ghcr.io/iflytek/astron-agent/core-workflow:latest linux/amd64

ghcr.io/iflytek/astron-agent/core-workflow:latest - Trivy安全扫描结果扫描时间: 2026-09-09 14:34

全部漏洞信息

低危漏洞:115

中危漏洞:129

高危漏洞:91

严重漏洞:4

系统OS: debian 13.6 扫描引擎: Trivy 扫描时间: 2026-09-09 14:34

ghcr.io/iflytek/astron-agent/core-workflow:latest (debian 13.6) (debian)

低危漏洞:92

中危漏洞:81

高危漏洞:60

严重漏洞:3

软件包	漏洞	安全状态	安装版本	漏洞信息
perl-base	CVE-2026-13221	严重	5.40.1-6	perl: Perl: Incorrect regular expression processing via large regular expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
perl-base	CVE-2026-42496	严重	5.40.1-6	perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10
perl-base	CVE-2026-8376	严重	5.40.1-6	perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
bsdutils	CVE-2026-78410	高危	1:2.41.5-0+deb13u1	util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
curl	CVE-2026-12064	高危	8.14.1-2+deb13u4	curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
curl	CVE-2026-8286	高危	8.14.1-2+deb13u4	curl: curl: Insecure connection establishment due to TLS configuration mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
curl	CVE-2026-8458	高危	8.14.1-2+deb13u4	curl: libcurl: Unauthorized connection reuse due to a logical error 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
curl	CVE-2026-8927	高危	8.14.1-2+deb13u4	curl: Information disclosure due to uncleared proxy authentication state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
gzip	CVE-2026-41992	高危	1.13-1	gzip: gzip: Information disclosure via global buffer overflow in LZH decompression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-06-29 12:16 修改: 2026-08-27 13:17
libacl1	CVE-2026-54369	高危	2.3.2-2+b1	acl: Symlink traversal privilege escalation via libacl functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-06-29 14:16 修改: 2026-09-07 13:20
libblkid1	CVE-2026-76642	高危	2.41.5-0+deb13u1	util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
libblkid1	CVE-2026-78408	高危	2.41.5-0+deb13u1	util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
libblkid1	CVE-2026-78409	高危	2.41.5-0+deb13u1	util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78409 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-03 18:12
libblkid1	CVE-2026-78410	高危	2.41.5-0+deb13u1	util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
libcurl4t64	CVE-2026-12064	高危	8.14.1-2+deb13u4	curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12064 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl4t64	CVE-2026-8286	高危	8.14.1-2+deb13u4	curl: curl: Insecure connection establishment due to TLS configuration mismatch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libcurl4t64	CVE-2026-8458	高危	8.14.1-2+deb13u4	curl: libcurl: Unauthorized connection reuse due to a logical error 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8458 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:12
libcurl4t64	CVE-2026-8927	高危	8.14.1-2+deb13u4	curl: Information disclosure due to uncleared proxy authentication state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
liblastlog2-2	CVE-2026-76642	高危	2.41.5-0+deb13u1	util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
liblastlog2-2	CVE-2026-78408	高危	2.41.5-0+deb13u1	util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
liblastlog2-2	CVE-2026-78409	高危	2.41.5-0+deb13u1	util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78409 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-03 18:12
liblastlog2-2	CVE-2026-78410	高危	2.41.5-0+deb13u1	util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
libmount1	CVE-2026-76642	高危	2.41.5-0+deb13u1	util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
libmount1	CVE-2026-78408	高危	2.41.5-0+deb13u1	util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
libmount1	CVE-2026-78409	高危	2.41.5-0+deb13u1	util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78409 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-03 18:12
libmount1	CVE-2026-78410	高危	2.41.5-0+deb13u1	util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
libncursesw6	CVE-2025-69720	高危	6.5+20250216-2	ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:7895f75e926a456464bbd0f1285738ba25e7d70aad4aa94c32c1d274b3b9e85e 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libsmartcols1	CVE-2026-76642	高危	2.41.5-0+deb13u1	util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
libsmartcols1	CVE-2026-78408	高危	2.41.5-0+deb13u1	util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
libsmartcols1	CVE-2026-78409	高危	2.41.5-0+deb13u1	util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78409 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-03 18:12
libsmartcols1	CVE-2026-78410	高危	2.41.5-0+deb13u1	util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
libsqlite3-0	CVE-2026-11822	高危	3.46.1-7+deb13u1	sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libsqlite3-0	CVE-2026-11824	高危	3.46.1-7+deb13u1	sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libssh2-1t64	CVE-2026-58050	高危	1.11.1-1+deb13u1	libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58050 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-06-28 02:16 修改: 2026-06-30 20:27
libsystemd0	CVE-2026-16742	高危	257.13-1~deb13u1	systemd: systemd-homed: Local privilege escalation via missing home-record signature verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libtinfo6	CVE-2025-69720	高危	6.5+20250216-2	ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
libudev1	CVE-2026-16742	高危	257.13-1~deb13u1	systemd: systemd-homed: Local privilege escalation via missing home-record signature verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libuuid1	CVE-2026-76642	高危	2.41.5-0+deb13u1	util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
libuuid1	CVE-2026-78408	高危	2.41.5-0+deb13u1	util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
libuuid1	CVE-2026-78409	高危	2.41.5-0+deb13u1	util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78409 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-03 18:12
libuuid1	CVE-2026-78410	高危	2.41.5-0+deb13u1	util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
login	CVE-2026-76642	高危	1:4.16.0-2+really2.41.5-0+deb13u1	util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
login	CVE-2026-78408	高危	1:4.16.0-2+really2.41.5-0+deb13u1	util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
login	CVE-2026-78409	高危	1:4.16.0-2+really2.41.5-0+deb13u1	util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78409 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-03 18:12
login	CVE-2026-78410	高危	1:4.16.0-2+really2.41.5-0+deb13u1	util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
mount	CVE-2026-76642	高危	2.41.5-0+deb13u1	util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
mount	CVE-2026-78408	高危	2.41.5-0+deb13u1	util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
mount	CVE-2026-78409	高危	2.41.5-0+deb13u1	util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78409 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-03 18:12
mount	CVE-2026-78410	高危	2.41.5-0+deb13u1	util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
ncurses-base	CVE-2025-69720	高危	6.5+20250216-2	ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
ncurses-bin	CVE-2025-69720	高危	6.5+20250216-2	ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
bsdutils	CVE-2026-76642	高危	1:2.41.5-0+deb13u1	util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
bsdutils	CVE-2026-78408	高危	1:2.41.5-0+deb13u1	util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
bsdutils	CVE-2026-78409	高危	1:2.41.5-0+deb13u1	util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78409 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-03 18:12
perl-base	CVE-2026-42497	高危	5.40.1-6	perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10
perl-base	CVE-2026-48962	高危	5.40.1-6	perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
perl-base	CVE-2026-57432	高危	5.40.1-6	perl: Perl: Information disclosure via integer overflow in pack/unpack operations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
perl-base	CVE-2026-57433	高危	5.40.1-6	Storable: Storable: Denial of Service via signed integer overflow in deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
perl-base	CVE-2026-9538	高危	5.40.1-6	perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
util-linux	CVE-2026-76642	高危	2.41.5-0+deb13u1	util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76642 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-03 13:06 修改: 2026-09-03 15:17
util-linux	CVE-2026-78408	高危	2.41.5-0+deb13u1	util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78408 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-05 14:17
util-linux	CVE-2026-78409	高危	2.41.5-0+deb13u1	util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78409 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-03 18:12
util-linux	CVE-2026-78410	高危	2.41.5-0+deb13u1	util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78410 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-02 16:17 修改: 2026-09-04 19:17
curl	CVE-2026-10536	中危	8.14.1-2+deb13u4	libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
libacl1	CVE-2026-54370	中危	2.3.2-2+b1	acl: TOCTOU Symlink Traversal via getfacl/setfacl 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22
libattr1	CVE-2026-54371	中危	1:2.5.2-3	attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-06-29 14:16 修改: 2026-09-02 13:18
liblastlog2-2	CVE-2026-3184	中危	2.41.5-0+deb13u1	util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
curl	CVE-2026-11856	中危	8.14.1-2+deb13u4	curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
curl	CVE-2026-8924	中危	8.14.1-2+deb13u4	curl: curl: Cookie injection via malicious HTTP server using super cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
curl	CVE-2026-8926	中危	8.14.1-2+deb13u4	curl: curl: Information disclosure via incorrect .netrc password lookup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
curl	CVE-2026-8932	中危	8.14.1-2+deb13u4	libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
libmount1	CVE-2026-3184	中危	2.41.5-0+deb13u1	util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libblkid1	CVE-2026-3184	中危	2.41.5-0+deb13u1	util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libnghttp2-14	CVE-2026-58055	中危	1.64.0-1.1+deb13u1	nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
libp11-kit0	CVE-2026-13757	中危	0.25.5-3	p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
libp11-kit0	CVE-2026-18938	中危	0.25.5-3	p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07
libpam-modules	CVE-2026-54411	中危	1.7.0-5	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-modules-bin	CVE-2026-54411	中危	1.7.0-5	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam-runtime	CVE-2026-54411	中危	1.7.0-5	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libpam0g	CVE-2026-54411	中危	1.7.0-5	linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libbz2-1.0	CVE-2026-42250	中危	1.0.8-6	bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
libc-bin	CVE-2026-18374	中危	2.41-12+deb13u3	glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc-bin	CVE-2026-19499	中危	2.41-12+deb13u3	glibc: Buffer Overflow in strfmon right-justification padding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-bin	CVE-2026-19542	中危	2.41-12+deb13u3	glibc: Fix out-of-bounds array write in tdelete 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1	CVE-2026-3184	中危	2.41.5-0+deb13u1	util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libc-bin	CVE-2026-5435	中危	2.41-12+deb13u3	glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc-bin	CVE-2026-5450	中危	2.41-12+deb13u3	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libsqlite3-0	CVE-2026-39113	中危	3.46.1-7+deb13u1	Buffer Overflow vulnerability in SQLite affected version source snapsh ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39113 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-25 21:17 修改: 2026-08-31 16:17
libsqlite3-0	CVE-2026-50812	中危	3.46.1-7+deb13u1	sqlite: SQLite: Denial of Service via malformed changeset in Session Extension 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50812 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libsqlite3-0	CVE-2026-50813	中危	3.46.1-7+deb13u1	sqlite: SQLite: Information disclosure via Session Extension changeset merge path 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50813 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48
libc-bin	CVE-2026-5928	中危	2.41-12+deb13u3	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libssh2-1t64	CVE-2026-58051	中危	1.11.1-1+deb13u1	libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58051 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:42
libssh2-1t64	CVE-2026-66032	中危	1.11.1-1+deb13u1	libssh2: libssh2: Arbitrary code execution via double-free in SFTP session 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66032 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-24 17:17 修改: 2026-08-07 01:07
libssh2-1t64	CVE-2026-66033	中危	1.11.1-1+deb13u1	libssh2: libssh2: Denial of Service via integer underflow in AES-GCM cipher negotiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66033 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:44
libssh2-1t64	CVE-2026-66034	中危	1.11.1-1+deb13u1	libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66034 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:44
libssh2-1t64	CVE-2026-66035	中危	1.11.1-1+deb13u1	libssh2: libssh2: Arbitrary code execution via heap buffer overflow during SSH negotiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66035 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-24 17:17 修改: 2026-07-30 15:41
libc-bin	CVE-2026-6238	中危	2.41-12+deb13u3	glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libsystemd0	CVE-2026-15059	中危	257.13-1~deb13u1	systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libc-bin	CVE-2026-6368	中危	2.41-12+deb13u3	glibc: glibc: Process abort due to invalid memory in wordexp 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc-bin	CVE-2026-6791	中危	2.41-12+deb13u3	glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libudev1	CVE-2026-15059	中危	257.13-1~deb13u1	systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libc-bin	CVE-2026-77117	中危	2.41-12+deb13u3	glibc: Non-progress DoS in SHIFT_JISX0213 -&gt 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-bin	CVE-2026-80489	中危	2.41-12+deb13u3	glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6	CVE-2026-18374	中危	2.41-12+deb13u3	glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6	CVE-2026-19499	中危	2.41-12+deb13u3	glibc: Buffer Overflow in strfmon right-justification padding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1	CVE-2026-3184	中危	2.41.5-0+deb13u1	util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libc6	CVE-2026-19542	中危	2.41-12+deb13u3	glibc: Fix out-of-bounds array write in tdelete 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6	CVE-2026-5435	中危	2.41-12+deb13u3	glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6	CVE-2026-5450	中危	2.41-12+deb13u3	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-5928	中危	2.41-12+deb13u3	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
login	CVE-2026-3184	中危	1:4.16.0-2+really2.41.5-0+deb13u1	util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libc6	CVE-2026-6238	中危	2.41-12+deb13u3	glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6	CVE-2026-6368	中危	2.41-12+deb13u3	glibc: glibc: Process abort due to invalid memory in wordexp 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6	CVE-2026-6791	中危	2.41-12+deb13u3	glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6	CVE-2026-77117	中危	2.41-12+deb13u3	glibc: Non-progress DoS in SHIFT_JISX0213 -&gt 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount	CVE-2026-3184	中危	2.41.5-0+deb13u1	util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libc6	CVE-2026-80489	中危	2.41-12+deb13u3	glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
curl	CVE-2026-9079	中危	8.14.1-2+deb13u4	libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
curl	CVE-2026-9080	中危	8.14.1-2+deb13u4	libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
curl	CVE-2026-9545	中危	8.14.1-2+deb13u4	libcurl: libcurl: Information disclosure via cached SSL session and early data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
bsdutils	CVE-2026-3184	中危	1:2.41.5-0+deb13u1	util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libcurl4t64	CVE-2026-10536	中危	8.14.1-2+deb13u4	libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10536 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 18:02
libcurl4t64	CVE-2026-11856	中危	8.14.1-2+deb13u4	curl: curl: Information disclosure via incorrect Digest authentication header reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:43
libcurl4t64	CVE-2026-8924	中危	8.14.1-2+deb13u4	curl: curl: Cookie injection via malicious HTTP server using super cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8924 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:06
libcurl4t64	CVE-2026-8926	中危	8.14.1-2+deb13u4	curl: curl: Information disclosure via incorrect .netrc password lookup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8926 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:02
libcurl4t64	CVE-2026-8932	中危	8.14.1-2+deb13u4	libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
perl-base	CVE-2025-15649	中危	5.40.1-6	perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base	CVE-2026-12087	中危	5.40.1-6	perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl-base	CVE-2026-15534	中危	5.40.1-6	perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-09 18:16 修改: 2026-08-28 15:42
perl-base	CVE-2026-19487	中危	5.40.1-6	perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
perl-base	CVE-2026-48959	中危	5.40.1-6	perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base	CVE-2026-48961	中危	5.40.1-6	perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base	CVE-2026-7010	中危	5.40.1-6	HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01
perl-base	CVE-2026-7017	中危	5.40.1-6	HTTP::Tiny versions before 0.095 for Perl forward credential headers t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
tar	CVE-2026-18477	中危	1.35+dfsg-3.1	tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-03 17:16 修改: 2026-09-01 15:17
tar	CVE-2026-18508	中危	1.35+dfsg-3.1	tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-08-03 16:16 修改: 2026-09-01 15:17
tar	CVE-2026-5704	中危	1.35+dfsg-3.1	tar: tar: Hidden file injection via crafted archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-06 16:16 修改: 2026-09-01 15:17
libcurl4t64	CVE-2026-9079	中危	8.14.1-2+deb13u4	libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9079 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
libcurl4t64	CVE-2026-9080	中危	8.14.1-2+deb13u4	libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9080 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:05
libcurl4t64	CVE-2026-9545	中危	8.14.1-2+deb13u4	libcurl: libcurl: Information disclosure via cached SSL session and early data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9545 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 15:03
gzip	CVE-2026-41991	中危	1.13-1	gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
util-linux	CVE-2026-3184	中危	2.41.5-0+deb13u1	util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
zlib1g	CVE-2026-27171	中危	1:1.3.dfsg+really1.3.1-1+b1	zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
zlib1g	CVE-2026-85091	中危	1:1.3.dfsg+really1.3.1-1+b1	zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-03 13:06 修改: 2026-09-03 14:17
coreutils	CVE-2017-18018	低危	9.7-3	coreutils: race condition vulnerability in chown and chgrp 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2018-01-04 04:29 修改: 2026-06-17 01:12
coreutils	CVE-2025-5278	低危	9.7-3	coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2025-05-27 21:15 修改: 2026-09-07 23:16
libsmartcols1	CVE-2022-0563	低危	2.41.5-0+deb13u1	util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libc-bin	CVE-2010-4756	低危	2.41-12+deb13u3	glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc-bin	CVE-2018-20796	低危	2.41-12+deb13u3	glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libc-bin	CVE-2019-1010022	低危	2.41-12+deb13u3	glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc-bin	CVE-2019-1010023	低危	2.41-12+deb13u3	glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc-bin	CVE-2019-1010024	低危	2.41-12+deb13u3	glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libsqlite3-0	CVE-2021-45346	低危	3.46.1-7+deb13u1	sqlite: crafted SQL query allows a malicious user to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2022-02-14 19:15 修改: 2026-06-17 04:13
libsqlite3-0	CVE-2025-70873	低危	3.46.1-7+deb13u1	sqlite: SQLite: Information Disclosure via Crafted ZIP File 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-03-12 19:16 修改: 2026-06-17 10:03
libc-bin	CVE-2019-1010025	低危	2.41-12+deb13u3	glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc-bin	CVE-2019-9192	低危	2.41-12+deb13u3	glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
libcurl4t64	CVE-2025-10966	低危	8.14.1-2+deb13u4	curl: Curl missing SFTP host verification with wolfSSH backend 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10966 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2025-11-07 08:15 修改: 2026-06-17 08:29
libcurl4t64	CVE-2025-14017	低危	8.14.1-2+deb13u4	curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
libcurl4t64	CVE-2025-15079	低危	8.14.1-2+deb13u4	curl: Host verification bypass during SSH transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl4t64	CVE-2025-15224	低危	8.14.1-2+deb13u4	curl: libssh key passphrase bypass without agent set 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
libcurl4t64	CVE-2026-82208	低危	8.14.1-2+deb13u4	With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_S ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82208 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
libcurl4t64	CVE-2026-9547	低危	8.14.1-2+deb13u4	curl: curl: Man-in-the-middle attack via SSH host key bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
libsystemd0	CVE-2013-4392	低危	257.13-1~deb13u1	systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libsystemd0	CVE-2023-31437	低危	257.13-1~deb13u1	An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2023-31438	低危	257.13-1~deb13u1	An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2023-31439	低危	257.13-1~deb13u1	An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2026-40228	低危	257.13-1~deb13u1	systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libgnutls30t64	CVE-2011-3389	低危	3.8.9-3+deb13u4	HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3389 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2011-09-06 19:55 修改: 2026-04-29 01:13
libtinfo6	CVE-2025-6141	低危	6.5+20250216-2	gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libgssapi-krb5-2	CVE-2018-5709	低危	1.21.3-5+deb13u1	krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libgssapi-krb5-2	CVE-2024-26458	低危	1.21.3-5+deb13u1	krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libudev1	CVE-2013-4392	低危	257.13-1~deb13u1	systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libudev1	CVE-2023-31437	低危	257.13-1~deb13u1	An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2023-31438	低危	257.13-1~deb13u1	An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2023-31439	低危	257.13-1~deb13u1	An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2026-40228	低危	257.13-1~deb13u1	systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libgssapi-krb5-2	CVE-2024-26461	低危	1.21.3-5+deb13u1	krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libgssapi-krb5-2	CVE-2026-11850	低危	1.21.3-5+deb13u1	krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17
libk5crypto3	CVE-2018-5709	低危	1.21.3-5+deb13u1	krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libk5crypto3	CVE-2024-26458	低危	1.21.3-5+deb13u1	krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libk5crypto3	CVE-2024-26461	低危	1.21.3-5+deb13u1	krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libuuid1	CVE-2022-0563	低危	2.41.5-0+deb13u1	util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libk5crypto3	CVE-2026-11850	低危	1.21.3-5+deb13u1	krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17
libkrb5-3	CVE-2018-5709	低危	1.21.3-5+deb13u1	krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libkrb5-3	CVE-2024-26458	低危	1.21.3-5+deb13u1	krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5-3	CVE-2024-26461	低危	1.21.3-5+deb13u1	krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5-3	CVE-2026-11850	低危	1.21.3-5+deb13u1	krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17
login	CVE-2022-0563	低危	1:4.16.0-2+really2.41.5-0+deb13u1	util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
login.defs	CVE-2007-5686	低危	1:4.17.4-2	initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35
login.defs	CVE-2024-56433	低危	1:4.17.4-2	shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
login.defs	TEMP-0628843-DBAD28	低危	1:4.17.4-2	[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libkrb5support0	CVE-2018-5709	低危	1.21.3-5+deb13u1	krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libkrb5support0	CVE-2024-26458	低危	1.21.3-5+deb13u1	krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5support0	CVE-2024-26461	低危	1.21.3-5+deb13u1	krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5support0	CVE-2026-11850	低危	1.21.3-5+deb13u1	krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17
curl	CVE-2025-10966	低危	8.14.1-2+deb13u4	curl: Curl missing SFTP host verification with wolfSSH backend 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10966 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2025-11-07 08:15 修改: 2026-06-17 08:29
mount	CVE-2022-0563	低危	2.41.5-0+deb13u1	util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
curl	CVE-2025-14017	低危	8.14.1-2+deb13u4	curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:35
ncurses-base	CVE-2025-6141	低危	6.5+20250216-2	gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
curl	CVE-2025-15079	低危	8.14.1-2+deb13u4	curl: Host verification bypass during SSH transfers 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
ncurses-bin	CVE-2025-6141	低危	6.5+20250216-2	gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
passwd	CVE-2007-5686	低危	1:4.17.4-2	initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35
passwd	CVE-2024-56433	低危	1:4.17.4-2	shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
passwd	TEMP-0628843-DBAD28	低危	1:4.17.4-2	[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1	CVE-2022-0563	低危	2.41.5-0+deb13u1	util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
curl	CVE-2025-15224	低危	8.14.1-2+deb13u4	curl: libssh key passphrase bypass without agent set 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-01-08 10:15 修改: 2026-06-17 08:37
liblastlog2-2	CVE-2022-0563	低危	2.41.5-0+deb13u1	util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libldap2	CVE-2015-3276	低危	2.6.10+dfsg-1	openldap: incorrect multi-keyword mode cipherstring parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3276 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2015-12-07 20:59 修改: 2026-05-06 22:30
libldap2	CVE-2017-14159	低危	2.6.10+dfsg-1	openldap: Privilege escalation via PID file manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14159 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2017-09-05 18:29 修改: 2026-06-17 01:05
libldap2	CVE-2017-17740	低危	2.6.10+dfsg-1	openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17740 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2017-12-18 06:29 修改: 2026-06-17 01:11
libldap2	CVE-2020-15719	低危	2.6.10+dfsg-1	openldap: Certificate validation incorrectly matches name against CN-ID 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15719 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2020-07-14 14:15 修改: 2026-06-17 02:57
libldap2	CVE-2026-22185	低危	2.6.10+dfsg-1	OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22185 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-01-07 21:16 修改: 2026-06-17 10:19
curl	CVE-2026-82208	低危	8.14.1-2+deb13u4	With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_S ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82208 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
curl	CVE-2026-9547	低危	8.14.1-2+deb13u4	curl: curl: Man-in-the-middle attack via SSH host key bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
diffutils	CVE-2026-53910	低危	1:3.10-4	diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
coreutils	CVE-2026-56391	低危	9.7-3	coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56391 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-07-24 09:16 修改: 2026-08-26 13:52
coreutils	CVE-2026-56392	低危	9.7-3	coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56392 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-07-24 09:16 修改: 2026-08-26 14:05
libmount1	CVE-2022-0563	低危	2.41.5-0+deb13u1	util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
bash	TEMP-0841856-B18BAF	低危	5.2.37-2+b9	[Privilege escalation possible to other user than root] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libncursesw6	CVE-2025-6141	低危	6.5+20250216-2	gnu-ncurses: ncurses Stack Buffer Overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141 镜像层: sha256:7895f75e926a456464bbd0f1285738ba25e7d70aad4aa94c32c1d274b3b9e85e 发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
perl-base	CVE-2011-4116	低危	5.40.1-6	perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04
sysvinit-utils	TEMP-0517018-A83CE6	低危	3.14-4	[sysvinit: no-root option in expert installer exposes locally exploitable security flaw] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6	CVE-2010-4756	低危	2.41-12+deb13u3	glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc6	CVE-2018-20796	低危	2.41-12+deb13u3	glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libc6	CVE-2019-1010022	低危	2.41-12+deb13u3	glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
tar	CVE-2005-2541	低危	1.35+dfsg-3.1	tar: does not properly warn the user when extracting setuid or setgid files 漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2005-08-10 04:00 修改: 2026-04-16 00:27
tar	TEMP-0290435-0B57B5	低危	1.35+dfsg-3.1	[tar's rmt command may have undesired side effects] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
unzip	CVE-2021-4217	低危	6.0-29+deb13u1	unzip: Null pointer dereference in Unicode strings code 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4217 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libc6	CVE-2019-1010023	低危	2.41-12+deb13u3	glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010024	低危	2.41-12+deb13u3	glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010025	低危	2.41-12+deb13u3	glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-9192	低危	2.41-12+deb13u3	glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
apt	CVE-2011-3374	低危	3.0.3	It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30
util-linux	CVE-2022-0563	低危	2.41.5-0+deb13u1	util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libapt-pkg7.0	CVE-2011-3374	低危	3.0.3	It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30
bsdutils	CVE-2022-0563	低危	1:2.41.5-0+deb13u1	util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
curl	CVE-2026-82209	未知	8.14.1-2+deb13u4	When libpsl support is enabled, libcurl fails to enforce the Public Su ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
curl	CVE-2026-13608	未知	8.14.1-2+deb13u4	A flaw in the libcurl SASL negotiation for LDAP authentication allows ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
curl	CVE-2026-18924	未知	8.14.1-2+deb13u4	A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
curl	CVE-2026-19931	未知	8.14.1-2+deb13u4	A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
curl	CVE-2026-80229	未知	8.14.1-2+deb13u4	When performing transfers via libcurl\u2019s multi interface, pooled T ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
curl	CVE-2026-80230	未知	8.14.1-2+deb13u4	When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
libcurl4t64	CVE-2026-13608	未知	8.14.1-2+deb13u4	A flaw in the libcurl SASL negotiation for LDAP authentication allows ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
libcurl4t64	CVE-2026-18924	未知	8.14.1-2+deb13u4	A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
libcurl4t64	CVE-2026-19931	未知	8.14.1-2+deb13u4	A flaw in libcurl makes it wrongly reuse an HTTP connection setup for ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
libcurl4t64	CVE-2026-80229	未知	8.14.1-2+deb13u4	When performing transfers via libcurl\u2019s multi interface, pooled T ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80229 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
libcurl4t64	CVE-2026-80230	未知	8.14.1-2+deb13u4	When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
libcurl4t64	CVE-2026-80255	未知	8.14.1-2+deb13u4	A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
libcurl4t64	CVE-2026-82209	未知	8.14.1-2+deb13u4	When libpsl support is enabled, libcurl fails to enforce the Public Su ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
curl	CVE-2026-80255	未知	8.14.1-2+deb13u4	A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80255 镜像层: sha256:b90c8f1a7b4007d9b4d3ffe3372311efa6f67f2c98a1d561034f0d5dbf67c526 发布日期: 2026-09-06 18:17 修改: 2026-09-06 18:17
libpcre2-8-0	CVE-2026-86145	未知	10.46-1~deb13u1	PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write becaus ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86145 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 2026-09-05 06:17 修改: 2026-09-05 14:17
libpcre2-8-0	TEMP-0000000-21C4F8	未知	10.46-1~deb13u1	[GHSA-9qww-pwc4-77qq: PCRE2: out-of-bounds reads in pcre2_match() when matching invalid UTF subjects with PCRE2_MATCH_INVALID_UTF] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0000000-21C4F8 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libpcre2-8-0	TEMP-0000000-8188AC	未知	10.46-1~deb13u1	[GHSA-2p8c-ff85-vh9x: PCRE2: out-of-bounds read in pcre2_match() after JIT fallback with invalid UTF] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0000000-8188AC 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libpcre2-8-0	TEMP-0000000-A5518C	未知	10.46-1~deb13u1	[GHSA-q8g2-wprr-34m9: PCRE2: out-of-bounds write in pcre2_pattern_convert() with large patterns on 32-bit systems] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0000000-A5518C 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libpcre2-8-0	TEMP-0000000-B05303	未知	10.46-1~deb13u1	[GHSA-fmgr-6ggq-9859: PCRE2: integer overflow in pcre2_compile_32() causes out-of-bounds write on 32-bit systems] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0000000-B05303 镜像层: sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

Node.js (node-pkg)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

Python (python-pkg)

低危漏洞:23

中危漏洞:48

高危漏洞:31

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
h11	CVE-2025-43859	严重	0.14.0	0.16.0	h11: h11 accepts some malformed Chunked-Encoding bodies 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-43859 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2025-04-24 19:15 修改: 2026-06-17 09:24
Mako	CVE-2026-44307	高危	1.3.10	1.3.12	mako: Mako: Information disclosure via directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44307 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-05-12 22:16 修改: 2026-06-17 10:50
aiohttp	CVE-2025-69223	高危	3.10.10	3.13.3	aiohttp: AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69223 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-05 22:15 修改: 2026-09-02 13:17
aiohttp	CVE-2026-69244	高危	3.10.10	3.14.3	aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69244 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-08-03 21:16 修改: 2026-08-04 15:16
black	CVE-2026-32274	高危	24.4.2	26.3.1	black: Black: Arbitrary file writes from unsanitized user input in cache file name 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32274 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-03-12 20:16 修改: 2026-08-03 21:16
cryptography	CVE-2026-69247	高危	46.0.5	50.0.0	python-cryptography: python-cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69247 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-08-03 22:16 修改: 2026-08-04 15:16
cryptography	CVE-2026-69249	高危	46.0.5	49.0.0	python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69249 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-08-03 22:16 修改: 2026-09-04 22:17
cryptography	GHSA-537c-gmf6-5ccf	高危	46.0.5	48.0.1	Vulnerable OpenSSL included in cryptography wheels 漏洞详情: https://github.com/advisories/GHSA-537c-gmf6-5ccf 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-15 20:12 修改: 2026-06-15 20:12
Mako	CVE-2026-41205	高危	1.3.10	1.3.11	mako: Mako: Information disclosure via path traversal vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41205 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-23 19:17 修改: 2026-06-17 10:46
jaraco.context	CVE-2026-23949	高危	5.3.0	6.1.0	jaraco.context: jaraco.context: Path traversal via malicious tar archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23949 镜像层: sha256:7895f75e926a456464bbd0f1285738ba25e7d70aad4aa94c32c1d274b3b9e85e 发布日期: 2026-01-20 01:15 修改: 2026-06-17 10:22
langchain-core	CVE-2026-34070	高危	0.3.83	1.2.22	langchain: path traversal in legacy load_prompt functions in langchain-core 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34070 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-03-31 03:15 修改: 2026-08-25 13:18
langchain-core	CVE-2026-44843	高危	0.3.83	1.3.3, 0.3.85	langchain: LangChain: Information disclosure and data integrity compromise via insecure deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44843 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-05-26 21:16 修改: 2026-07-24 11:10
langsmith	CVE-2026-45134	高危	0.7.22	0.8.0	langsmith-sdk-python: langsmith-sdk-js: LangSmith Client SDKs: Information disclosure via untrusted prompt deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45134 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-05-27 20:16 修改: 2026-06-17 10:51
langsmith	GHSA-f4xh-w4cj-qxq8	高危	0.7.22	0.8.18	LangSmith SDK TracingMiddleware: Arbitrary server-side file read 漏洞详情: https://github.com/advisories/GHSA-f4xh-w4cj-qxq8 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-19 22:10 修改: 2026-06-19 22:10
orjson	CVE-2025-67221	高危	3.10.6	3.11.6	orjson: orjson: Denial of Service due to unbounded recursion with deeply nested JSON documents 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-67221 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-22 17:16 修改: 2026-06-17 09:57
protobuf	CVE-2026-0994	高危	4.25.9	6.33.5, 5.29.6	python: protobuf: Protobuf: Denial of Service due to recursion depth bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0994 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-23 15:16 修改: 2026-09-01 13:18
pyasn1	CVE-2026-59884	高危	0.6.3	0.6.4	python-pyasn1: pyasn1: Denial of Service via crafted BER input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59884 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:37
pyasn1	CVE-2026-59885	高危	0.6.3	0.6.4	pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59885 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:38
pyasn1	CVE-2026-59886	高危	0.6.3	0.6.4	pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59886 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-07-14 17:17 修改: 2026-07-21 14:38
python-multipart	CVE-2024-53981	高危	0.0.9	0.0.18	python-multipart: python-multipart has a DoS via deformation `multipart/form-data` boundary 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-53981 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2024-12-02 16:15 修改: 2026-06-17 08:09
python-multipart	CVE-2026-24486	高危	0.0.9	0.0.22	python-multipart: Python-Multipart: Arbitrary file write via path traversal vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24486 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-27 01:16 修改: 2026-08-07 12:17
python-multipart	CVE-2026-42561	高危	0.0.9	0.0.27	python-multipart: python-multipart: Denial of Service via excessive multipart part headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42561 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-05-13 21:16 修改: 2026-08-07 12:17
python-multipart	CVE-2026-53539	高危	0.0.9	0.0.30	python-multipart: Python-Multipart: Denial of Service via crafted form-urlencoded bodies 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53539 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:50
setuptools	CVE-2025-47273	高危	70.3.0	78.1.1	setuptools: Path Traversal Vulnerability in setuptools PackageIndex 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27
starlette	CVE-2024-47874	高危	0.37.2	0.40.0	starlette: Starlette Denial of service (DoS) via multipart/form-data 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47874 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2024-10-15 16:15 修改: 2026-06-17 07:57
starlette	CVE-2026-48818	高危	0.37.2	1.1.0	starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48818 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-17 19:18 修改: 2026-08-04 19:16
starlette	CVE-2026-54283	高危	0.37.2	1.3.1	starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54283 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:16
urllib3	CVE-2025-66418	高危	2.2.2	2.6.0	urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66418 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2025-12-05 16:15 修改: 2026-06-17 09:56
urllib3	CVE-2025-66471	高危	2.2.2	2.6.0	urllib3: urllib3 Streaming API improperly handles highly compressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66471 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2025-12-05 17:16 修改: 2026-06-17 09:56
urllib3	CVE-2026-21441	高危	2.2.2	2.6.3	urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21441 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-07 22:15 修改: 2026-09-07 13:18
urllib3	CVE-2026-44431	高危	2.2.2	2.7.0	urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44431 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-05-13 16:16 修改: 2026-06-26 12:16
wheel	CVE-2026-24049	高危	0.45.1	0.46.2	wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24049 镜像层: sha256:7895f75e926a456464bbd0f1285738ba25e7d70aad4aa94c32c1d274b3b9e85e 发布日期: 2026-01-22 05:16 修改: 2026-09-07 13:18
h2	CVE-2026-71554	中危	4.3.0	4.4.1	h2: h2: Request smuggling due to duplicate Host headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71554 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-08-06 22:18 修改: 2026-08-08 03:16
idna	CVE-2026-45409	中危	3.7	3.15	python-idna: idna: Denial of Service via specially crafted long inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45409 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-05 23:16 修改: 2026-07-23 07:10
aiohttp	CVE-2025-69227	中危	3.10.10	3.13.3	aiohttp: aiohttp: Denial of Service via specially crafted POST request 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69227 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-06 00:15 修改: 2026-06-17 10:00
aiohttp	CVE-2025-69228	中危	3.10.10	3.13.3	aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69228 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-06 00:15 修改: 2026-06-17 10:00
aiohttp	CVE-2025-69229	中危	3.10.10	3.13.3	aiohttp: AIOHTTP: Denial of Service via excessive CPU usage in chunked message handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69229 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-06 00:15 修改: 2026-06-17 10:00
langchain-core	CVE-2026-40087	中危	0.3.83	0.3.84, 1.2.28	langchain: incomplete f-string validation in prompt templates 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40087 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:44
langgraph	CVE-2026-28277	中危	1.0.1	1.0.10	LangGraph checkpoint loading has unsafe msgpack deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28277 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-03-05 20:16 修改: 2026-06-17 10:28
langgraph-checkpoint	CVE-2026-27794	中危	3.0.1	4.0.0	langgraph-checkpoint: LangGraph Checkpoint: Remote Code Execution via insecure deserialization in caching layer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27794 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-02-25 18:23 修改: 2026-06-17 10:27
langgraph-checkpoint	CVE-2026-48775	中危	3.0.1	4.1.1	langgraph: langgraph-checkpoint: LangGraph: Arbitrary code execution via insecure deserialization of modified checkpoint bytes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48775 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-16 19:16 修改: 2026-06-24 18:53
langgraph-sdk	CVE-2026-48776	中危	0.2.15	0.3.15	langgraph: langgraph-sdk: LangGraph Python SDK: Unsafe URL path construction leads to unauthorized resource access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48776 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-17 10:55 修改: 2026-06-26 15:26
aiohttp	CVE-2026-22815	中危	3.10.10	3.13.4	aiohttp: AIOHTTP: Denial of Service via insufficient header/trailer handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22815 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-01 21:16 修改: 2026-06-17 10:20
aiohttp	CVE-2026-34515	中危	3.10.10	3.13.4	aiohttp: AIOHTTP: Information disclosure via static resource handler on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34515 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-01 21:16 修改: 2026-06-17 10:39
langsmith	CVE-2026-41182	中危	0.7.22	0.7.31	LangSmith SDK: Streaming token events bypass output redaction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41182 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-23 02:16 修改: 2026-06-17 10:46
aiohttp	CVE-2026-34516	中危	3.10.10	3.13.4	aiohttp: AIOHTTP: Denial of Service via excessive multipart headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34516 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-01 21:16 修改: 2026-06-17 10:39
pip	CVE-2025-8869	中危	24.0	25.3	pip: pip missing checks on symbolic link extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8869 镜像层: sha256:7895f75e926a456464bbd0f1285738ba25e7d70aad4aa94c32c1d274b3b9e85e 发布日期: 2025-09-24 15:15 修改: 2026-06-17 10:07
pip	CVE-2026-13346	中危	24.0	26.2.0	pip: pip: Arbitrary file installation via malicious package indexes 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13346 镜像层: sha256:7895f75e926a456464bbd0f1285738ba25e7d70aad4aa94c32c1d274b3b9e85e 发布日期: 2026-07-29 19:16 修改: 2026-08-20 13:17
pip	CVE-2026-3219	中危	24.0	26.1	pip: pip: Incorrect file installation due to improper archive handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3219 镜像层: sha256:7895f75e926a456464bbd0f1285738ba25e7d70aad4aa94c32c1d274b3b9e85e 发布日期: 2026-04-20 16:16 修改: 2026-06-17 10:43
pip	CVE-2026-6357	中危	24.0	26.1	pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6357 镜像层: sha256:7895f75e926a456464bbd0f1285738ba25e7d70aad4aa94c32c1d274b3b9e85e 发布日期: 2026-04-27 15:16 修改: 2026-06-17 11:00
pip	CVE-2026-8643	中危	24.0	26.1.2	python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8643 镜像层: sha256:7895f75e926a456464bbd0f1285738ba25e7d70aad4aa94c32c1d274b3b9e85e 发布日期: 2026-06-01 17:17 修改: 2026-09-07 13:20
aiohttp	CVE-2026-34525	中危	3.10.10	3.13.4	aiohttp: aiohttp: Security bypass via multiple Host headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34525 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-01 21:17 修改: 2026-06-17 10:39
aiohttp	CVE-2026-34993	中危	3.10.10	3.14.0	aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34993 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-02 20:16 修改: 2026-09-04 13:19
aiohttp	CVE-2026-47265	中危	3.10.10	3.14.0	python-aiohttp: AIOHTTP: Information disclosure via improper handling of cookies during cross-origin redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47265 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-02 20:16 修改: 2026-07-21 19:10
aiohttp	CVE-2026-54273	中危	3.10.10	3.14.1	aiohttp: AIOHTTP: Denial of Service via excessive pipelined requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54273 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:37
pytest	CVE-2025-71176	中危	8.2.2	9.0.3	pytest: pytest: Denial of Service or Privilege Escalation via insecure temporary directory handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-71176 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-22 05:16 修改: 2026-06-17 10:03
python-dotenv	CVE-2026-28684	中危	1.0.1	1.2.2	python-dotenv: python-dotenv: Arbitrary file overwrite via symbolic link following 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28684 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-20 17:16 修改: 2026-06-17 10:28
aiohttp	CVE-2026-54274	中危	3.10.10	3.14.1	aiohttp: aiohttp: Denial of Service via incomplete websocket frame payloads 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54274 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:37
aiohttp	CVE-2026-54276	中危	3.10.10	3.14.1	aiohttp: aiohttp: Information disclosure via DigestAuthMiddleware after cross-origin redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54276 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-30 18:18
aiohttp	CVE-2026-54277	中危	3.10.10	3.14.1	aiohttp: aiohttp: Denial of Service via oversized HTTP request lines bypassing max_line_size check 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54277 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-30 18:11
aiohttp	CVE-2026-54278	中危	3.10.10	3.14.1	aiohttp: aiohttp: Denial of Service due to excessive memory consumption from compressed request body 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54278 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:27
python-multipart	CVE-2026-40347	中危	0.0.9	0.0.26	python-multipart: Python-Multipart: Denial of Service via crafted multipart/form-data requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40347 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-18 00:16 修改: 2026-06-17 10:45
requests	CVE-2024-47081	中危	2.32.3	2.32.4	requests: Requests vulnerable to .netrc credentials leak via malicious URLs 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47081 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2025-06-09 18:15 修改: 2026-06-17 07:56
requests	CVE-2026-25645	中危	2.32.3	2.33.0	requests: Requests: Security bypass due to predictable temporary file creation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25645 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-03-25 17:16 修改: 2026-06-17 10:25
aiohttp	CVE-2026-59881	中危	3.10.10	3.14.2	aiohttp: AIOHTTP: Denial of Service via unnegotiated WebSocket compression 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59881 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-07-30 19:18 修改: 2026-07-30 20:03
setuptools	CVE-2026-59890	中危	70.3.0	83.0.0	setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
setuptools	CVE-2026-59890	中危	79.0.1	83.0.0	setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59890 镜像层: sha256:7895f75e926a456464bbd0f1285738ba25e7d70aad4aa94c32c1d274b3b9e85e 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:04
aiohttp	CVE-2026-69243	中危	3.10.10	3.14.2	aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69243 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-08-03 21:16 修改: 2026-08-05 16:17
Jinja2	CVE-2024-56326	中危	3.1.4	3.1.5	jinja2: Jinja has a sandbox breakout through indirect reference to format method 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56326 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2024-12-23 16:15 修改: 2026-06-17 08:12
Jinja2	CVE-2025-27516	中危	3.1.4	3.1.6	jinja2: Jinja sandbox breakout through attr filter selecting format method 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27516 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2025-03-05 21:15 修改: 2026-06-17 09:03
starlette	CVE-2025-54121	中危	0.37.2	0.47.2	starlette: Starlette denial-of-service 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54121 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2025-07-21 20:15 修改: 2026-06-17 09:39
starlette	CVE-2026-48710	中危	0.37.2	1.0.1	starlette: Starlette: Security restriction bypass via malformed HTTP Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48710 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-05-26 22:16 修改: 2026-09-04 15:59
starlette	CVE-2026-48817	中危	0.37.2	1.1.0	starlette: Starlette: Information disclosure and unintended method execution via non-standard HTTP methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48817 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-17 20:17 修改: 2026-06-26 19:18
Jinja2	CVE-2024-56201	中危	3.1.4	3.1.5	jinja2: Jinja has a sandbox breakout through malicious filenames 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56201 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2024-12-23 16:15 修改: 2026-06-17 08:11
aiohttp	CVE-2024-52303	中危	3.10.10	3.10.11	aiohttp: aiohttp memory leak when middleware is enabled when requesting a resource with a non-allowed method 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52303 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2024-11-18 20:15 修改: 2026-06-17 08:06
cryptography	CVE-2026-39892	中危	46.0.5	46.0.7	cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39892 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-08 21:17 修改: 2026-08-17 12:18
cryptography	CVE-2026-69248	中危	46.0.5	49.0.0	python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-69248 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-08-03 22:16 修改: 2026-09-02 14:17
urllib3	CVE-2025-50181	中危	2.2.2	2.5.0	urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50181 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2025-06-19 01:15 修改: 2026-06-17 09:34
urllib3	CVE-2025-50182	中危	2.2.2	2.5.0	urllib3: urllib3 does not control redirects in browsers and Node.js 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-50182 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2025-06-19 02:15 修改: 2026-06-17 09:34
aiohttp	CVE-2024-52304	中危	3.10.10	3.10.11	aiohttp: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52304 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2024-11-18 21:15 修改: 2026-06-17 08:06
aiohttp	CVE-2025-69224	低危	3.10.10	3.13.3	aiohttp: aiohttp: Request smuggling via non-ASCII characters in HTTP parser 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69224 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-05 23:15 修改: 2026-06-17 10:00
python-multipart	CVE-2026-53537	低危	0.0.9	0.0.30	multipart: Python-Multipart: Information disclosure via header parsing discrepancy 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53537 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:54
python-multipart	CVE-2026-53538	低危	0.0.9	0.0.30	python-multipart: Python-Multipart: Information disclosure due to parser differential in form data handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53538 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:52
python-multipart	CVE-2026-53540	低危	0.0.9	0.0.31	python-multipart: Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53540 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:50
aiohttp	CVE-2025-69225	低危	3.10.10	3.13.3	aiohttp: aiohttp: Request smuggling vulnerability via non-ASCII decimals in Range header 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69225 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-06 00:15 修改: 2026-06-17 10:00
aiohttp	CVE-2025-69226	低危	3.10.10	3.13.3	aiohttp: aiohttp: Information disclosure of path components via static file path normalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69226 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-05 23:15 修改: 2026-06-17 10:00
aiohttp	CVE-2025-69230	低危	3.10.10	3.13.3	aiohttp: aiohttp: Denial of Service via specially crafted invalid cookies 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69230 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-01-06 00:15 修改: 2026-06-17 10:00
cryptography	CVE-2026-34073	低危	46.0.5	46.0.6	python-cryptography: Cryptography: Security bypass due to improper DNS name constraint validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34073 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
aiohttp	CVE-2026-34513	低危	3.10.10	3.13.4	aiohttp: AIOHTTP: Denial of Service due to unbounded DNS cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34513 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-01 21:16 修改: 2026-06-17 10:39
aiohttp	CVE-2026-34514	低危	3.10.10	3.13.4	aiohttp: AIOHTTP: Header Injection via content_type parameter manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34514 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-01 21:16 修改: 2026-06-17 10:39
aiohttp	CVE-2026-34517	低危	3.10.10	3.13.4	aiohttp: AIOHTTP: Denial of Service via large multipart form fields 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34517 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-01 21:16 修改: 2026-06-17 10:39
pip	CVE-2026-1703	低危	24.0	26.0	pip: pip: Information disclosure via path traversal when installing crafted wheel archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703 镜像层: sha256:7895f75e926a456464bbd0f1285738ba25e7d70aad4aa94c32c1d274b3b9e85e 发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16
aiohttp	CVE-2026-34518	低危	3.10.10	3.13.4	aiohttp: AIOHTTP: Information disclosure via retained Cookie and Proxy-Authorization headers during redirects 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34518 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-01 21:17 修改: 2026-06-17 10:39
aiohttp	CVE-2026-34519	低危	3.10.10	3.13.4	aiohttp: aiohttp: Header injection vulnerability via reason parameter 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34519 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-01 21:17 修改: 2026-06-17 10:39
aiohttp	CVE-2026-34520	低危	3.10.10	3.13.4	aiohttp: AIOHTTP: Header injection vulnerability due to improper character handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34520 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-04-01 21:17 修改: 2026-06-17 10:39
starlette	CVE-2026-54282	低危	0.37.2	1.3.0	starlette: Starlette: Information disclosure due to improper HTTP request path validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54282 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:18
aiohttp	CVE-2026-50269	低危	3.10.10	3.14.0	aiohttp: AIOHTTP: CRLF injection in multipart headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50269 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:39
langchain-core	CVE-2026-26013	低危	0.3.83	1.2.11	langchain: SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26013 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-02-10 22:17 修改: 2026-06-17 10:25
aiohttp	CVE-2026-54275	低危	3.10.10	3.14.1	aiohttp: AIOHTTP: TLS SNI check bypass via connection reuse 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54275 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:36
aiohttp	CVE-2026-54279	低危	3.10.10	3.14.1	aiohttp: AIOHTTP: Host-Only Cookies Become Domain Cookies After CookieJar Persistence 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54279 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:36
aiohttp	CVE-2026-54280	低危	3.10.10	3.14.1	AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54280 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-06-22 18:16 修改: 2026-06-26 19:35
Pygments	CVE-2026-4539	低危	2.18.0	2.20.0	pygments: Pygments: Denial of Service via inefficient regular expression processing in AdlLexer 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4539 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2026-03-22 06:16 修改: 2026-06-17 10:56
aiohttp	CVE-2025-53643	低危	3.10.10	3.12.14	aiohttp: AIOHTTP HTTP Request/Response Smuggling 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53643 镜像层: sha256:ecfcd982a0fdf8b28bae5f8669b2018a7f1bd4b989e9b83f750093c381b8a400 发布日期: 2025-07-14 21:15 修改: 2026-06-17 09:38

usr/local/bin/uv (rustbinary)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

usr/local/bin/uvx (rustbinary)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息