:aa4b44dfe163cd739c129318d5911df4386a39bc90b4cc77013652359fbc1fd0

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libjq1 CVE-2026-41256 中危 1.8.1-4ubuntu2 jq: embedded NUL truncates top-level jq programs loaded with -f

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41256

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
libjq1 CVE-2026-41257 中危 1.8.1-4ubuntu2 jq: signed-int overflow in stack_reallocate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41257

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:46
libjq1 CVE-2026-43895 中危 1.8.1-4ubuntu2 jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43895

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
libjq1 CVE-2026-43896 中危 1.8.1-4ubuntu2 jq: stack overflow in recursive object merge

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43896

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:50
libjq1 CVE-2026-44777 中危 1.8.1-4ubuntu2 jq: stack overflow in module loading on mutual include

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44777

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-05-11 18:16 修改: 2026-06-17 10:51
libmount1 CVE-2026-27456 中危 2.41.3-3ubuntu2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1 CVE-2026-3184 中危 2.41.3-3ubuntu2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
libp11-kit0 CVE-2026-13757 中危 0.26.2-2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:aa4b44dfe163cd739c129318d5911df4386a39bc90b4cc77013652359fbc1fd0

发布日期: 2026-06-29 19:16 修改: 2026-08-25 10:18
libsmartcols1 CVE-2026-27456 中危 2.41.3-3ubuntu2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsmartcols1 CVE-2026-3184 中危 2.41.3-3ubuntu2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
libuuid1 CVE-2026-27456 中危 2.41.3-3ubuntu2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1 CVE-2026-3184 中危 2.41.3-3ubuntu2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
libxslt1.1 CVE-2025-7425 中危 1.1.45-0.1 libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425

镜像层: sha256:aa4b44dfe163cd739c129318d5911df4386a39bc90b4cc77013652359fbc1fd0

发布日期: 2025-07-10 14:15 修改: 2026-08-25 06:18
login CVE-2026-27456 中危 1:4.16.0-2+really2.41.3-3ubuntu2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
login CVE-2026-3184 中危 1:4.16.0-2+really2.41.3-3ubuntu2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
mount CVE-2026-27456 中危 2.41.3-3ubuntu2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount CVE-2026-3184 中危 2.41.3-3ubuntu2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
openssh-client CVE-2026-55655 中危 1:10.2p1-2ubuntu3.5 openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55655

镜像层: sha256:aa4b44dfe163cd739c129318d5911df4386a39bc90b4cc77013652359fbc1fd0

发布日期: 2026-06-23 04:17 修改: 2026-08-25 10:18
python3-pip CVE-2025-66418 中危 25.1.1+dfsg-1ubuntu2 urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66418

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2025-12-05 16:15 修改: 2026-06-17 09:56
python3-pip CVE-2025-66471 中危 25.1.1+dfsg-1ubuntu2 urllib3: urllib3 Streaming API improperly handles highly compressed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66471

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2025-12-05 17:16 修改: 2026-06-17 09:56
python3-pip CVE-2026-21441 中危 25.1.1+dfsg-1ubuntu2 urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21441

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-01-07 22:15 修改: 2026-08-24 13:17
rust-coreutils CVE-2026-35341 中危 0.8.0-0ubuntu3 A vulnerability in uutils coreutils mkfifo allows for the unauthorized ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35341

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35344 中危 0.8.0-0ubuntu3 The dd utility in uutils coreutils suppresses errors during file trunc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35344

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35345 中危 0.8.0-0ubuntu3 A vulnerability in the tail utility of uutils coreutils allows for the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35345

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35348 中危 0.8.0-0ubuntu3 The sort utility in uutils coreutils is vulnerable to a process panic ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35348

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35350 中危 0.8.0-0ubuntu3 The cp utility in uutils coreutils fails to properly handle setuid and ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35350

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35351 中危 0.8.0-0ubuntu3 The mv utility in uutils coreutils fails to preserve file ownership du ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35351

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35352 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35352

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35354 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35354

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35357 中危 0.8.0-0ubuntu3 The cp utility in uutils coreutils is vulnerable to an information dis ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35357

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35359 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utilit ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35359

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35360 中危 0.8.0-0ubuntu3 The touch utility in uutils coreutils is vulnerable to a Time-of-Check ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35360

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35363 中危 0.8.0-0ubuntu3 A vulnerability in the rm utility of uutils coreutils allows the bypas ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35363

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35364 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35364

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35367 中危 0.8.0-0ubuntu3 The nohup utility in uutils coreutils creates its default output file, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35367

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35368 中危 0.8.0-0ubuntu3 A vulnerability exists in the chroot utility of uutils coreutils when ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35368

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35370 中危 0.8.0-0ubuntu3 The id utility in uutils coreutils miscalculates the groups= section o ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35370

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35371 中危 0.8.0-0ubuntu3 The id utility in uutils coreutils exhibits incorrect behavior in its ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35371

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35373 中危 0.8.0-0ubuntu3 A logic error in the ln utility of uutils coreutils causes the program ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35373

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35374 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the sp ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35374

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35377 中危 0.8.0-0ubuntu3 A logic error in the env utility of uutils coreutils causes a failure ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35377

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
util-linux CVE-2026-27456 中危 2.41.3-3ubuntu2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
util-linux CVE-2026-3184 中危 2.41.3-3ubuntu2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
openssh-client CVE-2026-55654 低危 1:10.2p1-2ubuntu3.5 openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55654

镜像层: sha256:aa4b44dfe163cd739c129318d5911df4386a39bc90b4cc77013652359fbc1fd0

发布日期: 2026-06-23 04:17 修改: 2026-08-25 10:18
passwd CVE-2024-56433 低危 1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
login.defs CVE-2024-56433 低危 1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libudev1 CVE-2026-40228 低危 259.5-0ubuntu3.4 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libgcrypt20 CVE-2024-2236 低危 1.12.0-2ubuntu1 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
python3-pip CVE-2026-1703 低危 25.1.1+dfsg-1ubuntu2 pip: pip: Information disclosure via path traversal when installing crafted wheel archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16
libsystemd0 CVE-2026-40228 低危 259.5-0ubuntu3.4 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
zlib1g CVE-2026-27171 低危 1:1.3.dfsg+really1.3.1-1ubuntu3 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
Node.js (node-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Python (python-pkg)
低危漏洞:1 中危漏洞:4 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
PyJWT CVE-2026-48526 高危 2.12.1 2.13.0 python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48526

镜像层: sha256:9661040580d5f25747fe4a364b37899040779988f6be763c84087ec132c094fd

发布日期: 2026-05-28 16:16 修改: 2026-08-17 12:18
msgpack GHSA-6v7p-g79w-8964 高危 1.1.2 1.2.1 MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error

漏洞详情: https://github.com/advisories/GHSA-6v7p-g79w-8964

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-06-19 21:42 修改: 2026-06-19 21:42
setuptools CVE-2025-47273 高危 70.3.0 78.1.1 setuptools: Path Traversal Vulnerability in setuptools PackageIndex

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27
PyJWT CVE-2026-48525 中危 2.12.1 2.13.0 python-pyjwt: PyJWT: Denial of Service via processing of crafted detached JWS tokens

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48525

镜像层: sha256:9661040580d5f25747fe4a364b37899040779988f6be763c84087ec132c094fd

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
PyJWT CVE-2026-48522 中危 2.12.1 2.13.0 python-pyjwt: PyJWT: Server-Side Request Forgery (SSRF) via uncontrolled URL fetching in PyJWKClient

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48522

镜像层: sha256:9661040580d5f25747fe4a364b37899040779988f6be763c84087ec132c094fd

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
PyJWT CVE-2026-48523 中危 2.12.1 2.13.0 python-pyjwt: PyJWT: Verifier-side algorithm bypass leads to unauthorized information access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48523

镜像层: sha256:9661040580d5f25747fe4a364b37899040779988f6be763c84087ec132c094fd

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
setuptools CVE-2026-59890 中危 70.3.0 83.0.0 setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
PyJWT CVE-2026-48524 低危 2.12.1 2.13.0 python-pyjwt: PyJWT: Denial of Service via unverified JSON Web Token key IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48524

镜像层: sha256:9661040580d5f25747fe4a364b37899040779988f6be763c84087ec132c094fd

发布日期: 2026-05-28 16:16 修改: 2026-06-17 10:55
opt/netbox/venv/bin/uv (rustbinary)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.14 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07
opt/netbox/venv/bin/uvx (rustbinary)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
quinn-proto GHSA-4w2j-m93h-cj5j 高危 0.11.14 0.11.15 Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

漏洞详情: https://github.com/advisories/GHSA-4w2j-m93h-cj5j

镜像层: sha256:e140e3d2b31b693d025fdf438c23100f97137884143e725308143bb4d67c03c9

发布日期: 2026-07-24 14:07 修改: 2026-07-24 14:07
usr/bin/pebble (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-05-22 16:16 修改: 2026-08-24 13:18
stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
usr/bin/yq (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
usr/local/bin/uv (rustbinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×